This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gxQOnRJu6q2gFmR0XZXQTM3X1ow.roa File: gxQOnRJu6q2gFmR0XZXQTM3X1ow.roa (raw, json) Hash identifier: DyDd65iHkevhb13szObFjC/VXVKW+rhUdkgnn/mUPgU= Subject key identifier: 83:14:0E:9D:12:6E:EA:AD:A0:16:64:74:5D:95:D0:4C:CD:D7:D6:8C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A6D532C3D60EFD8B60C30D2A775D01EA4 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gxQOnRJu6q2gFmR0XZXQTM3X1ow.roa Signing time: Mon 10 Nov 2025 10:32:38 +0000 ROA not before: Mon 10 Nov 2025 10:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 82.152.8.0/24 maxlen: 24 82.152.57.0/24 maxlen: 24 82.152.58.0/24 maxlen: 24 82.152.73.0/24 maxlen: 24 82.152.75.0/24 maxlen: 24 82.152.98.0/24 maxlen: 24 82.152.109.0/24 maxlen: 24 82.152.226.0/24 maxlen: 24 82.152.240.0/24 maxlen: 24 82.152.243.0/24 maxlen: 24 82.153.205.0/24 maxlen: 24 82.153.217.0/24 maxlen: 24 82.163.23.0/24 maxlen: 24 89.213.164.0/24 maxlen: 24 109.176.40.0/21 maxlen: 24 109.176.48.0/21 maxlen: 24 109.176.153.0/24 maxlen: 24 212.38.79.0/24 maxlen: 24 213.130.130.0/24 maxlen: 24 213.130.149.0/24 maxlen: 24 213.210.54.0/24 maxlen: 24 213.218.214.0/24 maxlen: 24 213.218.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:53:2c:3d:60:ef:d8:b6:0c:30:d2:a7:75:d0:1e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 10 10:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83140e9d126eeaada01664745d95d04ccdd7d68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:24:ac:59:0f:1a:61:d7:86:13:ac:49:bc: 94:56:e1:64:57:7c:ab:83:99:de:57:1e:02:41:4d: aa:07:dd:ab:fa:18:a6:ad:e5:76:71:87:64:9d:5f: 01:ab:79:6a:22:87:48:57:60:d5:b6:da:1e:4b:a1: cf:2e:05:99:56:25:19:ab:71:6c:ed:6e:c4:35:c4: 71:5b:32:93:aa:8d:e1:a3:6d:65:2c:51:dc:af:19: 10:93:05:7f:17:80:2b:26:d4:68:cc:ed:70:4f:5e: ff:b9:d9:94:8c:8e:30:41:66:a0:c7:33:f9:ee:f3: f1:fa:85:67:b5:4f:44:31:35:34:4e:a9:c8:4e:69: 9e:76:12:30:a4:30:42:25:e2:4d:18:08:f4:12:3b: 0c:9e:c0:32:0e:fe:82:fc:02:1f:13:6b:46:cc:da: 24:c3:3f:63:1c:5d:c8:53:4a:1f:a8:7f:a1:fe:ca: df:f5:6f:15:8e:aa:2a:da:94:b2:30:c3:db:91:d4: 7a:cd:cc:bb:4e:b9:ba:7b:1b:4c:b4:da:db:86:9b: 10:27:a8:0d:cf:a3:f9:de:ef:02:d4:80:fc:4a:08: 18:e0:ab:77:b0:39:57:c4:07:6f:5b:a4:7b:66:bb: 04:22:2d:58:63:92:af:71:fc:fc:e1:14:86:a3:84: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:0E:9D:12:6E:EA:AD:A0:16:64:74:5D:95:D0:4C:CD:D7:D6:8C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gxQOnRJu6q2gFmR0XZXQTM3X1ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.8.0/24 82.152.57.0-82.152.58.255 82.152.73.0/24 82.152.75.0/24 82.152.98.0/24 82.152.109.0/24 82.152.226.0/24 82.152.240.0/24 82.152.243.0/24 82.153.205.0/24 82.153.217.0/24 82.163.23.0/24 89.213.164.0/24 109.176.40.0-109.176.55.255 109.176.153.0/24 212.38.79.0/24 213.130.130.0/24 213.130.149.0/24 213.210.54.0/24 213.218.214.0/24 213.218.234.