This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mSn2xnQ_0nJOLupdwU9sL39lrBg.roa File: mSn2xnQ_0nJOLupdwU9sL39lrBg.roa (raw, json) Hash identifier: WEjzSjHvrESfwI3Je6YcmyiVdAqUCmcbi3plqwsZkPU= Subject key identifier: 99:29:F6:C6:74:3F:D2:72:4E:2E:EA:5D:C1:4F:6C:2F:7F:65:AC:18 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B27129DF53A561A199AD08F3C1BFB3288 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mSn2xnQ_0nJOLupdwU9sL39lrBg.roa Signing time: Tue 16 Dec 2025 12:11:30 +0000 ROA not before: Tue 16 Dec 2025 12:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211484 IP address blocks: 45.136.174.0/24 maxlen: 24 194.35.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:12:9d:f5:3a:56:1a:19:9a:d0:8f:3c:1b:fb:32:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 16 12:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9929f6c6743fd2724e2eea5dc14f6c2f7f65ac18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:ae:7b:00:17:8c:ca:b5:3c:55:6d:7d:fe: 63:ab:14:85:6f:64:d1:22:70:9a:a9:69:28:1e:6c: 91:51:0e:6f:62:77:9f:cd:38:40:a6:d9:d6:f5:d8: e2:87:7a:c4:87:81:bd:e3:be:83:76:ed:70:62:61: 25:fa:5a:e9:5e:f3:98:7f:8d:68:48:6e:f5:6b:89: 0a:15:94:7e:30:11:47:0c:6c:21:30:09:54:82:25: 44:ec:6f:74:c9:c5:5e:43:cd:86:ef:27:d2:f5:86: 82:c6:39:3c:d5:b2:fd:89:7d:fe:fd:1f:29:7c:bb: 37:d2:9b:c8:9e:18:5d:02:6f:c6:c3:34:71:a2:9e: 83:33:62:19:c9:20:f3:89:88:a2:88:e6:02:82:81: 89:8d:ef:ef:c4:50:fa:e6:59:16:00:9e:34:4a:1f: d1:e0:98:6b:48:6f:14:72:7b:ae:85:a1:d1:fc:d4: 9c:51:e8:9a:3b:1a:6a:c4:68:3f:01:ea:7e:17:ce: b9:91:3f:c9:73:0d:bb:8c:00:f4:77:16:95:98:a3: e2:f0:c9:0c:33:0f:8c:1e:55:cc:fd:f1:09:7d:98: b0:71:41:1d:d6:ec:d2:7a:72:e0:e6:21:95:7b:25: 21:ab:70:52:be:d9:e7:db:3d:ff:06:8a:51:34:af: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:F6:C6:74:3F:D2:72:4E:2E:EA:5D:C1:4F:6C:2F:7F:65:AC:18 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mSn2xnQ_0nJOLupdwU9sL39lrBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.174.0/24 194.35.227.0/24 Signature Algorithm: sha256WithRSAEncryption cd:8b:4a:72:71:d1:21:9b:d2:db:92:fe:32:25:74:0e:c2:fb: fc:3c:41:58:1f:e1:35:60:0e:6f:39:56:8e:22:5b:fa:3b:fb: 5a:27:b5:b6:27:fb:04:7e:25:d2:b1:bf:e6:b3:10:97:84:70: 86:4b:28:99:66:7a:5a:79:d8:83:c9:a8:bf:ba:f1:49:04:91: 2b:c2:a0:5e:f5:64:cc:86:ee:f0:3f:16:09:8b:e1:6d:f4:b7: 33:73:cf:52:24:37:5a:5a:b1:50:f6:fb:92:39:23:93:f6:2e: 18:67:6d:fb:48:89:ad:21:90:4a:34:d7:88:5b:22:02:19:da: 41:4d:0c:74:aa:ee:a8:1b:ee:b2:57:04:89:91:05:01:6a:b7: dc:b2:ca:a9:f7:e8:bb:44:3c:d8:8e:c7:ad:0a:19:a6:25:c7: 0e:ad:5b:af:19:c5:8a:f1:ac:98:e6:2f:e0:65:ae:3e:20:fd: da:07:8e:4f:24:fc:19:50:1b:0e:30:9d:8c:3d:21:36:a6:f6: 44:ef:22:26:06:84:25:62:1b:5e:86:58:eb:d0:0b:8d:f5:85: e4:6e:20:0e:a9:04:76:ce:c1:71:85:08:0f:05:35:df:4d:b9: a2:8d:ae:db:38:94:0f:1f:1a:aa:ce:f5:d4:07:22:56:59:e2: 3c:8a:de:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsnEp31OlYaGZrQjzwb+zKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE2MTIxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI5ZjZjNjc0M2ZkMjcyNGUyZWVhNWRjMTRmNmMyZjdmNjVhYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dmuewAXjMq1PFVtff5jqxSFb2TR InCaqWkoHmyRUQ5vYnefzThAptnW9djih3rEh4G9476Ddu1wYmEl+lrpXvOYf41o SG71a4kKFZR+MBFHDGwhMAlUgiVE7G90ycVeQ82G7yfS9YaCxjk81bL9iX3+/R8p fLs30pvInhhdAm/GwzRxop6DM2IZySDziYiiiOYCgoGJje/vxFD65lkWAJ40Sh/R 4JhrSG8UcnuuhaHR/NScUeiaOxpqxGg/Aep+F865kT/Jcw27jAD0dxaVmKPi8MkM Mw+MHlXM/fEJfZiwcUEd1uzSenLg5iGVeyUhq3BSvtnn2z3/BopRNK8KUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJkp9sZ0P9JyTi7qXcFPbC9/ZawYMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbVNuMnhuUV8wbkpPTHVwZHdVOXNMMzlsckJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYiuAwQA wiPjMA0GCSqGSIb3DQEBCwUAA4IBAQDNi0pycdEhm9Lbkv4yJXQOwvv8PEFYH+E1 YA5vOVaOIlv6O/taJ7W2J/sEfiXSsb/msxCXhHCGSyiZZnpaediDyai/uvFJBJEr wqBe9WTMhu7wPxYJi+Ft9Lczc89SJDdaWrFQ9vuSOSOT9i4YZ237SImtIZBKNNeI WyICGdpBTQx0qu6oG+6yVwSJkQUBarfcssqp9+i7RDzYjsetChmmJccOrVuvGcWK 8ayY5i/gZa4+IP3aB45PJPwZUBsOMJ2MPSE2pvZE7yImBoQlYhtehljr0AuN9YXk biAOqQR2zsFxhQgPBTXfTbmija7bOJQPHxqqzvXUByJWWeI8it5M -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:23 2025 by rpki-client