This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/muN4A4R4P7dSV7ABLHFva5p3gdQ.roa File: muN4A4R4P7dSV7ABLHFva5p3gdQ.roa (raw, json) Hash identifier: 7RttwWiy9qX2SJhBK1/HfXGPYBK3zQo/lPRpZaSS/8Y= Subject key identifier: 9A:E3:78:03:84:78:3F:B7:52:57:B0:01:2C:71:6F:6B:9A:77:81:D4 Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1 Certificate serial: 019AD90581D8EFD20FF7CB6E5F43D2CF0F5E Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/muN4A4R4P7dSV7ABLHFva5p3gdQ.roa Signing time: Mon 01 Dec 2025 08:26:48 +0000 ROA not before: Mon 01 Dec 2025 08:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210872 IP address blocks: 193.168.8.0/23 maxlen: 24 193.168.8.0/24 maxlen: 24 193.168.9.0/24 maxlen: 24 2a14:e480::/48 maxlen: 48 2a14:e480:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:05:81:d8:ef:d2:0f:f7:cb:6e:5f:43:d2:cf:0f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1 Validity Not Before: Dec 1 08:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ae3780384783fb75257b0012c716f6b9a7781d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:f9:68:f1:36:d5:71:53:aa:30:6f:db:86: db:c6:7a:21:ce:8b:f7:b1:63:08:d0:9e:e4:38:1b: 8b:93:35:19:24:ff:6a:9a:77:ce:1d:bf:a9:a1:b9: 5a:4b:2d:6a:2d:44:5a:14:3c:cf:fa:9c:ce:be:c0: e7:fa:97:fe:a9:06:31:72:2b:3b:7c:9c:a8:16:f6: 5e:b4:60:71:b2:85:1c:01:fc:c6:ee:49:10:f4:be: 5f:d2:e0:e1:87:89:3c:6b:3e:8b:ee:cb:47:dd:3b: 2b:65:8b:26:fb:29:2f:d3:1f:80:23:c8:e2:62:d8: 0d:4b:68:1a:f0:cc:f1:c2:e3:07:2e:a9:c0:10:ca: ba:16:91:16:de:b6:f7:1e:64:39:a0:53:83:67:ef: 17:65:9a:8e:49:f5:97:df:4e:55:2d:2c:f9:c1:88: f7:08:5a:9e:99:d0:60:11:3d:9b:4c:06:cc:01:ad: 42:7e:9a:36:5e:67:66:9f:7a:ca:89:f3:36:c2:10: 36:61:77:24:e6:30:73:e2:76:7f:79:13:85:c5:0d: 6b:7e:43:0d:5d:72:54:29:ca:7c:61:78:40:6e:c2: 16:69:ef:b9:f7:44:dc:23:87:9b:3f:04:ee:1e:41: 56:54:f3:b2:54:e0:2c:d5:68:c8:71:8d:0b:27:a1: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:78:03:84:78:3F:B7:52:57:B0:01:2C:71:6F:6B:9A:77:81:D4 X509v3 Authority Key Identifier: keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/muN4A4R4P7dSV7ABLHFva5p3gdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.8.0/23 IPv6: 2a14:e480::/47 Signature Algorithm: sha256WithRSAEncryption 47:fb:ca:c7:44:a4:07:33:03:f8:dc:08:34:38:07:90:15:b6: bc:1b:75:fd:87:51:99:eb:e8:6c:ba:9f:3d:aa:43:fc:1c:bf: 4c:11:51:73:d9:28:ed:bb:72:f0:c9:1b:64:09:1e:3e:be:40: 7a:c5:e2:4e:cf:03:c6:54:26:6c:7d:2a:a4:1b:34:19:22:07: 3f:ce:18:ca:72:64:af:e0:3e:fa:53:aa:5d:08:0b:bf:20:a1: 27:34:30:eb:94:8b:3d:8b:a3:80:7c:75:11:41:76:c0:6b:14: f2:c9:c1:09:2f:44:6e:fc:59:b3:0f:79:ee:a6:96:8c:31:20: 20:14:35:13:10:b0:c5:7c:ce:15:3b:cd:61:41:3b:ec:e9:18: 01:68:86:2b:bd:3a:f0:64:d2:ad:e9:19:52:e3:87:4d:03:5f: a3:6d:01:ed:f2:61:c0:21:b8:88:97:13:5f:c6:1b:99:4f:56: ca:78:53:22:99:58:9a:6a:c3:37:9f:77:b6:b4:fe:0d:2f:85: 88:3d:47:9a:fb:c2:38:c9:c0:f1:ed:d7:6a:4c:51:25:39:01: 0c:09:fa:42:e0:c6:40:20:b5:19:06:cd:44:b0:59:15:13:b0: 5f:03:2a:49:ab:43:cc:fc:09:43:0f:c1:52:12:a1:94:bd:07: bd:e5:45:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZrZBYHY79IP98tuX0PSzw9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx MTgzZjEwHhcNMjUxMjAxMDgyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWUzNzgwMzg0NzgzZmI3NTI1N2IwMDEyYzcxNmY2YjlhNzc4MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyf5aPE21XFTqjBv24bbxnohzov3 sWMI0J7kOBuLkzUZJP9qmnfOHb+poblaSy1qLURaFDzP+pzOvsDn+pf+qQYxcis7 fJyoFvZetGBxsoUcAfzG7kkQ9L5f0uDhh4k8az6L7stH3TsrZYsm+ykv0x+AI8ji YtgNS2ga8MzxwuMHLqnAEMq6FpEW3rb3HmQ5oFODZ+8XZZqOSfWX305VLSz5wYj3 CFqemdBgET2bTAbMAa1Cfpo2Xmdmn3rKifM2whA2YXck5jBz4nZ/eROFxQ1rfkMN XXJUKcp8YXhAbsIWae+590TcI4ebPwTuHkFWVPOyVOAs1WjIcY0LJ6HnTQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJrjeAOEeD+3UlewASxxb2uad4HUMB8GA1UdIwQY MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt ZmZlMjFlZjk4Njc0LzEvbXVONEE0UjRQN2RTVjdBQkxIRnZhNXAzZ2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0 LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwagIMA8E AgACMAkDBwEqFOSAAAAwDQYJKoZIhvcNAQELBQADggEBAEf7ysdEpAczA/jcCDQ4 B5AVtrwbdf2HUZnr6Gy6nz2qQ/wcv0wRUXPZKO27cvDJG2QJHj6+QHrF4k7PA8ZU Jmx9KqQbNBkiBz/OGMpyZK/gPvpTql0IC78goSc0MOuUiz2Lo4B8dRFBdsBrFPLJ wQkvRG78WbMPee6mlowxICAUNRMQsMV8zhU7zWFBO+zpGAFohiu9OvBk0q3pGVLj h00DX6NtAe3yYcAhuIiXE1/GG5lPVsp4UyKZWJpqwzefd7a0/g0vhYg9R5r7wjjJ wPHt12pMUSU5AQwJ+kLgxkAgtRkGzUSwWRUTsF8DKkmrQ8z8CUMPwVISoZS9B73l RQI= -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:57 2025 by rpki-client