This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wacriNx7vqos5qkRNXtBFT6Mwj8.roa File: wacriNx7vqos5qkRNXtBFT6Mwj8.roa (raw, json) Hash identifier: cObjvPCCkjuyZTIF4dewx9Lgaoj5c2jFjCM+fUoj8ow= Subject key identifier: C1:A7:2B:88:DC:7B:BE:AA:2C:E6:A9:11:35:7B:41:15:3E:8C:C2:3F Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ABAF7DA754C223095B07A6A94A00E48A7 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wacriNx7vqos5qkRNXtBFT6Mwj8.roa Signing time: Tue 25 Nov 2025 12:23:16 +0000 ROA not before: Tue 25 Nov 2025 12:23:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 82.153.51.0/24 maxlen: 24 82.153.148.0/24 maxlen: 24 82.163.15.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:f7:da:75:4c:22:30:95:b0:7a:6a:94:a0:0e:48:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 25 12:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1a72b88dc7bbeaa2ce6a911357b41153e8cc23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:b2:ae:e3:dd:68:b6:da:d5:32:6e:bc:dc: 56:08:6d:11:f3:8b:c3:07:bf:56:4e:55:75:ec:6f: aa:80:a4:9b:8e:c1:16:c9:c6:9d:a2:4e:8f:03:f9: de:5a:e0:6b:5b:e3:fb:50:44:9a:cf:8d:23:61:fb: df:cd:9a:f7:10:e5:3d:03:5c:d8:93:84:73:6f:45: 91:55:29:e4:39:ab:60:2c:e6:f0:34:88:4e:1f:b2: c4:12:35:82:1a:23:1f:ea:6c:18:bb:b0:7e:23:a5: 0b:a1:ce:34:3b:c0:6e:fe:8a:d1:9d:f9:2c:d2:39: 48:41:72:e7:b2:4e:ce:fe:ae:8f:be:70:f9:52:fd: f6:1e:72:aa:60:5c:78:13:03:50:de:95:11:5d:8d: 8e:2e:62:4f:a1:d8:fe:96:42:7f:bb:00:ab:99:48: 8e:1a:3e:f0:26:0e:eb:ea:95:26:79:58:06:43:42: 1a:0e:46:28:7f:51:89:80:26:04:77:99:8a:bc:c9: f9:63:3c:f3:4b:2e:41:f5:ef:8d:db:ab:9d:74:97: 6b:af:5b:40:7a:4f:44:d6:97:b2:71:83:de:0f:28: f1:4e:3f:ea:19:93:ee:d5:68:4c:48:0a:b9:ab:47: 6c:aa:f9:51:f3:df:df:88:30:d6:74:9f:b0:95:d1: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:2B:88:DC:7B:BE:AA:2C:E6:A9:11:35:7B:41:15:3E:8C:C2:3F X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wacriNx7vqos5qkRNXtBFT6Mwj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.51.0/24 82.153.148.0/24 82.163.15.0/24 89.213.63.0/24 89.213.157.0/24 89.213.227.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e2:64:b2:56:f1:4b:bc:b9:1b:4c:3a:77:b2:6a:13:cb:74: 22:00:09:76:19:fe:c3:e3:b6:8c:1d:c1:1a:10:18:e0:90:e2: 99:8f:9a:2b:02:1b:07:3b:96:c6:df:4e:89:a8:23:b6:c2:33: 4f:02:ee:d5:6f:b1:9a:41:5a:21:07:db:be:9d:00:69:d6:7b: e8:88:76:c5:3b:33:af:96:b1:49:59:4a:b8:b6:11:d9:af:7a: 39:1d:d5:9e:af:6b:62:bf:cd:71:0e:e9:6c:d7:d9:b9:bb:bd: 42:ca:a6:dc:34:96:b5:2e:7c:ba:7d:c6:81:2b:4e:16:d3:06: e1:30:00:8f:55:72:dc:b9:43:d5:e6:e4:1d:82:c9:ec:e4:71: f8:49:6e:79:74:d3:99:71:8f:ea:16:a9:70:51:38:12:12:a8: 7c:16:b3:de:d4:10:ad:b0:c7:90:10:31:3e:f2:0e:4d:44:52: 14:77:b0:ae:70:af:0c:09:7e:69:8d:de:ed:b3:bc:3a:01:63: 8a:6e:e8:98:7b:23:ec:d2:b2:80:37:86:ca:f6:99:e8:6b:a5: 48:33:13:19:fa:38:76:ce:71:db:8a:de:f5:60:d5:25:90:e9: f2:6c:07:08:47:14:66:f6:74:34:d0:e3:07:a9:bd:65:8d:25: f3:65:ff:91 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZq699p1TCIwlbB6apSgDkinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI1MTIyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE3MmI4OGRjN2JiZWFhMmNlNmE5MTEzNTdiNDExNTNlOGNjMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvSyruPdaLba1TJuvNxWCG0R84vD B79WTlV17G+qgKSbjsEWycadok6PA/neWuBrW+P7UESaz40jYfvfzZr3EOU9A1zY k4Rzb0WRVSnkOatgLObwNIhOH7LEEjWCGiMf6mwYu7B+I6ULoc40O8Bu/orRnfks 0jlIQXLnsk7O/q6PvnD5Uv32HnKqYFx4EwNQ3pURXY2OLmJPodj+lkJ/uwCrmUiO Gj7wJg7r6pUmeVgGQ0IaDkYof1GJgCYEd5mKvMn5YzzzSy5B9e+N26uddJdrr1tA ek9E1peycYPeDyjxTj/qGZPu1WhMSAq5q0dsqvlR89/fiDDWdJ+wldFakQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMGnK4jce76qLOapETV7QRU+jMI/MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvd2FjcmlOeDd2cW9zNXFrUk5YdEJGVDZNd2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUpkzAwQA UpmUAwQAUqMPAwQAWdU/AwQAWdWdAwQAWdXjAwQAbbDyAwQA1YKJAwQA1YKYMA0G CSqGSIb3DQEBCwUAA4IBAQAn4mSyVvFLvLkbTDp3smoTy3QiAAl2Gf7D47aMHcEa EBjgkOKZj5orAhsHO5bG306JqCO2wjNPAu7Vb7GaQVohB9u+nQBp1nvoiHbFOzOv lrFJWUq4thHZr3o5HdWer2tiv81xDuls19m5u71CyqbcNJa1Lny6fcaBK04W0wbh MACPVXLcuUPV5uQdgsns5HH4SW55dNOZcY/qFqlwUTgSEqh8FrPe1BCtsMeQEDE+ 8g5NRFIUd7CucK8MCX5pjd7ts7w6AWOKbuiYeyPs0rKAN4bK9pnoa6VIMxMZ+jh2 znHbit71YNUlkOnybAcIRxRm9nQ00OMHqb1ljSXzZf+R -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:48 2025 by rpki-client