This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/_RG38RYDV8XCGP63JRH0IruOPOQ.roa File: _RG38RYDV8XCGP63JRH0IruOPOQ.roa (raw, json) Hash identifier: sUnqtqAeRsj4aEysWIOSTKFJQIMojCeLnix7ODtsEOY= Subject key identifier: FD:11:B7:F1:16:03:57:C5:C2:18:FE:B7:25:11:F4:22:BB:8E:3C:E4 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019AE38CD25F060F238F30ACAE1D803173AC Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/_RG38RYDV8XCGP63JRH0IruOPOQ.roa Signing time: Wed 03 Dec 2025 09:30:48 +0000 ROA not before: Wed 03 Dec 2025 09:30:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43940 IP address blocks: 62.4.32.0/19 maxlen: 24 109.72.96.0/20 maxlen: 21 185.64.0.0/22 maxlen: 24 185.179.92.0/22 maxlen: 22 185.215.88.0/22 maxlen: 22 213.133.0.0/19 maxlen: 24 213.196.64.0/19 maxlen: 19 2a03:7a0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:8c:d2:5f:06:0f:23:8f:30:ac:ae:1d:80:31:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Dec 3 09:30:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd11b7f1160357c5c218feb72511f422bb8e3ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:ae:f1:36:f7:a6:c5:47:8c:0c:71:ea:32: 59:8d:58:91:1e:34:4d:ff:de:cd:3b:24:72:59:03: a0:f3:e0:44:68:c0:fe:5e:b4:50:90:88:8a:0f:c1: 49:e9:50:8f:fa:34:17:9e:53:c3:09:cb:a7:0e:78: 03:37:45:89:f9:a5:79:21:9f:68:36:b7:81:3c:8f: 67:28:fd:06:2e:ac:e3:ad:d7:a1:55:ff:a2:66:e3: dc:7a:49:4a:79:51:c0:88:6e:21:92:31:f6:64:f3: ce:d5:d0:f9:e4:52:2d:70:70:3f:6a:94:8f:1a:1a: 37:bf:be:41:88:5f:b7:7e:06:28:2e:c1:8f:d8:c6: 03:8e:38:44:25:6a:30:4e:05:13:98:d6:d6:eb:6b: eb:5c:7e:77:ff:eb:26:80:a7:b0:5c:86:d8:7e:6b: 56:d8:0e:3e:bb:31:5d:93:40:85:6e:70:41:df:b4: e9:65:40:67:eb:d0:bf:63:c3:71:88:95:59:b1:f4: ce:9d:ae:ea:8f:8d:1f:4f:1b:b4:e7:5f:5d:73:aa: 1c:2b:fd:63:3c:a1:fe:1e:16:2e:7e:4e:00:66:ae: 52:89:af:ec:52:56:92:29:8a:9d:82:22:b6:67:0c: 73:6d:a6:1f:83:f2:b8:c4:92:4b:1d:8d:0f:16:14: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:11:B7:F1:16:03:57:C5:C2:18:FE:B7:25:11:F4:22:BB:8E:3C:E4 X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/_RG38RYDV8XCGP63JRH0IruOPOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.4.32.0/19 109.72.96.0/20 185.64.0.0/22 185.179.92.0/22 185.215.88.0/22 213.133.0.0/19 213.196.64.0/19 IPv6: 2a03:7a0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:0c:5e:c0:e3:f5:e3:f1:b0:7c:6f:e6:84:85:1b:37:0d:d9: bd:55:55:b9:76:7a:40:87:08:38:a8:ce:4d:d1:87:ae:6c:77: dd:e3:f4:19:0d:c7:8b:d4:85:bf:01:1d:52:9b:36:b4:a8:e7: a8:f4:e3:25:7d:47:41:c2:e8:0f:ef:e2:b4:3f:cb:1f:e0:19: f3:0c:3c:84:48:2d:c2:94:3c:4f:1a:f8:50:22:ad:72:06:4d: 37:b7:29:47:35:70:7d:62:de:01:c3:c4:7d:02:68:2b:67:f2: a1:bc:8f:52:07:29:8e:97:ce:11:b6:df:66:89:a4:d3:ed:b6: dd:87:dc:ab:62:5c:d4:57:f4:6d:71:c4:3e:41:85:16:d5:a3: be:5c:89:dd:30:81:d1:0f:0b:31:9c:8c:fe:3f:42:5d:0d:bc: 6c:c6:37:09:76:b4:30:f8:99:50:fe:51:d4:57:ba:c1:39:28: 50:3b:46:61:15:c5:0e:9a:b6:55:62:e8:fb:8e:18:50:a7:23: dd:78:3e:4d:e7:3a:4e:cf:04:db:8b:a4:ff:c0:b5:87:fe:2e: ab:5b:d5:6d:ce:a1:4b:6a:bd:72:4e:7b:00:3f:d3:2b:47:07: 6f:84:2a:59:cb:09:9f:26:2f:68:b6:89:c4:3f:f6:7a:5c:9d: 3f:38:28:38 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZrjjNJfBg8jjzCsrh2AMXOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjUxMjAzMDkzMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDExYjdmMTE2MDM1N2M1YzIxOGZlYjcyNTExZjQyMmJiOGUzY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBSu8Tb3psVHjAxx6jJZjViRHjRN /97NOyRyWQOg8+BEaMD+XrRQkIiKD8FJ6VCP+jQXnlPDCcunDngDN0WJ+aV5IZ9o NreBPI9nKP0GLqzjrdehVf+iZuPceklKeVHAiG4hkjH2ZPPO1dD55FItcHA/apSP Gho3v75BiF+3fgYoLsGP2MYDjjhEJWowTgUTmNbW62vrXH53/+smgKewXIbYfmtW 2A4+uzFdk0CFbnBB37TpZUBn69C/Y8NxiJVZsfTOna7qj40fTxu0519dc6ocK/1j PKH+HhYufk4AZq5Sia/sUlaSKYqdgiK2ZwxzbaYfg/K4xJJLHY0PFhTlzwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFP0Rt/EWA1fFwhj+tyUR9CK7jjzkMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEvX1JHMzhSWURWOFhDR1A2M0pSSDBJcnVPUE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFPgQgAwQE bUhgAwQCuUAAAwQCubNcAwQCuddYAwQF1YUAAwQF1cRAMA0EAgACMAcDBQMqAweg MA0GCSqGSIb3DQEBCwUAA4IBAQB9DF7A4/Xj8bB8b+aEhRs3Ddm9VVW5dnpAhwg4 qM5N0YeubHfd4/QZDceL1IW/AR1Smza0qOeo9OMlfUdBwugP7+K0P8sf4BnzDDyE SC3ClDxPGvhQIq1yBk03tylHNXB9Yt4Bw8R9AmgrZ/KhvI9SBymOl84Rtt9miaTT 7bbdh9yrYlzUV/RtccQ+QYUW1aO+XIndMIHRDwsxnIz+P0JdDbxsxjcJdrQw+JlQ /lHUV7rBOShQO0ZhFcUOmrZVYuj7jhhQpyPdeD5N5zpOzwTbi6T/wLWH/i6rW9Vt zqFLar1yTnsAP9MrRwdvhCpZywmfJi9otonEP/Z6XJ0/OCg4 -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:15 2025 by rpki-client