This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/mv568tazljrLnO-JaBzFpuCKoHM.roa File: mv568tazljrLnO-JaBzFpuCKoHM.roa (raw, json) Hash identifier: ajQOAYEfptUbSlpbRzTQ2hDzCmnztcmaGHHyZCvHf9g= Subject key identifier: 9A:FE:7A:F2:D6:B3:96:3A:CB:9C:EF:89:68:1C:C5:A6:E0:8A:A0:73 Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019B1DB043EE7F3889E4D796AC6DCB5D3B67 Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/mv568tazljrLnO-JaBzFpuCKoHM.roa Signing time: Sun 14 Dec 2025 16:27:29 +0000 ROA not before: Sun 14 Dec 2025 16:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 194.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:b0:43:ee:7f:38:89:e4:d7:96:ac:6d:cb:5d:3b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Dec 14 16:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9afe7af2d6b3963acb9cef89681cc5a6e08aa073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ec:ef:e4:28:da:3d:ae:52:0b:9b:d8:02:a9: d3:e2:ea:5f:76:b6:d2:ab:a8:65:d9:91:c9:ad:25: 40:e1:bf:a9:f7:94:b3:25:bd:54:ed:be:82:91:f5: 14:bc:95:ad:05:db:ef:f0:b1:bf:f3:02:cc:0f:b7: 8a:34:f9:ba:0b:3e:90:a7:53:27:88:12:e1:39:2a: 4d:3b:7c:05:60:76:3c:01:b3:fd:ed:da:09:7f:6c: a8:d1:27:f8:74:b6:53:51:c8:d2:bf:26:34:23:68: 28:01:42:6f:02:23:84:b1:26:7a:1c:b0:8d:8f:b7: 2e:c4:22:ab:1f:3c:ae:4e:7f:fa:c6:41:af:4d:a6: 67:17:7b:fa:42:72:ec:e6:9d:5b:89:cc:ff:d6:55: f8:a1:76:fa:07:ed:c0:c9:40:18:46:6c:16:b2:5d: b6:9f:34:b4:dd:ee:5c:af:11:c7:d3:44:03:f2:04: 31:6c:12:c3:f9:14:42:eb:22:71:36:41:28:22:28: 61:0b:b1:33:70:2a:60:ec:a5:46:65:45:1e:ee:ae: ff:e2:a8:7c:09:16:e2:fb:6d:8d:74:9b:dd:5b:0c: c4:ad:b3:30:ab:e1:d1:dd:d9:5e:26:7a:e4:7c:26: 94:a4:43:5f:88:8c:ca:86:c6:09:7f:c5:52:11:7b: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FE:7A:F2:D6:B3:96:3A:CB:9C:EF:89:68:1C:C5:A6:E0:8A:A0:73 X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/mv568tazljrLnO-JaBzFpuCKoHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.138.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e1:33:c4:36:7f:c8:c5:44:2f:34:de:04:c7:76:19:89:f0: fd:f5:65:91:58:0c:b1:4a:6d:4c:37:cd:c1:09:c0:c2:2b:65: e8:7c:65:e8:6c:67:3d:ce:99:fa:82:11:21:66:b1:3e:2f:43: 94:92:e5:9c:ea:de:ab:c6:67:0d:77:10:dd:a9:a8:4a:b5:95: 63:d6:b8:f5:ac:40:ca:51:91:fa:1c:9d:bb:ca:cd:b5:cd:78: 92:e2:70:f4:52:81:e8:f4:32:17:fb:d3:27:2d:61:9c:a7:ad: c8:3a:4c:da:c4:93:60:47:14:8e:bd:d8:d0:b4:52:24:35:4f: ca:e7:09:a5:5f:53:3a:8a:47:d9:fc:64:21:b2:88:7f:9d:a5: 25:72:0d:3e:04:c9:07:e4:f4:ef:4a:18:24:65:ce:f4:e0:6c: 33:8b:05:a2:e6:71:5b:4a:79:33:2b:40:92:97:75:d3:26:aa: 34:93:c9:20:04:49:d4:10:41:d7:aa:31:97:61:3f:06:af:89: 19:eb:29:f5:9e:af:f9:7e:35:a4:ab:e4:bc:bc:19:9a:4c:86: e0:95:73:5b:cc:8a:fd:aa:05:a3:1f:f3:7b:92:76:c7:bd:d8: 3c:60:72:66:29:8e:f3:de:0d:e2:ae:e8:ee:94:cc:82:13:14: f7:36:4f:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsdsEPufziJ5NeWrG3LXTtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjUxMjE0MTYyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWZlN2FmMmQ2YjM5NjNhY2I5Y2VmODk2ODFjYzVhNmUwOGFhMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkezv5CjaPa5SC5vYAqnT4upfdrbS q6hl2ZHJrSVA4b+p95SzJb1U7b6CkfUUvJWtBdvv8LG/8wLMD7eKNPm6Cz6Qp1Mn iBLhOSpNO3wFYHY8AbP97doJf2yo0Sf4dLZTUcjSvyY0I2goAUJvAiOEsSZ6HLCN j7cuxCKrHzyuTn/6xkGvTaZnF3v6QnLs5p1bicz/1lX4oXb6B+3AyUAYRmwWsl22 nzS03e5crxHH00QD8gQxbBLD+RRC6yJxNkEoIihhC7EzcCpg7KVGZUUe7q7/4qh8 CRbi+22NdJvdWwzErbMwq+HR3dleJnrkfCaUpENfiIzKhsYJf8VSEXvzNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJr+evLWs5Y6y5zviWgcxabgiqBzMB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvbXY1Njh0YXpsanJMbk8tSmFCekZwdUNLb0hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiKMA0G CSqGSIb3DQEBCwUAA4IBAQAl4TPENn/IxUQvNN4Ex3YZifD99WWRWAyxSm1MN83B CcDCK2XofGXobGc9zpn6ghEhZrE+L0OUkuWc6t6rxmcNdxDdqahKtZVj1rj1rEDK UZH6HJ27ys21zXiS4nD0UoHo9DIX+9MnLWGcp63IOkzaxJNgRxSOvdjQtFIkNU/K 5wmlX1M6ikfZ/GQhsoh/naUlcg0+BMkH5PTvShgkZc704GwziwWi5nFbSnkzK0CS l3XTJqo0k8kgBEnUEEHXqjGXYT8Gr4kZ6yn1nq/5fjWkq+S8vBmaTIbglXNbzIr9 qgWjH/N7knbHvdg8YHJmKY7z3g3irujulMyCExT3Nk8w -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:23 2025 by rpki-client