This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dEm1kfcX1oGyJKrmGOPQBViyOqg.roa File: dEm1kfcX1oGyJKrmGOPQBViyOqg.roa (raw, json) Hash identifier: ZDR/TDrHqqDTip7H/fHUa5LE/edLnG6ioI/A5hQDtCo= Subject key identifier: 74:49:B5:91:F7:17:D6:81:B2:24:AA:E6:18:E3:D0:05:58:B2:3A:A8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ADE4CD9C129CCBC4A80FA7B9F3A100AC7 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dEm1kfcX1oGyJKrmGOPQBViyOqg.roa Signing time: Tue 02 Dec 2025 09:02:49 +0000 ROA not before: Tue 02 Dec 2025 09:02:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 77.93.136.0/24 maxlen: 24 81.168.109.0/24 maxlen: 24 82.152.61.0/24 maxlen: 24 82.152.71.0/24 maxlen: 24 82.152.107.0/24 maxlen: 24 82.153.41.0/24 maxlen: 24 82.153.144.0/24 maxlen: 24 109.176.91.0/24 maxlen: 24 212.38.81.0/24 maxlen: 24 213.130.151.0/24 maxlen: 24 217.144.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:4c:d9:c1:29:cc:bc:4a:80:fa:7b:9f:3a:10:0a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 2 09:02:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7449b591f717d681b224aae618e3d00558b23aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:0c:3c:79:e2:11:2b:52:db:b7:29:39:f7: 64:c6:e8:d0:0a:9d:d9:c9:13:61:a6:0b:0e:69:cb: 25:ab:89:45:f8:b2:97:57:b0:f1:ae:54:17:f9:81: 85:72:8a:70:4a:77:70:b5:fe:6c:38:d0:8a:45:87: 79:ce:3d:63:78:b4:43:c0:cd:cc:e6:79:72:f4:20: 5e:73:7a:36:e5:6e:ef:98:ea:36:e2:e9:a9:96:c7: a2:2a:c0:96:7e:f6:cc:7a:70:92:7b:05:26:b9:ce: a9:e6:73:45:1c:8d:91:91:db:ca:85:a2:ea:1e:a5: ad:93:d9:3f:c7:22:1f:9d:81:06:24:43:21:cb:5b: bd:fd:7f:3a:3a:36:9f:e4:84:2b:8a:5d:32:c1:1f: e2:c2:c2:c5:e2:24:7e:67:d6:66:9d:0d:8f:c3:d9: 09:23:7c:73:7f:d6:7d:22:ca:ac:e6:14:a7:fa:64: de:3b:1f:69:24:a3:5d:fa:42:a0:3b:d5:87:59:8e: 67:de:5e:8f:54:8d:ec:81:70:6f:47:1d:b8:e7:96: fa:cb:80:e0:fd:53:09:3c:4b:f8:46:9f:3e:c2:a0: 74:81:10:84:73:9c:09:79:6c:76:61:c9:c2:1c:4c: 5e:12:94:be:15:40:0f:1d:36:a8:f7:7b:b9:a2:f0: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:B5:91:F7:17:D6:81:B2:24:AA:E6:18:E3:D0:05:58:B2:3A:A8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dEm1kfcX1oGyJKrmGOPQBViyOqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.136.0/24 81.168.109.0/24 82.152.61.0/24 82.152.71.0/24 82.152.107.0/24 82.153.41.0/24 82.153.144.0/24 109.176.91.0/24 212.38.81.0/24 213.130.151.0/24 217.144.153.0/24 Signature Algorithm: sha256WithRSAEncryption 50:dc:51:ce:a4:b8:26:36:fe:1e:ea:17:94:e3:c0:c0:93:1b: 5f:ae:b3:c8:71:01:a1:97:af:d1:c1:95:4f:77:12:67:dd:bf: 91:41:e0:d5:7f:83:15:d7:a7:89:ba:91:77:c7:75:2d:b3:7d: 66:38:e8:72:54:57:27:a8:fb:fa:b6:1e:c8:a4:50:76:7a:17: 7a:fe:ff:0a:e6:cb:95:7f:88:ba:35:ed:9f:c8:1e:fd:ff:86: e3:70:e1:c8:e5:7e:d9:d0:ec:26:aa:f3:46:c3:47:5c:cd:62: 57:ca:49:6f:59:b0:cd:c1:19:2e:c7:ff:ee:bb:b3:c6:ab:c3: 59:21:c3:63:02:92:81:57:42:1b:1a:33:46:64:b8:2f:64:94: 60:01:17:02:49:ae:50:3a:6b:89:60:b6:d6:03:70:c3:07:cf: d1:d6:7f:67:85:d7:fc:b7:38:6d:da:1b:06:e2:03:35:d5:9c: 88:b1:60:4a:f2:dd:a1:b4:ab:6d:48:b9:df:c4:d3:d8:05:80: 38:dd:26:a6:f5:1c:6d:e8:04:79:c4:49:6b:d8:b5:de:d8:09: df:6c:ba:27:22:d7:d4:3e:be:e4:65:ae:7b:67:55:d7:c7:f8: 68:fd:d9:2e:14:b0:72:3d:7b:f3:80:b9:f3:e7:8c:2b:68:70: be:d4:ec:f0 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZreTNnBKcy8SoD6e586EArHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAyMDkwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ5YjU5MWY3MTdkNjgxYjIyNGFhZTYxOGUzZDAwNTU4YjIzYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfUMPHniEStS27cpOfdkxujQCp3Z yRNhpgsOacslq4lF+LKXV7DxrlQX+YGFcopwSndwtf5sONCKRYd5zj1jeLRDwM3M 5nly9CBec3o25W7vmOo24umplseiKsCWfvbMenCSewUmuc6p5nNFHI2RkdvKhaLq HqWtk9k/xyIfnYEGJEMhy1u9/X86Ojaf5IQril0ywR/iwsLF4iR+Z9ZmnQ2Pw9kJ I3xzf9Z9Isqs5hSn+mTeOx9pJKNd+kKgO9WHWY5n3l6PVI3sgXBvRx2455b6y4Dg /VMJPEv4Rp8+wqB0gRCEc5wJeWx2YcnCHExeEpS+FUAPHTao93u5ovCqCQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFHRJtZH3F9aBsiSq5hjj0AVYsjqoMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZEVtMWtmY1gxb0d5SktybUdPUFFCVml5T3FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQATV2IAwQA UahtAwQAUpg9AwQAUphHAwQAUphrAwQAUpkpAwQAUpmQAwQAbbBbAwQA1CZRAwQA 1YKXAwQA2ZCZMA0GCSqGSIb3DQEBCwUAA4IBAQBQ3FHOpLgmNv4e6heU48DAkxtf rrPIcQGhl6/RwZVPdxJn3b+RQeDVf4MV16eJupF3x3Uts31mOOhyVFcnqPv6th7I pFB2ehd6/v8K5suVf4i6Ne2fyB79/4bjcOHI5X7Z0OwmqvNGw0dczWJXyklvWbDN wRkux//uu7PGq8NZIcNjApKBV0IbGjNGZLgvZJRgARcCSa5QOmuJYLbWA3DDB8/R 1n9nhdf8tzht2hsG4gM11ZyIsWBK8t2htKttSLnfxNPYBYA43Sam9Rxt6AR5xElr 2LXe2AnfbLonItfUPr7kZa57Z1XXx/ho/dkuFLByPXvzgLnz54wraHC+1Ozw -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:34 2025 by rpki-client