This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mrA5cb-6XNKXA6shM0taqYUQYA0.roa File: mrA5cb-6XNKXA6shM0taqYUQYA0.roa (raw, json) Hash identifier: cuTtxcWCbnIrKZ9sDiv8cAUpJWdrJ+DCwm6h65W47E0= Subject key identifier: 9A:B0:39:71:BF:BA:5C:D2:97:03:AB:21:33:4B:5A:A9:85:10:60:0D Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019AFEA751F3AC5DDDD6E81C518907F6F8E3 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mrA5cb-6XNKXA6shM0taqYUQYA0.roa Signing time: Mon 08 Dec 2025 15:49:29 +0000 ROA not before: Mon 08 Dec 2025 15:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203661 IP address blocks: 212.7.217.0/24 maxlen: 24 2a01:6e80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:a7:51:f3:ac:5d:dd:d6:e8:1c:51:89:07:f6:f8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Dec 8 15:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ab03971bfba5cd29703ab21334b5aa98510600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:2b:0a:01:12:40:3a:70:38:40:64:77:51: c0:e9:c8:bd:93:18:cf:93:00:b2:68:27:8a:67:1e: e5:e0:48:6a:60:c8:3d:97:0b:ca:b2:a5:62:32:3a: 5b:8a:d3:3a:c1:b4:a1:1a:39:97:2e:2d:7b:87:d1: eb:2e:ca:03:ea:e6:47:18:6c:8d:b4:72:7f:75:22: d4:24:98:cc:90:6b:20:08:22:b2:8e:df:cb:63:1a: 71:37:c1:2e:1e:4f:5d:3b:f0:35:b8:a4:77:e1:5a: 1f:8a:1a:8f:65:4d:e7:aa:15:4a:d3:6d:84:52:cc: 95:aa:04:19:23:ae:a2:f7:79:18:e4:68:90:ee:28: e9:9c:09:88:b0:e3:23:30:e5:ea:6f:c8:56:e3:cf: b5:7b:0f:00:31:eb:5f:00:63:2a:37:83:91:82:c5: 2e:28:54:1f:aa:7a:7d:ce:1e:53:f9:f2:8b:45:5e: bc:57:a1:5a:75:3c:9c:dd:8d:5b:c2:12:be:b2:a4: 75:5a:c8:26:4a:54:9d:b5:17:03:fa:42:8b:02:b5: d2:f4:70:15:a8:bd:c1:c6:f6:a1:c4:37:ad:94:8c: 76:59:d6:59:f1:84:b3:4c:ac:84:4e:da:7b:4d:9d: ca:49:d2:47:e9:dc:4d:bb:e6:4a:b3:c1:6d:64:36: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B0:39:71:BF:BA:5C:D2:97:03:AB:21:33:4B:5A:A9:85:10:60:0D X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/mrA5cb-6XNKXA6shM0taqYUQYA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.217.0/24 IPv6: 2a01:6e80:a::/48 Signature Algorithm: sha256WithRSAEncryption 53:06:0c:5a:46:b3:4b:36:ba:97:55:81:ad:9b:f3:cf:32:b4: d3:4d:ec:b6:8a:d2:5c:c1:3f:fb:14:f8:cc:5b:08:3f:72:ca: 7e:7f:40:47:0a:12:2c:38:3d:db:d6:9b:a9:f2:ff:93:29:5a: f9:15:be:1c:49:6f:00:9f:a4:71:c1:10:0f:2e:f3:29:6c:d5: 50:56:ce:b9:ba:4c:67:2d:c7:88:ac:40:c8:ba:b4:17:d5:da: de:81:b4:2d:73:1c:33:05:19:5f:86:56:36:00:38:ac:33:7e: 4d:63:09:40:65:27:c4:b3:75:5c:5a:7d:88:2d:13:ba:be:a3: cd:c3:8e:48:66:32:c2:e3:87:24:27:d3:ce:69:db:7a:72:c3: e9:7b:ea:d2:9b:a1:ce:d1:9a:b8:c3:be:be:d3:b7:92:56:2c: 53:ba:ca:46:63:66:dd:55:f8:aa:82:bb:c4:5a:03:c5:0e:79: d5:5b:71:75:9b:1f:d4:0c:f7:8e:26:04:44:5e:01:fa:8f:53: 08:11:50:4c:44:2d:d7:f6:bd:3a:a4:7d:85:9e:a4:6a:d7:ea: e7:5c:2e:fb:7e:cf:cc:9f:e2:46:64:f7:f3:72:da:da:93:50: 0f:40:1d:4f:5f:a3:ae:3a:ba:9b:ad:42:64:33:9f:74:fa:99: f9:fe:5c:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZr+p1HzrF3d1ugcUYkH9vjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMjA4MTU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWIwMzk3MWJmYmE1Y2QyOTcwM2FiMjEzMzRiNWFhOTg1MTA2MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyigrCgESQDpwOEBkd1HA6ci9kxjP kwCyaCeKZx7l4EhqYMg9lwvKsqViMjpbitM6wbShGjmXLi17h9HrLsoD6uZHGGyN tHJ/dSLUJJjMkGsgCCKyjt/LYxpxN8EuHk9dO/A1uKR34VofihqPZU3nqhVK022E UsyVqgQZI66i93kY5GiQ7ijpnAmIsOMjMOXqb8hW48+1ew8AMetfAGMqN4ORgsUu KFQfqnp9zh5T+fKLRV68V6FadTyc3Y1bwhK+sqR1WsgmSlSdtRcD+kKLArXS9HAV qL3BxvahxDetlIx2WdZZ8YSzTKyETtp7TZ3KSdJH6dxNu+ZKs8FtZDbW5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJqwOXG/ulzSlwOrITNLWqmFEGANMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvbXJBNWNiLTZYTktYQTZzaE0wdGFxWVVRWUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1AfZMA8E AgACMAkDBwAqAW6AAAowDQYJKoZIhvcNAQELBQADggEBAFMGDFpGs0s2updVga2b 888ytNNN7LaK0lzBP/sU+MxbCD9yyn5/QEcKEiw4PdvWm6ny/5MpWvkVvhxJbwCf pHHBEA8u8yls1VBWzrm6TGctx4isQMi6tBfV2t6BtC1zHDMFGV+GVjYAOKwzfk1j CUBlJ8SzdVxafYgtE7q+o83DjkhmMsLjhyQn085p23pyw+l76tKboc7RmrjDvr7T t5JWLFO6ykZjZt1V+KqCu8RaA8UOedVbcXWbH9QM944mBEReAfqPUwgRUExELdf2 vTqkfYWepGrX6udcLvt+z8yf4kZk9/Ny2tqTUA9AHU9fo646uputQmQzn3T6mfn+ XKI= -----END CERTIFICATE-----Generated at Thu Dec 11 16:26:28 2025 by rpki-client