This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/mrfRDaiKMwuO0e_yVpeGak1wsx8.roa File: mrfRDaiKMwuO0e_yVpeGak1wsx8.roa (raw, json) Hash identifier: PAF6iPVsRLbh23Q2SPC9mq243Z3PJUwXufedOLJEEqU= Subject key identifier: 9A:B7:D1:0D:A8:8A:33:0B:8E:D1:EF:F2:56:97:86:6A:4D:70:B3:1F Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Certificate serial: 019A81AD6C31A6E6831D424D764E8A25137C Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/mrfRDaiKMwuO0e_yVpeGak1wsx8.roa Signing time: Fri 14 Nov 2025 09:23:37 +0000 ROA not before: Fri 14 Nov 2025 09:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43019 IP address blocks: 77.75.88.0/24 maxlen: 24 77.75.89.0/24 maxlen: 24 77.75.90.0/24 maxlen: 24 77.75.91.0/24 maxlen: 24 77.75.91.128/26 maxlen: 26 77.75.92.0/24 maxlen: 24 77.75.92.32/27 maxlen: 27 77.75.93.0/24 maxlen: 24 77.75.94.0/24 maxlen: 24 77.75.95.0/24 maxlen: 24 77.75.95.64/26 maxlen: 26 77.75.95.128/27 maxlen: 27 185.206.200.0/24 maxlen: 24 185.206.201.0/24 maxlen: 24 185.206.201.144/28 maxlen: 28 185.206.201.212/30 maxlen: 30 185.206.202.0/24 maxlen: 24 185.206.203.0/24 maxlen: 24 2a0b:3f80::/29 maxlen: 29 2a0b:3f80::/32 maxlen: 32 2a0b:3f80:0:201::/64 maxlen: 64 2a0b:3f80:0:202::/64 maxlen: 64 2a0b:3f80:0:203::/64 maxlen: 64 2a0b:3f80:0:204::/64 maxlen: 64 2a0b:3f80:2::/126 maxlen: 126 2a0b:3f80:3::/126 maxlen: 126 2a0b:3f80:15::/48 maxlen: 48 2a0b:3f81::/32 maxlen: 32 2a0b:3f81::/48 maxlen: 48 2a0b:3f82::/32 maxlen: 32 2a0b:3f83::/32 maxlen: 32 2a0b:3f84::/32 maxlen: 32 2a0b:3f85::/32 maxlen: 32 2a0b:3f85:0:202::/64 maxlen: 64 2a0b:3f85:3::/126 maxlen: 126 2a0b:3f86::/32 maxlen: 32 2a0b:3f87::/32 maxlen: 32 2a0b:3f87:fc18::/48 maxlen: 48 2a0b:3f87:fc19::/48 maxlen: 48 2a0b:3f87:fc1a::/48 maxlen: 48 2a0b:3f87:fc1b::/48 maxlen: 48 2a0b:3f87:fc20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:ad:6c:31:a6:e6:83:1d:42:4d:76:4e:8a:25:13:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Validity Not Before: Nov 14 09:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ab7d10da88a330b8ed1eff25697866a4d70b31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:53:5a:0d:f7:46:2d:27:a0:56:05:dc:62: db:3e:c1:a8:7d:6a:c4:99:62:1c:4d:a3:d9:79:16: d2:81:f3:d3:b8:34:26:8b:b7:5b:0c:06:0d:57:1a: 68:1d:38:9d:d0:08:c7:a3:60:8e:11:f8:df:54:43: 98:50:af:58:4e:7e:e9:e0:9a:b9:de:6d:81:22:81: 66:ec:26:15:cf:e5:24:f2:8f:d5:64:49:06:7f:12: 52:f1:c5:91:86:38:57:8e:06:c1:aa:11:b7:fe:ed: 6e:ec:0d:ca:9f:5b:25:a5:82:5d:a1:8a:fc:6f:60: 97:cd:4b:ef:6e:27:de:fa:2d:6c:92:04:53:59:c4: b1:12:7a:2e:79:c1:80:fe:45:08:72:ab:0c:ea:92: a2:f7:f0:00:a6:c3:4e:64:be:ad:d5:88:97:e9:e2: 63:90:66:29:7c:6f:b1:62:6b:d8:dd:20:5f:95:ee: 6f:a7:31:9d:a6:f2:bb:76:89:14:4e:af:b0:e1:e8: 04:c7:18:8e:ad:00:fe:84:b9:33:52:ce:f9:e7:34: 