This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3A8xoYdZ04uTRieCWwaTQKNYKsw.roa File: 3A8xoYdZ04uTRieCWwaTQKNYKsw.roa (raw, json) Hash identifier: UonFPrN4N/73TPBpSI4kOc8o6ff9wI0DaWd3fmyN20I= Subject key identifier: DC:0F:31:A1:87:59:D3:8B:93:46:27:82:5B:06:93:40:A3:58:2A:CC Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019AD6DB9E43E42D1B19EA5B1CC0771C71AA Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3A8xoYdZ04uTRieCWwaTQKNYKsw.roa Signing time: Sun 30 Nov 2025 22:21:48 +0000 ROA not before: Sun 30 Nov 2025 22:21:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200740 IP address blocks: 89.44.84.0/23 maxlen: 23 91.200.13.0/24 maxlen: 24 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 95.81.77.0/24 maxlen: 24 95.81.93.0/24 maxlen: 24 95.81.94.0/23 maxlen: 23 95.81.112.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.119.0/24 maxlen: 24 95.81.120.0/24 maxlen: 24 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 104.128.142.0/23 maxlen: 23 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 109.69.56.0/23 maxlen: 23 109.69.58.0/23 maxlen: 23 185.103.252.0/23 maxlen: 23 185.103.254.0/23 maxlen: 23 2a0c:5d00:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:db:9e:43:e4:2d:1b:19:ea:5b:1c:c0:77:1c:71:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Nov 30 22:21:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc0f31a18759d38b934627825b069340a3582acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:98:e1:1b:11:44:cb:ab:de:90:7b:85:89: 31:fb:14:ff:fd:b0:1c:60:ff:63:f6:b4:14:62:1b: 65:0f:a2:ef:cc:24:d7:aa:57:3d:3f:2c:02:83:dd: c9:25:97:e8:fa:91:3f:e2:23:67:e0:e7:d9:bc:03: 0d:57:ff:f3:89:57:fe:77:af:cc:e4:69:7f:49:9b: ea:72:3a:6d:09:cf:50:35:74:c2:77:96:47:40:39: ae:32:9c:e7:2e:8c:11:e6:42:91:6c:52:52:75:1c: af:40:fc:06:db:f5:6b:fd:d3:dc:cb:41:66:b7:52: 06:22:f7:6f:89:9c:d6:94:3d:07:b0:6a:b2:ff:7b: 6b:5e:3c:ab:d5:83:ad:2d:30:cb:16:97:c5:a7:d3: 8b:69:d9:9b:c2:d8:05:58:0f:e0:50:68:4f:01:ed: 08:2f:d3:9d:1d:96:a2:72:8a:62:a3:71:05:35:98: 7d:ea:73:e8:95:6e:fc:22:ad:0a:39:85:76:01:c0: e3:85:a5:f9:66:87:0a:2f:e8:8a:45:44:ae:76:e8: ce:84:3d:96:7e:10:3f:d4:95:93:7d:47:3c:13:14: 15:b2:55:3a:4a:5c:fd:44:4c:24:a3:c2:59:d6:a8: d8:ad:d5:d5:0c:a2:33:3f:32:de:36:b6:d7:a2:47: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0F:31:A1:87:59:D3:8B:93:46:27:82:5B:06:93:40:A3:58:2A:CC X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3A8xoYdZ04uTRieCWwaTQKNYKsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.84.0/23 