This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZX3P6GuMhfNAwWDDbjbEkcY1xAw.roa File: ZX3P6GuMhfNAwWDDbjbEkcY1xAw.roa (raw, json) Hash identifier: jn/kbHSt9GV1mJ4Z6paQaMxSCFpeMHHzk8zMKcyjwKY= Subject key identifier: 65:7D:CF:E8:6B:8C:85:F3:40:C1:60:C3:6E:36:C4:91:C6:35:C4:0C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0291DCEDB8A904DE9A2CE7B907EBE632 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZX3P6GuMhfNAwWDDbjbEkcY1xAw.roa Signing time: Tue 09 Dec 2025 10:04:32 +0000 ROA not before: Tue 09 Dec 2025 10:04:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399073 IP address blocks: 77.107.105.0/24 maxlen: 24 81.168.126.0/24 maxlen: 24 82.152.51.0/24 maxlen: 24 82.153.159.0/24 maxlen: 24 82.153.215.0/24 maxlen: 24 89.213.139.0/24 maxlen: 24 89.213.152.0/24 maxlen: 24 109.176.193.0/24 maxlen: 24 217.145.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:dc:ed:b8:a9:04:de:9a:2c:e7:b9:07:eb:e6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 9 10:04:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=657dcfe86b8c85f340c160c36e36c491c635c40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:e3:0b:16:06:d6:e3:d1:f0:05:5b:f0:47: b7:d1:79:20:81:dd:c8:9a:6e:f0:bf:ab:17:2a:c9: 66:78:5d:aa:8a:09:d8:6b:80:b9:f8:26:78:b9:10: 62:2a:ea:7d:54:f2:65:79:58:b5:5c:ea:8f:e8:7f: 57:92:73:92:34:c5:7f:ca:80:e4:4d:70:04:66:bd: dd:98:f3:06:3c:c1:be:a1:86:6d:b2:35:7f:2e:c9: 5e:95:11:29:f8:1f:4a:67:f3:4c:fb:c7:74:72:48: c6:88:c8:8d:23:d2:80:24:89:31:88:73:90:00:e3: 21:60:55:88:56:fb:86:0c:4d:70:d4:b5:ac:2b:67: 34:61:5c:76:43:d8:da:6d:4c:a8:7f:0e:45:d0:3a: db:3c:e2:11:0e:a6:be:c5:68:f8:ba:14:6d:f9:6e: 6c:88:b6:34:c4:86:0b:b4:53:f3:a5:2e:9f:e3:ea: 8d:7d:f4:1a:e3:13:55:87:7a:14:cf:49:99:62:18: 20:32:ee:de:03:23:af:cd:6e:1a:b7:76:8c:77:0c: 7a:b0:30:cb:e4:02:40:65:5d:bc:d5:2b:57:7b:b9: fe:13:de:e4:ea:ad:14:6f:f4:53:06:ba:11:f2:8d: 4e:46:b1:e2:dd:67:a1:df:93:07:90:44:51:06:c5: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7D:CF:E8:6B:8C:85:F3:40:C1:60:C3:6E:36:C4:91:C6:35:C4:0C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZX3P6GuMhfNAwWDDbjbEkcY1xAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.105.0/24 81.168.126.0/24 82.152.51.0/24 82.153.159.0/24 82.153.215.0/24 89.213.139.0/24 89.213.152.0/24 109.176.193.0/24 217.145.78.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:b5:3b:ed:47:06:15:6d:61:64:8c:a0:ff:0a:b2:a5:20:2f: 5b:7f:86:8f:8d:e1:80:61:fe:3e:19:ae:a5:e9:b9:85:1d:2d: a0:0a:46:80:f9:0c:de:02:dc:c5:b1:f6:63:2a:3c:5b:19:29: 78:96:b0:48:10:27:8f:8c:36:ab:50:a8:5f:f2:25:d4:a6:43: d7:45:bb:78:48:2f:92:68:22:c0:5a:69:c0:0d:84:57:f0:54: d3:18:ee:e8:b4:14:09:7a:cf:e4:0a:cb:e5:e9:aa:53:13:a2: 26:5b:6e:9e:10:64:53:cf:65:71:2a:53:28:d0:07:30:fd:58: e3:42:77:9d:63:fb:2a:0d:78:f4:50:54:54:90:0c:cc:29:69: 61:0b:8c:de:78:97:c2:64:eb:8f:2b:2c:e2:2a:59:b7:6b:e3: a1:5a:dd:b5:84:32:bf:fe:0f:9c:9a:a1:db:35:57:de:e7:26: a1:67:ca:a4:70:0b:a6:c7:63:22:eb:fc:79:64:42:25:25:62: 16:a0:b8:e5:5d:87:8c:67:fa:ef:eb:89:a0:cc:55:78:32:ff: 32:85:34:12:e5:a8:00:a9:12:7a:51:55:5d:73:36:32:3c:b3: e5:2c:3d:3e:3d:5d:7f:76:61:9b:a8:32:73:ba:4d:46:15:c3: 47:89:1e:46 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsCkdztuKkE3pos57kH6+YyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA5MTAwNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTdkY2ZlODZiOGM4NWYzNDBjMTYwYzM2ZTM2YzQ5MWM2MzVjNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhXjCxYG1uPR8AVb8Ee30Xkggd3I mm7wv6sXKslmeF2qignYa4C5+CZ4uRBiKup9VPJleVi1XOqP6H9XknOSNMV/yoDk TXAEZr3dmPMGPMG+oYZtsjV/LslelREp+B9KZ/NM+8d0ckjGiMiNI9KAJIkxiHOQ AOMhYFWIVvuGDE1w1LWsK2c0YVx2Q9jabUyofw5F0DrbPOIRDqa+xWj4uhRt+W5s iLY0xIYLtFPzpS6f4+qNffQa4xNVh3oUz0mZYhggMu7eAyOvzW4at3aMdwx6sDDL 5AJAZV281StXe7n+E97k6q0Ub/RTBroR8o1ORrHi3Weh35MHkERRBsVn1wIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGV9z+hrjIXzQMFgw242xJHGNcQMMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWlgzUDZHdU1oZk5Bd1dERGJqYkVrY1kxeEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATWtpAwQA Uah+AwQAUpgzAwQAUpmfAwQAUpnXAwQAWdWLAwQAWdWYAwQAbbDBAwQA2ZFOMA0G CSqGSIb3DQEBCwUAA4IBAQB9tTvtRwYVbWFkjKD/CrKlIC9bf4aPjeGAYf4+Ga6l 6bmFHS2gCkaA+QzeAtzFsfZjKjxbGSl4lrBIECePjDarUKhf8iXUpkPXRbt4SC+S aCLAWmnADYRX8FTTGO7otBQJes/kCsvl6apTE6ImW26eEGRTz2VxKlMo0Acw/Vjj QnedY/sqDXj0UFRUkAzMKWlhC4zeeJfCZOuPKyziKlm3a+OhWt21hDK//g+cmqHb NVfe5yahZ8qkcAumx2Mi6/x5ZEIlJWIWoLjlXYeMZ/rv64mgzFV4Mv8yhTQS5agA qRJ6UVVdczYyPLPlLD0+PV1/dmGbqDJzuk1GFcNHiR5G -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:10 2025 by rpki-client