This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qtoQc9LfGadqTLYB1GSfV65Qge8.roa File: qtoQc9LfGadqTLYB1GSfV65Qge8.roa (raw, json) Hash identifier: 74Dg2C9O7xcg2ixp2UE8VQLiZC+zz2+d720ODPPiw1c= Subject key identifier: AA:DA:10:73:D2:DF:19:A7:6A:4C:B6:01:D4:64:9F:57:AE:50:81:EF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ADE4CDA718FA85A3359A9C8ED69FFD2ED Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qtoQc9LfGadqTLYB1GSfV65Qge8.roa Signing time: Tue 02 Dec 2025 09:02:49 +0000 ROA not before: Tue 02 Dec 2025 09:02:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 82.152.57.0/24 maxlen: 24 82.152.58.0/24 maxlen: 24 82.152.73.0/24 maxlen: 24 82.152.75.0/24 maxlen: 24 82.152.76.0/23 maxlen: 24 82.152.79.0/24 maxlen: 24 82.152.86.0/23 maxlen: 24 82.152.88.0/24 maxlen: 24 82.152.109.0/24 maxlen: 24 82.152.226.0/24 maxlen: 24 82.152.240.0/24 maxlen: 24 82.152.243.0/24 maxlen: 24 82.153.38.0/24 maxlen: 24 82.153.56.0/24 maxlen: 24 82.153.61.0/24 maxlen: 24 82.153.83.0/24 maxlen: 24 82.153.84.0/24 maxlen: 24 82.153.152.0/24 maxlen: 24 82.153.186.0/24 maxlen: 24 82.153.201.0/24 maxlen: 24 82.153.239.0/24 maxlen: 24 89.213.98.0/24 maxlen: 24 89.213.159.0/24 maxlen: 24 89.213.161.0/24 maxlen: 24 89.213.232.0/23 maxlen: 24 89.213.234.0/23 maxlen: 24 89.213.236.0/23 maxlen: 24 109.176.27.0/24 maxlen: 24 109.176.32.0/21 maxlen: 24 109.176.40.0/21 maxlen: 24 109.176.48.0/21 maxlen: 24 109.176.56.0/21 maxlen: 24 109.176.235.0/24 maxlen: 24 213.130.130.0/24 maxlen: 24 213.130.149.0/24 maxlen: 24 213.218.214.0/24 maxlen: 24 213.218.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:4c:da:71:8f:a8:5a:33:59:a9:c8:ed:69:ff:d2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 2 09:02:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aada1073d2df19a76a4cb601d4649f57ae5081ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9e:7a:dd:5b:61:61:0f:b6:d1:7e:80:a3:f4: 6b:2b:1a:40:55:7b:cd:78:f6:d8:cd:fc:eb:f4:5a: c8:39:eb:bf:7a:9e:32:dd:c0:55:7e:c6:82:6c:04: 71:97:06:f7:5b:de:e6:9a:24:e2:25:da:89:04:ff: b6:ea:33:d7:70:bf:28:c0:7e:9a:ef:90:4c:d8:a4: 25:66:3f:1a:e8:98:e3:86:39:1f:c7:c3:10:22:bd: ca:cf:52:f2:a5:a9:55:1a:97:59:c0:e6:bd:c3:87: 5e:b2:22:07:58:7c:b2:8a:f2:08:e0:fa:00:80:da: 9b:91:f1:1f:83:b4:12:76:56:45:a1:3e:2e:01:a8: 1f:55:f4:a0:9f:43:d6:2f:35:c3:a1:f1:7c:4e:a8: df:34:25:c3:d5:8b:d8:78:78:94:6e:9e:9c:a0:65: d8:47:cd:45:16:4c:74:8e:86:ae:7e:94:79:d5:3e: 4e:97:2c:01:1e:dd:10:63:b7:34:fd:1c:98:18:be: a0:3d:28:86:39:1c:9f:31:ab:36:df:77:ac:a2:97: 85:70:d7:0d:59:52:07:91:df:1a:fa:63:65:ee:07: 90:46:9c:49:39:67:62:58:f9:a8:39:32:7e:4e:c8: b0:24:73:cd:c5:ba:91:d2:aa:ed:11:0d:fc:33:ae: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:10:73:D2:DF:19:A7:6A:4C:B6:01:D4:64:9F:57:AE:50:81:EF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qtoQc9LfGadqTLYB1GSfV65Qge8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.57.0-82.152.58.255 