This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fP96UYS4GYTXZdl3j0q1pvWZfaU.roa File: fP96UYS4GYTXZdl3j0q1pvWZfaU.roa (raw, json) Hash identifier: 2Ta5BkRX2jBDO3O6P+5lMXyIkX66I2vjRlMZS7cz8U0= Subject key identifier: 7C:FF:7A:51:84:B8:19:84:D7:65:D9:77:8F:4A:B5:A6:F5:99:7D:A5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD9552E9D642F39574B9B0A9DF43FF405 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fP96UYS4GYTXZdl3j0q1pvWZfaU.roa Signing time: Mon 01 Dec 2025 09:53:49 +0000 ROA not before: Mon 01 Dec 2025 09:53:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 77.93.137.0/24 maxlen: 24 77.93.149.0/24 maxlen: 24 82.152.174.0/23 maxlen: 23 82.153.208.0/22 maxlen: 22 82.163.19.0/24 maxlen: 24 89.213.58.0/24 maxlen: 24 89.213.108.0/23 maxlen: 24 89.213.110.0/24 maxlen: 24 89.213.122.0/24 maxlen: 24 89.213.126.0/24 maxlen: 24 89.213.194.0/23 maxlen: 24 89.213.228.0/24 maxlen: 24 89.213.240.0/23 maxlen: 24 89.213.250.0/24 maxlen: 24 213.210.16.0/24 maxlen: 24 213.210.18.0/24 maxlen: 24 213.210.33.0/24 maxlen: 24 213.210.51.0/24 maxlen: 24 213.218.220.0/24 maxlen: 24 217.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:2e:9d:64:2f:39:57:4b:9b:0a:9d:f4:3f:f4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cff7a5184b81984d765d9778f4ab5a6f5997da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:34:de:de:c9:e4:ea:ea:c2:1b:e2:c9:41: 15:27:60:e0:c1:95:ef:1c:77:36:5b:6c:89:ac:32: 91:a8:94:38:01:26:27:80:3d:a1:c7:09:c3:0f:b1: 1f:31:f6:4b:9c:3c:73:77:e5:8c:b5:61:21:98:3b: ba:49:0d:1c:f8:b2:de:44:c4:a4:8b:2e:b6:3c:77: 9b:58:11:86:07:d0:91:bb:f4:56:2e:5a:04:99:04: cd:6b:db:17:61:62:f5:95:7a:77:b2:5f:66:a4:5b: 25:9a:43:c9:1e:29:91:36:ee:fd:b9:a4:c9:e3:83: 57:a2:08:66:87:87:86:cf:39:df:2a:08:80:90:5a: 23:82:a9:42:44:f1:b7:f7:01:43:fa:96:4c:05:5b: c2:38:9a:ef:f4:f0:ef:b0:b8:33:59:0b:ad:45:7b: ce:b5:23:40:31:c1:fe:63:ce:2e:fe:75:2d:b0:5b: 2e:79:c7:54:f0:94:d3:35:84:28:e9:4b:16:21:9a: ad:dc:94:e3:f3:d2:ee:74:98:3a:d9:2d:23:1a:64: ed:22:62:39:56:c1:d3:0f:56:49:f8:aa:24:12:8f: bf:0d:30:54:32:0a:09:a4:34:c5:ed:12:61:ee:41: d9:21:d8:ce:82:7b:8d:00:3f:a8:ba:24:fb:61:3e: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:7A:51:84:B8:19:84:D7:65:D9:77:8F:4A:B5:A6:F5:99:7D:A5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fP96UYS4GYTXZdl3j0q1pvWZfaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.137.0/24 77.93.149.0/24 82.152.174.0/23 82.153.208.0/22 82.163.19.0/24 89.213.58.0/24 89.213.108.0-89.213.110.255 89.213.122.0/24 89.213.126.0/24 89.213.194.0/23 89.213.228.0/24 89.213.240.0/23 89.213.250.0/24 213.210.16.0/24 213.210.18.0/24 213.210.33.0/24 213.210.51.0/24 213.218.220.0/24 217.