This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/MpiQFhLt5luQY96zEfHw74epxis.roa File: MpiQFhLt5luQY96zEfHw74epxis.roa (raw, json) Hash identifier: 3slZSxLVuzJpGoahUjNIbwirBJQqYCX9x0wxGHpjm8U= Subject key identifier: 32:98:90:16:12:ED:E6:5B:90:63:DE:B3:11:F1:F0:EF:87:A9:C6:2B Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019B272E130F726A93C18A20399B6E08B81E Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/MpiQFhLt5luQY96zEfHw74epxis.roa Signing time: Tue 16 Dec 2025 12:41:29 +0000 ROA not before: Tue 16 Dec 2025 12:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 46.229.243.0/24 maxlen: 24 46.229.251.0/24 maxlen: 24 46.229.253.0/24 maxlen: 24 76.164.200.0/24 maxlen: 24 76.164.201.0/24 maxlen: 24 76.164.202.0/24 maxlen: 24 76.164.203.0/24 maxlen: 24 77.74.123.0/24 maxlen: 24 83.229.61.0/24 maxlen: 24 85.204.107.0/24 maxlen: 24 92.42.100.0/24 maxlen: 24 95.133.244.0/24 maxlen: 24 95.133.245.0/24 maxlen: 24 103.112.171.0/24 maxlen: 24 103.121.48.0/24 maxlen: 24 103.121.49.0/24 maxlen: 24 103.126.50.0/24 maxlen: 24 103.126.51.0/24 maxlen: 24 103.244.144.0/24 maxlen: 24 103.244.145.0/24 maxlen: 24 103.246.248.0/24 maxlen: 24 162.249.124.0/24 maxlen: 24 162.249.125.0/24 maxlen: 24 162.249.126.0/24 maxlen: 24 162.249.127.0/24 maxlen: 24 185.104.63.0/24 maxlen: 24 195.74.93.0/24 maxlen: 24 203.14.32.0/24 maxlen: 24 203.25.108.0/24 maxlen: 24 205.237.109.0/24 maxlen: 24 205.237.110.0/24 maxlen: 24 205.237.111.0/24 maxlen: 24 2a12:3200::/36 maxlen: 36 2a12:3200:1000::/36 maxlen: 36 2a12:3200:2000::/36 maxlen: 36 2a12:3200:3000::/36 maxlen: 36 2a12:3200:4000::/36 maxlen: 36 2a12:3200:5000::/36 maxlen: 36 2a12:3200:6000::/36 maxlen: 36 2a12:3200:7000::/36 maxlen: 36 2a12:3200:8000::/36 maxlen: 36 2a12:3200:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:2e:13:0f:72:6a:93:c1:8a:20:39:9b:6e:08:b8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Dec 16 12:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3298901612ede65b9063deb311f1f0ef87a9c62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:3c:e0:78:ae:bf:02:2b:3c:9c:07:fd:d8: 71:d7:69:71:46:3c:66:b2:05:48:a8:c9:6b:af:e2: e3:76:e5:96:12:ce:d7:93:91:f5:e9:d1:dd:2a:6f: 1f:4e:8e:b8:8e:fd:b7:2c:d2:85:eb:1d:38:b3:92: 5e:16:80:a3:f1:93:f5:6a:25:c1:27:86:55:b5:9a: 16:74:27:40:25:44:a8:d5:09:77:01:11:e3:a9:20: cb:2d:b2:90:7a:b9:ae:7b:ac:e6:02:83:32:49:0d: e4:bf:5c:79:f1:4a:9e:db:dd:75:ad:c7:72:5c:24: c8:91:da:12:cf:c5:71:66:b6:9b:a5:32:62:41:86: e0:cb:c1:a4:0c:0a:05:70:7f:92:9b:53:4a:21:ec: 63:3e:cb:e6:03:2e:d0:26:97:43:b8:63:b1:4d:73: 4c:b7:63:dc:55:bc:c5:85:01:85:88:31:f7:f3:f7: ce:c5:60:34:fa:8b:82:9d:91:45:4b:dc:bc:47:fb: 67:0f:20:e9:af:63:f9:36:15:c0:c2:42:68:91:34: d9:cd:80:e7:ee:67:9b:58:c5:68:b9:36:df:1a:77: 81:c6:c4:66:86:c1:51:16:22:18:e0:d7:b7:02:10: 6e:ab:b7:b6:98:e0:18:4e:1d:78:4e:a6:e2:85:57: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:90:16:12:ED:E6:5B:90:63:DE:B3:11:F1:F0:EF:87:A9:C6:2B