This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5cBWodrlqUv3ZShKCnu4Imb3aU.roa File: i5cBWodrlqUv3ZShKCnu4Imb3aU.roa (raw, json) Hash identifier: s00IgR/XU6kKxQC6dZ/Xxv8bYifUKl2wEiTrRVtZ/qE= Subject key identifier: 8B:97:01:5A:87:6B:96:A5:2F:DD:94:A1:28:29:EE:E0:89:9B:DD:A5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA6963FB4A06A5580D1950717842C0222 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5cBWodrlqUv3ZShKCnu4Imb3aU.roa Signing time: Fri 21 Nov 2025 13:24:15 +0000 ROA not before: Fri 21 Nov 2025 13:24:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 77.93.133.0/24 maxlen: 24 81.168.65.0/24 maxlen: 24 81.168.87.0/24 maxlen: 24 81.168.96.0/24 maxlen: 24 82.152.70.0/24 maxlen: 24 82.152.92.0/24 maxlen: 24 82.152.118.0/24 maxlen: 24 82.152.122.0/24 maxlen: 24 82.153.42.0/24 maxlen: 24 82.153.53.0/24 maxlen: 24 82.153.86.0/24 maxlen: 24 82.153.91.0/24 maxlen: 24 82.153.255.0/24 maxlen: 24 82.163.24.0/24 maxlen: 24 109.176.20.0/24 maxlen: 24 217.144.145.0/24 maxlen: 24 217.144.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:96:3f:b4:a0:6a:55:80:d1:95:07:17:84:2c:02:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 21 13:24:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b97015a876b96a52fdd94a12829eee0899bdda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:ca:e4:62:f7:ae:0b:bb:34:00:25:ed:0f: ef:18:6f:a6:df:e3:c5:3a:22:e8:c2:e8:b6:03:c4: d9:33:26:8f:02:66:7a:35:06:dc:95:46:ba:e7:23: 24:73:31:7a:8b:24:61:84:99:90:3f:ce:24:61:b1: bd:8d:da:2a:7c:14:eb:45:3f:4a:cf:29:80:6a:3d: 86:76:fc:08:a0:d4:1a:6a:d2:c4:4b:4f:44:90:f0: 27:39:33:83:24:37:f4:7c:d2:29:bd:9d:4c:69:ea: 85:8e:9f:af:4d:3a:ac:dc:d9:d3:6f:67:9c:68:56: 0a:a6:d6:31:40:ee:2a:b3:ac:92:9a:42:8b:44:38: ab:91:0f:5e:a6:d2:59:5c:6c:9f:42:45:7d:98:02: 79:59:ae:99:43:4b:77:2e:09:c4:d6:2c:fe:2d:a1: 6c:bf:eb:27:71:58:b5:a1:2e:4f:82:18:39:01:99: 30:f7:31:a6:e0:d7:6a:96:ce:28:a9:05:66:1c:d9: 76:af:a8:d9:13:2f:59:27:19:84:b4:b4:7c:28:34: a9:3c:21:c0:c1:8d:68:cd:82:85:8e:ba:b2:d7:8f: 01:35:23:69:a1:6b:57:d5:a0:5b:f9:ad:10:e9:03: 50:a4:f4:9e:49:3c:68:65:6e:8e:6e:1a:cc:79:35: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:97:01:5A:87:6B:96:A5:2F:DD:94:A1:28:29:EE:E0:89:9B:DD:A5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5cBWodrlqUv3ZShKCnu4Imb3aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.133.0/24 81.168.65.0/24 81.168.87.0/24 81.168.96.0/24 82.152.70.0/24 82.152.92.0/24 82.152.118.0/24 82.152.122.0/24 82.153.42.0/24 82.153.53.0/24 82.153.86.0/24 82.153.91.0/24 82.153.255.0/24 82.163.24.0/24 109.176.20.0/24 217.144.145.0/24 217.144.156.