This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/mCf8TEJHl3UgCcX-1mVkX713ae8.roa File: mCf8TEJHl3UgCcX-1mVkX713ae8.roa (raw, json) Hash identifier: scVZDKzEoTa0qxZWrsdnTNo8unVe2QqFFU/ZX3ROJ6w= Subject key identifier: 98:27:FC:4C:42:47:97:75:20:09:C5:FE:D6:65:64:5F:BD:77:69:EF Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Certificate serial: 019AD915FCB7AB20317B65169CD07400E9F3 Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/mCf8TEJHl3UgCcX-1mVkX713ae8.roa Signing time: Mon 01 Dec 2025 08:44:48 +0000 ROA not before: Mon 01 Dec 2025 08:44:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215733 IP address blocks: 45.11.168.0/22 maxlen: 22 92.51.208.0/21 maxlen: 21 185.97.236.0/22 maxlen: 22 185.152.72.0/22 maxlen: 22 185.206.192.0/22 maxlen: 22 185.209.164.0/22 maxlen: 22 194.36.58.0/23 maxlen: 23 194.36.64.0/23 maxlen: 23 2a01:ac::/32 maxlen: 32 2a01:ad::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:15:fc:b7:ab:20:31:7b:65:16:9c:d0:74:00:e9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Validity Not Before: Dec 1 08:44:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9827fc4c424797752009c5fed665645fbd7769ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:3e:c0:f2:21:6a:80:57:e2:7c:fe:b9:c1: 73:cb:72:b6:ca:f9:15:67:8c:6d:78:35:cf:20:03: d7:da:b2:b7:a8:3a:60:e6:9e:04:27:27:f7:60:de: ab:c9:10:27:b4:fe:74:9c:85:90:ec:a8:6c:b2:13: b8:fd:47:2a:da:5b:70:b1:78:45:47:4d:71:7e:2e: 73:5d:5b:9d:d8:cb:7e:de:a8:87:2d:0c:3f:04:37: 18:e7:74:e0:fe:44:ef:8e:85:b5:19:ee:7c:fa:ea: 6e:66:dd:a6:8d:e4:61:f3:b1:64:c4:9e:a7:47:6c: 6e:80:b8:6e:26:1e:03:4e:eb:ad:a5:0d:a6:18:97: bd:f2:39:9a:bb:8f:d1:cf:35:2a:d7:49:fc:a1:be: 17:31:f0:e5:f2:d9:30:21:ef:11:05:90:40:eb:0e: 07:e5:57:d0:0b:d2:37:87:08:76:95:63:76:ca:bf: e4:08:87:c7:e8:60:cf:62:a6:8e:f0:0f:75:93:7a: 0e:78:65:3c:28:8e:cf:f3:17:8c:27:e6:c7:fa:a2: 21:df:72:02:8c:37:b3:b4:c3:f3:63:4f:28:a2:0a: b4:31:f9:ee:62:d0:0c:a1:7d:d3:44:b4:ad:d0:e2: 03:f0:92:ee:d8:b5:1c:36:be:e7:e2:a4:5f:5b:81: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:27:FC:4C:42:47:97:75:20:09:C5:FE:D6:65:64:5F:BD:77:69:EF X509v3 Authority Key Identifier: keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/mCf8TEJHl3UgCcX-1mVkX713ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.168.0/22 92.51.208.0/21 185.97.236.0/22 185.152.72.0/22 185.206.192.0/22 185.209.164.0/22 194.36.58.0/23 