This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7wHH_50499mgaT5cv6CEAnFWOI.roa File: w7wHH_50499mgaT5cv6CEAnFWOI.roa (raw, json) Hash identifier: +FCrn7Ygz9hytUxrko0BTWxr0F5DmMFJmqwT6Nmc2Gk= Subject key identifier: C3:BC:07:1F:FE:74:E3:DF:66:81:A4:F9:72:FE:82:10:09:C5:58:E2 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD99F54A456A5200344A6709D6FB17906 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7wHH_50499mgaT5cv6CEAnFWOI.roa Signing time: Mon 01 Dec 2025 11:14:48 +0000 ROA not before: Mon 01 Dec 2025 11:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215152 IP address blocks: 79.99.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:9f:54:a4:56:a5:20:03:44:a6:70:9d:6f:b1:79:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 11:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3bc071ffe74e3df6681a4f972fe821009c558e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:c6:ed:f1:c4:1c:49:43:82:0a:6e:5a:bc: 37:0e:c1:bb:96:af:e2:f4:ea:ed:87:29:95:b6:40: 5e:1c:b8:79:f6:89:eb:2c:a8:98:c9:d2:8f:54:10: 28:67:f5:3c:fd:b1:1f:50:c4:03:58:7d:16:cf:bd: fc:76:ef:b4:02:c9:9e:08:22:ef:44:5b:94:8a:8d: 91:cc:48:7f:fd:f0:43:f1:d8:85:ac:1b:04:7c:d7: 50:84:d2:19:e3:d5:53:45:bc:87:72:bf:58:9f:a4: f5:59:47:72:58:38:47:ab:c6:27:f4:4f:fd:fc:ad: 4a:67:4d:81:04:e4:00:71:05:77:0a:b4:92:96:91: 59:e6:30:16:2d:0a:5c:bd:7b:fd:9f:6c:6b:6a:c4: 2a:ba:f9:14:de:19:ce:b3:fe:96:ee:69:c3:93:d6: 64:c0:49:b5:ef:71:aa:82:11:0c:7e:d3:ee:17:a7: 47:d9:ab:42:de:ef:c0:16:14:10:4d:f0:7a:ae:56: 34:d4:dd:b6:47:dc:da:ec:5e:67:34:a5:62:a6:66: 8d:ed:ac:6c:1d:03:23:3a:10:45:91:26:6e:7a:37: 59:2f:4a:73:fd:64:b2:f2:86:0a:c5:39:72:a8:02: b2:63:99:d6:5f:29:8f:a5:e9:27:5f:c8:05:65:84: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:07:1F:FE:74:E3:DF:66:81:A4:F9:72:FE:82:10:09:C5:58:E2 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7wHH_50499mgaT5cv6CEAnFWOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.146.0/24 Signature Algorithm: sha256WithRSAEncryption 47:9a:ed:ad:e6:17:57:46:44:a8:60:0c:dc:98:b3:0b:70:07: 35:0b:95:86:28:47:e4:06:38:db:82:c5:fb:ce:85:00:a8:9a: a6:74:0f:77:9e:04:7e:ef:59:fa:0a:2f:dc:f9:67:28:82:e7: d0:83:b3:0e:06:62:b5:1a:5b:f5:1d:d5:db:fa:c3:6d:bf:b1: 82:e9:be:df:8f:c6:f8:0b:13:8f:b8:e6:ff:78:3b:10:19:b0: 79:c3:b5:34:56:78:d9:80:49:c6:cd:f9:3f:48:c9:59:5e:3e: 3a:d9:5c:02:ab:8d:2a:a5:ba:e9:34:0b:29:5c:b5:44:68:95: c0:34:00:68:71:f8:45:53:a1:92:5d:28:3f:bc:a6:48:b4:be: 93:89:0d:a7:9e:5a:15:69:9c:62:d5:9b:f2:24:de:6b:14:ad: 81:6c:63:e0:a7:b6:7f:3a:3b:5c:37:23:10:a2:17:24:8d:70: fd:18:f0:76:36:a3:f2:8b:f3:8a:63:8b:95:eb:b1:0a:d1:ae: cd:53:6a:98:1f:e8:a1:a6:8f:ce:59:27:10:b4:4c:04:9d:1d: a8:c5:c3:cf:11:de:19:8b:46:cd:f0:39:72:2e:e7:26:69:4f: c1:c5:cf:4a:7c:82:49:e0:83:7f:0e:88:4f:a8:60:c5:99:3d: b4:d2:6c:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZn1SkVqUgA0SmcJ1vsXkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMTExNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JjMDcxZmZlNzRlM2RmNjY4MWE0Zjk3MmZlODIxMDA5YzU1OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHrG7fHEHElDggpuWrw3DsG7lq/i 9OrthymVtkBeHLh59onrLKiYydKPVBAoZ/U8/bEfUMQDWH0Wz738du+0AsmeCCLv RFuUio2RzEh//fBD8diFrBsEfNdQhNIZ49VTRbyHcr9Yn6T1WUdyWDhHq8Yn9E/9 /K1KZ02BBOQAcQV3CrSSlpFZ5jAWLQpcvXv9n2xrasQquvkU3hnOs/6W7mnDk9Zk wEm173GqghEMftPuF6dH2atC3u/AFhQQTfB6rlY01N22R9za7F5nNKVipmaN7axs HQMjOhBFkSZuejdZL0pz/WSy8oYKxTlyqAKyY5nWXymPpeknX8gFZYSNnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMO8Bx/+dOPfZoGk+XL+ghAJxVjiMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdzd3SEhfNTA0OTltZ2FUNWN2NkNFQW5GV09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2OSMA0G CSqGSIb3DQEBCwUAA4IBAQBHmu2t5hdXRkSoYAzcmLMLcAc1C5WGKEfkBjjbgsX7 zoUAqJqmdA93ngR+71n6Ci/c+WcogufQg7MOBmK1Glv1HdXb+sNtv7GC6b7fj8b4 CxOPuOb/eDsQGbB5w7U0VnjZgEnGzfk/SMlZXj462VwCq40qpbrpNAspXLVEaJXA NABocfhFU6GSXSg/vKZItL6TiQ2nnloVaZxi1ZvyJN5rFK2BbGPgp7Z/OjtcNyMQ ohckjXD9GPB2NqPyi/OKY4uV67EK0a7NU2qYH+ihpo/OWScQtEwEnR2oxcPPEd4Z i0bN8DlyLucmaU/Bxc9KfIJJ4IN/DohPqGDFmT200mwZ -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:46 2025 by rpki-client