71:a1:87:30:52:f7:b1:44:0d:15:47:0e:23:a1:f1: 48:09:e5:b0:ef:9b:87:2a:16:6f:62:fc:e2:44:2c: f7:4b:f2:25:93:37:a7:8e:81:aa:cb:dd:ad:fd:6c: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:D1:0D:A8:8A:33:0B:8E:D1:EF:F2:56:97:86:6A:4D:70:B3:1F X509v3 Authority Key Identifier: keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/mrfRDaiKMwuO0e_yVpeGak1wsx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.88.0/21 185.206.200.0/22 IPv6: 2a0b:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 8e:16:6f:9b:bc:c2:7d:3b:c4:b2:57:72:05:a3:ac:77:f7:7c: 8c:6e:32:3f:df:ee:e5:8a:17:fc:2d:58:59:74:0b:f5:43:e5: 4f:7f:50:9a:ef:89:a6:5e:e1:8c:71:77:5c:2c:ec:2c:91:dc: 97:59:4c:66:bc:19:8e:52:13:9d:4a:1d:aa:ee:59:c0:48:05: 29:76:26:61:49:1b:14:07:75:9f:55:60:cd:b6:24:de:63:45: 49:3d:21:ca:29:60:7f:b3:6c:22:33:d4:29:a7:38:ce:00:ca: ea:f4:9b:01:33:f6:90:55:7e:2f:97:89:f2:44:fe:22:12:38: 75:f1:eb:7c:7e:bf:58:60:60:22:4c:2f:23:3a:88:a0:44:27: ef:f0:48:11:c3:d3:2e:54:a3:13:72:4c:91:c0:2d:5a:20:20: e0:99:d8:b2:be:15:7a:cd:51:52:49:94:4e:03:68:ad:63:eb: da:c3:f2:7c:1a:b0:41:5f:76:e6:b3:55:27:a0:18:57:9d:e4: 71:c9:39:5b:ae:05:58:cd:b6:b7:c3:92:84:cd:fc:0e:92:44: 4e:67:09:4c:96:c1:ee:36:2b:30:8c:0a:24:ab:0e:07:d8:14: 6a:ca:a1:98:5a:44:46:e0:d6:70:2f:01:23:53:12:cd:b1:07: d1:37:2f:69 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqBrWwxpuaDHUJNdk6KJRN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh OWQzNzAwHhcNMjUxMTE0MDkyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWI3ZDEwZGE4OGEzMzBiOGVkMWVmZjI1Njk3ODY2YTRkNzBiMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLFTWg33Ri0noFYF3GLbPsGofWrE mWIcTaPZeRbSgfPTuDQmi7dbDAYNVxpoHTid0AjHo2COEfjfVEOYUK9YTn7p4Jq5 3m2BIoFm7CYVz+Uk8o/VZEkGfxJS8cWRhjhXjgbBqhG3/u1u7A3Kn1slpYJdoYr8 b2CXzUvvbife+i1skgRTWcSxEnouecGA/kUIcqsM6pKi9/AApsNOZL6t1YiX6eJj kGYpfG+xYmvY3SBfle5vpzGdpvK7dokUTq+w4egExxiOrQD+hLkzUs755zRxoYcw UvexRA0VRw4jofFICeWw75uHKhZvYvziRCz3S/IlkzenjoGqy92t/Wz/oQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJq30Q2oijMLjtHv8laXhmpNcLMfMB8GA1UdIwQY MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt YzZkMmI4ZDFmNTY2LzEvbXJmUkRhaUtNd3VPMGVfeVZwZUdhazF3c3g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2 LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUtYAwQC uc7IMA0EAgACMAcDBQMqCz+AMA0GCSqGSIb3DQEBCwUAA4IBAQCOFm+bvMJ9O8Sy V3IFo6x393yMbjI/3+7lihf8LVhZdAv1Q+VPf1Ca74mmXuGMcXdcLOwskdyXWUxm vBmOUhOdSh2q7lnASAUpdiZhSRsUB3WfVWDNtiTeY0VJPSHKKWB/s2wiM9QppzjO AMrq9JsBM/aQVX4vl4nyRP4iEjh18et8fr9YYGAiTC8jOoigRCfv8EgRw9MuVKMT ckyRwC1aICDgmdiyvhV6zVFSSZROA2itY+vaw/J8GrBBX3bms1UnoBhXneRxyTlb rgVYzba3w5KEzfwOkkROZwlMlsHuNiswjAokqw4H2BRqyqGYWkRG4NZwLwEjUxLN sQfRNy9p -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:53 2025 by rpki-client