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0c:81:69:ec:88:8f:fa:9b:0e:b2:eb:d9:a0:21:ef:86:a0: eb:ed:6f:66:e3:78:22:e3:12:06:e0:cc:9b:97:f7:15:0c:88: 4e:1d:5b:2b:b5:e7:76:a9:be:37:28:de:5c:03:1a:c3:8e:f0: 6d:34:ae:2d:6f:8c:a9:68:6c:70:0f:6c:38:99:5c:f3:4d:41: cb:ff:4c:87:d6:e8:83:81:c2:64:20:64:d9:e4:ec:a7:f0:e1: 2f:87:88:13:38:14:c5:b6:45:28:7c:96:54:d0:1e:0c:36:84: ac:bb:49:fd:0c:7a:8b:a9:23:8c:83:96:0d:d8:bb:4a:3d:74: 81:2d:17:c7:62:38:f1:86:83:58:c9:b6:f2:0a:28:15:7a:25: 27:c8:65:e1:86:ad:ae:1d:a3:ca:1f:d3:60:dc:f9:83:47:1b: 37:98:31:9f:92:65:d3:9e:54:97:e2:e8:07:cc:e1:5d:ea:47: 1d:f9:3f:d5:ea:32:bf:27:86:11:f2:ac:6c:61:90:c2:b2:e7: 4a:d8:e9:04:a7:60:78:cf:13:10:1c:69:73:92:11:a0:fe:17: ae:b2:ab:20:9f:2f:86:a4:c4:74:c3:e4:28:1a:4d:e7:3f:5c: b4:60:62:9f:dd:a0:ac:18:bb:7d:b7:82:ef:fb:53:8c:1c:85: 55:ee:b0:f4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZptUyw9YO/Ytgww0qd10B6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEwMTAzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzE0MGU5ZDEyNmVlYWFkYTAxNjY0NzQ1ZDk1ZDA0Y2NkZDdkNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTAkrFkPGmHXhhOsSbyUVuFkV3yr g5neVx4CQU2qB92r+himreV2cYdknV8Bq3lqIodIV2DVttoeS6HPLgWZViUZq3Fs 7W7ENcRxWzKTqo3ho21lLFHcrxkQkwV/F4ArJtRozO1wT17/udmUjI4wQWagxzP5 7vPx+oVntU9EMTU0TqnITmmedhIwpDBCJeJNGAj0EjsMnsAyDv6C/AIfE2tGzNok wz9jHF3IU0ofqH+h/srf9W8Vjqoq2pSyMMPbkdR6zcy7Trm6extMtNrbhpsQJ6gN z6P53u8C1ID8SggY4Kt3sDlXxAdvW6R7ZrsEIi1YY5Kvcfz84RSGo4TNwQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFIMUDp0SbuqtoBZkdF2V0EzN19aMMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZ3hRT25SSnU2cTJnRm1SMFhaWFFUTTNYMW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBABS mAgwDAMEAFKYOQMEAFKYOgMEAFKYSQMEAFKYSwMEAFKYYgMEAFKYbQMEAFKY4gME AFKY8AMEAFKY8wMEAFKZzQMEAFKZ2QMEAFKjFwMEAFnVpDAMAwQDbbAoAwQDbbAw AwQAbbCZAwQA1CZPAwQA1YKCAwQA1YKVAwQA1dI2AwQA1drWAwQA1drqMA0GCSqG SIb3DQEBCwUAA4IBAQCODIFp7IiP+psOsuvZoCHvhqDr7W9m43gi4xIG4Mybl/cV DIhOHVsrted2qb43KN5cAxrDjvBtNK4tb4ypaGxwD2w4mVzzTUHL/0yH1uiDgcJk IGTZ5Oyn8OEvh4gTOBTFtkUofJZU0B4MNoSsu0n9DHqLqSOMg5YN2LtKPXSBLRfH YjjxhoNYybbyCigVeiUnyGXhhq2uHaPKH9Ng3PmDRxs3mDGfkmXTnlSX4ugHzOFd 6kcd+T/V6jK/J4YR8qxsYZDCsudK2OkEp2B4zxMQHGlzkhGg/heusqsgny+GpMR0 w+QoGk3nP1y0YGKf3aCsGLt9t4Lv+1OMHIVV7rD0 -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:51 2025 by rpki-client