This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fDvnvpoz7AEBKNhw2wz9S-OqV_w.roa File: fDvnvpoz7AEBKNhw2wz9S-OqV_w.roa (raw, json) Hash identifier: baCwc41lWYyVtLk0XQnk3AvTPdwkxFqzpNHJZXMkyxg= Subject key identifier: 7C:3B:E7:BE:9A:33:EC:01:01:28:D8:70:DB:0C:FD:4B:E3:AA:57:FC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ABAF7D8A400FE39209950E123960A3AC6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fDvnvpoz7AEBKNhw2wz9S-OqV_w.roa Signing time: Tue 25 Nov 2025 12:23:16 +0000 ROA not before: Tue 25 Nov 2025 12:23:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 77.93.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:f7:d8:a4:00:fe:39:20:99:50:e1:23:96:0a:3a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 25 12:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c3be7be9a33ec010128d870db0cfd4be3aa57fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:87:e2:87:c6:20:00:d9:19:ee:c1:c3:cc: 20:83:c8:23:8d:aa:0a:a2:d3:33:e8:e5:33:78:a2: 4d:75:45:31:bc:d7:27:e7:18:e2:8c:ac:5f:56:af: a4:17:b8:c7:7e:d6:d1:73:79:0b:67:2b:d1:63:96: 96:e9:5f:a6:09:61:f6:8f:88:48:70:ad:bb:fb:af: 42:bf:5a:0f:12:63:c6:cb:45:6e:e8:8f:4a:e4:e5: b6:f9:82:ef:b5:be:97:b0:45:2f:7f:99:35:6f:83: 7d:b5:22:bf:42:42:c5:91:29:a6:57:f6:31:76:af: 62:46:3a:37:13:78:7e:3a:03:92:e3:f8:8c:9b:90: a2:0c:5d:8f:1d:98:96:99:a3:98:8d:2e:b2:d7:65: 61:58:96:ae:6c:b3:c7:2d:36:46:15:23:99:c4:a1: be:69:1c:13:b9:3e:96:e3:ef:39:d1:a1:b1:47:74: 78:b5:76:e6:e7:cc:e0:df:54:3f:ac:14:5a:61:70: 38:f8:d4:41:0a:04:8f:80:ab:01:eb:a8:a5:fb:78: 2c:11:b7:50:b8:1d:78:fb:82:b4:bc:b6:b6:0a:e2: 9c:1a:ef:7f:0d:8b:b1:93:9d:a7:1e:83:b9:2b:d9: 19:f2:e4:59:ab:63:dd:3c:54:b1:04:7e:30:1f:dd: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:E7:BE:9A:33:EC:01:01:28:D8:70:DB:0C:FD:4B:E3:AA:57:FC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fDvnvpoz7AEBKNhw2wz9S-OqV_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.143.0/24 Signature Algorithm: sha256WithRSAEncryption 79:cd:13:3d:09:04:d8:db:8f:48:7a:94:51:94:1b:d1:2e:16: f8:ca:76:54:dc:84:88:3d:d1:57:b2:1b:23:73:ae:2b:fd:3c: 60:81:be:d3:8a:df:8e:11:1b:ae:d7:96:7d:2d:23:6b:e9:ae: ce:23:ea:78:10:e4:96:83:b5:27:44:f2:6e:cd:86:d0:32:c6: bd:7d:58:07:c3:cc:ee:d7:52:b8:da:47:26:0b:1f:82:3f:37: b5:05:d1:57:77:b4:b1:8b:90:b6:e9:45:ff:00:9b:23:b2:22: 95:cd:54:c2:18:a3:d0:7d:0b:c3:c9:a2:08:be:e6:ec:bb:e0: 00:5c:a9:64:b0:8c:02:6a:d1:92:f3:f2:40:e5:74:f4:b3:3d: 6d:3d:35:8d:d9:d8:33:91:44:3e:b8:3e:d5:fe:fb:09:54:27: 9d:0e:7e:31:d0:c5:b4:8b:c3:75:40:c7:43:1f:a5:c8:68:5b: 8e:50:54:af:29:81:7e:71:77:a4:49:6b:3a:7e:30:18:b5:37: fe:85:d2:0b:3f:9a:25:2a:aa:0d:3d:19:3a:dd:42:3c:32:1f: c7:69:b8:3e:2c:f0:1a:d7:a7:76:a7:9a:69:d2:95:70:41:40: 0e:60:8d:cb:61:3e:f9:83:86:0e:fc:ab:1a:9b:fb:60:fb:6e: d8:2d:d5:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq699ikAP45IJlQ4SOWCjrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI1MTIyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzNiZTdiZTlhMzNlYzAxMDEyOGQ4NzBkYjBjZmQ0YmUzYWE1N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GaH4ofGIADZGe7Bw8wgg8gjjaoK otMz6OUzeKJNdUUxvNcn5xjijKxfVq+kF7jHftbRc3kLZyvRY5aW6V+mCWH2j4hI cK27+69Cv1oPEmPGy0Vu6I9K5OW2+YLvtb6XsEUvf5k1b4N9tSK/QkLFkSmmV/Yx dq9iRjo3E3h+OgOS4/iMm5CiDF2PHZiWmaOYjS6y12VhWJaubLPHLTZGFSOZxKG+ aRwTuT6W4+850aGxR3R4tXbm58zg31Q/rBRaYXA4+NRBCgSPgKsB66il+3gsEbdQ uB14+4K0vLa2CuKcGu9/DYuxk52nHoO5K9kZ8uRZq2PdPFSxBH4wH91BWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHw7576aM+wBASjYcNsM/Uvjqlf8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZkR2bnZwb3o3QUVCS05odzJ3ejlTLU9xVl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2PMA0G CSqGSIb3DQEBCwUAA4IBAQB5zRM9CQTY249IepRRlBvRLhb4ynZU3ISIPdFXshsj c64r/Txggb7Tit+OERuu15Z9LSNr6a7OI+p4EOSWg7UnRPJuzYbQMsa9fVgHw8zu 11K42kcmCx+CPze1BdFXd7Sxi5C26UX/AJsjsiKVzVTCGKPQfQvDyaIIvubsu+AA XKlksIwCatGS8/JA5XT0sz1tPTWN2dgzkUQ+uD7V/vsJVCedDn4x0MW0i8N1QMdD H6XIaFuOUFSvKYF+cXekSWs6fjAYtTf+hdILP5olKqoNPRk63UI8Mh/Habg+LPAa 16d2p5pp0pVwQUAOYI3LYT75g4YO/Ksam/tg+27YLdVt -----END CERTIFICATE-----Generated at Sat Dec 6 06:43:03 2025 by rpki-client