This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P0-_luwYVQZac5ZTPS5kR7bqRzU.roa File: P0-_luwYVQZac5ZTPS5kR7bqRzU.roa (raw, json) Hash identifier: 3D2I0/39N7OHTFhjocvuVBVsCjnwLMtm4mBH2o0muYM= Subject key identifier: 3F:4F:BF:96:EC:18:55:06:5A:73:96:53:3D:2E:64:47:B6:EA:47:35 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019AB44422585DC3F06C13D97D28928D9556 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P0-_luwYVQZac5ZTPS5kR7bqRzU.roa Signing time: Mon 24 Nov 2025 05:09:15 +0000 ROA not before: Mon 24 Nov 2025 05:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 83.147.16.0/22 maxlen: 24 83.147.20.0/24 maxlen: 24 83.147.21.0/24 maxlen: 24 83.147.22.0/24 maxlen: 24 83.147.23.0/24 maxlen: 24 83.147.26.0/23 maxlen: 24 83.147.26.0/24 maxlen: 24 83.147.27.0/24 maxlen: 24 83.147.28.0/24 maxlen: 24 83.147.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:44:22:58:5d:c3:f0:6c:13:d9:7d:28:92:8d:95:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Nov 24 05:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f4fbf96ec1855065a7396533d2e6447b6ea4735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:81:12:13:1c:66:1e:49:80:7b:c9:97:07: 56:47:0b:22:bf:05:98:58:52:4f:66:9c:38:44:a2: 57:30:3a:b1:b0:50:91:14:f4:0f:cd:ad:c0:64:1a: b9:12:6b:1e:82:18:ab:b5:72:db:58:78:6b:71:b3: 46:e9:f1:3d:b9:e9:4b:bb:bd:76:a3:06:df:59:0b: a2:87:5f:86:f2:e8:dc:a9:5b:e8:25:b9:a8:53:d6: 1e:f2:cd:79:a8:a1:2a:40:2b:95:c2:d0:8c:f1:0a: b2:f4:b8:b2:b3:a2:c3:c8:4b:93:68:b1:aa:54:99: a4:4b:72:0d:ae:97:ad:aa:35:d3:46:69:fd:4d:25: bd:57:dc:a0:01:8f:b9:01:35:8b:91:c6:b9:e6:4a: 51:2b:77:44:60:d3:d4:7c:c6:66:58:62:26:4d:c1: b2:55:25:7f:77:84:82:14:27:51:24:1e:f9:1f:ef: ad:3e:9a:7e:21:13:f5:2d:bb:95:5b:45:fb:8a:1d: 67:b6:ef:a4:6b:73:97:8a:77:df:6d:28:52:46:29: 72:1d:b3:53:e3:29:8d:0a:68:b6:42:76:1d:d1:11: 0d:1a:a3:df:62:81:85:95:d5:1e:ef:1c:74:86:e4: 32:2f:ff:ab:a1:16:d1:ad:06:1b:c1:df:e3:c9:ff: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4F:BF:96:EC:18:55:06:5A:73:96:53:3D:2E:64:47:B6:EA:47:35 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/P0-_luwYVQZac5ZTPS5kR7bqRzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.16.0/21 83.147.26.0-83.147.28.255 83.147.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:ce:2e:76:a0:66:7d:dd:37:6e:f7:64:5a:a6:0d:12:9c:fa: b2:e1:4c:7d:a0:52:71:8e:d6:5b:f8:b8:12:5f:50:c5:73:23: c0:81:c1:e5:7a:4e:7d:3e:79:71:cf:b3:24:a2:1c:58:c0:77: f7:d9:6b:6e:57:e7:b8:87:da:77:8a:d8:bd:85:74:5a:34:97: ea:d0:05:37:a6:7f:1c:c3:51:a6:81:f7:9b:0f:b4:f3:7f:b9: 34:aa:4c:e6:44:cc:2a:d2:3d:63:fb:cd:17:2f:fb:17:a0:d7: cf:8a:d9:dd:9a:03:9e:19:96:b3:50:90:03:88:63:9e:ec:46: 91:02:26:50:ff:d7:40:38:5e:23:48:c1:d5:b3:d0:89:c6:43: 70:37:91:ec:fb:18:d9:85:07:89:25:0e:66:66:e1:62:0a:89: b5:a6:8f:7d:37:1f:77:b4:3c:1c:bd:20:f7:fe:dd:d3:cc:88: 72:47:f3:c4:68:2a:8a:60:e2:88:c6:ff:3d:15:62:c0:90:05: 89:7e:06:99:a1:5b:7f:a0:67:4a:c6:1e:a1:b4:b2:d5:de:e3: b5:52:31:34:75:d9:20:c9:34:fb:97:dc:ed:bc:21:f9:73:16: fc:01:17:57:8e:30:55:e6:84:e6:4e:04:ff:0b:09:6e:6d:ba: 2e:81:40:9b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZq0RCJYXcPwbBPZfSiSjZVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjUxMTI0MDUwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjRmYmY5NmVjMTg1NTA2NWE3Mzk2NTMzZDJlNjQ0N2I2ZWE0NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVKBEhMcZh5JgHvJlwdWRwsivwWY WFJPZpw4RKJXMDqxsFCRFPQPza3AZBq5EmseghirtXLbWHhrcbNG6fE9uelLu712 owbfWQuih1+G8ujcqVvoJbmoU9Ye8s15qKEqQCuVwtCM8Qqy9Liys6LDyEuTaLGq VJmkS3INrpetqjXTRmn9TSW9V9ygAY+5ATWLkca55kpRK3dEYNPUfMZmWGImTcGy VSV/d4SCFCdRJB75H++tPpp+IRP1LbuVW0X7ih1ntu+ka3OXinffbShSRilyHbNT 4ymNCmi2QnYd0RENGqPfYoGFldUe7xx0huQyL/+roRbRrQYbwd/jyf/rsQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFD9Pv5bsGFUGWnOWUz0uZEe26kc1MB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvUDAtX2x1d1lWUVphYzVaVFBTNWtSN2JxUnpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDU5MQMAwD BAFTkxoDBABTkxwDBAJTkzAwDQYJKoZIhvcNAQELBQADggEBAC7OLnagZn3dN273 ZFqmDRKc+rLhTH2gUnGO1lv4uBJfUMVzI8CBweV6Tn0+eXHPsySiHFjAd/fZa25X 57iH2neK2L2FdFo0l+rQBTemfxzDUaaB95sPtPN/uTSqTOZEzCrSPWP7zRcv+xeg 18+K2d2aA54ZlrNQkAOIY57sRpECJlD/10A4XiNIwdWz0InGQ3A3kez7GNmFB4kl DmZm4WIKibWmj303H3e0PBy9IPf+3dPMiHJH88RoKopg4ojG/z0VYsCQBYl+Bpmh W3+gZ0rGHqG0stXe47VSMTR12SDJNPuX3O28IflzFvwBF1eOMFXmhOZOBP8LCW5t ui6BQJs= -----END CERTIFICATE-----Generated at Sun Dec 7 21:05:39 2025 by rpki-client