This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ur7U3em5YkZvQsusjLnfceQdLEk.roa File: Ur7U3em5YkZvQsusjLnfceQdLEk.roa (raw, json) Hash identifier: SyByD6Is+2xWg+twpoEENhQxGXNwZ6/OQ4HzHGhrpaU= Subject key identifier: 52:BE:D4:DD:E9:B9:62:46:6F:42:CB:AC:8C:B9:DF:71:E4:1D:2C:49 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A77FA85A6A9EA474491AF2C5118C18796 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ur7U3em5YkZvQsusjLnfceQdLEk.roa Signing time: Wed 12 Nov 2025 12:11:38 +0000 ROA not before: Wed 12 Nov 2025 12:11:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209043 IP address blocks: 213.152.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:fa:85:a6:a9:ea:47:44:91:af:2c:51:18:c1:87:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 12 12:11:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52bed4dde9b962466f42cbac8cb9df71e41d2c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:ce:12:52:f5:8d:3a:d0:3f:58:52:d7:61: 05:43:c5:1d:90:65:c9:3a:cb:53:cc:1f:60:22:ad: 7b:c5:dd:ed:35:f5:0a:b0:af:e5:4d:3a:21:0b:20: 75:5c:5f:ce:36:80:03:84:f9:73:0a:f1:0b:e0:47: 19:25:79:ae:96:7e:af:ce:35:ad:57:ea:63:ed:9b: 93:d1:7e:36:5c:42:2a:5e:7d:a7:f1:3b:6c:92:ef: b8:e7:67:25:58:56:68:e2:81:e6:01:24:2e:82:1a: 16:cc:83:96:89:7c:2f:2f:0f:68:86:cb:df:f9:77: 09:b9:fb:a7:8b:f6:60:9c:1c:24:f1:08:e8:b3:0d: 8b:9d:27:69:19:46:f6:23:66:36:9d:47:61:b1:ff: 76:23:d5:d4:8d:fe:dd:60:02:8e:84:85:5d:27:09: 59:25:3f:05:93:ce:7b:d3:4e:a6:44:f8:d6:39:38: 5f:5a:5f:de:4b:86:53:41:dc:f1:e6:7b:4d:ba:f5: df:98:38:7d:23:2d:33:44:00:c3:f4:15:d6:b8:17: 3f:e2:9d:d4:71:f9:02:31:91:c9:e7:1b:b5:99:01: b2:f8:a8:72:1d:1c:a8:97:96:c9:2d:65:a4:5e:59: 7a:4c:d6:42:01:9d:1d:26:10:93:3e:a4:3a:8e:e9: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:D4:DD:E9:B9:62:46:6F:42:CB:AC:8C:B9:DF:71:E4:1D:2C:49 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ur7U3em5YkZvQsusjLnfceQdLEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.42.0/24 Signature Algorithm: sha256WithRSAEncryption 45:16:07:69:ad:73:da:c6:33:eb:fc:ee:e4:52:a2:63:f3:56: 5c:5b:32:23:cc:7a:2d:15:0b:37:97:76:45:81:2d:2f:98:69: 8d:14:db:ac:1d:9b:7e:c9:58:cd:21:5a:94:ab:64:7f:79:7a: 14:e1:bb:47:5b:7e:1c:75:4c:75:35:35:a4:13:be:71:50:f5: b1:18:1b:c7:ed:77:19:5c:cc:f4:e4:ef:78:9f:d0:8c:e3:19: 5b:e5:f4:19:74:0a:7d:b7:b3:0c:76:13:18:ef:ac:ca:fa:16: 49:0b:de:88:b0:c1:3e:87:6d:1e:cf:c2:4e:38:14:0f:b7:57: e6:86:e4:90:31:71:8f:9e:82:cf:b5:b0:b6:9e:91:a0:07:77: fe:52:22:d0:7a:c0:44:b3:90:9a:e5:b3:d0:65:c2:2a:58:23: 37:e1:d4:9e:57:0a:70:63:c5:85:70:ad:0b:5d:61:1a:07:1e: 89:b3:95:66:80:f2:e2:aa:5b:f2:a1:26:11:6c:22:f5:1e:bd: b5:d3:7a:69:eb:1f:df:25:fb:a4:ef:5e:92:8b:02:f7:81:a0: b0:27:92:8d:a0:8a:3a:06:84:1f:a8:d5:bd:1b:f9:68:71:fc: 09:01:0f:c2:d2:4b:65:83:de:00:62:87:85:e3:b9:4f:38:98: ce:97:6d:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3+oWmqepHRJGvLFEYwYeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEyMTIxMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJlZDRkZGU5Yjk2MjQ2NmY0MmNiYWM4Y2I5ZGY3MWU0MWQyYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsETOElL1jTrQP1hS12EFQ8UdkGXJ OstTzB9gIq17xd3tNfUKsK/lTTohCyB1XF/ONoADhPlzCvEL4EcZJXmuln6vzjWt V+pj7ZuT0X42XEIqXn2n8Ttsku+452clWFZo4oHmASQughoWzIOWiXwvLw9ohsvf +XcJufuni/ZgnBwk8Qjosw2LnSdpGUb2I2Y2nUdhsf92I9XUjf7dYAKOhIVdJwlZ JT8Fk857006mRPjWOThfWl/eS4ZTQdzx5ntNuvXfmDh9Iy0zRADD9BXWuBc/4p3U cfkCMZHJ5xu1mQGy+KhyHRyol5bJLWWkXll6TNZCAZ0dJhCTPqQ6jukUgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFK+1N3puWJGb0LLrIy533HkHSxJMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVXI3VTNlbTVZa1p2UXN1c2pMbmZjZVFkTEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZgqMA0G CSqGSIb3DQEBCwUAA4IBAQBFFgdprXPaxjPr/O7kUqJj81ZcWzIjzHotFQs3l3ZF gS0vmGmNFNusHZt+yVjNIVqUq2R/eXoU4btHW34cdUx1NTWkE75xUPWxGBvH7XcZ XMz05O94n9CM4xlb5fQZdAp9t7MMdhMY76zK+hZJC96IsME+h20ez8JOOBQPt1fm huSQMXGPnoLPtbC2npGgB3f+UiLQesBEs5Ca5bPQZcIqWCM34dSeVwpwY8WFcK0L XWEaBx6Js5VmgPLiqlvyoSYRbCL1Hr2103pp6x/fJfuk716SiwL3gaCwJ5KNoIo6 BoQfqNW9G/locfwJAQ/C0ktlg94AYoeF47lPOJjOl23Y -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:55 2025 by rpki-client