194.36.64.0/23 IPv6: 2a01:ac::/31 Signature Algorithm: sha256WithRSAEncryption 60:3c:3f:3e:7e:5a:27:73:00:e0:81:07:dc:c1:94:ab:35:c2: c8:7f:42:f8:5e:5c:96:21:1e:c6:f3:09:cf:78:7f:9f:f3:df: 88:7e:27:63:a8:3a:ed:14:58:aa:cd:c5:0a:cb:2e:0f:64:d3: 8c:22:10:74:e1:40:e8:27:96:3c:df:d0:a4:50:27:c6:95:e7: 4d:32:7c:53:04:59:09:2e:97:67:91:9b:5f:e8:d2:30:ca:c7: cd:fd:78:84:09:dc:46:ac:37:56:15:26:b5:a6:ca:a0:ec:d8: 81:03:f0:7a:6b:62:26:88:9e:1a:b5:d5:4b:a0:ea:1f:dd:71: db:ce:5d:31:5a:cf:c0:68:b3:0b:01:06:40:69:db:be:37:82: e7:3c:50:f6:7d:2b:5a:42:84:48:49:7f:83:9a:27:18:0c:51: f8:c9:c8:a5:ec:78:ff:9b:f6:c2:da:8f:5b:ce:73:33:ed:11: d7:12:a9:cf:a8:06:ab:b7:2e:4c:f1:c1:7c:6c:da:78:26:ea: fc:c3:00:3e:47:77:1c:2a:1d:1f:52:eb:a5:00:16:23:5c:3d: 6c:64:c2:3e:32:03:d4:5d:66:82:07:ab:2a:2d:a2:d7:be:4b: 7b:6f:88:8b:e6:db:16:f5:9f:ed:13:a5:07:f6:a0:29:e2:e4: ce:4c:78:c6 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZrZFfy3qyAxe2UWnNB0AOnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4 NjMxNjAwHhcNMjUxMjAxMDg0NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODI3ZmM0YzQyNDc5Nzc1MjAwOWM1ZmVkNjY1NjQ1ZmJkNzc2OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcY+wPIhaoBX4nz+ucFzy3K2yvkV Z4xteDXPIAPX2rK3qDpg5p4EJyf3YN6ryRAntP50nIWQ7KhsshO4/Ucq2ltwsXhF R01xfi5zXVud2Mt+3qiHLQw/BDcY53Tg/kTvjoW1Ge58+upuZt2mjeRh87FkxJ6n R2xugLhuJh4DTuutpQ2mGJe98jmau4/RzzUq10n8ob4XMfDl8tkwIe8RBZBA6w4H 5VfQC9I3hwh2lWN2yr/kCIfH6GDPYqaO8A91k3oOeGU8KI7P8xeMJ+bH+qIh33IC jDeztMPzY08oogq0MfnuYtAMoX3TRLSt0OID8JLu2LUcNr7n4qRfW4FTZwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJgn/ExCR5d1IAnF/tZlZF+9d2nvMB8GA1UdIwQY MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt ZjAxOThjNmMyNDc0LzEvbUNmOFRFSkhsM1VnQ2NYLTFtVmtYNzEzYWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0 LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLQuoAwQD XDPQAwQCuWHsAwQCuZhIAwQCuc7AAwQCudGkAwQBwiQ6AwQBwiRAMA0EAgACMAcD BQEqAQCsMA0GCSqGSIb3DQEBCwUAA4IBAQBgPD8+floncwDggQfcwZSrNcLIf0L4 XlyWIR7G8wnPeH+f89+IfidjqDrtFFiqzcUKyy4PZNOMIhB04UDoJ5Y839CkUCfG ledNMnxTBFkJLpdnkZtf6NIwysfN/XiECdxGrDdWFSa1psqg7NiBA/B6a2ImiJ4a tdVLoOof3XHbzl0xWs/AaLMLAQZAadu+N4LnPFD2fStaQoRISX+DmicYDFH4ycil 7Hj/m/bC2o9bznMz7RHXEqnPqAarty5M8cF8bNp4Jur8wwA+R3ccKh0fUuulABYj XD1sZMI+MgPUXWaCB6sqLaLXvkt7b4iL5tsW9Z/tE6UH9qAp4uTOTHjG -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:40 2025 by rpki-client