This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OAuM-ENngZtrUnbI91uiJU3T8yE.roa File: OAuM-ENngZtrUnbI91uiJU3T8yE.roa (raw, json) Hash identifier: aY8HrSlcEzk+VEdEHRy0KNtxCLIqkwxwGPz/WbzhCQ4= Subject key identifier: 38:0B:8C:F8:43:67:81:9B:6B:52:76:C8:F7:5B:A2:25:4D:D3:F3:21 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE86ED91506B1C2883F0E1206B32B84C0 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OAuM-ENngZtrUnbI91uiJU3T8yE.roa Signing time: Thu 04 Dec 2025 08:16:09 +0000 ROA not before: Thu 04 Dec 2025 08:16:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154049 IP address blocks: 37.252.25.0/24 maxlen: 24 77.107.83.0/24 maxlen: 24 79.99.147.0/24 maxlen: 24 81.168.38.0/24 maxlen: 24 109.176.14.0/24 maxlen: 24 212.38.80.0/24 maxlen: 24 213.210.24.0/24 maxlen: 24 217.144.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:6e:d9:15:06:b1:c2:88:3f:0e:12:06:b3:2b:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 4 08:16:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=380b8cf84367819b6b5276c8f75ba2254dd3f321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:81:ce:6d:84:c3:da:ba:35:f8:28:e6:9e: 65:0f:65:a0:36:57:0a:82:e8:3a:67:3c:22:09:d1: c8:0e:26:28:b7:33:02:46:5e:43:ab:c4:10:97:ca: 4c:10:11:70:6a:ed:c8:bc:29:87:3a:3b:29:4c:94: 49:64:bc:4b:e3:6d:03:67:ce:95:c6:6e:46:88:19: 23:35:65:b6:e1:d2:d9:e9:6d:81:2d:c5:61:55:3e: a0:24:bf:7a:9f:a0:25:2f:34:f5:90:cf:b5:af:34: 39:7c:1b:ca:a7:8e:70:5e:0b:2a:00:f4:f2:56:6c: af:c3:6b:5e:c8:e1:c4:74:5b:ac:a0:90:f2:3c:46: 6b:ff:2b:44:7f:be:4c:37:6b:1f:76:4f:13:bd:15: ed:0b:4c:06:df:0a:9a:13:15:18:9c:3b:8e:81:02: 50:60:c7:e0:cc:83:da:67:b7:0e:2b:56:82:fc:5f: 9a:e6:66:25:d1:13:0c:57:b7:03:57:99:5d:8a:d5: fe:d1:8d:d4:a2:44:a4:36:14:ee:4e:f7:40:6d:b0: 11:7d:30:07:ce:9a:c6:da:89:99:c9:53:aa:1d:70: ee:5d:d2:a3:86:1e:20:f9:4f:e3:0f:54:4c:1e:82: 3b:77:8e:e6:aa:3b:10:95:12:10:ec:9b:b5:f1:14: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:8C:F8:43:67:81:9B:6B:52:76:C8:F7:5B:A2:25:4D:D3:F3:21 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OAuM-ENngZtrUnbI91uiJU3T8yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.25.0/24 77.107.83.0/24 79.99.147.0/24 81.168.38.0/24 109.176.14.0/24 212.38.80.0/24 213.210.24.0/24 217.144.147.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:f7:dc:36:84:83:c3:b5:08:cc:31:31:80:de:0f:fe:c5:34: 45:9b:23:df:11:ca:8a:35:f0:1d:29:29:7e:55:ca:d5:2d:9d: 2b:38:27:2e:8d:c0:be:a8:c2:f8:f0:a0:f9:1d:9d:ed:d7:4f: 95:40:6f:de:d3:38:36:37:ac:4f:3d:66:1b:ee:7c:b0:d6:69: 4c:b1:fb:fd:c8:0f:f7:72:b1:b9:6c:fa:a9:af:e6:49:28:9f: a2:7a:2a:52:e6:f1:00:a0:77:13:43:2d:1f:b6:3d:57:da:de: 31:c9:d7:55:84:d5:01:b6:58:f8:e2:28:bd:08:90:c0:41:05: 36:49:26:2f:c4:17:75:34:92:87:93:29:c9:9a:f7:38:78:00: 17:c9:f1:c1:5b:c1:94:4e:f2:4d:5d:ec:16:6c:2f:cf:9c:a5: ce:a9:8e:bd:39:33:4c:33:c9:de:a5:96:ed:e9:75:6d:c1:49: dc:24:97:70:65:d1:2f:4d:c9:d2:9c:90:be:5a:c2:96:11:90: 35:1f:75:8e:f9:a3:3e:aa:8b:42:22:53:ba:8e:34:77:a6:05: b3:17:a0:23:ca:07:a2:b3:a4:44:1c:14:39:c8:0f:95:83:ef: f6:e9:a6:ed:24:b7:00:dd:56:f9:d0:06:46:34:40:14:eb:69: e2:ce:52:f6 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrobtkVBrHCiD8OEgazK4TAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA0MDgxNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBiOGNmODQzNjc4MTliNmI1Mjc2YzhmNzViYTIyNTRkZDNmMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06iBzm2Ew9q6Nfgo5p5lD2WgNlcK gug6ZzwiCdHIDiYotzMCRl5Dq8QQl8pMEBFwau3IvCmHOjspTJRJZLxL420DZ86V xm5GiBkjNWW24dLZ6W2BLcVhVT6gJL96n6AlLzT1kM+1rzQ5fBvKp45wXgsqAPTy Vmyvw2teyOHEdFusoJDyPEZr/ytEf75MN2sfdk8TvRXtC0wG3wqaExUYnDuOgQJQ YMfgzIPaZ7cOK1aC/F+a5mYl0RMMV7cDV5lditX+0Y3UokSkNhTuTvdAbbARfTAH zprG2omZyVOqHXDuXdKjhh4g+U/jD1RMHoI7d47mqjsQlRIQ7Ju18RSriwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDgLjPhDZ4Gba1J2yPdboiVN0/MhMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvT0F1TS1FTm5nWnRyVW5iSTkxdWlKVTNUOHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAJfwZAwQA TWtTAwQAT2OTAwQAUagmAwQAbbAOAwQA1CZQAwQA1dIYAwQA2ZCTMA0GCSqGSIb3 DQEBCwUAA4IBAQCP99w2hIPDtQjMMTGA3g/+xTRFmyPfEcqKNfAdKSl+VcrVLZ0r OCcujcC+qML48KD5HZ3t10+VQG/e0zg2N6xPPWYb7nyw1mlMsfv9yA/3crG5bPqp r+ZJKJ+ieipS5vEAoHcTQy0ftj1X2t4xyddVhNUBtlj44ii9CJDAQQU2SSYvxBd1 NJKHkynJmvc4eAAXyfHBW8GUTvJNXewWbC/PnKXOqY69OTNMM8nepZbt6XVtwUnc JJdwZdEvTcnSnJC+WsKWEZA1H3WO+aM+qotCIlO6jjR3pgWzF6Ajygeis6REHBQ5 yA+Vg+/26abtJLcA3Vb50AZGNEAU62nizlL2 -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:44 2025 by rpki-client