This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fufzInXcGAWG-ofriXDkSG8H48A.roa File: fufzInXcGAWG-ofriXDkSG8H48A.roa (raw, json) Hash identifier: 0+mPzv5Fe+OpXMtY2oXA7u0LeCoNrJMiyumFIRQV+EA= Subject key identifier: 7E:E7:F3:22:75:DC:18:05:86:FA:87:EB:89:70:E4:48:6F:07:E3:C0 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A9BEF3B8B3374D2BFCEF39E32786FFEC5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fufzInXcGAWG-ofriXDkSG8H48A.roa Signing time: Wed 19 Nov 2025 11:45:38 +0000 ROA not before: Wed 19 Nov 2025 11:45:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 77.93.133.0/24 maxlen: 24 80.240.86.0/24 maxlen: 24 81.5.189.0/24 maxlen: 24 81.168.105.0/24 maxlen: 24 82.152.28.0/24 maxlen: 24 82.152.70.0/24 maxlen: 24 82.152.176.0/24 maxlen: 24 82.153.86.0/24 maxlen: 24 82.153.203.0/24 maxlen: 24 82.153.255.0/24 maxlen: 24 89.28.234.0/24 maxlen: 24 109.176.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:ef:3b:8b:33:74:d2:bf:ce:f3:9e:32:78:6f:fe:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 19 11:45:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ee7f32275dc180586fa87eb8970e4486f07e3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:b2:31:ef:fd:6c:58:1c:51:e9:df:0f:9b: 3a:d0:95:a5:6a:77:e5:c6:6e:75:d7:f8:25:f2:93: d7:8d:7a:a4:c2:5e:5c:36:00:61:1f:c7:cf:f9:17: ec:bf:ae:62:e5:31:a1:1e:0a:09:29:62:1e:74:f4: 0c:98:dd:9b:06:6c:55:8d:15:0a:1e:6e:79:9c:05: 83:8f:17:62:21:3f:7d:fa:4a:96:4c:e7:34:85:2f: 27:02:dc:3b:74:fe:a9:9d:36:51:be:91:42:e3:47: 0d:25:bc:55:8a:7b:48:7a:a1:70:42:e5:50:7b:51: 8d:84:4e:93:61:2a:35:c4:9b:dc:2f:aa:3e:1a:5d: cb:23:ef:4d:f1:c6:9b:31:d9:d7:23:dc:04:3d:f5: 8c:6b:ea:07:7d:cf:38:aa:65:ab:a8:2b:40:be:d9: 65:5e:6a:ff:36:9e:28:64:b7:41:aa:6a:8b:1f:50: ba:5b:67:0c:d7:88:4b:ff:1e:bb:aa:1d:2d:05:a6: 12:60:b9:ec:86:04:de:af:a9:78:ca:23:73:11:75: 5d:de:d6:f2:d0:70:ea:da:e1:60:5d:42:b4:e3:2c: c3:d5:6e:29:f1:2a:9f:eb:c8:22:93:a9:11:ea:a5: 1b:ac:66:f1:13:02:f6:28:a4:e0:12:21:2e:f3:ee: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:F3:22:75:DC:18:05:86:FA:87:EB:89:70:E4:48:6F:07:E3:C0 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fufzInXcGAWG-ofriXDkSG8H48A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.133.0/24 80.240.86.0/24 81.5.189.0/24 81.168.105.0/24 82.152.28.0/24 82.152.70.0/24 82.152.176.0/24 82.153.86.0/24 82.153.203.0/24 82.153.255.0/24 89.28.234.0/24 109.176.20.0/24 Signature Algorithm: sha256WithRSAEncryption 06:1d:c9:4c:17:c6:b5:ac:53:e2:9d:9c:76:ab:cc:59:01:87: 18:dd:b8:e7:6e:42:a2:d8:54:3b:b9:62:f8:cb:92:36:16:5f: 2f:5f:35:04:f6:71:44:d6:d4:a9:12:ff:4e:ee:66:71:38:91: c5:df:7b:24:6c:2b:fa:1e:c7:fa:22:2c:4f:2d:0e:46:e6:56: f4:a6:a5:88:5b:86:ef:96:4e:de:85:35:43:d1:1b:dd:cb:92: 7c:08:d9:7b:c7:8b:d8:83:2f:56:fb:a0:c7:b0:c2:f2:91:85: d9:02:5e:ba:91:58:85:3e:eb:02:35:eb:58:32:4b:4d:fe:cc: 71:e5:ad:dd:55:fc:42:9a:4e:09:94:c0:fb:5c:35:f9:c2:78: 28:6f:c1:77:0b:8d:e4:db:9c:33:5d:d4:f0:3e:26:e7:83:c2: 54:22:f8:5f:aa:78:3a:90:60:e3:ec:b2:3b:e4:6a:de:13:e5: 9b:80:75:ce:92:14:8f:35:56:e8:ec:f5:ae:4a:e8:6c:2b:7a: 5d:fe:24:bc:91:cc:7d:60:6f:69:62:c7:56:3c:69:98:ff:8e: f2:4c:01:20:07:16:74:87:ca:1f:51:9d:33:a4:7b:f9:22:8c: 5f:f1:7e:c1:49:c8:f1:f3:83:8e:57:de:3f:aa:16:38:a6:4c: f2:70:0b:49 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZqb7zuLM3TSv87znjJ4b/7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE5MTE0NTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWU3ZjMyMjc1ZGMxODA1ODZmYTg3ZWI4OTcwZTQ0ODZmMDdlM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68uyMe/9bFgcUenfD5s60JWlanfl xm511/gl8pPXjXqkwl5cNgBhH8fP+Rfsv65i5TGhHgoJKWIedPQMmN2bBmxVjRUK Hm55nAWDjxdiIT99+kqWTOc0hS8nAtw7dP6pnTZRvpFC40cNJbxVintIeqFwQuVQ e1GNhE6TYSo1xJvcL6o+Gl3LI+9N8cabMdnXI9wEPfWMa+oHfc84qmWrqCtAvtll Xmr/Np4oZLdBqmqLH1C6W2cM14hL/x67qh0tBaYSYLnshgTer6l4yiNzEXVd3tby 0HDq2uFgXUK04yzD1W4p8Sqf68gik6kR6qUbrGbxEwL2KKTgEiEu8+5CEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH7n8yJ13BgFhvqH64lw5EhvB+PAMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZnVmekluWGNHQVdHLW9mcmlYRGtTRzhINDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQATV2FAwQA UPBWAwQAUQW9AwQAUahpAwQAUpgcAwQAUphGAwQAUpiwAwQAUplWAwQAUpnLAwQA Upn/AwQAWRzqAwQAbbAUMA0GCSqGSIb3DQEBCwUAA4IBAQAGHclMF8a1rFPinZx2 q8xZAYcY3bjnbkKi2FQ7uWL4y5I2Fl8vXzUE9nFE1tSpEv9O7mZxOJHF33skbCv6 Hsf6IixPLQ5G5lb0pqWIW4bvlk7ehTVD0Rvdy5J8CNl7x4vYgy9W+6DHsMLykYXZ Al66kViFPusCNetYMktN/sxx5a3dVfxCmk4JlMD7XDX5wngob8F3C43k25wzXdTw Pibng8JUIvhfqng6kGDj7LI75GreE+WbgHXOkhSPNVbo7PWuSuhsK3pd/iS8kcx9 YG9pYsdWPGmY/47yTAEgBxZ0h8ofUZ0zpHv5Ioxf8X7BScjx84OOV94/qhY4pkzy cAtJ -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:52 2025 by rpki-client