This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eq0VsqkqWe7KJgp9-7Xv9gdvppo.roa File: eq0VsqkqWe7KJgp9-7Xv9gdvppo.roa (raw, json) Hash identifier: eTT0T7G7UcWbpvD990TP3oxLMUlpWLP8FgrGVFTzRPg= Subject key identifier: 7A:AD:15:B2:A9:2A:59:EE:CA:26:0A:7D:FB:B5:EF:F6:07:6F:A6:9A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B074041CBF4A8F32386DC5F19AAF41D77 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eq0VsqkqWe7KJgp9-7Xv9gdvppo.roa Signing time: Wed 10 Dec 2025 07:53:30 +0000 ROA not before: Wed 10 Dec 2025 07:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 82.152.8.0/24 maxlen: 24 82.152.57.0/24 maxlen: 24 82.152.58.0/24 maxlen: 24 82.152.73.0/24 maxlen: 24 82.152.75.0/24 maxlen: 24 82.152.98.0/24 maxlen: 24 82.152.109.0/24 maxlen: 24 82.152.226.0/24 maxlen: 24 82.152.240.0/24 maxlen: 24 82.152.243.0/24 maxlen: 24 82.153.205.0/24 maxlen: 24 82.153.217.0/24 maxlen: 24 82.163.23.0/24 maxlen: 24 109.176.40.0/21 maxlen: 24 109.176.48.0/21 maxlen: 24 109.176.153.0/24 maxlen: 24 109.176.213.0/24 maxlen: 24 212.38.79.0/24 maxlen: 24 213.130.130.0/24 maxlen: 24 213.130.149.0/24 maxlen: 24 213.130.156.0/24 maxlen: 24 213.210.54.0/24 maxlen: 24 213.218.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:40:41:cb:f4:a8:f3:23:86:dc:5f:19:aa:f4:1d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 10 07:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7aad15b2a92a59eeca260a7dfbb5eff6076fa69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:b9:27:8d:dd:2a:ae:58:cf:a9:26:34:b8: 2e:0c:66:04:34:7f:bc:17:27:89:e0:5a:9a:4b:32: 0b:47:d7:ae:08:f0:b8:5f:63:c7:21:b4:37:4a:ed: 2d:76:bc:3e:78:aa:3b:45:d6:24:ee:ff:7d:67:2f: 78:95:c6:05:14:ab:5b:ec:85:f5:e6:b8:ce:ba:17: ce:30:f2:d9:58:b4:99:aa:17:ab:83:19:49:ad:2a: 71:6f:61:35:9a:d1:4e:91:3d:22:40:8b:8f:ac:c7: b9:7d:75:06:02:14:d1:b3:42:b0:f9:c3:24:2d:0a: 78:c0:64:69:19:04:85:04:67:65:c7:71:bc:40:dc: 0e:cf:2a:c4:a4:d5:96:88:f5:dd:0f:5c:f4:ee:a2: 6a:43:60:59:78:76:d6:f8:bc:26:2b:91:b8:8f:88: 7b:3a:07:93:f5:6c:b6:7c:40:30:e6:d2:fb:f0:31: 84:75:de:4e:1a:df:db:51:1e:9a:49:db:b8:9e:33: ca:b4:53:e5:01:39:f4:df:32:58:7b:73:c7:39:35: 65:b5:1c:3e:26:4c:de:76:05:72:a5:3f:8f:be:77: 6b:47:77:d0:ec:6e:d4:73:05:44:2b:7c:83:bb:c6: f9:7a:07:66:77:cf:7a:25:90:16:d8:fe:d0:5c:cc: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:15:B2:A9:2A:59:EE:CA:26:0A:7D:FB:B5:EF:F6:07:6F:A6:9A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eq0VsqkqWe7KJgp9-7Xv9gdvppo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.8.0/24 82.152.57.0-82.152.58.255 82.152.73.0/24 82.152.75.0/24 82.152.98.0/24 82.152.109.0/24 82.152.226.0/24 82.152.240.0/24 82.152.243.0/24 82.153.205.0/24 82.153.217.0/24 82.163.23.0/24 109.176.40.0-109.176.55.255 109.176.153.0/24 109.176.213.0/24 212.38.79.0/24 213.130.130.0/24 213.130.149.0/24 213.130.156.0/24 213.210.54.0/24 213.218.214.