This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/p3SnBhPJD4zqhLWqM9q8OwXJYug.roa File: p3SnBhPJD4zqhLWqM9q8OwXJYug.roa (raw, json) Hash identifier: KsTNEITlhctFDNSkvlwZyGm1BzJMCGD3crVV4BOTdy8= Subject key identifier: A7:74:A7:06:13:C9:0F:8C:EA:84:B5:AA:33:DA:BC:3B:05:C9:62:E8 Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Certificate serial: 019AE4033FF72EEA127E0B6E4EE03638E4F8 Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/p3SnBhPJD4zqhLWqM9q8OwXJYug.roa Signing time: Wed 03 Dec 2025 11:40:09 +0000 ROA not before: Wed 03 Dec 2025 11:40:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60087 IP address blocks: 46.252.144.0/20 maxlen: 24 81.28.8.0/22 maxlen: 24 86.107.96.0/22 maxlen: 24 89.40.172.0/22 maxlen: 24 185.19.208.0/22 maxlen: 24 185.31.64.0/22 maxlen: 24 2a03:a500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:03:3f:f7:2e:ea:12:7e:0b:6e:4e:e0:36:38:e4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Validity Not Before: Dec 3 11:40:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a774a70613c90f8cea84b5aa33dabc3b05c962e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:ae:f2:60:23:cf:1a:ac:bb:47:d2:86:a7: 6c:fa:7f:d1:5c:9f:be:b0:56:f1:d6:0e:9e:f1:7b: cd:01:f5:4d:f2:e9:85:66:21:18:52:18:74:44:3f: 1a:66:fe:ed:3c:54:62:51:69:fd:e1:a5:9f:d5:77: 66:f1:d9:53:51:29:06:32:e1:ba:bb:6f:8d:98:fc: b3:8e:ea:13:4d:5d:d0:7b:99:33:c8:80:a4:eb:8c: 8a:c9:ce:6e:1c:25:f6:15:b0:bb:cf:78:44:29:1c: c1:a1:f1:5f:c8:8f:28:ba:a2:b9:27:ee:1f:1e:ac: d4:c0:7e:16:5a:67:50:53:21:fc:6d:9f:4b:a9:7d: 2d:3a:46:4b:b1:aa:66:77:6c:9d:ad:41:09:a4:f0: b2:09:71:93:50:fd:f3:2b:78:8e:02:53:52:1a:24: 37:b2:c9:1e:e3:8e:69:f3:50:86:ef:43:36:8a:6c: fa:3a:dd:af:cf:26:e8:5e:43:c8:ae:ee:5b:24:7a: 43:98:63:98:85:31:c4:d9:43:7a:0c:cb:af:63:48: 2a:1f:bf:ed:cd:44:a6:c4:ec:17:54:75:a9:d2:67: 7d:fb:4f:8c:32:9c:13:3e:ee:1b:c7:89:20:d9:c7: f8:52:42:81:e0:84:fe:b8:7f:dd:9e:b6:97:0a:36: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:A7:06:13:C9:0F:8C:EA:84:B5:AA:33:DA:BC:3B:05:C9:62:E8 X509v3 Authority Key Identifier: keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/p3SnBhPJD4zqhLWqM9q8OwXJYug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.144.0/20 81.28.8.0/22 86.107.96.0/22 89.40.172.0/22 185.19.208.0/22 185.31.64.0/22 IPv6: 2a03:a500::/32 Signature Algorithm: sha256WithRSAEncryption 85:29:4e:9a:d8:51:0a:df:68:99:b4:1c:78:45:87:17:6d:fa: a1:a7:26:cd:04:fd:fe:52:98:a5:fb:ee:1b:45:78:5d:2d:7a: e1:8d:a9:9d:14:15:9c:f5:e6:8e:87:e0:2a:71:83:4e:d2:f0: bc:f4:84:a9:a2:e9:68:3d:7f:f2:8c:96:b4:c9:63:81:a2:68: d3:05:29:f4:a7:92:d0:48:0a:0f:72:74:66:a2:8d:07:c8:65: f0:4b:b6:c7:11:4f:1e:d7:3e:c2:5a:38:5a:e8:e4:0c:63:3e: 78:8f:bc:61:d1:06:d7:92:2b:5b:0a:df:12:65:45:0e:5f:1b: 4c:50:08:84:43:ec:18:15:d8:cb:a4:47:0e:76:04:16:7c:c8: 83:a8:91:5a:7d:22:1b:f1:76:86:be:1c:e6:42:b3:b1:17:6d: 8f:45:c1:bf:6d:26:d1:5a:3f:a8:60:3e:dd:a5:6e:00:84:37: e9:5c:05:b2:78:41:b9:d7:cd:78:32:4a:f5:37:25:ce:e1:ed: e8:95:43:a8:db:40:b5:38:c3:8e:68:ba:65:53:59:e2:f5:c7: be:87:4f:4e:c8:17:4f:1e:2e:bd:5d:5f:cb:48:84:5c:fd:4b: 20:e0:b9:5e:d2:9f:7a:6f:71:e1:cd:a6:17:e6:43:e6:c4:3d: 2f:76:ef:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZrkAz/3LuoSfgtuTuA2OOT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0 MTdhY2QwHhcNMjUxMjAzMTE0MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzc0YTcwNjEzYzkwZjhjZWE4NGI1YWEzM2RhYmMzYjA1Yzk2MmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmSu8mAjzxqsu0fShqds+n/RXJ++ sFbx1g6e8XvNAfVN8umFZiEYUhh0RD8aZv7tPFRiUWn94aWf1Xdm8dlTUSkGMuG6 u2+NmPyzjuoTTV3Qe5kzyICk64yKyc5uHCX2FbC7z3hEKRzBofFfyI8ouqK5J+4f HqzUwH4WWmdQUyH8bZ9LqX0tOkZLsapmd2ydrUEJpPCyCXGTUP3zK3iOAlNSGiQ3 sske445p81CG70M2imz6Ot2vzyboXkPIru5bJHpDmGOYhTHE2UN6DMuvY0gqH7/t zUSmxOwXVHWp0md9+0+MMpwTPu4bx4kg2cf4UkKB4IT+uH/dnraXCjb0CQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFKd0pwYTyQ+M6oS1qjPavDsFyWLoMB8GA1UdIwQY MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt NDRlMjE5YTllOTZlLzEvcDNTbkJoUEpENHpxaExXcU05cThPd1hKWXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQELvyQAwQC URwIAwQCVmtgAwQCWSisAwQCuRPQAwQCuR9AMA0EAgACMAcDBQAqA6UAMA0GCSqG SIb3DQEBCwUAA4IBAQCFKU6a2FEK32iZtBx4RYcXbfqhpybNBP3+Upil++4bRXhd LXrhjamdFBWc9eaOh+AqcYNO0vC89ISpouloPX/yjJa0yWOBomjTBSn0p5LQSAoP cnRmoo0HyGXwS7bHEU8e1z7CWjha6OQMYz54j7xh0QbXkitbCt8SZUUOXxtMUAiE Q+wYFdjLpEcOdgQWfMiDqJFafSIb8XaGvhzmQrOxF22PRcG/bSbRWj+oYD7dpW4A hDfpXAWyeEG51814Mkr1NyXO4e3olUOo20C1OMOOaLplU1ni9ce+h09OyBdPHi69 XV/LSIRc/Usg4Lle0p96b3HhzaYX5kPmxD0vdu+m -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:00 2025 by rpki-client