This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U9m633d96yCQdOWC960uDfBX_dQ.roa File: U9m633d96yCQdOWC960uDfBX_dQ.roa (raw, json) Hash identifier: unVEp2oOMtRPuF9dCr4l1zOS1LoUS+6fBUiYcwmo6JM= Subject key identifier: 53:D9:BA:DF:77:7D:EB:20:90:74:E5:82:F7:AD:2E:0D:F0:57:FD:D4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA08DC21EC6B6069498055AB1009787E1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U9m633d96yCQdOWC960uDfBX_dQ.roa Signing time: Thu 20 Nov 2025 09:17:16 +0000 ROA not before: Thu 20 Nov 2025 09:17:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 109.176.203.0/24 maxlen: 24 109.176.230.0/24 maxlen: 24 213.218.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:8d:c2:1e:c6:b6:06:94:98:05:5a:b1:00:97:87:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 20 09:17:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53d9badf777deb209074e582f7ad2e0df057fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:76:9f:3f:80:11:5f:73:d0:db:98:f0:dc: 0a:89:8a:31:72:a0:04:4b:09:d6:42:f6:04:4b:69: 55:c2:92:4f:35:d6:a5:82:b5:a4:01:da:21:23:c6: 8b:64:13:4c:66:1c:b6:4d:49:c3:34:0f:4c:7e:41: 90:87:0b:cb:f1:1c:a6:7c:a9:c5:b8:bc:bb:91:08: a4:9f:ce:7a:6f:ea:31:b2:65:6a:10:dd:b8:b3:52: 93:89:3e:da:04:b6:73:83:85:cb:e7:9f:76:86:72: c8:e7:f0:75:6c:36:76:ff:3c:45:18:6a:ea:49:e0: c5:06:0d:1b:f1:d7:9a:4e:33:73:94:a6:47:11:16: 64:41:b4:46:52:37:e0:57:e3:77:a2:b6:8e:58:d8: 26:18:f8:6f:8b:c1:bc:b4:69:96:2e:f2:4f:7a:80: 8a:3e:de:30:b1:0b:6c:97:1c:9d:47:69:cc:5a:fa: 24:e2:27:b3:6d:02:1d:a7:36:6f:19:79:05:8f:7a: 0f:b0:0c:16:11:73:6e:43:0d:6b:0f:43:56:f1:36: 51:13:f4:98:b6:fd:04:51:20:52:47:a9:27:b6:c1: bd:f5:a2:0d:4c:80:63:ce:e3:81:82:bb:13:4f:de: 44:06:07:e7:58:17:57:79:51:ce:f8:38:e9:ee:d3: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:BA:DF:77:7D:EB:20:90:74:E5:82:F7:AD:2E:0D:F0:57:FD:D4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U9m633d96yCQdOWC960uDfBX_dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.203.0/24 109.176.230.0/24 213.218.247.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ac:19:e9:6c:b6:42:cd:3c:5b:a8:ba:b5:c7:78:08:22:74: f5:0f:d4:a7:ae:58:ed:b6:a0:03:cc:02:28:0f:33:c9:96:10: cb:19:b7:0d:0b:8b:93:a1:9c:f7:83:66:7f:c9:e5:dd:61:85: 0b:05:6e:aa:9e:46:61:08:a2:fd:d5:33:bd:4e:95:be:04:3b: a4:40:13:f3:56:24:0d:fb:50:48:63:89:1e:7e:38:01:87:53: 4f:c4:13:fa:39:7b:cb:1b:82:d1:67:14:c7:74:9f:9f:41:8e: 1b:6d:8d:e1:4c:d5:39:4c:0f:81:c0:6a:5c:30:96:ed:1e:e6: b1:ba:aa:24:60:40:8a:4b:8a:b6:a0:d6:d0:df:1a:df:d3:f2: 33:86:28:2a:52:8c:d1:a7:07:28:18:ae:74:8e:75:0c:fa:48: 34:19:7c:2b:df:3f:0b:d8:33:a4:95:a7:95:ca:29:60:e7:4c: f9:19:d8:83:2c:60:66:c7:a1:65:1b:cc:7b:4d:08:45:70:2e: 25:fe:d6:83:d3:79:e8:43:f2:8f:38:80:75:3e:a6:a1:75:75: a5:46:ef:58:d2:8a:d6:d2:1f:d0:ff:10:4b:e4:a1:1e:de:cf: 79:bb:d2:a0:8b:68:e5:7d:8b:17:59:5e:21:ef:89:b9:c5:18: a6:0c:88:18 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqgjcIexrYGlJgFWrEAl4fhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIwMDkxNzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Q5YmFkZjc3N2RlYjIwOTA3NGU1ODJmN2FkMmUwZGYwNTdmZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0th2nz+AEV9z0NuY8NwKiYoxcqAE SwnWQvYES2lVwpJPNdalgrWkAdohI8aLZBNMZhy2TUnDNA9MfkGQhwvL8RymfKnF uLy7kQikn856b+oxsmVqEN24s1KTiT7aBLZzg4XL5592hnLI5/B1bDZ2/zxFGGrq SeDFBg0b8deaTjNzlKZHERZkQbRGUjfgV+N3oraOWNgmGPhvi8G8tGmWLvJPeoCK Pt4wsQtslxydR2nMWvok4iezbQIdpzZvGXkFj3oPsAwWEXNuQw1rD0NW8TZRE/SY tv0EUSBSR6kntsG99aINTIBjzuOBgrsTT95EBgfnWBdXeVHO+Djp7tOy7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFPZut93fesgkHTlgvetLg3wV/3UMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVTltNjMzZDk2eUNRZE9XQzk2MHVEZkJYX2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbbDLAwQA bbDmAwQA1dr3MA0GCSqGSIb3DQEBCwUAA4IBAQBirBnpbLZCzTxbqLq1x3gIInT1 D9SnrljttqADzAIoDzPJlhDLGbcNC4uToZz3g2Z/yeXdYYULBW6qnkZhCKL91TO9 TpW+BDukQBPzViQN+1BIY4kefjgBh1NPxBP6OXvLG4LRZxTHdJ+fQY4bbY3hTNU5 TA+BwGpcMJbtHuaxuqokYECKS4q2oNbQ3xrf0/IzhigqUozRpwcoGK50jnUM+kg0 GXwr3z8L2DOklaeVyilg50z5GdiDLGBmx6FlG8x7TQhFcC4l/taD03noQ/KPOIB1 PqahdXWlRu9Y0orW0h/Q/xBL5KEe3s95u9Kgi2jlfYsXWV4h74m5xRimDIgY -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:10 2025 by rpki-client