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 98:dc:52:7b:e7:f6:c7:63:4d:fb:19:c8:8b:60:8b:02:d0:1b: fe:15:05:f0:1e:1d:1b:c4:e1:90:ed:19:ec:68:cf:89:03:aa: 92:31:77:18:08:be:4a:ed:44:1f:38:2e:bc:6c:fe:3e:fe:4f: da:08:03:ae:78:ca:14:2a:e2:c3:dc:bb:0b:81:39:18:e7:cc: 12:5d:a3:a1:59:6a:ea:b4:e0:b1:0a:b5:1b:94:26:d2:35:17: 2c:ab:b4:ca:22:59:98:e2:bd:7e:ec:b2:41:45:e6:12:54:87: 99:5b:6d:f9:c6:b5:89:40:27:39:18:60:77:48:73:57:c1:3f: f0:d6:02:ac:f1:b3:5e:60:b3:af:84:fe:d0:e3:3e:06:4d:f5: 83:68:65:f6:41:c8:df:3a:f5:6c:b0:08:63:a7:64:46:7f:13: 74:66:44:47:0b:9b:f9:84:c9:9e:a4:d2:7b:30:f9:d5:0d:95: e2:06:79:2a:ab:ef:6e:7b:d2:84:75:78:38:ed:db:df:3b:27: 35:51:21:5e:41:dc:5a:df:14:82:1a:be:13:00:42:d6:9d:3f: 5f:7f:78:d2:6b:93:a1:c6:bb:2d:63:c2:fc:c1:fb:e8:f2:bf: 03:9e:50:07:31:ee:13:07:19:18:38:da:37:e3:a3:b2:c6:34: 80:79:32:41 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZrZVS6dZC85V0ubCp30P/QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2ZmN2E1MTg0YjgxOTg0ZDc2NWQ5Nzc4ZjRhYjVhNmY1OTk3ZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssY03t7J5OrqwhviyUEVJ2DgwZXv HHc2W2yJrDKRqJQ4ASYngD2hxwnDD7EfMfZLnDxzd+WMtWEhmDu6SQ0c+LLeRMSk iy62PHebWBGGB9CRu/RWLloEmQTNa9sXYWL1lXp3sl9mpFslmkPJHimRNu79uaTJ 44NXoghmh4eGzznfKgiAkFojgqlCRPG39wFD+pZMBVvCOJrv9PDvsLgzWQutRXvO tSNAMcH+Y84u/nUtsFsuecdU8JTTNYQo6UsWIZqt3JTj89LudJg62S0jGmTtImI5 VsHTD1ZJ+KokEo+/DTBUMgoJpDTF7RJh7kHZIdjOgnuNAD+ouiT7YT52vQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFHz/elGEuBmE12XZd49Ktab1mX2lMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZlA5NlVZUzRHWVRYWmRsM2owcTFwdldaZmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAE1d iQMEAE1dlQMEAVKYrgMEAlKZ0AMEAFKjEwMEAFnVOjAMAwQCWdVsAwQAWdVuAwQA WdV6AwQAWdV+AwQBWdXCAwQAWdXkAwQBWdXwAwQAWdX6AwQA1dIQAwQA1dISAwQA 1dIhAwQA1dIzAwQA1drcAwQA2ZCXMA0GCSqGSIb3DQEBCwUAA4IBAQCY3FJ75/bH Y037GciLYIsC0Bv+FQXwHh0bxOGQ7RnsaM+JA6qSMXcYCL5K7UQfOC68bP4+/k/a CAOueMoUKuLD3LsLgTkY58wSXaOhWWrqtOCxCrUblCbSNRcsq7TKIlmY4r1+7LJB ReYSVIeZW235xrWJQCc5GGB3SHNXwT/w1gKs8bNeYLOvhP7Q4z4GTfWDaGX2Qcjf OvVssAhjp2RGfxN0ZkRHC5v5hMmepNJ7MPnVDZXiBnkqq+9ue9KEdXg47dvfOyc1 USFeQdxa3xSCGr4TAELWnT9ff3jSa5OhxrstY8L8wfvo8r8DnlAHMe4TBxkYONo3 46OyxjSAeTJB -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:08 2025 by rpki-client