This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nd9rrCbt2zsM4N9CI0L9Qd92R0s.roa File: Nd9rrCbt2zsM4N9CI0L9Qd92R0s.roa (raw, json) Hash identifier: J8WregmHauFbkrJkNgY4P0XYg42P2KIksrVmNS2XuZQ= Subject key identifier: 35:DF:6B:AC:26:ED:DB:3B:0C:E0:DF:42:23:42:FD:41:DF:76:47:4B Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A6D55009D336FB5EFF5FD29C3D443D8D5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nd9rrCbt2zsM4N9CI0L9Qd92R0s.roa Signing time: Mon 10 Nov 2025 10:34:38 +0000 ROA not before: Mon 10 Nov 2025 10:34:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396356 IP address blocks: 81.5.156.0/24 maxlen: 24 81.168.41.0/24 maxlen: 24 82.153.137.0/24 maxlen: 24 82.153.139.0/24 maxlen: 24 82.153.140.0/24 maxlen: 24 82.153.221.0/24 maxlen: 24 82.153.223.0/24 maxlen: 24 82.153.240.0/24 maxlen: 24 82.153.249.0/24 maxlen: 24 82.153.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:55:00:9d:33:6f:b5:ef:f5:fd:29:c3:d4:43:d8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 10 10:34:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35df6bac26eddb3b0ce0df422342fd41df76474b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:e5:4e:c4:4c:51:ef:f6:5b:db:10:44:b7: 89:ea:d7:b7:af:0c:c4:33:37:e0:88:15:bf:a9:2a: 23:50:4d:0e:a4:70:bd:9c:0c:3b:89:07:0f:a5:60: 9f:ed:d1:b9:d2:a2:34:92:59:ba:32:d1:86:b7:68: 91:64:d0:e3:be:ea:3d:6a:28:16:3a:be:00:d2:cc: bf:d0:06:95:88:b0:eb:08:34:83:95:ec:86:92:1d: bc:e1:ac:57:0d:54:a7:19:af:2e:d4:f7:15:03:77: d0:44:e5:45:2f:f7:e4:7b:87:78:8c:65:e7:a5:1e: 78:6f:55:e3:67:d1:6f:3c:8a:b7:1f:a6:8e:20:99: 2b:84:72:a1:fd:85:d7:10:47:f3:6a:cc:02:58:d1: fd:d5:b3:98:65:10:0c:86:fe:c0:6a:da:90:b4:54: 32:c1:d8:24:c6:75:96:c9:01:5b:c1:f8:76:77:8b: 5a:5a:c4:f1:d3:d7:da:3f:51:5a:b7:9f:2e:f1:c2: 5f:b0:fd:7c:c3:c1:5f:d6:b1:3a:cf:2a:14:01:1d: dc:54:7b:8c:f0:01:6b:c5:e3:27:8d:78:ac:0c:2b: d8:57:4b:d1:37:8a:3e:22:90:23:ec:6e:dc:be:f0: fc:7f:32:03:ec:4a:e3:f6:b8:2c:34:28:7b:88:67: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:6B:AC:26:ED:DB:3B:0C:E0:DF:42:23:42:FD:41:DF:76:47:4B X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nd9rrCbt2zsM4N9CI0L9Qd92R0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.156.0/24 81.168.41.0/24 82.153.137.0/24 82.153.139.0-82.153.140.255 82.153.221.0/24 82.153.223.0/24 82.153.240.0/24 82.153.249.0-82.153.250.255 Signature Algorithm: sha256WithRSAEncryption 1d:b8:de:97:8f:99:d7:57:df:f7:15:3b:ee:97:a3:b4:a0:34: ff:c8:29:2b:51:28:99:5a:3c:b6:d4:a0:08:b3:df:70:c2:a0: 58:ca:7a:6d:6c:09:d5:46:ad:fd:d9:86:38:0c:6c:d5:45:52: 8d:c5:fe:ba:35:c3:9d:44:f7:3a:f1:bc:53:3e:b9:cf:8a:04: 56:ed:28:41:a6:f7:6c:95:91:99:40:e3:c3:2c:59:b3:9b:fe: c6:82:d8:01:e9:72:f3:5f:07:20:bb:9b:be:c3:d0:9a:60:c5: 55:9e:03:41:9d:6e:24:af:19:9f:30:98:8d:f4:9f:fe:be:41: 19:ab:d0:c2:b3:a8:59:19:cd:be:ca:ed:0a:32:00:13:cd:48: 66:3c:64:87:a1:ae:0f:a9:58:9d:de:d3:72:04:20:21:7c:76: 8d:a4:1b:8f:3f:50:9b:d9:ef:d0:be:2a:6e:4d:93:57:89:e1: 4c:70:ba:43:75:73:a7:f1:44:ad:cb:12:32:2d:99:b2:d6:e3: 75:3f:1e:6e:b5:3d:1b:15:79:a6:ed:29:26:b6:31:65:f5:85: 2b:f9:29:fc:9f:6a:88:8e:a7:9b:ec:09:61:4f:31:aa:0f:a0: 32:28:e9:b5:d4:97:e6:0d:87:d9:26:c6:27:b3:95:97:4c:51: f9:3d:4a:3a -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZptVQCdM2+17/X9KcPUQ9jVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEwMTAzNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWRmNmJhYzI2ZWRkYjNiMGNlMGRmNDIyMzQyZmQ0MWRmNzY0NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvLlTsRMUe/2W9sQRLeJ6te3rwzE MzfgiBW/qSojUE0OpHC9nAw7iQcPpWCf7dG50qI0klm6MtGGt2iRZNDjvuo9aigW Or4A0sy/0AaViLDrCDSDleyGkh284axXDVSnGa8u1PcVA3fQROVFL/fke4d4jGXn pR54b1XjZ9FvPIq3H6aOIJkrhHKh/YXXEEfzaswCWNH91bOYZRAMhv7AatqQtFQy wdgkxnWWyQFbwfh2d4taWsTx09faP1Fat58u8cJfsP18w8Ff1rE6zyoUAR3cVHuM 8AFrxeMnjXisDCvYV0vRN4o+IpAj7G7cvvD8fzID7Erj9rgsNCh7iGdOWwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFDXfa6wm7ds7DODfQiNC/UHfdkdLMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvTmQ5cnJDYnQyenNNNE45Q0kwTDlRZDkyUjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAUQWcAwQA UagpAwQAUpmJMAwDBABSmYsDBABSmYwDBABSmd0DBABSmd8DBABSmfAwDAMEAFKZ +QMEAFKZ+jANBgkqhkiG9w0BAQsFAAOCAQEAHbjel4+Z11ff9xU77pejtKA0/8gp K1EomVo8ttSgCLPfcMKgWMp6bWwJ1Uat/dmGOAxs1UVSjcX+ujXDnUT3OvG8Uz65 z4oEVu0oQab3bJWRmUDjwyxZs5v+xoLYAely818HILubvsPQmmDFVZ4DQZ1uJK8Z nzCYjfSf/r5BGavQwrOoWRnNvsrtCjIAE81IZjxkh6GuD6lYnd7TcgQgIXx2jaQb jz9Qm9nv0L4qbk2TV4nhTHC6Q3Vzp/FErcsSMi2ZstbjdT8ebrU9GxV5pu0pJrYx ZfWFK/kp/J9qiI6nm+wJYU8xqg+gMijptdSX5g2H2SbGJ7OVl0xR+T1KOg== -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:52 2025 by rpki-client