91.200.13.0-91.200.15.255 95.81.77.0/24 95.81.93.0-95.81.95.255 95.81.112.0/23 95.81.119.0-95.81.120.255 103.85.112.0/23 104.128.142.0/23 109.69.56.0/22 185.103.252.0/22 IPv6: 2a0c:5d00:3002::/48 Signature Algorithm: sha256WithRSAEncryption 05:ae:6f:8d:a4:58:92:ce:40:51:d7:8a:04:2d:14:36:cc:65: 3f:90:f2:7a:f2:7c:51:d4:71:64:f5:d5:11:f4:09:a7:47:34: dc:60:d9:9c:68:4b:26:db:1d:36:47:c4:62:5d:7f:ad:52:7c: 64:80:4a:f3:d9:dc:6b:cd:ee:98:39:96:57:56:07:58:e2:42: 02:c2:58:0a:08:78:25:01:88:33:49:90:95:b5:70:63:1a:09: 2b:d4:ba:2b:2c:d5:eb:2f:06:81:27:45:7d:81:b6:4f:b7:d7: fb:26:ba:d7:aa:2a:7e:cb:92:b8:20:00:1c:41:74:47:84:78: d8:73:51:a0:10:c0:b6:37:7c:f5:02:f9:d8:e6:58:3f:c0:94: e3:a0:96:e4:d1:cd:33:e8:43:d8:1f:dd:31:d3:d2:40:50:14: 5f:cc:f4:25:7c:0a:a1:e3:92:d3:8a:19:d2:83:0d:9d:b7:9f: ec:e2:9f:07:0e:23:b5:3b:9b:91:a0:7d:ba:67:9a:38:b1:87: 67:66:b9:62:69:5b:73:d7:18:c2:2b:11:b7:9b:39:42:5e:fa: cf:66:d1:10:5d:41:33:9e:eb:74:ae:18:6d:45:8d:9e:ac:95: 6a:5e:49:f6:2f:94:ee:6a:38:90:d3:6c:b1:1b:2d:37:8e:6d: b0:81:08:53 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZrW255D5C0bGepbHMB3HHGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMTMwMjIyMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzBmMzFhMTg3NTlkMzhiOTM0NjI3ODI1YjA2OTM0MGEzNTgyYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEuY4RsRRMur3pB7hYkx+xT//bAc YP9j9rQUYhtlD6LvzCTXqlc9PywCg93JJZfo+pE/4iNn4OfZvAMNV//ziVf+d6/M 5Gl/SZvqcjptCc9QNXTCd5ZHQDmuMpznLowR5kKRbFJSdRyvQPwG2/Vr/dPcy0Fm t1IGIvdviZzWlD0HsGqy/3trXjyr1YOtLTDLFpfFp9OLadmbwtgFWA/gUGhPAe0I L9OdHZaicopio3EFNZh96nPolW78Iq0KOYV2AcDjhaX5ZocKL+iKRUSudujOhD2W fhA/1JWTfUc8ExQVslU6Slz9REwko8JZ1qjYrdXVDKIzPzLeNrbXokdVJwIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFNwPMaGHWdOLk0YnglsGk0CjWCrMMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvM0E4eG9ZZFowNHVUUmllQ1d3YVRRS05ZS3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBaBAIAATBUAwQBWSxUMAwD BABbyA0DBARbyAADBABfUU0wDAMEAF9RXQMEBV9RQAMEAV9RcDAMAwQAX1F3AwQA X1F4AwQBZ1VwAwQBaICOAwQCbUU4AwQCuWf8MA8EAgACMAkDBwAqDF0AMAIwDQYJ KoZIhvcNAQELBQADggEBAAWub42kWJLOQFHXigQtFDbMZT+Q8nryfFHUcWT11RH0 CadHNNxg2ZxoSybbHTZHxGJdf61SfGSASvPZ3GvN7pg5lldWB1jiQgLCWAoIeCUB iDNJkJW1cGMaCSvUuiss1esvBoEnRX2Btk+31/smuteqKn7LkrggABxBdEeEeNhz UaAQwLY3fPUC+djmWD/AlOOgluTRzTPoQ9gf3THT0kBQFF/M9CV8CqHjktOKGdKD DZ23n+zinwcOI7U7m5Ggfbpnmjixh2dmuWJpW3PXGMIrEbebOUJe+s9m0RBdQTOe 63SuGG1FjZ6slWpeSfYvlO5qOJDTbLEbLTeObbCBCFM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:34 2025 by rpki-client