This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/15gCiRVGFCQG-a8jhGgUvicOiEg.roa File: 15gCiRVGFCQG-a8jhGgUvicOiEg.roa (raw, json) Hash identifier: HYtC6Aq7NXNRL72JBK90Cl7adW7gkr2uM0O9izOA00o= Subject key identifier: D7:98:02:89:15:46:14:24:06:F9:AF:23:84:68:14:BE:27:0E:88:48 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE92D47085C6E0920F95A4BB70B66997E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/15gCiRVGFCQG-a8jhGgUvicOiEg.roa Signing time: Thu 04 Dec 2025 11:44:09 +0000 ROA not before: Thu 04 Dec 2025 11:44:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 82.152.122.0/24 maxlen: 24 82.153.203.0/24 maxlen: 24 213.210.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:2d:47:08:5c:6e:09:20:f9:5a:4b:b7:0b:66:99:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 4 11:44:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d79802891546142406f9af23846814be270e8848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:50:f1:73:63:b8:71:96:8d:ae:45:ce:f1: 10:a2:3a:87:56:15:78:9b:6f:fb:cf:5c:36:84:ef: b9:6e:27:cc:9e:14:78:b5:c7:b5:dc:c9:64:62:bf: 1f:1d:07:aa:93:a0:b8:0d:21:c5:6a:d7:16:bf:d2: fc:cd:1f:98:94:da:98:87:f4:8c:ff:78:67:2d:46: 46:4a:2c:d9:a4:e5:89:88:64:a5:f1:a1:2d:44:88: 3a:f1:6b:c4:2a:51:d9:fe:f6:ad:5d:58:49:bf:dc: 47:9c:1b:66:98:fe:97:79:84:65:ad:68:50:2f:3f: f7:8e:7c:59:10:89:62:92:b3:09:1a:4b:75:21:ea: a4:8f:a8:e4:50:6d:83:af:07:c1:bc:6d:b3:93:e4: b8:23:96:4a:b9:1b:29:a9:76:07:17:00:b3:02:b7: 83:41:18:3d:4b:6c:db:a4:5b:3a:f9:0a:c4:ef:80: 17:e9:09:47:83:31:bd:48:cc:f6:04:9c:66:74:b1: bb:7a:78:a2:ad:60:74:a1:0b:4e:a2:ba:f1:35:bb: 1d:52:79:24:54:7c:51:b2:28:f0:cd:a3:82:a6:27: 28:90:53:9f:b1:02:a6:2a:fb:04:20:65:48:4a:fd: 5f:38:c0:8c:cc:15:9b:1b:c3:b0:3c:3c:87:2c:98: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:02:89:15:46:14:24:06:F9:AF:23:84:68:14:BE:27:0E:88:48 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/15gCiRVGFCQG-a8jhGgUvicOiEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.122.0/24 82.153.203.0/24 213.210.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a8:11:88:bd:a5:c6:6b:c6:e0:4b:1d:2a:34:78:5d:41:15: 2b:0f:4c:49:d2:13:12:9d:7e:ea:1f:1a:dc:22:5d:aa:60:0a: 99:5d:a4:4f:9c:59:7b:09:ba:7b:31:38:5c:43:36:2a:a2:09: 60:e5:3e:ef:b1:4d:16:9f:c6:1a:84:d3:f7:d2:da:c6:8d:9c: 61:04:ee:cd:d6:37:59:c5:00:7f:6d:64:09:51:47:ab:8c:ca: 0f:c6:9c:f4:7f:99:47:20:ab:ef:e1:9f:52:63:12:a3:60:60: 0e:2a:f3:e4:ad:9b:d1:d4:b1:d8:2a:e8:1c:55:50:7a:34:0c: ff:7c:57:9d:cd:68:a0:4d:c2:6b:e5:a0:52:f5:58:02:6e:ae: 84:c0:f7:e6:34:6c:4a:b3:34:83:08:33:58:a2:d7:c6:b0:e1: 07:d5:d8:22:c0:39:18:27:8f:8a:ba:01:7d:95:a0:cf:2d:07: 76:7d:85:a7:3b:c8:72:70:25:4d:f6:16:05:e3:ed:82:b9:e6: 95:ce:9f:d4:89:ca:43:79:95:0d:63:eb:c3:56:98:7a:c3:1b: 26:d8:48:af:35:62:8f:34:9e:99:ac:58:f4:19:05:66:03:9e: bb:81:63:ef:3a:46:38:70:2f:2e:51:a5:33:23:e1:9e:c9:92: 66:0e:42:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrpLUcIXG4JIPlaS7cLZpl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA0MTE0NDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzk4MDI4OTE1NDYxNDI0MDZmOWFmMjM4NDY4MTRiZTI3MGU4ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXJQ8XNjuHGWja5FzvEQojqHVhV4 m2/7z1w2hO+5bifMnhR4tce13MlkYr8fHQeqk6C4DSHFatcWv9L8zR+YlNqYh/SM /3hnLUZGSizZpOWJiGSl8aEtRIg68WvEKlHZ/vatXVhJv9xHnBtmmP6XeYRlrWhQ Lz/3jnxZEIlikrMJGkt1Ieqkj6jkUG2DrwfBvG2zk+S4I5ZKuRspqXYHFwCzAreD QRg9S2zbpFs6+QrE74AX6QlHgzG9SMz2BJxmdLG7eniirWB0oQtOorrxNbsdUnkk VHxRsijwzaOCpicokFOfsQKmKvsEIGVISv1fOMCMzBWbG8OwPDyHLJjEmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNeYAokVRhQkBvmvI4RoFL4nDohIMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMTVnQ2lSVkdGQ1FHLWE4amhHZ1V2aWNPaUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUph6AwQA UpnLAwQA1dIpMA0GCSqGSIb3DQEBCwUAA4IBAQAtqBGIvaXGa8bgSx0qNHhdQRUr D0xJ0hMSnX7qHxrcIl2qYAqZXaRPnFl7Cbp7MThcQzYqoglg5T7vsU0Wn8YahNP3 0trGjZxhBO7N1jdZxQB/bWQJUUerjMoPxpz0f5lHIKvv4Z9SYxKjYGAOKvPkrZvR 1LHYKugcVVB6NAz/fFedzWigTcJr5aBS9VgCbq6EwPfmNGxKszSDCDNYotfGsOEH 1dgiwDkYJ4+KugF9laDPLQd2fYWnO8hycCVN9hYF4+2CueaVzp/UicpDeZUNY+vD Vph6wxsm2EivNWKPNJ6ZrFj0GQVmA567gWPvOkY4cC8uUaUzI+GeyZJmDkKi -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:43 2025 by rpki-client