This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa File: P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa (raw, json) Hash identifier: MK5h14W8ZCBQORWeYdGBDra0AA5OtxnFwGtkpjQblMk= Subject key identifier: 3F:C7:2F:63:52:A8:10:E5:C1:43:4D:C3:60:96:0F:D8:53:0C:6B:62 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019ADB054A13FA75CF4B2947F004A40466B5 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa Signing time: Mon 01 Dec 2025 17:45:48 +0000 ROA not before: Mon 01 Dec 2025 17:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207456 IP address blocks: 31.171.132.0/22 maxlen: 24 45.154.4.0/22 maxlen: 24 109.235.52.0/22 maxlen: 24 109.235.53.0/24 maxlen: 24 109.235.54.0/23 maxlen: 24 185.68.196.0/22 maxlen: 24 185.153.188.0/22 maxlen: 24 185.196.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:05:4a:13:fa:75:cf:4b:29:47:f0:04:a4:04:66:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Dec 1 17:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3fc72f6352a810e5c1434dc360960fd8530c6b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:02:43:b9:48:5f:c4:e8:f5:a2:ca:a4:73: 09:ca:a3:fe:dc:17:20:4e:a0:69:1c:f4:cc:23:83: b7:13:99:5b:88:2a:d2:a0:87:22:4b:3f:0b:36:66: 2c:27:82:c8:9e:b2:af:0f:6d:f5:a1:16:33:4b:a2: 1e:7c:91:8f:9b:df:cd:da:e7:44:d3:c2:f4:ae:f4: f8:4e:71:18:ce:ae:d2:f7:92:c6:22:23:bd:1e:52: 19:c3:7e:2e:c3:ef:39:d1:14:7a:2f:de:ed:dc:40: 6a:df:49:e4:d6:0d:09:59:f3:fe:1a:9b:1a:a9:99: 3d:03:ed:0e:f0:32:34:f8:80:7f:37:60:02:2a:8e: ec:47:ef:4a:8c:e7:2f:66:dd:8e:82:59:53:5a:f2: 22:63:2d:75:f2:92:1c:c7:b9:46:b7:14:6a:8b:84: 8f:be:f6:72:a8:b5:37:ac:66:f1:5b:c7:cd:f2:44: f6:55:31:45:dd:44:b2:32:54:01:9d:05:e8:b4:c8: e1:86:6f:cb:cc:88:e1:98:73:ae:6a:1a:8e:ca:a3: 45:3f:ec:28:9c:b9:90:77:b5:3e:03:e5:d3:a0:69: 98:63:07:1f:0b:a7:b6:a4:d2:55:3f:62:3d:23:7a: b6:22:ce:14:c1:1b:2d:aa:ef:f8:26:2a:72:8b:f4: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C7:2F:63:52:A8:10:E5:C1:43:4D:C3:60:96:0F:D8:53:0C:6B:62 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.132.0/22 45.154.4.0/22 109.235.52.0/22 185.68.196.0/22 185.153.188.0/22 185.196.92.0/22 Signature Algorithm: sha256WithRSAEncryption 16:01:b5:77:fe:01:cb:69:f5:8a:8a:b2:15:0a:b8:3a:d8:5b: 8d:14:71:dc:69:12:d5:50:07:8f:02:77:fa:f3:d0:fb:09:84: fa:ef:12:0a:7d:7d:0b:5b:5c:bf:44:0a:ed:10:10:b6:a5:cf: d4:18:5e:46:10:e5:e0:3c:23:5f:62:d8:e9:29:4a:e9:dc:63: 86:ff:0c:9b:71:4e:4f:0b:b4:22:b8:65:8b:d5:ab:8e:04:06: f5:96:ef:01:52:16:59:a3:7e:76:fa:f2:7d:33:51:28:d1:12: 9d:fd:f2:ad:aa:87:bf:aa:84:80:e9:9a:e9:bc:40:f1:da:bc: 60:64:df:28:ec:07:c8:9c:ae:e5:53:19:ba:8b:8c:a9:4e:fa: 41:57:ae:71:5f:cc:42:8b:42:09:c2:69:5c:61:de:5e:2c:99: df:c5:37:2b:f7:de:58:1c:d0:0f:fa:e3:06:6c:2c:68:d0:6a: 1e:c8:6e:4d:20:fa:38:0d:a8:0d:1a:f9:7d:4b:d2:42:ac:cd: be:6e:7c:0f:c1:77:9c:e1:57:bc:c0:24:c3:e8:92:3d:0c:f4: 64:11:b7:ae:a1:62:86:7c:b7:57:a1:53:da:55:7a:54:f4:f5: a9:a6:f8:6c:c9:09:35:9d:e4:74:06:8f:7d:a1:11:4b:3f:fa: ec:d9:c1:ef -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrbBUoT+nXPSylH8ASkBGa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMjAxMTc0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmM3MmY2MzUyYTgxMGU1YzE0MzRkYzM2MDk2MGZkODUzMGM2YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEkCQ7lIX8To9aLKpHMJyqP+3Bcg TqBpHPTMI4O3E5lbiCrSoIciSz8LNmYsJ4LInrKvD231oRYzS6IefJGPm9/N2udE 08L0rvT4TnEYzq7S95LGIiO9HlIZw34uw+850RR6L97t3EBq30nk1g0JWfP+Gpsa qZk9A+0O8DI0+IB/N2ACKo7sR+9KjOcvZt2OgllTWvIiYy118pIcx7lGtxRqi4SP vvZyqLU3rGbxW8fN8kT2VTFF3USyMlQBnQXotMjhhm/LzIjhmHOuahqOyqNFP+wo nLmQd7U+A+XToGmYYwcfC6e2pNJVP2I9I3q2Is4UwRstqu/4Jipyi/RPrQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFD/HL2NSqBDlwUNNw2CWD9hTDGtiMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvUDhjdlkxS29FT1hCUTAzRFlKWVAyRk1NYTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCH6uEAwQC LZoEAwQCbes0AwQCuUTEAwQCuZm8AwQCucRcMA0GCSqGSIb3DQEBCwUAA4IBAQAW AbV3/gHLafWKirIVCrg62FuNFHHcaRLVUAePAnf689D7CYT67xIKfX0LW1y/RArt EBC2pc/UGF5GEOXgPCNfYtjpKUrp3GOG/wybcU5PC7QiuGWL1auOBAb1lu8BUhZZ o352+vJ9M1Eo0RKd/fKtqoe/qoSA6ZrpvEDx2rxgZN8o7AfInK7lUxm6i4ypTvpB V65xX8xCi0IJwmlcYd5eLJnfxTcr995YHNAP+uMGbCxo0GoeyG5NIPo4DagNGvl9 S9JCrM2+bnwPwXec4Ve8wCTD6JI9DPRkEbeuoWKGfLdXoVPaVXpU9PWppvhsyQk1 neR0Bo99oRFLP/rs2cHv -----END CERTIFICATE-----Generated at Sat Dec 6 18:58:51 2025 by rpki-client