This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j3UM6WsvCma-sjUGzdYBBWojMXs.roa File: j3UM6WsvCma-sjUGzdYBBWojMXs.roa (raw, json) Hash identifier: nRGbb5K1Z/C/8X/7NBNfC6ABGApdmppfTmb+7kJFXM0= Subject key identifier: 8F:75:0C:E9:6B:2F:0A:66:BE:B2:35:06:CD:D6:01:05:6A:23:31:7B Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D631A27C9C154D8FA1980C372E38B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j3UM6WsvCma-sjUGzdYBBWojMXs.roa Signing time: Mon 17 Nov 2025 10:12:39 +0000 ROA not before: Mon 17 Nov 2025 10:12:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400866 IP address blocks: 82.152.4.0/24 maxlen: 24 82.152.5.0/24 maxlen: 24 82.153.153.0/24 maxlen: 24 82.153.156.0/24 maxlen: 24 82.153.200.0/24 maxlen: 24 213.210.63.0/24 maxlen: 24 213.218.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:63:1a:27:c9:c1:54:d8:fa:19:80:c3:72:e3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f750ce96b2f0a66beb23506cdd601056a23317b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:b7:fa:f5:b1:13:84:6f:73:f5:b2:10:19: 09:6b:27:a0:f1:b5:44:6e:e6:07:26:ee:3c:ca:24: 63:38:55:20:89:3b:d9:58:4c:bb:3a:ca:c4:d7:e7: 51:d8:4d:26:ab:e1:a6:2d:11:f2:09:9f:31:00:cc: fd:2a:e1:fe:96:d3:71:b2:ec:97:03:06:cb:d4:58: 85:35:20:3e:be:56:70:0a:d5:58:0b:b4:71:b8:60: 88:63:6d:ce:05:f1:f1:23:cb:45:a7:79:34:e4:9c: 6a:0c:1b:cd:59:9c:13:e9:30:55:55:64:5f:63:d3: 0c:72:78:13:98:71:b2:43:5e:99:c3:8f:fd:23:b8: ff:8f:43:a7:51:51:c2:35:9e:a2:21:66:58:80:6f: b5:99:df:b5:29:0a:1e:b1:e5:4f:ab:b9:76:f5:4d: 64:2a:e8:f6:92:54:9b:93:b6:53:ac:28:d1:6e:45: ed:9c:7d:56:f8:9c:b4:bb:21:3c:4f:27:b6:52:6d: 1f:05:36:2d:03:c8:e8:fc:30:54:c6:df:10:27:20: d4:91:f6:61:c1:41:92:c8:69:32:2a:6f:89:ea:78: e9:80:1b:a1:88:c9:2d:8b:3d:06:60:01:2b:92:bc: 03:18:6d:87:e1:bc:80:f5:3e:a5:80:77:04:bc:f0: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:0C:E9:6B:2F:0A:66:BE:B2:35:06:CD:D6:01:05:6A:23:31:7B X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j3UM6WsvCma-sjUGzdYBBWojMXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.4.0/23 82.153.153.0/24 82.153.156.0/24 82.153.200.0/24 213.210.63.0/24 213.218.211.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ae:5d:5b:76:44:89:f7:40:44:c6:b5:6f:21:30:9b:7d:d1: 84:ae:d5:83:92:5e:a6:67:a7:58:14:92:e4:c7:95:47:a4:1d: 0a:db:6a:26:5c:d1:f7:b5:6b:35:28:54:6e:8d:14:9b:19:d9: 30:0d:df:44:15:01:44:d4:b0:b4:39:f2:54:eb:4d:fb:39:4c: 56:62:d8:db:3d:f8:b0:e2:8c:3b:c0:89:da:dc:6d:92:f1:c9: 8a:d4:a6:61:06:94:d8:de:ae:ef:61:c2:45:a8:e5:f1:16:61: 25:fe:7f:4a:fc:38:fa:0a:33:44:d7:7f:5a:81:48:cb:38:d0: 60:20:a5:d9:be:ff:3a:ef:ae:86:cb:22:7b:24:ce:f5:b9:48: 36:c1:e0:27:56:3f:a5:08:f3:ee:b3:4c:95:03:3a:94:62:e4: 85:99:54:82:86:13:89:ba:9d:16:01:1f:23:50:8a:8e:ce:06: 48:33:d6:b4:b3:bb:f2:34:04:cd:47:31:aa:02:bf:08:8e:cb: 5e:0d:f2:39:ee:82:72:7f:b8:b2:87:7a:60:04:a9:d6:b2:5c: cb:8b:3e:8d:65:77:49:b6:65:c8:89:b7:d7:a7:95:a1:d3:8b: 2b:a6:26:a9:eb:cd:19:b1:8e:65:87:5c:49:c6:ca:5b:5e:c7: bc:48:80:40 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZqRTWMaJ8nBVNj6GYDDcuOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjc1MGNlOTZiMmYwYTY2YmViMjM1MDZjZGQ2MDEwNTZhMjMzMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQS3+vWxE4Rvc/WyEBkJayeg8bVE buYHJu48yiRjOFUgiTvZWEy7OsrE1+dR2E0mq+GmLRHyCZ8xAMz9KuH+ltNxsuyX AwbL1FiFNSA+vlZwCtVYC7RxuGCIY23OBfHxI8tFp3k05JxqDBvNWZwT6TBVVWRf Y9MMcngTmHGyQ16Zw4/9I7j/j0OnUVHCNZ6iIWZYgG+1md+1KQoeseVPq7l29U1k Kuj2klSbk7ZTrCjRbkXtnH1W+Jy0uyE8Tye2Um0fBTYtA8jo/DBUxt8QJyDUkfZh wUGSyGkyKm+J6njpgBuhiMktiz0GYAErkrwDGG2H4byA9T6lgHcEvPA4rwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFI91DOlrLwpmvrI1Bs3WAQVqIzF7MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvajNVTTZXc3ZDbWEtc2pVR3pkWUJCV29qTVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBUpgEAwQA UpmZAwQAUpmcAwQAUpnIAwQA1dI/AwQA1drTMA0GCSqGSIb3DQEBCwUAA4IBAQBU rl1bdkSJ90BExrVvITCbfdGErtWDkl6mZ6dYFJLkx5VHpB0K22omXNH3tWs1KFRu jRSbGdkwDd9EFQFE1LC0OfJU6037OUxWYtjbPfiw4ow7wIna3G2S8cmK1KZhBpTY 3q7vYcJFqOXxFmEl/n9K/Dj6CjNE139agUjLONBgIKXZvv86766GyyJ7JM71uUg2 weAnVj+lCPPus0yVAzqUYuSFmVSChhOJup0WAR8jUIqOzgZIM9a0s7vyNATNRzGq Ar8IjsteDfI57oJyf7iyh3pgBKnWslzLiz6NZXdJtmXIibfXp5Wh04srpiap680Z sY5lh1xJxspbXse8SIBA -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:16 2025 by rpki-client