This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MJwUNy4u4MIY3WbrTuqIa5WSXJU.roa File: MJwUNy4u4MIY3WbrTuqIa5WSXJU.roa (raw, json) Hash identifier: nfwoDhc7kcK/8ZviZ2e1c5XQJduoysG2DSbgg0Yonwo= Subject key identifier: 30:9C:14:37:2E:2E:E0:C2:18:DD:66:EB:4E:EA:88:6B:95:92:5C:95 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019A4ABE65E7A24985228F7345444C4B409B Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MJwUNy4u4MIY3WbrTuqIa5WSXJU.roa Signing time: Mon 03 Nov 2025 17:23:03 +0000 ROA not before: Mon 03 Nov 2025 17:23:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 92.118.169.0/24 maxlen: 24 92.118.170.0/24 maxlen: 24 185.58.115.0/24 maxlen: 24 185.68.184.0/24 maxlen: 24 185.68.246.0/24 maxlen: 24 185.68.247.0/24 maxlen: 24 185.79.138.0/24 maxlen: 24 185.88.36.0/24 maxlen: 24 185.113.139.0/24 maxlen: 24 193.221.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4a:be:65:e7:a2:49:85:22:8f:73:45:44:4c:4b:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Nov 3 17:23:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=309c14372e2ee0c218dd66eb4eea886b95925c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:9e:4f:17:f7:3a:bb:93:e8:c7:01:43:38: 2e:64:00:bf:6c:37:92:43:e1:cc:06:b4:df:75:5f: a3:43:14:13:cd:e0:fa:67:92:ce:b5:99:95:be:46: 47:6c:e4:eb:21:23:1f:86:3a:d9:a2:0a:e4:3e:f4: ea:34:c6:42:38:18:42:de:f2:30:bf:f6:20:32:03: d1:88:c6:56:58:ec:98:bc:33:1e:4c:d3:fc:34:c3: c5:26:34:6e:d6:87:7a:00:26:32:c8:cc:c2:82:c6: 7f:f8:37:e6:c4:c4:9b:c3:5e:06:0d:0f:f3:23:e2: a4:b3:5b:4b:e9:47:f0:49:56:70:1d:a5:a4:56:ee: f5:ab:2c:06:61:da:a1:38:41:1e:ae:50:d7:e5:b1: 8f:24:53:55:f9:31:18:97:ac:c2:94:8a:e9:bd:4b: ab:e0:af:a9:c4:1f:11:93:a9:34:74:b0:65:15:f3: 97:95:12:ae:eb:2c:5b:00:9d:35:4c:5e:5f:0a:a6: 78:8a:8b:b5:44:bc:03:2c:d3:a4:6e:15:10:2b:c3: 51:93:a0:46:8b:70:db:b4:d2:be:d2:57:ba:58:36: f1:8f:74:aa:bf:44:ff:da:cb:f1:a5:c6:32:73:aa: 93:ac:c6:89:3b:be:31:15:6f:7b:81:f7:1b:9d:4e: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:14:37:2E:2E:E0:C2:18:DD:66:EB:4E:EA:88:6B:95:92:5C:95 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MJwUNy4u4MIY3WbrTuqIa5WSXJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.169.0-92.118.170.255 185.58.115.0/24 185.68.184.0/24 185.68.246.0/23 185.79.138.0/24 185.88.36.0/24 185.113.139.0/24 193.221.203.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ff:0b:3b:e7:ea:6f:d5:c4:f3:dd:01:6b:26:99:e3:b0:e9: 47:bc:7e:a9:a9:9f:df:0b:00:58:8e:b9:6d:7a:ee:7b:db:86: f5:21:3b:12:52:01:d0:bf:bc:9f:b9:bd:f2:5a:84:90:2d:58: 2d:0d:0d:55:d3:d2:29:66:e9:cb:a1:d2:4b:d4:29:dc:fd:70: b9:56:aa:e4:bc:21:6c:bd:e5:b2:9c:24:8f:37:34:c3:89:d4: 70:ef:9f:f2:b4:20:c3:40:9d:6a:18:0f:bb:1d:04:51:23:0f: 26:ac:62:20:d0:65:4c:73:fb:0d:28:bf:2f:f2:fd:8f:bb:48: 53:2c:74:e8:ab:48:16:66:7f:2c:a2:3b:15:c3:58:9a:ea:31: 68:33:8e:c4:af:47:15:4d:a5:2b:fc:d8:f0:d3:f6:e3:93:0a: 34:e9:d9:75:fd:4c:5d:43:61:79:fe:d9:27:56:80:28:df:e1: 04:74:ff:98:fc:9d:f6:37:e2:1b:c0:02:65:5c:62:9e:cb:0c: 7d:bc:d2:02:e2:ae:a5:ed:8f:40:ac:29:91:4b:5e:2f:9e:23: 5d:39:4e:b7:ea:4e:bd:a9:36:82:fc:57:a7:8b:f4:9b:38:b3: 57:59:8c:65:82:a5:98:d6:f5:cc:87:0e:ae:cc:b5:0f:56:ff: 06:88:92:5c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZpKvmXnokmFIo9zRURMS0CbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMTAzMTcyMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDljMTQzNzJlMmVlMGMyMThkZDY2ZWI0ZWVhODg2Yjk1OTI1Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR6eTxf3OruT6McBQzguZAC/bDeS Q+HMBrTfdV+jQxQTzeD6Z5LOtZmVvkZHbOTrISMfhjrZogrkPvTqNMZCOBhC3vIw v/YgMgPRiMZWWOyYvDMeTNP8NMPFJjRu1od6ACYyyMzCgsZ/+DfmxMSbw14GDQ/z I+Kks1tL6UfwSVZwHaWkVu71qywGYdqhOEEerlDX5bGPJFNV+TEYl6zClIrpvUur 4K+pxB8Rk6k0dLBlFfOXlRKu6yxbAJ01TF5fCqZ4iou1RLwDLNOkbhUQK8NRk6BG i3DbtNK+0le6WDbxj3Sqv0T/2svxpcYyc6qTrMaJO74xFW97gfcbnU4iTQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFDCcFDcuLuDCGN1m607qiGuVklyVMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvTUp3VU55NHU0TUlZM1diclR1cUlhNVdTWEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBABcdqkD BABcdqoDBAC5OnMDBAC5RLgDBAG5RPYDBAC5T4oDBAC5WCQDBAC5cYsDBADB3csw DQYJKoZIhvcNAQELBQADggEBAJT/Czvn6m/VxPPdAWsmmeOw6Ue8fqmpn98LAFiO uW167nvbhvUhOxJSAdC/vJ+5vfJahJAtWC0NDVXT0ilm6cuh0kvUKdz9cLlWquS8 IWy95bKcJI83NMOJ1HDvn/K0IMNAnWoYD7sdBFEjDyasYiDQZUxz+w0ovy/y/Y+7 SFMsdOirSBZmfyyiOxXDWJrqMWgzjsSvRxVNpSv82PDT9uOTCjTp2XX9TF1DYXn+ 2SdWgCjf4QR0/5j8nfY34hvAAmVcYp7LDH280gLirqXtj0CsKZFLXi+eI105Trfq Tr2pNoL8V6eL9Js4s1dZjGWCpZjW9cyHDq7MtQ9W/waIklw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:44 2025 by rpki-client