This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8paq9_j8KjsT3OwqAJrwzAy4bM.roa File: W8paq9_j8KjsT3OwqAJrwzAy4bM.roa (raw, json) Hash identifier: bBcMMpEZxCRBFQeBNVOecIAyaa+ev9GpsUTXkViZNvE= Subject key identifier: 5B:CA:5A:AB:DF:E3:F0:A8:EC:4F:73:B0:A8:02:6B:C3:30:32:E1:B3 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE39B7C6E0415DFAFAD1C8B7C055EDB32 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8paq9_j8KjsT3OwqAJrwzAy4bM.roa Signing time: Wed 03 Dec 2025 09:46:49 +0000 ROA not before: Wed 03 Dec 2025 09:46:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137517 IP address blocks: 82.152.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:9b:7c:6e:04:15:df:af:ad:1c:8b:7c:05:5e:db:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 3 09:46:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bca5aabdfe3f0a8ec4f73b0a8026bc33032e1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:d7:4b:a4:f1:3a:75:fa:1b:00:84:d0:01: 91:d8:b9:5a:50:72:1b:5e:db:0f:3f:86:3c:95:68: 43:a6:17:79:a8:2e:de:12:e8:c0:04:1a:d5:7f:e7: c9:e3:fa:25:25:02:78:ea:10:64:e0:8c:ca:58:39: 4b:a3:50:8d:82:27:fd:70:ca:c3:9f:67:7e:6d:c2: 79:25:91:94:9d:e9:bf:89:3a:01:39:37:51:28:9e: 56:1c:8a:2a:b3:70:b6:5a:41:10:8d:91:bb:bf:b2: f1:2e:d7:d1:0a:de:9f:42:e3:93:36:a2:78:2c:b5: ae:32:db:9e:4a:90:0a:85:3b:a0:ba:91:fe:39:3a: 3a:41:d5:62:4b:65:a8:e1:8d:27:d8:61:3d:cf:60: fb:5e:74:e1:db:f0:cb:1b:0c:bc:c4:a1:1d:a3:80: a3:fa:92:e9:b3:e8:3e:2c:40:50:98:aa:88:5d:d7: ad:ac:28:14:d3:ca:4e:77:93:1a:77:a1:cf:c6:3e: ac:ce:f7:31:7e:8d:ea:56:28:94:bd:bd:75:5c:0b: 27:59:b2:f5:8b:dd:93:0d:86:cf:a4:08:3f:43:ff: 4b:0d:05:b4:c3:f8:30:ea:62:fa:8d:e9:ae:46:69: 2b:d9:45:06:d2:fd:23:cb:91:43:8f:30:00:c9:33: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CA:5A:AB:DF:E3:F0:A8:EC:4F:73:B0:A8:02:6B:C3:30:32:E1:B3 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8paq9_j8KjsT3OwqAJrwzAy4bM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.12.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:1b:f4:18:a7:7b:fe:96:37:a1:b8:9b:79:b8:38:45:f8:35: 11:a0:14:07:95:6e:b7:54:b5:37:56:db:86:78:73:0e:4f:bc: de:d2:73:8a:78:99:8e:47:b7:46:7f:6b:dd:7d:b0:1a:3e:8f: e3:ac:c9:7d:f9:08:47:b4:b5:c7:b6:ac:92:74:73:44:90:31: e8:fc:c7:e8:1e:01:0d:9e:10:48:6b:9a:99:ae:d4:7d:2d:3c: 52:65:de:67:57:3d:bc:1a:19:a7:cf:73:5f:c8:98:05:95:65: 5f:1f:79:3a:9b:c3:b4:57:b3:8d:69:8f:28:ac:f4:aa:09:10: 77:a7:12:2a:61:80:2f:71:ea:b6:89:8f:bc:f7:0e:e6:4c:01: 76:86:4c:c6:ff:55:46:a4:43:7e:3a:62:9e:6a:4a:b1:0d:a3: da:ce:12:3d:30:32:f2:84:46:01:c3:35:ec:2a:ed:0d:af:b0: 59:1d:99:e8:79:4c:70:e5:13:7b:cd:e3:8b:9d:95:93:a4:99: 06:b0:31:e5:4b:6a:a5:2c:8e:81:e0:0a:55:44:72:97:5e:31: 85:e5:17:eb:3e:00:74:ed:4e:74:6d:fd:44:4e:67:ae:50:8e: 79:29:1a:d9:34:79:fc:97:5f:43:ff:c5:99:ea:e8:c0:a8:98: 55:9e:c8:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjm3xuBBXfr60ci3wFXtsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAzMDk0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNhNWFhYmRmZTNmMGE4ZWM0ZjczYjBhODAyNmJjMzMwMzJlMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3XS6TxOnX6GwCE0AGR2LlaUHIb XtsPP4Y8lWhDphd5qC7eEujABBrVf+fJ4/olJQJ46hBk4IzKWDlLo1CNgif9cMrD n2d+bcJ5JZGUnem/iToBOTdRKJ5WHIoqs3C2WkEQjZG7v7LxLtfRCt6fQuOTNqJ4 LLWuMtueSpAKhTugupH+OTo6QdViS2Wo4Y0n2GE9z2D7XnTh2/DLGwy8xKEdo4Cj +pLps+g+LEBQmKqIXdetrCgU08pOd5Mad6HPxj6szvcxfo3qViiUvb11XAsnWbL1 i92TDYbPpAg/Q/9LDQW0w/gw6mL6jemuRmkr2UUG0v0jy5FDjzAAyTOi1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvKWqvf4/Co7E9zsKgCa8MwMuGzMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVzhwYXE5X2o4S2pzVDNPd3FBSnJ3ekF5NGJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgMMA0G CSqGSIb3DQEBCwUAA4IBAQAbG/QYp3v+ljehuJt5uDhF+DURoBQHlW63VLU3VtuG eHMOT7ze0nOKeJmOR7dGf2vdfbAaPo/jrMl9+QhHtLXHtqySdHNEkDHo/MfoHgEN nhBIa5qZrtR9LTxSZd5nVz28Ghmnz3NfyJgFlWVfH3k6m8O0V7ONaY8orPSqCRB3 pxIqYYAvceq2iY+89w7mTAF2hkzG/1VGpEN+OmKeakqxDaPazhI9MDLyhEYBwzXs Ku0Nr7BZHZnoeUxw5RN7zeOLnZWTpJkGsDHlS2qlLI6B4ApVRHKXXjGF5RfrPgB0 7U50bf1ETmeuUI55KRrZNHn8l19D/8WZ6ujAqJhVnshp -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:48 2025 by rpki-client