This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R4tBaP6N0LtQb-wxlGRZWuPL99c.roa File: R4tBaP6N0LtQb-wxlGRZWuPL99c.roa (raw, json) Hash identifier: uIVnW3tYnmq69GS4ta5jocIXElYdjw9PIO4EfdqLU4g= Subject key identifier: 47:8B:41:68:FE:8D:D0:BB:50:6F:EC:31:94:64:59:5A:E3:CB:F7:D7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A5DC1E00E327A220D875B9FBAD16BEAB6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R4tBaP6N0LtQb-wxlGRZWuPL99c.roa Signing time: Fri 07 Nov 2025 09:59:38 +0000 ROA not before: Fri 07 Nov 2025 09:59:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210734 IP address blocks: 82.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:c1:e0:0e:32:7a:22:0d:87:5b:9f:ba:d1:6b:ea:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 7 09:59:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=478b4168fe8dd0bb506fec319464595ae3cbf7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:d4:fd:cf:5f:50:90:5b:08:d5:09:09:91: 02:1c:71:76:05:3e:7b:2e:a4:01:2f:1f:fd:58:95: 8d:48:ac:cc:60:f1:40:21:fd:a4:de:b4:3c:e3:d7: a3:46:c9:62:2c:87:4c:64:40:e1:17:5c:74:ea:c9: 29:19:60:de:66:c7:fc:9b:81:57:ef:db:53:a9:60: fa:69:3d:a4:95:ea:75:82:47:1f:90:b1:93:22:24: 85:26:bb:9a:3e:25:cc:d4:a5:32:f3:67:24:da:30: f6:b6:58:a7:0d:0b:a9:53:05:ab:75:59:7a:6d:72: e0:af:b5:13:64:41:ae:53:da:d3:45:f6:f3:6d:ee: da:49:e5:8e:c1:4e:06:d0:a1:35:f5:52:0d:3f:d5: 15:7f:00:00:d8:36:e7:51:71:a9:de:34:d5:31:fd: 5c:18:dc:03:70:2e:40:0c:46:b0:f1:29:bf:57:69: ee:9e:79:5a:1f:3b:4c:04:42:e4:8b:a0:d9:3a:e0: b1:eb:4d:61:b7:cc:0c:f2:4d:d9:8f:1e:d2:4f:de: 7b:30:cf:de:52:3e:1a:46:21:66:fc:9e:64:cd:e6: 47:ce:b1:9e:ed:d2:68:b6:de:f7:ee:bb:70:34:39: 03:72:ff:e2:0b:06:8a:14:e1:43:80:65:37:e5:26: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:41:68:FE:8D:D0:BB:50:6F:EC:31:94:64:59:5A:E3:CB:F7:D7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R4tBaP6N0LtQb-wxlGRZWuPL99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.50.0/24 Signature Algorithm: sha256WithRSAEncryption 56:31:50:dd:f1:e4:4a:37:bc:55:44:be:94:7c:bf:8a:73:0b: ce:b7:b5:b1:73:34:ab:15:f6:21:c1:4c:f5:8c:dd:65:bd:1f: 2e:de:b3:ab:76:5c:21:0a:db:78:28:87:95:c7:1d:ef:d6:cf: 93:02:f1:e7:de:dd:b5:a5:07:fe:fd:78:33:be:7d:c2:ca:02: cc:44:66:92:6b:01:87:5e:7e:75:bb:f9:44:1c:ea:7b:58:fd: 19:ae:70:77:b7:5f:b1:a3:32:35:e6:49:2a:49:34:74:7d:b1: 88:86:e1:18:2c:76:1a:b8:d5:85:44:ba:9e:b5:ec:99:5b:43: d5:d9:ef:2c:78:86:58:b8:14:19:cb:43:19:1b:1d:93:d6:15: b8:b0:8a:8b:ac:2a:1c:46:ee:49:1b:8f:59:d2:14:90:71:b6: f2:22:fc:e1:d2:63:96:15:bc:49:b1:4e:f6:25:db:f5:a3:6d: 16:e1:c2:06:fb:0b:05:84:9c:cc:1e:a0:71:8d:59:23:0e:71: f6:83:ee:5f:09:af:91:d7:16:63:3f:9c:b2:7b:97:e1:30:c6: 84:a2:ec:5b:c7:25:94:15:e8:1f:cf:21:99:d3:4b:2d:f5:44: 51:71:74:48:94:f0:1a:cc:11:44:54:cf:61:34:8f:b6:9b:d3: 2a:3c:77:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpdweAOMnoiDYdbn7rRa+q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTA3MDk1OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhiNDE2OGZlOGRkMGJiNTA2ZmVjMzE5NDY0NTk1YWUzY2JmN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqvU/c9fUJBbCNUJCZECHHF2BT57 LqQBLx/9WJWNSKzMYPFAIf2k3rQ849ejRsliLIdMZEDhF1x06skpGWDeZsf8m4FX 79tTqWD6aT2klep1gkcfkLGTIiSFJruaPiXM1KUy82ck2jD2tlinDQupUwWrdVl6 bXLgr7UTZEGuU9rTRfbzbe7aSeWOwU4G0KE19VINP9UVfwAA2DbnUXGp3jTVMf1c GNwDcC5ADEaw8Sm/V2nunnlaHztMBELki6DZOuCx601ht8wM8k3Zjx7ST957MM/e Uj4aRiFm/J5kzeZHzrGe7dJott737rtwNDkDcv/iCwaKFOFDgGU35Sb9AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEeLQWj+jdC7UG/sMZRkWVrjy/fXMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUjR0QmFQNk4wTHRRYi13eGxHUlpXdVBMOTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpkyMA0G CSqGSIb3DQEBCwUAA4IBAQBWMVDd8eRKN7xVRL6UfL+KcwvOt7WxczSrFfYhwUz1 jN1lvR8u3rOrdlwhCtt4KIeVxx3v1s+TAvHn3t21pQf+/Xgzvn3CygLMRGaSawGH Xn51u/lEHOp7WP0ZrnB3t1+xozI15kkqSTR0fbGIhuEYLHYauNWFRLqeteyZW0PV 2e8seIZYuBQZy0MZGx2T1hW4sIqLrCocRu5JG49Z0hSQcbbyIvzh0mOWFbxJsU72 Jdv1o20W4cIG+wsFhJzMHqBxjVkjDnH2g+5fCa+R1xZjP5yye5fhMMaEouxbxyWU FegfzyGZ00st9URRcXRIlPAazBFEVM9hNI+2m9MqPHf7 -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:56 2025 by rpki-client