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:c8:ff:b4:5f:97:bd:21:27:09:55:f0:0f:f9:50:65:9f:3d: 4c:23:83:3d:87:46:bd:a9:b3:b4:0e:91:83:f5:e2:93:b4:d1: 16:60:af:ba:78:cd:94:2f:99:27:76:f0:0a:2d:30:58:fb:bb: 1e:35:94:8e:59:2a:5d:5d:12:42:3f:6f:34:f4:85:15:20:70: 02:53:0f:85:fd:b1:6b:c6:cf:94:81:39:94:6e:27:72:40:9c: 77:14:57:ab:ac:58:4a:47:c5:cc:57:71:4e:16:b8:3f:17:97: 47:be:26:47:ad:7c:ca:4e:d5:e6:f6:26:95:34:48:81:2d:0b: f2:13:1a:96:78:fc:10:65:84:09:41:4a:c6:ab:a5:4a:b0:a6: a5:40:e0:d5:c5:45:d0:81:9d:34:9a:72:05:76:9a:29:54:e1: 38:d4:6a:0a:60:1a:c5:0b:58:16:aa:f6:03:48:7c:1e:90:4f: 9a:44:e9:ba:d1:ed:0e:b5:d9:0c:72:e2:97:89:1e:76:18:9f: 62:62:20:53:e1:56:1a:eb:4b:6c:d9:a2:89:e6:24:49:a3:94: e4:50:5d:9c:2b:f9:d8:8e:b8:2d:a7:bf:c0:08:d9:9b:82:7a: 4f:0d:34:5c:31:f1:cc:a3:c8:0c:fa:6a:c4:b0:4b:04:5c:c6: 58:04:6d:99 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZsHQEHL9KjzI4bcXxmq9B13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjEwMDc1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWFkMTViMmE5MmE1OWVlY2EyNjBhN2RmYmI1ZWZmNjA3NmZhNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30y5J43dKq5Yz6kmNLguDGYENH+8 FyeJ4FqaSzILR9euCPC4X2PHIbQ3Su0tdrw+eKo7RdYk7v99Zy94lcYFFKtb7IX1 5rjOuhfOMPLZWLSZqhergxlJrSpxb2E1mtFOkT0iQIuPrMe5fXUGAhTRs0Kw+cMk LQp4wGRpGQSFBGdlx3G8QNwOzyrEpNWWiPXdD1z07qJqQ2BZeHbW+LwmK5G4j4h7 OgeT9Wy2fEAw5tL78DGEdd5OGt/bUR6aSdu4njPKtFPlATn03zJYe3PHOTVltRw+ JkzedgVypT+PvndrR3fQ7G7UcwVEK3yDu8b5egdmd896JZAW2P7QXMyDcQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFHqtFbKpKlnuyiYKffu17/YHb6aaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZXEwVnNxa3FXZTdLSmdwOS03WHY5Z2R2cHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBABS mAgwDAMEAFKYOQMEAFKYOgMEAFKYSQMEAFKYSwMEAFKYYgMEAFKYbQMEAFKY4gME AFKY8AMEAFKY8wMEAFKZzQMEAFKZ2QMEAFKjFzAMAwQDbbAoAwQDbbAwAwQAbbCZ AwQAbbDVAwQA1CZPAwQA1YKCAwQA1YKVAwQA1YKcAwQA1dI2AwQA1drWMA0GCSqG SIb3DQEBCwUAA4IBAQCMyP+0X5e9IScJVfAP+VBlnz1MI4M9h0a9qbO0DpGD9eKT tNEWYK+6eM2UL5kndvAKLTBY+7seNZSOWSpdXRJCP2809IUVIHACUw+F/bFrxs+U gTmUbidyQJx3FFerrFhKR8XMV3FOFrg/F5dHviZHrXzKTtXm9iaVNEiBLQvyExqW ePwQZYQJQUrGq6VKsKalQODVxUXQgZ00mnIFdpopVOE41GoKYBrFC1gWqvYDSHwe kE+aROm60e0OtdkMcuKXiR52GJ9iYiBT4VYa60ts2aKJ5iRJo5TkUF2cK/nYjrgt p7/ACNmbgnpPDTRcMfHMo8gM+mrEsEsEXMZYBG2Z -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:05 2025 by rpki-client