This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AANBSkHkHbLgCwkM9eQSDgQFQzQ.roa File: AANBSkHkHbLgCwkM9eQSDgQFQzQ.roa (raw, json) Hash identifier: SoeK/aW6NJ3pUw69scO7NAQOrUCPm5rZQ8xfJpodqsQ= Subject key identifier: 00:03:41:4A:41:E4:1D:B2:E0:0B:09:0C:F5:E4:12:0E:04:05:43:34 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A590C1E3E8AFD2D81BD54FD9B8AE01AE1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AANBSkHkHbLgCwkM9eQSDgQFQzQ.roa Signing time: Thu 06 Nov 2025 12:02:37 +0000 ROA not before: Thu 06 Nov 2025 12:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59711 IP address blocks: 82.153.248.0/24 maxlen: 24 89.213.135.0/24 maxlen: 24 89.213.137.0/24 maxlen: 24 89.213.141.0/24 maxlen: 24 89.213.163.0/24 maxlen: 24 89.213.168.0/24 maxlen: 24 89.213.170.0/24 maxlen: 24 89.213.188.0/24 maxlen: 24 89.213.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:0c:1e:3e:8a:fd:2d:81:bd:54:fd:9b:8a:e0:1a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 6 12:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0003414a41e41db2e00b090cf5e4120e04054334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:50:be:bf:1f:f6:4d:c6:ca:65:67:21:27: 66:59:66:63:a7:cb:3e:ff:48:ba:ca:52:ce:67:f6: 82:bb:f7:02:20:89:4b:08:02:66:f0:38:63:da:e3: 70:4c:9f:c9:f5:1a:99:90:e0:97:20:be:69:53:7e: fd:97:82:aa:6d:a5:da:24:8f:7e:39:9b:e5:9c:5d: 0e:61:04:0a:1a:5e:95:6d:78:68:c5:6a:22:f6:2a: 13:38:75:f3:68:36:64:f7:7a:41:21:33:dd:94:e5: b8:6f:9c:94:17:35:0d:2a:36:01:23:6d:58:c4:15: f8:bc:44:61:12:c8:05:21:5a:06:d4:72:57:50:81: 9b:0d:0b:71:eb:09:2d:5d:ff:06:c5:66:14:37:7a: b4:df:2f:34:8f:eb:f4:d2:45:9b:0d:ab:3e:5d:38: e1:19:15:42:03:b1:13:45:fe:33:50:8a:b4:f3:48: a7:74:1f:88:af:5a:3c:ad:d3:a8:3e:1a:99:06:36: 63:b3:19:36:a7:c3:3f:43:6e:ca:0d:7d:e6:06:8d: 50:8c:1a:b9:00:ef:40:34:31:3b:43:9d:d9:53:16: 81:76:3f:eb:4b:c1:9a:7a:70:04:2f:f2:90:58:b3: 8b:5d:6a:cf:b2:ed:8f:c3:14:ad:25:89:f7:b5:30: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:41:4A:41:E4:1D:B2:E0:0B:09:0C:F5:E4:12:0E:04:05:43:34 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AANBSkHkHbLgCwkM9eQSDgQFQzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.248.0/24 89.213.135.0/24 89.213.137.0/24 89.213.141.0/24 89.213.163.0/24 89.213.168.0/24 89.213.170.0/24 89.213.188.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:91:e2:2d:9f:27:84:7c:90:05:48:b0:7c:8c:e5:db:4d:02: 88:a8:af:72:fe:03:ee:9e:22:00:4f:ed:fe:6b:5b:8c:40:1e: a3:92:a6:8c:59:7e:45:2a:bf:24:1e:47:c4:76:ee:0f:72:24: 93:7e:2e:79:6f:b5:c3:4b:03:c5:da:b7:d4:a6:d1:a5:0a:29: fd:16:80:0b:a5:6b:5c:22:ba:a7:f3:c4:38:c1:03:5f:eb:1f: 39:fa:6e:05:b2:11:22:5a:24:c9:10:57:9c:61:2a:42:d6:64: 03:b3:d7:65:f2:e9:73:d8:97:54:3b:c0:3c:13:fa:fc:b6:c7: 35:69:61:da:70:4e:99:92:33:7e:14:1b:43:f6:bd:3d:cf:42: d6:af:7c:8b:d8:ff:0b:d1:f1:f6:cf:ba:18:dc:4e:f8:7f:26: 95:37:55:72:c7:fc:fb:57:5a:0f:79:f2:02:ec:82:b8:cf:73: 61:fb:42:da:f4:5d:3e:0b:6b:62:36:fa:bb:d0:9c:4a:6d:a8: e0:5c:ab:7a:7c:37:94:c5:ea:91:d8:57:2f:b3:8d:8c:60:37: a0:38:f9:c3:df:fe:90:13:b9:ce:42:db:3e:af:ac:97:02:8b: 65:43:11:94:d7:54:a5:f6:57:31:00:7f:1c:7e:79:b8:19:82: 4f:cd:b7:70 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZpZDB4+iv0tgb1U/ZuK4BrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTA2MTIwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDAzNDE0YTQxZTQxZGIyZTAwYjA5MGNmNWU0MTIwZTA0MDU0MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR9Qvr8f9k3GymVnISdmWWZjp8s+ /0i6ylLOZ/aCu/cCIIlLCAJm8Dhj2uNwTJ/J9RqZkOCXIL5pU379l4KqbaXaJI9+ OZvlnF0OYQQKGl6VbXhoxWoi9ioTOHXzaDZk93pBITPdlOW4b5yUFzUNKjYBI21Y xBX4vERhEsgFIVoG1HJXUIGbDQtx6wktXf8GxWYUN3q03y80j+v00kWbDas+XTjh GRVCA7ETRf4zUIq080indB+Ir1o8rdOoPhqZBjZjsxk2p8M/Q27KDX3mBo1QjBq5 AO9ANDE7Q53ZUxaBdj/rS8GaenAEL/KQWLOLXWrPsu2PwxStJYn3tTCkwwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFAADQUpB5B2y4AsJDPXkEg4EBUM0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQUFOQlNrSGtIYkxnQ3drTTllUVNEZ1FGUXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUpn4AwQA WdWHAwQAWdWJAwQAWdWNAwQAWdWjAwQAWdWoAwQAWdWqAwQBWdW8MA0GCSqGSIb3 DQEBCwUAA4IBAQAKkeItnyeEfJAFSLB8jOXbTQKIqK9y/gPuniIAT+3+a1uMQB6j kqaMWX5FKr8kHkfEdu4PciSTfi55b7XDSwPF2rfUptGlCin9FoALpWtcIrqn88Q4 wQNf6x85+m4FshEiWiTJEFecYSpC1mQDs9dl8ulz2JdUO8A8E/r8tsc1aWHacE6Z kjN+FBtD9r09z0LWr3yL2P8L0fH2z7oY3E74fyaVN1Vyx/z7V1oPefIC7IK4z3Nh +0La9F0+C2tiNvq70JxKbajgXKt6fDeUxeqR2Fcvs42MYDegOPnD3/6QE7nOQts+ r6yXAotlQxGU11Sl9lcxAH8cfnm4GYJPzbdw -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:18 2025 by rpki-client