This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVpgWf2nmdCrtPyvVnsvGSbTiP8.roa File: xVpgWf2nmdCrtPyvVnsvGSbTiP8.roa (raw, json) Hash identifier: c2/kkLWzI5xC2GypZs0GHKSRrubHzQv4ONyKzApxqAc= Subject key identifier: C5:5A:60:59:FD:A7:99:D0:AB:B4:FC:AF:56:7B:2F:19:26:D3:88:FF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE48282843936EA959E6099B9D2E69B9C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVpgWf2nmdCrtPyvVnsvGSbTiP8.roa Signing time: Wed 03 Dec 2025 13:59:09 +0000 ROA not before: Wed 03 Dec 2025 13:59:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 82.152.142.0/24 maxlen: 24 213.210.52.0/24 maxlen: 24 213.210.53.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:82:82:84:39:36:ea:95:9e:60:99:b9:d2:e6:9b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 3 13:59:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c55a6059fda799d0abb4fcaf567b2f1926d388ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:b3:65:bd:ee:ce:a1:9a:3d:f8:43:7c:81: a7:f1:e7:7c:ef:b9:45:2c:03:2e:33:0e:7e:89:d3: 60:c6:0c:8f:fa:86:47:02:51:e6:66:8f:e0:c3:1e: 93:eb:11:23:75:11:9e:e8:11:f4:9a:85:66:a5:af: 54:5e:7b:3f:28:ad:fa:a5:88:cf:38:53:36:6d:cb: d6:97:e6:09:74:62:c5:8e:6a:44:36:11:91:75:bc: 8b:37:b6:fe:cf:d5:0a:79:b8:55:27:7c:8e:c9:c0: 7c:4f:99:df:96:2f:8f:8f:1c:96:fc:f2:1c:d3:c6: 86:6a:76:61:47:80:4b:14:be:ff:de:14:d8:47:78: 42:d9:2c:a0:a8:07:b8:5e:ba:6e:f5:58:1c:dd:bf: 3e:3e:e0:18:ed:91:22:5e:35:2c:d5:fe:83:68:74: 2c:0f:ff:4e:eb:ff:b8:83:1c:35:fb:d5:dd:08:52: da:03:0c:0b:91:45:0e:d8:21:e4:f9:16:70:d4:7e: 1a:e1:d1:80:cb:7a:3b:b9:e0:5d:31:96:fb:28:67: ba:37:f7:81:74:c2:d0:2a:d0:78:c0:14:83:91:3c: 88:f0:ba:5a:0a:57:9c:5c:4a:3c:d7:ff:91:4b:72: 5b:fc:0e:1e:e0:25:0a:a7:d0:70:61:20:80:8b:49: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:60:59:FD:A7:99:D0:AB:B4:FC:AF:56:7B:2F:19:26:D3:88:FF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVpgWf2nmdCrtPyvVnsvGSbTiP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 213.210.52.0/23 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 76:95:c9:90:aa:9b:32:fe:1f:26:25:46:a9:16:f2:c5:95:3a: 52:64:cc:63:1d:a5:49:da:8b:07:8d:13:ce:64:65:a1:c1:45: f0:e6:10:b7:91:11:4f:e7:f2:53:dd:c1:94:65:eb:fe:ac:1c: 54:5d:2a:bd:61:b2:f2:c3:86:a1:42:53:b4:71:50:84:2f:d1: 16:42:01:ed:0d:d3:92:12:12:9d:01:4c:c1:7b:29:34:63:ba: 87:fa:86:62:2f:84:fb:3c:e4:31:ff:e8:2c:5b:2e:e3:74:a1: fd:d6:c1:1c:9f:87:94:79:06:11:32:4b:38:45:56:eb:71:39: 3a:96:38:25:0c:7f:4a:5d:7a:7d:e0:f6:14:25:d8:20:a7:6a: 64:6c:88:3d:84:9a:24:7f:e2:6b:6b:4a:7b:54:c4:50:3a:b4: 31:61:03:8e:78:d5:10:bc:44:b9:50:9a:e7:f2:02:23:d3:55: 61:3a:11:24:70:f3:1c:99:90:25:45:c1:0a:a0:ee:f6:bb:ad: b5:58:dc:0a:b2:20:1e:05:28:03:a0:52:b5:ac:e0:f5:f5:c9: 57:83:57:5e:62:bb:b4:9e:83:52:8c:04:08:f6:a4:08:1d:cb: ca:1b:7c:23:2f:68:c5:34:3d:ee:13:a2:dc:f1:90:82:ba:08: fb:31:f5:0c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrkgoKEOTbqlZ5gmbnS5pucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAzMTM1OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTVhNjA1OWZkYTc5OWQwYWJiNGZjYWY1NjdiMmYxOTI2ZDM4OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLyzZb3uzqGaPfhDfIGn8ed877lF LAMuMw5+idNgxgyP+oZHAlHmZo/gwx6T6xEjdRGe6BH0moVmpa9UXns/KK36pYjP OFM2bcvWl+YJdGLFjmpENhGRdbyLN7b+z9UKebhVJ3yOycB8T5nfli+PjxyW/PIc 08aGanZhR4BLFL7/3hTYR3hC2SygqAe4Xrpu9Vgc3b8+PuAY7ZEiXjUs1f6DaHQs D/9O6/+4gxw1+9XdCFLaAwwLkUUO2CHk+RZw1H4a4dGAy3o7ueBdMZb7KGe6N/eB dMLQKtB4wBSDkTyI8LpaClecXEo81/+RS3Jb/A4e4CUKp9BwYSCAi0nmJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMVaYFn9p5nQq7T8r1Z7Lxkm04j/MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveFZwZ1dmMm5tZENydFB5dlZuc3ZHU2JUaVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpiOAwQB 1dI0AwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQB2lcmQqpsy/h8mJUapFvLFlTpS ZMxjHaVJ2osHjRPOZGWhwUXw5hC3kRFP5/JT3cGUZev+rBxUXSq9YbLyw4ahQlO0 cVCEL9EWQgHtDdOSEhKdAUzBeyk0Y7qH+oZiL4T7POQx/+gsWy7jdKH91sEcn4eU eQYRMks4RVbrcTk6ljglDH9KXXp94PYUJdggp2pkbIg9hJokf+Jra0p7VMRQOrQx YQOOeNUQvES5UJrn8gIj01VhOhEkcPMcmZAlRcEKoO72u621WNwKsiAeBSgDoFK1 rOD19clXg1deYru0noNSjAQI9qQIHcvKG3wjL2jFND3uE6Lc8ZCCugj7MfUM -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:58 2025 by rpki-client