This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ThFlwYm4n3qwyuGEzGoQS0UeG5E.roa File: ThFlwYm4n3qwyuGEzGoQS0UeG5E.roa (raw, json) Hash identifier: ZjTHShahxV01P7O3GDu4L+lCrKjw6tPBZoGh80Ev9Ak= Subject key identifier: 4E:11:65:C1:89:B8:9F:7A:B0:CA:E1:84:CC:6A:10:4B:45:1E:1B:91 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD9552EF65A1299A89846C97E28234173 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ThFlwYm4n3qwyuGEzGoQS0UeG5E.roa Signing time: Mon 01 Dec 2025 09:53:49 +0000 ROA not before: Mon 01 Dec 2025 09:53:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59711 IP address blocks: 82.153.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:2e:f6:5a:12:99:a8:98:46:c9:7e:28:23:41:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e1165c189b89f7ab0cae184cc6a104b451e1b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:7a:06:35:09:ce:8f:e0:a9:3c:af:3f:ae: 8e:4c:4f:3e:3d:89:33:42:c3:2e:af:d1:d1:b6:81: e9:78:0b:db:28:7d:8c:5b:5b:70:66:06:3a:50:d3: ad:bc:76:87:e8:b4:96:d0:c5:7c:f0:60:3b:3e:3d: 9d:cb:0d:10:a3:35:f7:85:77:71:d2:ab:32:34:70: a6:0e:50:15:21:5e:7d:75:a8:59:c7:9f:b9:ea:52: 60:d5:45:b6:9c:64:13:9d:ce:93:e4:b9:54:43:b4: c6:a7:0b:d0:39:e4:5f:f5:29:f4:0b:4c:12:bf:48: b6:96:75:92:01:33:b8:0f:71:f8:49:71:33:97:dd: 7d:92:bd:f6:b9:3a:c5:65:6d:26:f9:e7:91:55:5a: 97:0d:73:3b:c8:c7:0f:2c:54:4d:98:1f:51:c7:d5: 7e:b8:38:9f:50:a3:04:15:e6:9f:8b:ff:2f:12:77: bc:96:03:99:12:b2:4c:95:3e:dc:f9:8f:09:7a:fb: de:41:29:b3:cc:ca:5d:12:61:08:9b:17:e4:81:37: f6:9e:87:e7:40:4b:5c:53:0e:79:27:b7:a6:69:09: a2:6e:49:a3:37:75:da:0b:9f:c7:bb:d3:50:aa:26: 51:92:ff:b8:41:9a:34:69:09:67:ca:c5:cd:8c:37: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:11:65:C1:89:B8:9F:7A:B0:CA:E1:84:CC:6A:10:4B:45:1E:1B:91 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ThFlwYm4n3qwyuGEzGoQS0UeG5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.248.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e1:b0:6b:f7:72:d2:59:e1:f8:2f:66:25:79:5c:0e:86:29: ff:71:45:70:ee:58:d2:8e:18:95:4d:cb:07:a3:e3:a9:cc:59: d1:b0:da:25:85:ad:ae:70:8a:50:38:38:94:3a:7a:6e:a1:e8: 2c:0e:35:36:2e:43:09:a2:92:ae:a5:23:f7:8b:66:57:e7:8d: 02:7c:2c:6b:21:75:0c:52:72:76:3d:4b:95:f3:69:46:50:76: 60:f8:07:72:0b:9e:c3:85:59:df:0a:c3:b6:2b:0f:8d:df:69: e3:5a:09:6d:4b:9b:3f:bb:96:06:c1:7d:15:00:b5:39:58:94: 39:08:d2:a2:d4:9b:1a:89:bb:a7:ed:d8:fc:50:34:3f:47:cc: 56:40:d8:0d:35:09:30:59:74:d8:75:e5:0a:f0:78:a0:27:b4: 8d:1f:f4:29:b0:92:ff:96:4c:0d:9c:e3:1f:76:97:bc:87:0a: 35:9e:0b:04:6a:e2:88:64:85:7f:28:bb:b7:47:02:8d:32:95: d7:95:cd:87:cf:f7:5c:2c:b6:7a:81:00:96:99:71:a1:f5:d1: 74:ff:4a:e3:e1:d3:4e:4e:66:aa:c5:7e:59:b3:d0:69:42:48: 93:00:29:15:97:76:ed:4d:20:04:b3:fc:fb:65:e1:c2:ac:23: 9a:ff:2d:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZVS72WhKZqJhGyX4oI0FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTExNjVjMTg5Yjg5ZjdhYjBjYWUxODRjYzZhMTA0YjQ1MWUxYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQt6BjUJzo/gqTyvP66OTE8+PYkz QsMur9HRtoHpeAvbKH2MW1twZgY6UNOtvHaH6LSW0MV88GA7Pj2dyw0QozX3hXdx 0qsyNHCmDlAVIV59dahZx5+56lJg1UW2nGQTnc6T5LlUQ7TGpwvQOeRf9Sn0C0wS v0i2lnWSATO4D3H4SXEzl919kr32uTrFZW0m+eeRVVqXDXM7yMcPLFRNmB9Rx9V+ uDifUKMEFeafi/8vEne8lgOZErJMlT7c+Y8JevveQSmzzMpdEmEImxfkgTf2nofn QEtcUw55J7emaQmibkmjN3XaC5/Hu9NQqiZRkv+4QZo0aQlnysXNjDeoHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4RZcGJuJ96sMrhhMxqEEtFHhuRMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVGhGbHdZbTRuM3F3eXVHRXpHb1FTMFVlRzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpn4MA0G CSqGSIb3DQEBCwUAA4IBAQBF4bBr93LSWeH4L2YleVwOhin/cUVw7ljSjhiVTcsH o+OpzFnRsNolha2ucIpQODiUOnpuoegsDjU2LkMJopKupSP3i2ZX540CfCxrIXUM UnJ2PUuV82lGUHZg+AdyC57DhVnfCsO2Kw+N32njWgltS5s/u5YGwX0VALU5WJQ5 CNKi1Jsaibun7dj8UDQ/R8xWQNgNNQkwWXTYdeUK8HigJ7SNH/QpsJL/lkwNnOMf dpe8hwo1ngsEauKIZIV/KLu3RwKNMpXXlc2Hz/dcLLZ6gQCWmXGh9dF0/0rj4dNO TmaqxX5Zs9BpQkiTACkVl3btTSAEs/z7ZeHCrCOa/y0P -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:20 2025 by rpki-client