This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7AqpFk1BSXqivJwjB35QYa_5Oo.roa File: b7AqpFk1BSXqivJwjB35QYa_5Oo.roa (raw, json) Hash identifier: EKYQgLeuqo3dTQRw0Usm/ASyOPb7u1WjbAs8SUFk6jg= Subject key identifier: 6F:B0:2A:A4:59:35:05:25:EA:8A:F2:70:8C:1D:F9:41:86:BF:E4:EA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA5ADB67720CC7683F505973439EA1DCB Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7AqpFk1BSXqivJwjB35QYa_5Oo.roa Signing time: Fri 21 Nov 2025 09:10:16 +0000 ROA not before: Fri 21 Nov 2025 09:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 82.153.51.0/24 maxlen: 24 82.153.148.0/24 maxlen: 24 82.163.15.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.113.0/24 maxlen: 24 89.213.121.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:ad:b6:77:20:cc:76:83:f5:05:97:34:39:ea:1d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 21 09:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6fb02aa459350525ea8af2708c1df94186bfe4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:2d:cd:d7:cd:21:c0:26:e6:b9:fd:c5:ab: b4:db:6f:25:0d:28:a8:e2:f2:c0:5a:a8:bf:e4:27: 12:b9:65:43:47:1b:3b:43:88:18:c0:b4:fb:c2:47: 64:68:04:1f:26:f2:08:9a:5b:46:e4:9d:61:75:3a: c9:06:b0:3a:77:5c:08:59:f5:3e:41:5a:de:fe:fb: e2:a4:21:77:a8:68:68:33:e3:1e:91:67:68:1d:42: d5:f8:de:2f:fd:14:df:a9:6d:89:25:53:47:7e:e0: ce:57:95:76:fb:dc:d8:e4:b5:88:56:8a:4d:64:74: f4:5f:e8:5c:1c:50:b6:ee:20:f0:5c:4a:76:4c:d0: e6:11:00:34:f9:d2:ea:5f:78:2a:53:cf:18:5c:3d: 81:c3:61:eb:c2:7c:b5:65:81:f6:c0:84:a8:6a:49: 6c:22:5d:d1:bb:ed:54:48:fc:3a:af:92:2a:1f:84: f4:6b:85:9c:c0:07:35:d0:f6:c9:2a:e5:6e:34:82: 30:13:bf:9b:ca:5e:20:e5:e4:9f:be:34:5c:95:90: a5:bd:c5:5d:e2:62:7c:af:53:cb:af:6b:5b:5f:d3: 3b:d6:19:6f:d7:fe:fa:94:c4:74:ff:62:4f:b3:0a: 0f:be:c7:fb:a4:d3:f9:d7:7f:01:59:92:4a:93:e2: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:2A:A4:59:35:05:25:EA:8A:F2:70:8C:1D:F9:41:86:BF:E4:EA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7AqpFk1BSXqivJwjB35QYa_5Oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.51.0/24 82.153.148.0/24 82.163.15.0/24 89.213.63.0/24 89.213.113.0/24 89.213.121.0/24 89.213.157.0/24 89.213.227.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 23:28:44:4e:96:f0:b3:44:24:e0:7e:2b:9f:fe:07:fd:b9:34: 75:3f:e3:af:b2:42:e4:86:c8:ad:fc:4f:16:89:44:f9:bd:9b: 4d:0d:2b:6d:25:92:af:f7:4f:ff:79:e3:d9:18:b6:dc:ef:1e: cb:9d:61:c8:ce:ea:52:ac:c8:ae:5b:da:ed:27:8e:db:64:4f: c1:71:e6:de:4c:4e:f1:fd:87:4c:39:ec:83:a9:6b:5c:9b:73: 1d:0a:98:ad:79:58:93:6a:07:17:76:02:2b:0a:7f:23:1a:f8: ac:38:66:8a:c6:2c:c7:00:63:94:a4:c4:21:47:86:4e:36:f4: f5:50:19:b2:77:fa:d0:c6:a2:5f:57:35:28:43:8e:55:50:c9: 0a:9f:41:6d:ae:ea:ca:0a:12:43:b7:a3:a0:ec:98:c8:99:a7: 3d:c0:f6:f8:f1:e7:c8:9e:c1:2e:1b:02:ed:96:0f:72:1a:5d: 1b:19:4f:6e:1f:c9:8d:a5:90:32:42:f7:86:53:ea:1c:f5:7e: 91:70:68:b1:7e:56:3d:23:b5:bc:7e:4d:66:d8:05:65:d8:20: e5:8a:ea:9a:d3:71:b1:73:ef:72:5b:7e:a6:28:cb:26:83:ac: bb:e6:fd:f2:f2:f1:88:92:2b:b1:f4:42:4a:f1:3d:7d:4d:1d: f0:52:42:b6 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZqlrbZ3IMx2g/UFlzQ56h3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIxMDkxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmIwMmFhNDU5MzUwNTI1ZWE4YWYyNzA4YzFkZjk0MTg2YmZlNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR0tzdfNIcAm5rn9xau0228lDSio 4vLAWqi/5CcSuWVDRxs7Q4gYwLT7wkdkaAQfJvIImltG5J1hdTrJBrA6d1wIWfU+ QVre/vvipCF3qGhoM+MekWdoHULV+N4v/RTfqW2JJVNHfuDOV5V2+9zY5LWIVopN ZHT0X+hcHFC27iDwXEp2TNDmEQA0+dLqX3gqU88YXD2Bw2Hrwny1ZYH2wISoakls Il3Ru+1USPw6r5IqH4T0a4WcwAc10PbJKuVuNIIwE7+byl4g5eSfvjRclZClvcVd 4mJ8r1PLr2tbX9M71hlv1/76lMR0/2JPswoPvsf7pNP5138BWZJKk+LJcwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFG+wKqRZNQUl6orycIwd+UGGv+TqMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYjdBcXBGazFCU1hxaXZKd2pCMzVRWWFfNU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAUpkzAwQA UpmUAwQAUqMPAwQAWdU/AwQAWdVxAwQAWdV5AwQAWdWdAwQAWdXjAwQAbbDyAwQA 1YKJAwQA1YKYMA0GCSqGSIb3DQEBCwUAA4IBAQAjKEROlvCzRCTgfiuf/gf9uTR1 P+OvskLkhsit/E8WiUT5vZtNDSttJZKv90//eePZGLbc7x7LnWHIzupSrMiuW9rt J47bZE/BcebeTE7x/YdMOeyDqWtcm3MdCpiteViTagcXdgIrCn8jGvisOGaKxizH AGOUpMQhR4ZONvT1UBmyd/rQxqJfVzUoQ45VUMkKn0FtrurKChJDt6Og7JjImac9 wPb48efInsEuGwLtlg9yGl0bGU9uH8mNpZAyQveGU+oc9X6RcGixflY9I7W8fk1m 2AVl2CDliuqa03Gxc+9yW36mKMsmg6y75v3y8vGIkiux9EJK8T19TR3wUkK2 -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:12 2025 by rpki-client