X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/MpiQFhLt5luQY96zEfHw74epxis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.243.0/24 46.229.251.0/24 46.229.253.0/24 76.164.200.0/22 77.74.123.0/24 83.229.61.0/24 85.204.107.0/24 92.42.100.0/24 95.133.244.0/23 103.112.171.0/24 103.121.48.0/23 103.126.50.0/23 103.244.144.0/23 103.246.248.0/24 162.249.124.0/22 185.104.63.0/24 195.74.93.0/24 203.14.32.0/24 203.25.108.0/24 205.237.109.0-205.237.111.255 IPv6: 2a12:3200::-2a12:3200:9000:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2f:96:8a:27:6b:0a:d8:3e:b0:2d:5b:a3:5c:b5:81:aa:e3:88: be:09:ca:83:72:24:ac:c5:80:0b:6f:23:4e:34:7d:44:0f:ab: 39:a6:a4:d0:a8:5a:71:66:79:f0:ba:c5:a1:a9:a1:73:69:46: 16:37:bd:bb:fd:1d:fe:32:83:64:29:5f:a5:04:2a:cb:bc:b1: 88:31:0e:45:ff:e3:de:98:9f:26:81:98:d2:36:11:3d:08:01: 82:b6:bd:32:df:2f:e5:d6:f0:8f:62:38:68:a4:ee:ae:99:c0: 4c:3b:39:e3:5c:a8:30:c1:04:d9:0d:f2:23:ea:7b:f3:32:d0: f6:4d:20:fe:4e:7a:db:08:50:5a:c9:16:9e:ff:43:b7:af:43: d4:81:4e:4b:3c:fa:b7:ac:da:9b:af:31:95:54:af:39:e1:e8: b2:2e:ea:00:c3:cc:31:00:43:17:c2:fc:f4:93:f2:54:5e:34: 4a:00:f0:75:06:45:7a:b3:e9:66:00:ad:34:b2:09:ed:1b:d8: fa:cd:d3:0c:f2:4b:b0:1a:5f:76:8f:16:b7:df:8e:b6:4d:d9: 6e:1a:53:65:12:4b:2f:7a:4d:96:19:0c:e0:0e:9d:ae:1d:eb: 60:98:f4:9a:24:f2:f4:90:ce:60:d5:29:6b:c3:38:5c:0f:06: ad:56:73:cf -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZsnLhMPcmqTwYogOZtuCLgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjUxMjE2MTI0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjk4OTAxNjEyZWRlNjViOTA2M2RlYjMxMWYxZjBlZjg3YTljNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQU84HiuvwIrPJwH/dhx12lxRjxm sgVIqMlrr+LjduWWEs7Xk5H16dHdKm8fTo64jv23LNKF6x04s5JeFoCj8ZP1aiXB J4ZVtZoWdCdAJUSo1Ql3ARHjqSDLLbKQermue6zmAoMySQ3kv1x58Uqe2911rcdy XCTIkdoSz8VxZrabpTJiQYbgy8GkDAoFcH+Sm1NKIexjPsvmAy7QJpdDuGOxTXNM t2PcVbzFhQGFiDH38/fOxWA0+ouCnZFFS9y8R/tnDyDpr2P5NhXAwkJokTTZzYDn 7mebWMVouTbfGneBxsRmhsFRFiIY4Ne3AhBuq7e2mOAYTh14TqbihVehywIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFDKYkBYS7eZbkGPesxHx8O+HqcYrMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEvTXBpUUZoTHQ1bHVRWTk2ekVmSHc3NGVweGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBhwQCAAEwgYADBAAu 5fMDBAAu5fsDBAAu5f0DBAJMpMgDBABNSnsDBABT5T0DBABVzGsDBABcKmQDBAFf hfQDBABncKsDBAFneTADBAFnfjIDBAFn9JADBABn9vgDBAKi+XwDBAC5aD8DBADD Sl0DBADLDiADBADLGWwwDAMEAM3tbQMEBM3tYDAXBAIAAjARMA8DBAEqEjIDBwAq EjIAkAAwDQYJKoZIhvcNAQELBQADggEBAC+WiidrCtg+sC1bo1y1garjiL4JyoNy JKzFgAtvI040fUQPqzmmpNCoWnFmefC6xaGpoXNpRhY3vbv9Hf4yg2QpX6UEKsu8 sYgxDkX/496YnyaBmNI2ET0IAYK2vTLfL+XW8I9iOGik7q6ZwEw7OeNcqDDBBNkN 8iPqe/My0PZNIP5OetsIUFrJFp7/Q7evQ9SBTks8+res2puvMZVUrznh6LIu6gDD zDEAQxfC/PST8lReNEoA8HUGRXqz6WYArTSyCe0b2PrN0wzyS7AaX3aPFrffjrZN 2W4aU2USSy96TZYZDOAOna4d62CY9Jok8vSQzmDVKWvDOFwPBq1Wc88= -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:55 2025 by rpki-client