This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltvOcZ7RumS-eNivj5v9rTP85Vw.roa File: ltvOcZ7RumS-eNivj5v9rTP85Vw.roa (raw, json) Hash identifier: HcHI/7p6sNduW1XodPrUnGPV6iemh0hqBZw051iwIgw= Subject key identifier: 96:DB:CE:71:9E:D1:BA:64:BE:78:D8:AF:8F:9B:FD:AD:33:FC:E5:5C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD9552FACE6392D292D394590C583D465 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltvOcZ7RumS-eNivj5v9rTP85Vw.roa Signing time: Mon 01 Dec 2025 09:53:49 +0000 ROA not before: Mon 01 Dec 2025 09:53:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61112 IP address blocks: 82.152.90.0/23 maxlen: 24 82.153.65.0/24 maxlen: 24 82.153.135.0/24 maxlen: 24 82.163.16.0/24 maxlen: 24 213.218.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:2f:ac:e6:39:2d:29:2d:39:45:90:c5:83:d4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96dbce719ed1ba64be78d8af8f9bfdad33fce55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:22:71:de:58:64:15:ab:71:fc:bf:1c:49: 9e:15:17:df:48:37:e4:92:6a:34:fc:6e:6e:0b:8a: 65:35:b1:4a:e8:9a:bd:38:9d:c8:40:68:f3:08:da: 83:07:a8:9d:43:56:16:2d:fe:31:d4:26:54:60:35: 07:fc:89:59:ca:1a:5c:e9:d5:39:21:c7:a5:c9:42: 98:c7:b2:8e:a5:ef:82:b5:6b:63:58:4d:88:77:de: da:a9:da:af:27:6d:91:27:00:5e:86:76:8a:63:d2: 5a:09:79:ef:fa:cb:d1:12:b0:62:2f:b3:17:64:f7: 01:d2:a6:7a:f0:41:1c:4b:2d:a9:2c:a6:d7:2b:18: 6f:b3:7b:b2:2d:36:4e:80:95:d7:7a:7b:0d:1a:16: 92:6c:6f:20:30:3e:b5:96:5f:3b:da:22:84:3b:f7: ef:85:52:fd:41:b5:57:81:a7:37:3e:34:c6:e9:ec: da:fa:35:08:1d:af:3b:11:4e:fe:e6:dd:3b:e1:cf: 45:b4:ae:e8:32:b1:5e:dd:81:66:db:17:fe:03:46: fa:61:b5:87:1d:05:55:e8:fa:10:1b:66:8f:ed:41: d0:ae:25:29:ee:91:14:52:d8:08:e5:4a:b0:a1:95: a0:f3:b8:04:e5:d3:77:50:f3:75:f4:2d:7e:d7:c6: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DB:CE:71:9E:D1:BA:64:BE:78:D8:AF:8F:9B:FD:AD:33:FC:E5:5C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltvOcZ7RumS-eNivj5v9rTP85Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.90.0/23 82.153.65.0/24 82.153.135.0/24 82.163.16.0/24 213.218.254.0/24 Signature Algorithm: sha256WithRSAEncryption 94:9d:01:80:81:b8:de:fa:a1:ce:ca:71:84:0b:20:70:9d:c1: d8:b0:49:51:f7:3f:65:27:b7:ff:1e:83:5a:94:8b:3a:a2:f7: 17:03:94:05:50:28:47:13:c9:ef:84:61:20:11:f6:6f:8f:5a: ef:38:da:b8:c2:06:36:5d:92:40:0b:24:c9:67:ca:ab:f7:72: ad:82:0b:12:4f:ad:03:d5:3d:fd:6a:20:23:96:58:99:dc:ea: 6d:96:fe:ed:cc:b9:00:c3:ef:78:85:95:ad:0e:b4:45:76:99: 1c:4b:14:f1:61:a0:52:bd:84:65:5a:5f:4b:50:3a:77:c7:5a: 60:93:20:04:4d:ed:1d:16:e2:bc:74:df:15:c4:c0:28:0d:c3: 55:03:cd:d5:b3:08:51:70:30:7c:b9:40:c2:9b:85:f7:52:12: 63:9b:99:5e:9d:ef:72:02:bd:c0:a8:68:3f:7b:99:dc:42:62: 5c:7a:5d:0e:35:e5:a8:09:31:25:4a:f5:9f:28:4e:1f:2b:13: 58:42:1a:21:38:45:0f:1c:11:61:f4:2a:be:7c:5f:ad:80:e1: 4d:2b:07:34:d4:0f:7e:57:65:4a:17:bd:4b:88:bc:23:07:d6: 4e:8e:c4:70:5d:60:6c:0a:ac:c0:3c:61:44:6a:85:1f:8b:5c: e3:e3:5d:b5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrZVS+s5jktKS05RZDFg9RlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRiY2U3MTllZDFiYTY0YmU3OGQ4YWY4ZjliZmRhZDMzZmNlNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPkicd5YZBWrcfy/HEmeFRffSDfk kmo0/G5uC4plNbFK6Jq9OJ3IQGjzCNqDB6idQ1YWLf4x1CZUYDUH/IlZyhpc6dU5 IcelyUKYx7KOpe+CtWtjWE2Id97aqdqvJ22RJwBehnaKY9JaCXnv+svRErBiL7MX ZPcB0qZ68EEcSy2pLKbXKxhvs3uyLTZOgJXXensNGhaSbG8gMD61ll872iKEO/fv hVL9QbVXgac3PjTG6eza+jUIHa87EU7+5t074c9FtK7oMrFe3YFm2xf+A0b6YbWH HQVV6PoQG2aP7UHQriUp7pEUUtgI5UqwoZWg87gE5dN3UPN19C1+18Y6DQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJbbznGe0bpkvnjYr4+b/a0z/OVcMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvbHR2T2NaN1J1bVMtZU5pdmo1djlyVFA4NVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUphaAwQA UplBAwQAUpmHAwQAUqMQAwQA1dr+MA0GCSqGSIb3DQEBCwUAA4IBAQCUnQGAgbje +qHOynGECyBwncHYsElR9z9lJ7f/HoNalIs6ovcXA5QFUChHE8nvhGEgEfZvj1rv ONq4wgY2XZJACyTJZ8qr93KtggsST60D1T39aiAjlliZ3Optlv7tzLkAw+94hZWt DrRFdpkcSxTxYaBSvYRlWl9LUDp3x1pgkyAETe0dFuK8dN8VxMAoDcNVA83VswhR cDB8uUDCm4X3UhJjm5lene9yAr3AqGg/e5ncQmJcel0ONeWoCTElSvWfKE4fKxNY QhohOEUPHBFh9Cq+fF+tgOFNKwc01A9+V2VKF71LiLwjB9ZOjsRwXWBsCqzAPGFE aoUfi1zj4121 -----END CERTIFICATE-----Generated at Fri Dec 5 06:25:51 2025 by rpki-client