This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/MivwbQ9q5ddr6D8dxE12BhjPKks.roa File: MivwbQ9q5ddr6D8dxE12BhjPKks.roa (raw, json) Hash identifier: loaR7SmB49zrSSiW0ssGY7SzbJF+1FfW/F4gUS+NG7Q= Subject key identifier: 32:2B:F0:6D:0F:6A:E5:D7:6B:E8:3F:1D:C4:4D:76:06:18:CF:2A:4B Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af Certificate serial: 019A82C67D6B2E1A5A2AC673424E56CF7545 Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/MivwbQ9q5ddr6D8dxE12BhjPKks.roa Signing time: Fri 14 Nov 2025 14:30:37 +0000 ROA not before: Fri 14 Nov 2025 14:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43861 IP address blocks: 45.134.176.0/23 maxlen: 23 45.134.178.0/23 maxlen: 23 91.199.227.0/24 maxlen: 24 185.125.242.0/24 maxlen: 24 2001:678:348::/48 maxlen: 48 2a13:acc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:c6:7d:6b:2e:1a:5a:2a:c6:73:42:4e:56:cf:75:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af Validity Not Before: Nov 14 14:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=322bf06d0f6ae5d76be83f1dc44d760618cf2a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:37:24:fe:52:df:f6:fa:4d:ef:02:ca:40: 8c:40:60:cc:c2:48:9d:ae:dd:0c:36:fc:68:62:6a: ae:43:35:6a:7f:2a:5d:16:a6:eb:ed:b3:7c:1b:fc: 39:69:44:be:13:13:83:94:a5:e1:90:08:cd:b9:35: e0:01:9b:32:c9:c1:31:87:58:cb:47:5d:3b:6e:f4: 69:b2:ce:89:b3:81:e9:da:25:35:57:11:c5:da:73: ad:d4:6b:4d:cf:c5:b4:8d:f9:ab:5f:5a:31:03:50: 90:7d:9a:f3:9e:09:b0:25:79:9a:42:72:c4:36:da: f9:37:09:58:88:3f:d6:d8:58:32:ed:24:5f:3f:e6: 04:e7:de:35:dd:0e:f4:8f:16:b1:3b:a2:69:47:f0: 24:b3:5b:2c:e9:ca:cf:4d:36:36:c5:69:da:51:98: 7a:22:b6:ce:d6:43:a6:88:8e:fb:48:84:e5:f9:75: c8:7c:69:8f:ae:96:2f:64:44:7f:60:1e:65:67:07: 37:e8:3f:96:03:f7:ec:d0:40:8a:46:97:99:1e:30: 8d:50:6b:a9:fc:44:59:5f:ad:72:48:90:1a:20:ea: 57:53:89:12:d5:2e:6f:ee:59:9c:3f:dd:4c:bd:ad: 0b:25:31:76:b8:ee:f0:84:72:31:1a:2b:0a:6d:fa: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:F0:6D:0F:6A:E5:D7:6B:E8:3F:1D:C4:4D:76:06:18:CF:2A:4B X509v3 Authority Key Identifier: keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/MivwbQ9q5ddr6D8dxE12BhjPKks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.176.0/22 91.199.227.0/24 185.125.242.0/24 IPv6: 2001:678:348::/48 2a13:acc0::/32 Signature Algorithm: sha256WithRSAEncryption 75:e6:7d:60:a1:8f:fb:b5:7c:51:07:7c:ff:be:69:c5:3f:cb: 60:e1:86:5e:d0:a7:cf:12:7d:2e:f1:cc:7f:ef:4b:34:e8:23: 6a:ba:44:16:ad:fc:60:32:08:8c:35:fe:05:0e:fb:4d:6e:5e: 1f:83:a3:3e:6c:e0:8f:b7:9e:1e:7f:3a:fb:ed:4b:77:f5:5e: d7:0b:ab:7c:2a:07:c8:cc:ec:d5:1d:d5:a0:21:de:c1:db:74: 5f:c9:db:4f:96:0c:6c:16:17:f1:4f:83:ad:1f:4d:56:25:c0: a5:84:28:39:1a:12:93:97:bf:45:75:3d:49:27:67:9c:9a:1a: cd:b5:b7:70:52:91:48:9d:d2:89:98:2b:00:d1:9c:86:09:4e: 0b:79:7f:8b:d6:96:a2:be:af:35:bc:1d:41:d8:7d:48:d9:5d: 32:ea:68:09:1f:72:31:23:9b:74:e0:09:01:03:a0:b1:2f:3a: 30:8a:06:a4:0f:1c:37:05:e5:95:54:93:e9:f4:c7:c2:56:fc: 37:fd:3c:0b:36:35:85:18:14:c9:50:48:44:76:ff:0e:36:26: 8c:fc:11:d0:83:3c:3e:66:74:01:69:d0:88:c6:d5:3f:0f:08: 52:00:69:b2:89:44:02:b8:bd:c9:26:68:bb:b0:64:e0:51:1a: f4:e3:2e:26 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZqCxn1rLhpaKsZzQk5Wz3VFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMmRmMjk3ZGIxYWYwMzc2YTVhMmE3MmU2OThhN2ViMjg3 YWYzYWYwHhcNMjUxMTE0MTQzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjJiZjA2ZDBmNmFlNWQ3NmJlODNmMWRjNDRkNzYwNjE4Y2YyYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCw3JP5S3/b6Te8CykCMQGDMwkid rt0MNvxoYmquQzVqfypdFqbr7bN8G/w5aUS+ExODlKXhkAjNuTXgAZsyycExh1jL R107bvRpss6Js4Hp2iU1VxHF2nOt1GtNz8W0jfmrX1oxA1CQfZrzngmwJXmaQnLE Ntr5NwlYiD/W2Fgy7SRfP+YE59413Q70jxaxO6JpR/Aks1ss6crPTTY2xWnaUZh6 IrbO1kOmiI77SITl+XXIfGmPrpYvZER/YB5lZwc36D+WA/fs0ECKRpeZHjCNUGup /ERZX61ySJAaIOpXU4kS1S5v7lmcP91Mva0LJTF2uO7whHIxGisKbfpO/wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFDIr8G0PauXXa+g/HcRNdgYYzypLMB8GA1UdIwQY MBaAFP8t8pfbGvA3aloqcuaYp+soevOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTct MDFmMjhmNGQ0OWY2LzEvTWl2d2JROXE1ZGRyNkQ4ZHhFMTJCaGpQS2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTctMDFmMjhmNGQ0OWY2 LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCLYawAwQA W8fjAwQAuX3yMBYEAgACMBADBwAgAQZ4A0gDBQAqE6zAMA0GCSqGSIb3DQEBCwUA A4IBAQB15n1goY/7tXxRB3z/vmnFP8tg4YZe0KfPEn0u8cx/70s06CNqukQWrfxg MgiMNf4FDvtNbl4fg6M+bOCPt54efzr77Ut39V7XC6t8KgfIzOzVHdWgId7B23Rf ydtPlgxsFhfxT4OtH01WJcClhCg5GhKTl79FdT1JJ2ecmhrNtbdwUpFIndKJmCsA 0ZyGCU4LeX+L1paivq81vB1B2H1I2V0y6mgJH3IxI5t04AkBA6CxLzowigakDxw3 BeWVVJPp9MfCVvw3/TwLNjWFGBTJUEhEdv8ONiaM/BHQgzw+ZnQBadCIxtU/DwhS AGmyiUQCuL3JJmi7sGTgURr04y4m -----END CERTIFICATE-----Generated at Fri Dec 19 05:26:39 2025 by rpki-client