This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/MuhZENJ3uiS0ZLICsw8YvVd5XCg.roa File: MuhZENJ3uiS0ZLICsw8YvVd5XCg.roa (raw, json) Hash identifier: GVdQwmm/GEsuTxQT2d82fu03I2oER6Gn8uNRiFIWe0Q= Subject key identifier: 32:E8:59:10:D2:77:BA:24:B4:64:B2:02:B3:0F:18:BD:57:79:5C:28 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019A86B2D4161191AA8C7220F288555FE1D2 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/MuhZENJ3uiS0ZLICsw8YvVd5XCg.roa Signing time: Sat 15 Nov 2025 08:47:37 +0000 ROA not before: Sat 15 Nov 2025 08:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205536 IP address blocks: 94.184.17.0/24 maxlen: 24 94.184.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:b2:d4:16:11:91:aa:8c:72:20:f2:88:55:5f:e1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Nov 15 08:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32e85910d277ba24b464b202b30f18bd57795c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:a0:85:94:09:a2:0c:c8:a1:77:50:2b:02: 30:0d:e6:8d:2e:fa:3c:5c:8e:85:19:a5:cd:92:82: 3b:4f:ee:8e:44:10:8b:2f:05:7e:08:e7:60:35:10: d2:f6:8f:a3:9c:a3:35:7a:f0:91:d6:28:62:ee:d3: 73:53:70:a6:a2:20:51:30:16:79:a3:e8:59:18:e2: 48:a0:be:f8:8b:88:36:78:2b:72:f0:52:8b:30:d2: a3:45:e2:bb:79:d7:57:af:87:3d:bf:d8:df:ea:ad: e9:12:07:a7:6c:d2:1e:20:72:6c:94:7c:16:b9:8c: d9:63:72:14:59:a5:10:69:8d:2d:17:eb:e3:91:b0: af:26:22:c2:57:0d:c7:12:fb:41:98:17:57:29:6b: d6:d7:ef:ef:fb:54:44:2a:91:70:a4:7f:09:d8:3c: b1:88:fb:82:a2:c3:d3:22:4a:e3:62:23:05:cd:5c: a8:2f:dc:c4:d0:7e:d1:49:ab:cb:7f:19:e4:d5:0e: eb:3f:f8:4c:3b:31:3a:87:36:96:00:20:20:a3:d7: f8:6d:04:2b:8f:b8:ef:c4:2a:ee:2e:55:33:69:bf: 4a:14:3b:6d:ae:c5:96:56:b5:56:ca:fb:16:47:30: 15:40:df:91:48:dc:d7:94:52:a9:4a:a3:8b:9e:e5: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:59:10:D2:77:BA:24:B4:64:B2:02:B3:0F:18:BD:57:79:5C:28 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/MuhZENJ3uiS0ZLICsw8YvVd5XCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.17.0-94.184.18.255 Signature Algorithm: sha256WithRSAEncryption 27:7f:bc:5e:19:e9:08:8b:a4:2f:b4:1f:53:a7:91:0c:a5:1d: 2b:7c:66:f9:e2:2f:af:2a:19:7d:38:0f:36:1f:b1:5d:90:71: ba:8f:ed:4f:7f:68:9f:c0:bb:cc:be:32:bd:3e:ff:6a:4d:15: 9c:c4:e6:22:be:33:23:ba:5a:f7:45:b0:e6:c1:36:c8:3f:b7: b0:72:68:de:91:e5:5d:25:d8:1b:46:a7:62:37:6e:4e:13:bc: fe:63:85:bb:7b:5b:37:d4:0d:5c:56:d8:f5:c6:7b:eb:b9:b0: 59:1c:fd:e6:f5:1d:09:ff:d3:f6:48:93:09:a8:0b:fa:c6:11: 8c:fa:68:bd:4a:b2:fd:4f:98:39:3d:75:c1:6b:9a:d1:0b:7c: bc:c9:bb:46:f6:1a:7f:fe:cd:1a:32:e3:92:41:23:ee:3d:76: c7:5f:10:e8:5e:08:4a:ed:f0:7a:88:21:a5:d1:38:2c:fe:bf: e6:e5:84:b0:f5:c3:8e:69:2e:44:78:c1:9b:76:68:a1:56:5b: a4:9f:ab:84:98:3a:6d:7b:b9:85:99:2d:34:7d:4a:81:cc:5b: bf:ea:55:64:26:98:67:42:1b:cb:b9:90:c9:d5:fb:27:6e:4c: 64:50:ce:3c:56:6c:22:a6:5f:a5:25:7f:1d:b2:30:14:d7:b7: b3:e6:37:40 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqGstQWEZGqjHIg8ohVX+HSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjUxMTE1MDg0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmU4NTkxMGQyNzdiYTI0YjQ2NGIyMDJiMzBmMThiZDU3Nzk1YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOyghZQJogzIoXdQKwIwDeaNLvo8 XI6FGaXNkoI7T+6ORBCLLwV+COdgNRDS9o+jnKM1evCR1ihi7tNzU3CmoiBRMBZ5 o+hZGOJIoL74i4g2eCty8FKLMNKjReK7eddXr4c9v9jf6q3pEgenbNIeIHJslHwW uYzZY3IUWaUQaY0tF+vjkbCvJiLCVw3HEvtBmBdXKWvW1+/v+1REKpFwpH8J2Dyx iPuCosPTIkrjYiMFzVyoL9zE0H7RSavLfxnk1Q7rP/hMOzE6hzaWACAgo9f4bQQr j7jvxCruLlUzab9KFDttrsWWVrVWyvsWRzAVQN+RSNzXlFKpSqOLnuVtjQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDLoWRDSd7oktGSyArMPGL1XeVwoMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvTXVoWkVOSjN1aVMwWkxJQ3N3OFl2VmQ1WENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABeuBED BABeuBIwDQYJKoZIhvcNAQELBQADggEBACd/vF4Z6QiLpC+0H1OnkQylHSt8Zvni L68qGX04DzYfsV2QcbqP7U9/aJ/Au8y+Mr0+/2pNFZzE5iK+MyO6WvdFsObBNsg/ t7ByaN6R5V0l2BtGp2I3bk4TvP5jhbt7WzfUDVxW2PXGe+u5sFkc/eb1HQn/0/ZI kwmoC/rGEYz6aL1Ksv1PmDk9dcFrmtELfLzJu0b2Gn/+zRoy45JBI+49dsdfEOhe CErt8HqIIaXROCz+v+blhLD1w45pLkR4wZt2aKFWW6Sfq4SYOm17uYWZLTR9SoHM W7/qVWQmmGdCG8u5kMnV+yduTGRQzjxWbCKmX6Ulfx2yMBTXt7PmN0A= -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:53 2025 by rpki-client