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:45:3c:99:c9:fa:6b:dc:a3:3b:30:de:78:4f:56:e4:6e:97: f9:c2:af:38:43:31:b5:cd:ba:68:da:9e:b1:17:d1:a1:c3:e1: fd:c3:64:b7:66:5f:0b:f8:cf:31:fa:3c:2e:4f:7a:49:89:27: b4:47:be:3f:bd:1f:ec:9d:5a:3b:12:9e:30:0b:19:45:75:d5: f3:b3:5c:d6:5b:ac:c6:ab:ec:7a:86:0c:ad:ee:ce:6c:8b:e4: e5:72:a0:07:b0:b4:f7:c1:a7:07:11:69:da:3c:92:3f:8a:0e: 10:67:82:9c:38:ab:8e:2f:b9:0c:21:22:bf:f4:40:e2:3e:d6: f9:59:3b:8a:18:92:21:e2:2c:6a:de:46:f5:89:1a:8b:85:64: 03:90:ec:8e:5c:16:89:f6:49:87:c9:e3:32:a8:c5:75:2d:67: 7b:d4:4e:a3:4c:79:d5:b1:5c:df:ea:c5:54:78:08:c1:44:64: 90:17:13:94:28:9e:1e:51:5b:5d:1c:38:9a:37:ac:54:aa:c9: 5b:7c:2a:cc:7b:44:e2:43:d3:2b:3b:db:b5:d9:13:94:96:ef: 77:0a:74:b9:a2:ed:ba:a7:45:a2:25:2b:e2:6d:04:00:d4:3f: 8b:86:94:af:3c:12:00:24:e6:6f:93:39:18:ce:35:65:fa:dc: 3c:f5:e0:18 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZqmlj+0oGpVgNGVBxeELAIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIxMTMyNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjk3MDE1YTg3NmI5NmE1MmZkZDk0YTEyODI5ZWVlMDg5OWJkZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0rK5GL3rgu7NAAl7Q/vGG+m3+PF OiLowui2A8TZMyaPAmZ6NQbclUa65yMkczF6iyRhhJmQP84kYbG9jdoqfBTrRT9K zymAaj2GdvwIoNQaatLES09EkPAnOTODJDf0fNIpvZ1MaeqFjp+vTTqs3NnTb2ec aFYKptYxQO4qs6ySmkKLRDirkQ9eptJZXGyfQkV9mAJ5Wa6ZQ0t3LgnE1iz+LaFs v+sncVi1oS5Pghg5AZkw9zGm4Ndqls4oqQVmHNl2r6jZEy9ZJxmEtLR8KDSpPCHA wY1ozYKFjrqy148BNSNpoWtX1aBb+a0Q6QNQpPSeSTxoZW6ObhrMeTXItwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFIuXAVqHa5alL92UoSgp7uCJm92lMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaTVjQldvZHJscVV2M1pTaEtDbnU0SW1iM2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQATV2FAwQA UahBAwQAUahXAwQAUahgAwQAUphGAwQAUphcAwQAUph2AwQAUph6AwQAUpkqAwQA Upk1AwQAUplWAwQAUplbAwQAUpn/AwQAUqMYAwQAbbAUAwQA2ZCRAwQA2ZCcMA0G CSqGSIb3DQEBCwUAA4IBAQCaRTyZyfpr3KM7MN54T1bkbpf5wq84QzG1zbpo2p6x F9Ghw+H9w2S3Zl8L+M8x+jwuT3pJiSe0R74/vR/snVo7Ep4wCxlFddXzs1zWW6zG q+x6hgyt7s5si+TlcqAHsLT3wacHEWnaPJI/ig4QZ4KcOKuOL7kMISK/9EDiPtb5 WTuKGJIh4ixq3kb1iRqLhWQDkOyOXBaJ9kmHyeMyqMV1LWd71E6jTHnVsVzf6sVU eAjBRGSQFxOUKJ4eUVtdHDiaN6xUqslbfCrMe0TiQ9MrO9u12ROUlu93CnS5ou26 p0WiJSvibQQA1D+LhpSvPBIAJOZvkzkYzjVl+tw89eAY -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:54 2025 by rpki-client