This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zPaJcjfFddsfnCDEAOdggmJAuto.roa File: zPaJcjfFddsfnCDEAOdggmJAuto.roa (raw, json) Hash identifier: dBTpTrfgoztNwAVmSRUrU8abQi6Y9PpWSkgTVvu0ZeE= Subject key identifier: CC:F6:89:72:37:C5:75:DB:1F:9C:20:C4:00:E7:60:82:62:40:BA:DA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ABF9A600755ACDF5FDE0C6FB157FFC142 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zPaJcjfFddsfnCDEAOdggmJAuto.roa Signing time: Wed 26 Nov 2025 09:59:16 +0000 ROA not before: Wed 26 Nov 2025 09:59:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 82.153.34.0/24 maxlen: 24 82.153.37.0/24 maxlen: 24 82.153.132.0/24 maxlen: 24 89.213.4.0/24 maxlen: 24 109.176.247.0/24 maxlen: 24 109.176.251.0/24 maxlen: 24 213.210.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:9a:60:07:55:ac:df:5f:de:0c:6f:b1:57:ff:c1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 26 09:59:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ccf6897237c575db1f9c20c400e760826240bada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:0d:e7:75:d5:e8:a6:ac:5c:7a:31:54:93: 17:c2:6a:72:49:2a:79:8b:72:59:dc:57:5d:f4:50: f6:b3:be:a0:ed:32:38:a0:ae:ba:1b:4b:2d:9c:33: 2c:1d:85:6f:dc:c5:ea:97:2e:50:77:12:24:8a:dc: e6:42:ea:7c:ad:82:97:85:a6:3c:33:a6:d8:43:60: 50:ec:fa:05:fe:96:e1:4a:b3:d9:f5:05:49:33:13: 26:a7:d9:6a:81:61:5b:49:45:b1:66:71:35:da:3c: a5:d2:e2:63:08:00:3d:45:68:1d:1f:3a:cd:51:7a: fb:16:ae:5b:82:74:1c:82:47:bc:00:d1:80:42:4c: 90:8e:4d:d2:b2:9d:7b:b1:4a:99:36:5f:91:d2:33: 0a:22:9a:a5:63:45:55:ac:54:68:5d:e1:68:f1:74: dc:0b:59:a7:67:30:cb:f5:66:b4:f2:ee:d1:48:73: 79:ea:f7:a2:6b:d0:ba:ee:af:76:ce:6c:ee:be:0e: 38:6b:80:9d:3b:2a:b0:0f:09:57:1b:5c:9f:26:0e: 61:51:a5:73:0a:66:a3:70:1b:21:93:aa:c0:b3:2e: a1:b0:9e:e3:64:aa:c5:d5:2f:19:2c:5c:99:a0:a6: ea:e4:87:3c:c2:0d:6d:b1:35:63:ff:6f:18:51:99: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F6:89:72:37:C5:75:DB:1F:9C:20:C4:00:E7:60:82:62:40:BA:DA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zPaJcjfFddsfnCDEAOdggmJAuto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.34.0/24 82.153.37.0/24 82.153.132.0/24 89.213.4.0/24 109.176.247.0/24 109.176.251.0/24 213.210.62.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d4:01:a8:f7:06:96:f4:5b:74:95:68:41:f4:fe:1f:71:d2: f1:4f:70:3f:9b:f1:97:2a:81:dc:1b:fd:b3:6c:75:16:e2:76: d9:d3:fc:5b:64:2b:86:cc:41:32:2a:65:38:82:d4:e3:41:cc: 69:b5:1c:de:71:d3:3f:e2:e7:63:d4:34:8f:b1:48:e0:5b:2c: ef:49:fe:42:05:19:f6:fa:f1:cd:7e:5e:39:94:44:8a:4a:25: 3d:36:7a:27:86:68:a0:d6:93:67:6a:b3:6d:5b:9f:ce:be:e6: e7:f5:3a:0c:37:73:9e:3e:3d:14:06:59:05:4c:8a:65:db:6a: 0c:63:b0:d5:d0:5b:1f:8b:df:3a:df:c0:67:17:bf:74:df:45: 7e:65:7b:db:6a:84:e4:c2:ab:61:49:68:f9:39:7e:c2:b0:43: 37:56:4d:53:30:cd:c5:66:f3:ee:6a:e3:b6:c1:3c:eb:84:90: 0c:8c:1d:ab:36:ed:a5:76:97:4b:2b:39:79:e7:e5:ea:db:c4: 4c:67:50:cc:3f:90:24:8e:15:2e:61:92:37:c1:6a:90:ac:c8: 4c:4a:df:d7:d7:a9:c5:bc:ef:b3:57:25:09:25:ae:88:7e:49: 8e:d0:1e:5c:12:5f:bd:90:c8:eb:30:f0:e4:43:e0:85:c3:b1: ab:64:74:09 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZq/mmAHVazfX94Mb7FX/8FCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI2MDk1OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Y2ODk3MjM3YzU3NWRiMWY5YzIwYzQwMGU3NjA4MjYyNDBiYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqgN53XV6KasXHoxVJMXwmpySSp5 i3JZ3Fdd9FD2s76g7TI4oK66G0stnDMsHYVv3MXqly5QdxIkitzmQup8rYKXhaY8 M6bYQ2BQ7PoF/pbhSrPZ9QVJMxMmp9lqgWFbSUWxZnE12jyl0uJjCAA9RWgdHzrN UXr7Fq5bgnQcgke8ANGAQkyQjk3Ssp17sUqZNl+R0jMKIpqlY0VVrFRoXeFo8XTc C1mnZzDL9Wa08u7RSHN56veia9C67q92zmzuvg44a4CdOyqwDwlXG1yfJg5hUaVz CmajcBshk6rAsy6hsJ7jZKrF1S8ZLFyZoKbq5Ic8wg1tsTVj/28YUZn9YQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMz2iXI3xXXbH5wgxADnYIJiQLraMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvelBhSmNqZkZkZHNmbkNERUFPZGdnbUpBdXRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUpkiAwQA UpklAwQAUpmEAwQAWdUEAwQAbbD3AwQAbbD7AwQA1dI+MA0GCSqGSIb3DQEBCwUA A4IBAQBW1AGo9waW9Ft0lWhB9P4fcdLxT3A/m/GXKoHcG/2zbHUW4nbZ0/xbZCuG zEEyKmU4gtTjQcxptRzecdM/4udj1DSPsUjgWyzvSf5CBRn2+vHNfl45lESKSiU9 Nnonhmig1pNnarNtW5/Ovubn9ToMN3OePj0UBlkFTIpl22oMY7DV0Fsfi98638Bn F79030V+ZXvbaoTkwqthSWj5OX7CsEM3Vk1TMM3FZvPuauO2wTzrhJAMjB2rNu2l dpdLKzl55+Xq28RMZ1DMP5AkjhUuYZI3wWqQrMhMSt/X16nFvO+zVyUJJa6IfkmO 0B5cEl+9kMjrMPDkQ+CFw7GrZHQJ -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:48 2025 by rpki-client