This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SzGFh50rqr9TYt_BsRzemfC-LeU.roa File: SzGFh50rqr9TYt_BsRzemfC-LeU.roa (raw, json) Hash identifier: 1pZLGbOWRtUKuqgyggidnQLtDSguozEfrgFIEzkrQFI= Subject key identifier: 4B:31:85:87:9D:2B:AA:BF:53:62:DF:C1:B1:1C:DE:99:F0:BE:2D:E5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B02E6FA1254BE50F00165385F92AD2FFD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SzGFh50rqr9TYt_BsRzemfC-LeU.roa Signing time: Tue 09 Dec 2025 11:37:30 +0000 ROA not before: Tue 09 Dec 2025 11:37:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211439 IP address blocks: 37.252.28.0/24 maxlen: 24 79.99.149.0/24 maxlen: 24 82.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:e6:fa:12:54:be:50:f0:01:65:38:5f:92:ad:2f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 9 11:37:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b3185879d2baabf5362dfc1b11cde99f0be2de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:78:ca:16:16:06:da:47:a0:64:40:e9:03:03: 59:6b:ec:42:91:4e:2d:99:5b:3d:31:49:0b:51:17: 4b:b2:90:26:a7:59:13:fd:59:c0:fc:4b:d3:80:a9: d1:9b:30:2f:f8:58:a9:c3:0e:5a:ad:d4:1b:56:9d: 84:e8:f4:28:4d:c8:71:00:2d:8c:c8:37:4f:a9:b5: 91:3d:77:1b:9d:18:9c:09:81:58:35:1d:8f:2b:80: 9c:0f:ac:c6:d2:46:06:52:7b:73:7d:c2:f1:61:18: 1b:c7:62:eb:40:8b:b4:e8:40:cc:70:62:ad:37:70: 24:e3:c3:37:3c:fc:e3:25:4b:ed:8d:eb:e5:ac:70: 03:3e:99:e3:2e:1a:0c:7c:e0:7e:3a:20:e9:ae:a7: 81:4a:d6:a5:7d:62:18:ab:12:47:76:6a:c0:28:33: 80:4a:10:51:78:40:69:7e:d8:3e:72:a8:d8:90:6a: 39:fc:b8:96:bc:67:1c:50:81:9f:cc:39:6b:e7:f8: c7:cc:63:17:c9:dc:e0:08:5b:1b:67:cf:15:1f:5f: 19:9c:46:cb:84:e6:41:e7:cc:ef:10:26:9e:97:9f: 8b:e8:6a:32:24:c5:ee:6b:4a:2d:33:e1:76:5c:75: 63:fd:71:de:87:fd:85:4a:fb:1c:cf:e1:33:3a:46: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:85:87:9D:2B:AA:BF:53:62:DF:C1:B1:1C:DE:99:F0:BE:2D:E5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SzGFh50rqr9TYt_BsRzemfC-LeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.28.0/24 79.99.149.0/24 82.153.1.0/24 Signature Algorithm: sha256WithRSAEncryption 23:df:86:f2:e8:6f:54:8b:39:dc:a8:c5:f2:0c:e8:1a:59:a3: a6:0c:75:a3:17:ac:c2:a6:c8:9c:9e:50:7b:74:cf:31:78:1f: 14:bf:8a:8d:e0:fe:3f:62:b2:93:79:e7:59:68:e6:e4:03:f6: 56:47:19:cd:ef:7e:35:03:ed:6e:98:15:7a:1a:ef:f4:a4:1e: 9a:57:03:41:0c:8e:cd:4b:d8:b4:42:9b:d7:a0:84:a1:07:ec: 41:b4:3c:aa:a3:89:d4:fb:68:c5:af:de:8e:65:06:ff:38:59: 97:2f:20:44:53:db:40:43:ef:8f:a4:81:ae:ce:f7:50:90:36: 01:75:c0:b2:4c:54:a1:56:87:b7:c7:1a:f3:79:ba:d6:9f:ae: 6c:a7:fc:ce:51:9b:fd:2a:ab:dd:a3:d9:a1:50:1a:12:b8:6e: 7d:f6:64:d7:4d:40:c2:cd:0f:8a:92:d5:67:1c:6f:74:ec:d5: f0:35:94:5e:90:b2:f5:e2:b8:1b:57:e6:34:78:df:e2:fa:65: c2:71:0d:00:0b:80:ff:5f:41:07:3b:1d:12:4a:f1:2c:9b:4c: 3e:6b:dc:c7:0d:74:fc:a7:16:cf:81:21:f6:9a:d1:cc:fc:2e: b9:cb:64:70:2a:f3:3e:8a:9b:2a:19:fc:c7:91:7a:f3:ae:48: 95:2d:49:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsC5voSVL5Q8AFlOF+SrS/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA5MTEzNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjMxODU4NzlkMmJhYWJmNTM2MmRmYzFiMTFjZGU5OWYwYmUyZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4njKFhYG2kegZEDpAwNZa+xCkU4t mVs9MUkLURdLspAmp1kT/VnA/EvTgKnRmzAv+Fipww5ardQbVp2E6PQoTchxAC2M yDdPqbWRPXcbnRicCYFYNR2PK4CcD6zG0kYGUntzfcLxYRgbx2LrQIu06EDMcGKt N3Ak48M3PPzjJUvtjevlrHADPpnjLhoMfOB+OiDprqeBStalfWIYqxJHdmrAKDOA ShBReEBpftg+cqjYkGo5/LiWvGccUIGfzDlr5/jHzGMXydzgCFsbZ88VH18ZnEbL hOZB58zvECael5+L6GoyJMXua0otM+F2XHVj/XHeh/2FSvscz+EzOkZnIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEsxhYedK6q/U2LfwbEc3pnwvi3lMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvU3pHRmg1MHJxcjlUWXRfQnNSemVtZkMtTGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJfwcAwQA T2OVAwQAUpkBMA0GCSqGSIb3DQEBCwUAA4IBAQAj34by6G9UizncqMXyDOgaWaOm DHWjF6zCpsicnlB7dM8xeB8Uv4qN4P4/YrKTeedZaObkA/ZWRxnN7341A+1umBV6 Gu/0pB6aVwNBDI7NS9i0QpvXoIShB+xBtDyqo4nU+2jFr96OZQb/OFmXLyBEU9tA Q++PpIGuzvdQkDYBdcCyTFShVoe3xxrzebrWn65sp/zOUZv9Kqvdo9mhUBoSuG59 9mTXTUDCzQ+KktVnHG907NXwNZRekLL14rgbV+Y0eN/i+mXCcQ0AC4D/X0EHOx0S SvEsm0w+a9zHDXT8pxbPgSH2mtHM/C65y2RwKvM+ipsqGfzHkXrzrkiVLUlW -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:55 2025 by rpki-client