82.152.73.0/24 82.152.75.0-82.152.77.255 82.152.79.0/24 82.152.86.0-82.152.88.255 82.152.109.0/24 82.152.226.0/24 82.152.240.0/24 82.152.243.0/24 82.153.38.0/24 82.153.56.0/24 82.153.61.0/24 82.153.83.0-82.153.84.255 82.153.152.0/24 82.153.186.0/24 82.153.201.0/24 82.153.239.0/24 89.213.98.0/24 89.213.159.0/24 89.213.161.0/24 89.213.232.0-89.213.237.255 109.176.27.0/24 109.176.32.0/19 109.176.235.0/24 213.130.130.0/24 213.130.149.0/24 213.218.214.0/24 213.218.231.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a3:1f:ce:15:0c:4a:47:e8:20:e7:e7:11:1c:fb:e8:34:dd: 79:ed:d1:da:be:de:8f:5f:14:b7:87:36:e0:e0:d7:7f:af:78: b5:4e:92:a7:c3:c7:7e:21:d5:80:d1:b7:a8:87:8b:47:55:1f: 34:f3:6b:d8:cb:ee:9a:8d:d6:9b:cb:92:d5:95:d0:84:46:67: a1:22:14:59:d7:bf:62:fe:10:47:ec:19:38:5d:6d:9f:09:68: cd:fd:80:a7:8f:b9:ea:a7:a2:39:3f:e9:99:6d:dd:91:2d:1d: 79:6e:ff:39:52:9e:c3:1c:0c:9b:42:d7:b4:a6:e8:8e:79:b1: cc:4f:07:f5:d4:d9:a5:6e:c2:ba:d7:5f:28:42:bb:0c:64:06: 3b:e4:e3:f3:bc:af:93:48:65:f9:7f:b1:ab:50:e4:9a:70:27: eb:9e:b9:79:18:4f:39:61:62:76:b9:78:d4:f2:09:c7:6c:c3: a8:82:62:45:1a:ea:88:3f:e9:12:a6:87:74:53:40:34:de:fd: 2c:d7:78:19:ac:0c:6a:09:a5:f1:af:b2:2a:e5:25:e2:32:87: 7f:f7:17:84:d5:58:89:a8:05:31:22:08:dc:06:39:ff:44:13: 87:14:cc:0a:b5:7d:01:5a:12:67:f0:42:36:5d:1b:08:85:ea: 2a:1f:20:09 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZreTNpxj6haM1mpyO1p/9LtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAyMDkwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWRhMTA3M2QyZGYxOWE3NmE0Y2I2MDFkNDY0OWY1N2FlNTA4MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z563VthYQ+20X6Ao/RrKxpAVXvN ePbYzfzr9FrIOeu/ep4y3cBVfsaCbARxlwb3W97mmiTiJdqJBP+26jPXcL8owH6a 75BM2KQlZj8a6Jjjhjkfx8MQIr3Kz1LypalVGpdZwOa9w4desiIHWHyyivII4PoA gNqbkfEfg7QSdlZFoT4uAagfVfSgn0PWLzXDofF8TqjfNCXD1YvYeHiUbp6coGXY R81FFkx0joaufpR51T5OlywBHt0QY7c0/RyYGL6gPSiGORyfMas233esopeFcNcN WVIHkd8a+mNl7geQRpxJOWdiWPmoOTJ+TsiwJHPNxbqR0qrtEQ38M64WlwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFKraEHPS3xmnaky2AdRkn1euUIHvMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcXRvUWM5TGZHYWRxVExZQjFHU2ZWNjVRZ2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAEwgdAwDAME AFKYOQMEAFKYOgMEAFKYSTAMAwQAUphLAwQBUphMAwQAUphPMAwDBAFSmFYDBABS mFgDBABSmG0DBABSmOIDBABSmPADBABSmPMDBABSmSYDBABSmTgDBABSmT0wDAME AFKZUwMEAFKZVAMEAFKZmAMEAFKZugMEAFKZyQMEAFKZ7wMEAFnVYgMEAFnVnwME AFnVoTAMAwQDWdXoAwQBWdXsAwQAbbAbAwQFbbAgAwQAbbDrAwQA1YKCAwQA1YKV AwQA1drWAwQA1drnMA0GCSqGSIb3DQEBCwUAA4IBAQBvox/OFQxKR+gg5+cRHPvo NN157dHavt6PXxS3hzbg4Nd/r3i1TpKnw8d+IdWA0beoh4tHVR8082vYy+6ajdab y5LVldCERmehIhRZ179i/hBH7Bk4XW2fCWjN/YCnj7nqp6I5P+mZbd2RLR15bv85 Up7DHAybQte0puiOebHMTwf11NmlbsK6118oQrsMZAY75OPzvK+TSGX5f7GrUOSa cCfrnrl5GE85YWJ2uXjU8gnHbMOogmJFGuqIP+kSpod0U0A03v0s13gZrAxqCaXx r7Iq5SXiMod/9xeE1ViJqAUxIgjcBjn/RBOHFMwKtX0BWhJn8EI2XRsIheoqHyAJ -----END CERTIFICATE-----Generated at Sat Dec 6 16:35:47 2025 by rpki-client