This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/djYPtbMzZi_Y1lAK4lCsUvRGtWU.roa File: djYPtbMzZi_Y1lAK4lCsUvRGtWU.roa (raw, json) Hash identifier: nT5wrD/dzPglTKM7mBcdkSPe5ulfJWnvprxJKzuel6Q= Subject key identifier: 76:36:0F:B5:B3:33:66:2F:D8:D6:50:0A:E2:50:AC:52:F4:46:B5:65 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA5ADB7620EB22462F59D9A4599849398 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/djYPtbMzZi_Y1lAK4lCsUvRGtWU.roa Signing time: Fri 21 Nov 2025 09:10:16 +0000 ROA not before: Fri 21 Nov 2025 09:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 82.152.174.0/23 maxlen: 23 82.153.208.0/22 maxlen: 22 89.213.58.0/24 maxlen: 24 89.213.60.0/23 maxlen: 24 89.213.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:ad:b7:62:0e:b2:24:62:f5:9d:9a:45:99:84:93:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 21 09:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=76360fb5b333662fd8d6500ae250ac52f446b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:89:a0:a6:f6:ce:f9:af:14:18:56:cb:8e: a4:96:6c:e3:7f:a6:19:d4:1a:86:db:30:d4:4c:dd: f9:e5:45:1e:6e:56:80:0a:b4:7b:99:c4:09:7c:86: b2:81:a2:b8:3f:0c:36:c2:a0:54:6f:d2:38:c2:ac: be:8d:92:d0:6a:cf:d7:ba:a3:57:2e:bd:36:8a:02: 6b:65:54:50:d2:ae:af:5b:8d:90:f8:42:11:3b:e9: d7:cf:73:37:cf:e0:01:48:05:6e:ec:3c:f4:63:cf: 50:d6:e1:2f:32:ed:ce:28:ca:91:77:95:a9:a2:cc: 28:6b:c0:19:4c:5f:15:49:4a:7e:ad:f7:ed:47:7d: f6:f9:ef:f6:6c:cc:4e:24:4c:af:be:be:59:83:9e: 8b:a9:ca:bd:4b:db:56:40:54:38:d9:ce:6d:d6:f6: 19:80:07:fe:fc:b3:51:ac:28:4b:f5:10:07:a5:3c: dd:08:c4:b5:95:ab:48:44:29:8e:9f:ec:ec:a5:b7: b1:ba:81:06:93:88:81:9e:d5:2a:58:8a:6d:85:33: ae:fd:12:b1:88:13:c6:af:8e:3e:bc:6c:34:4d:bc: 40:5c:18:0b:52:d1:cd:0f:a6:5e:92:2b:a8:03:a7: 6a:48:4e:15:61:c4:1f:42:bc:b8:2b:8b:6d:16:c1: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:0F:B5:B3:33:66:2F:D8:D6:50:0A:E2:50:AC:52:F4:46:B5:65 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/djYPtbMzZi_Y1lAK4lCsUvRGtWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.174.0/23 82.153.208.0/22 89.213.58.0/24 89.213.60.0/23 89.213.228.0/24 Signature Algorithm: sha256WithRSAEncryption 36:35:c6:54:6c:29:e5:fa:b4:19:d8:75:92:bc:6d:4e:03:0a: c6:a4:58:25:7d:a0:52:7a:6d:fd:8f:1c:f7:51:3d:0c:3f:8a: 60:83:73:d5:cf:f6:6c:8b:f8:e3:aa:a3:5e:42:43:96:df:09: 46:02:f5:4d:5f:e7:e7:5c:6c:ff:a6:62:44:55:50:e6:6f:e5: 39:06:3d:2e:10:92:d5:f0:8c:29:d8:9c:c5:14:1f:e5:c3:9c: 65:11:be:42:27:61:8c:cc:aa:6a:e3:e0:dd:43:6f:5b:fb:a4: cd:71:de:f7:c6:93:49:c0:06:12:de:8c:69:9e:57:e0:cb:ec: 3f:04:84:b8:2f:74:dc:27:7f:2c:5b:49:5b:d8:79:ec:5d:92: 84:4b:77:b1:66:74:b6:ab:2b:e8:8a:3b:be:24:60:d1:1d:ca: f9:4b:82:42:06:12:40:ec:a5:fe:90:bc:ae:79:b1:4b:74:e4: 4b:4c:87:7d:1c:27:6f:de:a1:1b:f3:8d:b3:4c:cf:f1:a8:f8: 17:77:8f:2b:6e:5f:05:3d:89:b1:3c:15:e6:e7:79:0c:17:0b: 78:11:ab:04:72:43:09:5a:31:f2:cf:07:42:0b:47:53:0c:1d: 5c:b0:79:c5:00:eb:26:db:b2:cc:46:41:4c:82:e6:3f:cc:be: b7:55:6e:40 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqlrbdiDrIkYvWdmkWZhJOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIxMDkxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM2MGZiNWIzMzM2NjJmZDhkNjUwMGFlMjUwYWM1MmY0NDZiNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAyJoKb2zvmvFBhWy46klmzjf6YZ 1BqG2zDUTN355UUeblaACrR7mcQJfIaygaK4Pww2wqBUb9I4wqy+jZLQas/XuqNX Lr02igJrZVRQ0q6vW42Q+EIRO+nXz3M3z+ABSAVu7Dz0Y89Q1uEvMu3OKMqRd5Wp oswoa8AZTF8VSUp+rfftR332+e/2bMxOJEyvvr5Zg56Lqcq9S9tWQFQ42c5t1vYZ gAf+/LNRrChL9RAHpTzdCMS1latIRCmOn+zspbexuoEGk4iBntUqWIpthTOu/RKx iBPGr44+vGw0TbxAXBgLUtHND6ZekiuoA6dqSE4VYcQfQry4K4ttFsE45wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHY2D7WzM2Yv2NZQCuJQrFL0RrVlMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZGpZUHRiTXpaaV9ZMWxBSzRsQ3NVdlJHdFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUpiuAwQC UpnQAwQAWdU6AwQBWdU8AwQAWdXkMA0GCSqGSIb3DQEBCwUAA4IBAQA2NcZUbCnl +rQZ2HWSvG1OAwrGpFglfaBSem39jxz3UT0MP4pgg3PVz/Zsi/jjqqNeQkOW3wlG AvVNX+fnXGz/pmJEVVDmb+U5Bj0uEJLV8Iwp2JzFFB/lw5xlEb5CJ2GMzKpq4+Dd Q29b+6TNcd73xpNJwAYS3oxpnlfgy+w/BIS4L3TcJ38sW0lb2HnsXZKES3exZnS2 qyvoiju+JGDRHcr5S4JCBhJA7KX+kLyuebFLdORLTId9HCdv3qEb842zTM/xqPgX d48rbl8FPYmxPBXm53kMFwt4EasEckMJWjHyzwdCC0dTDB1csHnFAOsm27LMRkFM guY/zL63VW5A -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:47 2025 by rpki-client