This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/mUH4WixVP-HI87IHkbAwUt1rYqE.roa File: mUH4WixVP-HI87IHkbAwUt1rYqE.roa (raw, json) Hash identifier: bFUjp6Zgkfnsd0tftwal1tAVFuDAGqPSWozgj1wo6P8= Subject key identifier: 99:41:F8:5A:2C:55:3F:E1:C8:F3:B2:07:91:B0:30:52:DD:6B:62:A1 Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492 Certificate serial: 019A390F1D17177E2B251522419D1EFA0457 Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/mUH4WixVP-HI87IHkbAwUt1rYqE.roa Signing time: Fri 31 Oct 2025 06:58:02 +0000 ROA not before: Fri 31 Oct 2025 06:58:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204265 IP address blocks: 194.76.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:39:0f:1d:17:17:7e:2b:25:15:22:41:9d:1e:fa:04:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492 Validity Not Before: Oct 31 06:58:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9941f85a2c553fe1c8f3b20791b03052dd6b62a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:5b:49:34:3a:e4:14:26:71:7f:06:80:fe: b9:0f:ce:bb:80:bf:c0:53:04:6d:42:84:71:7a:7b: 55:39:cb:aa:b0:69:9c:bc:b5:ea:f8:c3:ee:4d:0d: 48:09:a8:b4:60:8f:a6:58:2d:b3:96:e4:b5:2d:1e: 84:87:a0:04:fb:4c:9d:4d:d2:8e:07:8a:47:c6:6e: 18:14:cd:2b:d4:82:9f:72:bd:c6:84:a1:f4:07:fa: 3d:3a:31:13:56:68:c4:df:ea:14:fe:17:fe:ef:89: ba:63:88:a3:92:7c:c6:88:df:e3:4c:49:ea:3f:a5: ba:47:71:69:87:3d:5b:71:c1:cd:4a:d1:f4:d7:b7: f7:4e:f7:64:a6:8d:09:c1:9b:24:0f:ef:b1:07:f4: bc:fb:0f:7a:32:3d:74:5b:d4:1f:0b:2b:4e:7f:c4: 22:e3:82:36:71:1a:9d:2a:66:0c:b3:93:c9:0b:8f: 23:05:31:e1:98:94:6f:37:27:3a:62:fc:30:7f:11: 0f:7a:5f:20:ba:cf:ce:2e:db:9f:06:c6:16:99:7a: ea:c9:18:0e:82:2e:ec:b9:ca:80:c6:24:9b:6a:87: 5d:53:75:e1:7d:10:30:e7:22:c4:f4:5a:68:cf:4b: dc:01:b7:4e:d3:10:02:e7:32:df:37:70:f4:e1:7e: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:F8:5A:2C:55:3F:E1:C8:F3:B2:07:91:B0:30:52:DD:6B:62:A1 X509v3 Authority Key Identifier: keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/mUH4WixVP-HI87IHkbAwUt1rYqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.12.0/23 Signature Algorithm: sha256WithRSAEncryption 93:65:11:d0:e7:a5:12:a0:c1:11:33:e0:1e:3d:d9:cb:76:fb: 55:55:c6:9b:99:d8:64:47:4f:54:5f:ce:26:f2:6f:f4:d2:4d: 2f:3b:79:ea:52:ee:c1:fc:66:4a:67:68:5d:2b:c1:91:f8:85: 6b:23:19:a1:e5:17:ad:5c:49:5a:f2:30:13:13:91:ce:d8:70: a9:e9:c0:ed:64:2c:2c:f9:ad:fc:4d:b6:3e:40:95:7a:77:e6: 3f:26:7b:19:6f:e9:91:4e:8b:43:09:a9:27:cf:27:03:1f:53: 84:d9:ff:20:52:d0:08:d0:60:02:55:42:b9:ae:31:5d:b1:ed: 2e:ed:d8:b7:30:b6:3f:06:d3:55:ac:db:38:3e:f5:56:ab:d1: a5:c7:c5:57:95:de:85:ab:fd:34:53:3c:4b:96:2c:79:21:cc: 24:54:dd:29:ea:21:38:78:de:50:fd:37:71:74:5a:62:ed:3a: d3:ec:d1:82:3c:01:d3:c8:15:14:2d:10:26:05:ce:db:0d:80: cc:5a:43:08:71:80:de:59:d3:9b:b9:64:d1:7b:27:6f:09:ea: 74:ad:d7:c5:04:87:84:f1:81:30:0d:3e:7e:00:96:c9:99:0b: 84:61:3c:a8:60:98:03:78:e1:2e:92:26:58:2a:e1:91:72:95: a3:06:65:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZo5Dx0XF34rJRUiQZ0e+gRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2FiOGM5ZDIxN2FjMzA3OWMzMDE0YjE4ZDQ0NmUyMTNm MTk0OTIwHhcNMjUxMDMxMDY1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTQxZjg1YTJjNTUzZmUxYzhmM2IyMDc5MWIwMzA1MmRkNmI2MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1bSTQ65BQmcX8GgP65D867gL/A UwRtQoRxentVOcuqsGmcvLXq+MPuTQ1ICai0YI+mWC2zluS1LR6Eh6AE+0ydTdKO B4pHxm4YFM0r1IKfcr3GhKH0B/o9OjETVmjE3+oU/hf+74m6Y4ijknzGiN/jTEnq P6W6R3Fphz1bccHNStH017f3Tvdkpo0JwZskD++xB/S8+w96Mj10W9QfCytOf8Qi 44I2cRqdKmYMs5PJC48jBTHhmJRvNyc6YvwwfxEPel8gus/OLtufBsYWmXrqyRgO gi7sucqAxiSbaoddU3XhfRAw5yLE9Fpoz0vcAbdO0xAC5zLfN3D04X5vewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlB+FosVT/hyPOyB5GwMFLda2KhMB8GA1UdIwQY MBaAFM/KuMnSF6wwecMBSxjURuIT8ZSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2Yt NDQ1NDAwZDcwM2M4LzEvbVVINFdpeFZQLUhJODdJSGtiQXdVdDFyWXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2YtNDQ1NDAwZDcwM2M4 LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkwMMA0G CSqGSIb3DQEBCwUAA4IBAQCTZRHQ56USoMERM+AePdnLdvtVVcabmdhkR09UX84m 8m/00k0vO3nqUu7B/GZKZ2hdK8GR+IVrIxmh5RetXEla8jATE5HO2HCp6cDtZCws +a38TbY+QJV6d+Y/JnsZb+mRTotDCaknzycDH1OE2f8gUtAI0GACVUK5rjFdse0u 7di3MLY/BtNVrNs4PvVWq9Glx8VXld6Fq/00UzxLlix5IcwkVN0p6iE4eN5Q/Tdx dFpi7TrT7NGCPAHTyBUULRAmBc7bDYDMWkMIcYDeWdObuWTReydvCep0rdfFBIeE 8YEwDT5+AJbJmQuEYTyoYJgDeOEukiZYKuGRcpWjBmXP -----END CERTIFICATE-----Generated at Mon Dec 8 09:09:47 2025 by rpki-client