This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SIXVNPdZFEHJ3Xdp9moIPEyREfs.roa File: SIXVNPdZFEHJ3Xdp9moIPEyREfs.roa (raw, json) Hash identifier: sfbjfjvR2fJlmDr84F+VzwAzKsFSGJ3vu+Gh9zRS3U4= Subject key identifier: 48:85:D5:34:F7:59:14:41:C9:DD:77:69:F6:6A:08:3C:4C:91:11:FB Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D61FE76A4E0936462D265B35E34A9 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SIXVNPdZFEHJ3Xdp9moIPEyREfs.roa Signing time: Mon 17 Nov 2025 10:12:38 +0000 ROA not before: Mon 17 Nov 2025 10:12:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199614 IP address blocks: 81.168.123.0/24 maxlen: 24 82.153.10.0/24 maxlen: 24 109.176.28.0/24 maxlen: 24 109.176.212.0/23 maxlen: 24 109.176.214.0/23 maxlen: 24 213.130.157.0/24 maxlen: 24 213.130.158.0/24 maxlen: 24 213.130.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:61:fe:76:a4:e0:93:64:62:d2:65:b3:5e:34:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4885d534f7591441c9dd7769f66a083c4c9111fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:d6:0b:59:eb:c4:3e:8e:38:e1:07:be:b9: 68:a0:1a:2c:fe:51:00:f8:20:e5:e8:a9:f4:0f:18: 1f:6d:7a:e8:08:11:eb:b7:c9:0f:11:f1:0e:18:93: 04:ec:2e:bf:fe:9e:b4:14:ad:e8:96:bf:5e:a6:02: 0e:dc:7c:38:6b:e4:fc:33:99:ec:e3:1f:2e:51:1c: e9:ac:10:1f:39:39:91:49:29:93:6c:0c:89:66:78: 3c:fc:30:1b:f5:40:ed:59:d7:29:4c:b8:d2:76:c7: a4:9c:95:07:9a:9e:49:fc:02:19:55:ee:dc:c3:03: 19:07:d6:90:4f:80:e2:d4:11:51:d7:c7:20:10:b6: a0:2f:d5:a1:6f:64:2f:b9:89:80:57:45:ae:8d:18: 39:7f:d4:60:a4:e8:cc:04:c1:fb:97:7c:a2:72:b5: 8b:eb:c9:f7:4a:e8:17:9f:95:11:30:66:3f:07:79: fb:bf:62:b4:cc:c2:99:e9:df:cb:b2:8d:e6:b0:85: 39:5e:e4:55:b8:5c:0f:ee:a1:b0:95:32:b9:b2:6c: 26:3e:7a:f9:77:37:10:82:ba:61:4c:87:ce:f5:de: ec:e5:f5:a2:e9:7c:8a:17:b1:a8:04:30:85:fc:5d: 4f:d7:7b:d0:29:c7:d7:15:ee:e0:19:45:96:33:e5: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:85:D5:34:F7:59:14:41:C9:DD:77:69:F6:6A:08:3C:4C:91:11:FB X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SIXVNPdZFEHJ3Xdp9moIPEyREfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.123.0/24 82.153.10.0/24 109.176.28.0/24 109.176.212.0/22 213.130.157.0-213.130.159.255 Signature Algorithm: sha256WithRSAEncryption 72:15:03:43:ed:12:9a:24:8e:29:42:2a:ea:ea:1f:7f:dc:af: 8f:97:be:db:6e:54:49:f8:8f:25:2e:73:53:73:15:2b:eb:98: 89:f7:e7:ee:bb:17:ea:ac:29:38:dd:0a:62:68:e2:e4:95:ff: e1:7d:31:3c:f9:94:be:cb:f2:9b:99:8d:71:29:b6:0e:eb:af: 38:c5:70:33:67:98:10:23:7d:c7:80:7f:95:82:dc:fd:12:29: 25:5a:6f:f7:e2:d8:c6:98:73:19:a2:12:f3:2a:bd:aa:1e:11: 21:03:bd:aa:5c:bd:16:fe:89:3a:36:c0:9f:f2:d1:10:f0:f3: fc:72:8c:b5:95:d2:66:ae:b9:79:a0:b9:af:d3:21:74:e3:bf: 53:01:2d:c3:9c:38:77:71:ac:46:84:99:8d:2e:c2:6d:be:7c: 0a:8f:d5:7d:22:1b:2d:93:7c:02:d4:66:2d:e5:53:90:83:63: 1a:ac:13:6f:97:90:e5:08:31:8f:b0:06:d9:40:c3:7e:8b:27: 13:e3:19:f9:3a:37:70:ed:92:7e:0b:0a:9a:88:05:aa:91:a9: 59:31:c8:fb:20:73:54:a2:04:b5:5d:14:c2:04:95:5d:a8:71: 96:8f:04:74:39:2b:99:66:b3:ea:0d:bc:45:5d:02:88:9a:90: 8b:87:2a:47 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZqRTWH+dqTgk2Ri0mWzXjSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODg1ZDUzNGY3NTkxNDQxYzlkZDc3NjlmNjZhMDgzYzRjOTExMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5/WC1nrxD6OOOEHvrlooBos/lEA +CDl6Kn0DxgfbXroCBHrt8kPEfEOGJME7C6//p60FK3olr9epgIO3Hw4a+T8M5ns 4x8uURzprBAfOTmRSSmTbAyJZng8/DAb9UDtWdcpTLjSdseknJUHmp5J/AIZVe7c wwMZB9aQT4Di1BFR18cgELagL9Whb2QvuYmAV0WujRg5f9RgpOjMBMH7l3yicrWL 68n3SugXn5URMGY/B3n7v2K0zMKZ6d/Lso3msIU5XuRVuFwP7qGwlTK5smwmPnr5 dzcQgrphTIfO9d7s5fWi6XyKF7GoBDCF/F1P13vQKcfXFe7gGUWWM+UFswIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFEiF1TT3WRRByd13afZqCDxMkRH7MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvU0lYVk5QZFpGRUhKM1hkcDltb0lQRXlSRWZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAUah7AwQA UpkKAwQAbbAcAwQCbbDUMAwDBADVgp0DBAXVgoAwDQYJKoZIhvcNAQELBQADggEB AHIVA0PtEpokjilCKurqH3/cr4+XvttuVEn4jyUuc1NzFSvrmIn35+67F+qsKTjd CmJo4uSV/+F9MTz5lL7L8puZjXEptg7rrzjFcDNnmBAjfceAf5WC3P0SKSVab/fi 2MaYcxmiEvMqvaoeESEDvapcvRb+iTo2wJ/y0RDw8/xyjLWV0mauuXmgua/TIXTj v1MBLcOcOHdxrEaEmY0uwm2+fAqP1X0iGy2TfALUZi3lU5CDYxqsE2+XkOUIMY+w BtlAw36LJxPjGfk6N3Dtkn4LCpqIBaqRqVkxyPsgc1SiBLVdFMIElV2ocZaPBHQ5 K5lms+oNvEVdAoiakIuHKkc= -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:56 2025 by rpki-client