This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xjjn3Izy8-0M-_gnPy6UvrtH-_Q.roa File: xjjn3Izy8-0M-_gnPy6UvrtH-_Q.roa (raw, json) Hash identifier: i07cxVGPiAJZJoK1GpfkqU4Jhj+0gzh0hE6hsaSWC8o= Subject key identifier: C6:38:E7:DC:8C:F2:F3:ED:0C:FB:F8:27:3F:2E:94:BE:BB:47:FB:F4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD955329A7ABD44D1D24A04AA8CAC7D55 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xjjn3Izy8-0M-_gnPy6UvrtH-_Q.roa Signing time: Mon 01 Dec 2025 09:53:50 +0000 ROA not before: Mon 01 Dec 2025 09:53:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 82.152.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:32:9a:7a:bd:44:d1:d2:4a:04:aa:8c:ac:7d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c638e7dc8cf2f3ed0cfbf8273f2e94bebb47fbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:fa:5a:ec:06:b7:f0:95:01:43:c1:5b:3e: 4a:66:31:19:36:13:6f:bc:7e:ae:92:5a:18:5d:5f: f0:f8:81:f0:1a:b8:28:3f:17:e7:01:c5:f5:55:b9: b3:7f:ff:b2:a0:6d:09:3c:dc:fe:88:3d:c7:12:31: 21:c6:f2:bf:0b:d8:b4:a0:32:55:5c:08:ee:6f:4d: 7f:f6:b2:71:f3:0a:2d:96:54:62:b2:36:7f:4e:97: 1d:1b:51:7b:16:73:72:8b:80:fe:c2:b2:69:05:79: f5:29:2c:f3:7c:4f:b3:ac:b9:17:47:02:4d:87:42: fb:7a:1b:f4:b0:a7:6c:89:dd:03:84:98:f3:0e:a9: 8a:7d:81:38:dc:8d:4b:e1:9a:b9:b6:b8:03:f8:04: 5c:71:fe:f7:94:8c:3f:df:32:bc:a9:65:6a:be:7c: 54:3b:40:ef:88:1b:14:f4:6a:b1:ad:99:b7:f4:fc: 44:c8:3d:02:4d:f4:29:5a:1a:e5:8e:98:ba:39:77: 50:2e:59:6a:b0:1b:1a:57:b6:ec:18:8f:69:55:fd: ed:16:ea:62:ff:cb:f6:80:5a:0d:98:3c:87:53:c1: f0:7c:8c:ef:3b:b9:8e:a5:a5:a9:69:12:aa:be:0f: be:41:8b:3e:87:90:ed:de:e6:35:80:fd:30:7f:c6: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:38:E7:DC:8C:F2:F3:ED:0C:FB:F8:27:3F:2E:94:BE:BB:47:FB:F4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xjjn3Izy8-0M-_gnPy6UvrtH-_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.122.0/24 Signature Algorithm: sha256WithRSAEncryption 72:12:ee:23:94:9a:ac:eb:17:17:2f:e4:64:dd:28:5a:8d:20: ec:06:1b:7f:2d:8d:1a:00:2a:40:8c:8e:aa:2a:44:b2:33:e4: 64:00:0d:73:99:fd:42:b4:ae:21:70:18:22:d4:51:8a:56:d2: 11:ec:dc:73:82:90:e3:90:f8:c9:8f:39:f1:db:2a:d5:35:fd: 5c:21:8a:2e:e9:8f:a0:a1:23:b4:73:1b:98:e9:c1:d9:8f:ca: ec:f0:17:04:39:5b:9b:61:90:fa:90:0f:42:18:01:8e:eb:35: fe:7d:19:2e:bd:d5:7a:03:7e:39:77:20:43:c3:5c:5b:69:00: f2:f8:b4:8b:ae:c7:df:c6:6a:69:04:19:ba:d3:2d:b3:b0:a8: 6a:c1:56:0d:76:1c:36:d2:91:d2:ef:9e:cc:0a:0c:c3:ff:88: 01:48:db:3c:ac:d4:86:ae:03:48:b3:a9:df:ae:66:d2:a5:bd: c9:8a:4f:e3:ae:00:74:86:97:6c:4b:07:e9:da:de:b9:18:4f: 62:11:02:22:59:1c:ec:77:89:8e:a8:b8:c7:c0:ad:68:b4:e1: 09:6d:3b:0f:68:fd:fe:fb:9d:14:b0:da:25:66:b7:5f:dc:cb: 6d:4d:35:b6:54:fa:16:a2:e8:c5:37:cb:87:cf:5f:8b:1d:10: ec:e7:ff:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZVTKaer1E0dJKBKqMrH1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM4ZTdkYzhjZjJmM2VkMGNmYmY4MjczZjJlOTRiZWJiNDdmYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOP6WuwGt/CVAUPBWz5KZjEZNhNv vH6ukloYXV/w+IHwGrgoPxfnAcX1Vbmzf/+yoG0JPNz+iD3HEjEhxvK/C9i0oDJV XAjub01/9rJx8wotllRisjZ/TpcdG1F7FnNyi4D+wrJpBXn1KSzzfE+zrLkXRwJN h0L7ehv0sKdsid0DhJjzDqmKfYE43I1L4Zq5trgD+ARccf73lIw/3zK8qWVqvnxU O0DviBsU9GqxrZm39PxEyD0CTfQpWhrljpi6OXdQLllqsBsaV7bsGI9pVf3tFupi /8v2gFoNmDyHU8HwfIzvO7mOpaWpaRKqvg++QYs+h5Dt3uY1gP0wf8b3jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMY459yM8vPtDPv4Jz8ulL67R/v0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveGpqbjNJenk4LTBNLV9nblB5NlV2cnRILV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUph6MA0G CSqGSIb3DQEBCwUAA4IBAQByEu4jlJqs6xcXL+Rk3ShajSDsBht/LY0aACpAjI6q KkSyM+RkAA1zmf1CtK4hcBgi1FGKVtIR7NxzgpDjkPjJjznx2yrVNf1cIYou6Y+g oSO0cxuY6cHZj8rs8BcEOVubYZD6kA9CGAGO6zX+fRkuvdV6A345dyBDw1xbaQDy +LSLrsffxmppBBm60y2zsKhqwVYNdhw20pHS757MCgzD/4gBSNs8rNSGrgNIs6nf rmbSpb3Jik/jrgB0hpdsSwfp2t65GE9iEQIiWRzsd4mOqLjHwK1otOEJbTsPaP3+ +50UsNolZrdf3MttTTW2VPoWoujFN8uHz1+LHRDs5/9u -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:08 2025 by rpki-client