This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/MShAtHeWztAlPc3jlUQy364-usI.roa File: MShAtHeWztAlPc3jlUQy364-usI.roa (raw, json) Hash identifier: uXNKCC9uNF/PElyEDFjDG2Gy5GTpwTB7KSx+eVEkKh8= Subject key identifier: 31:28:40:B4:77:96:CE:D0:25:3D:CD:E3:95:44:32:DF:AE:3E:BA:C2 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019A971A59C6077ECC24F16CB28D50C79C6A Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/MShAtHeWztAlPc3jlUQy364-usI.roa Signing time: Tue 18 Nov 2025 13:14:37 +0000 ROA not before: Tue 18 Nov 2025 13:14:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213274 IP address blocks: 89.252.142.0/24 maxlen: 24 89.252.157.0/24 maxlen: 24 94.102.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:1a:59:c6:07:7e:cc:24:f1:6c:b2:8d:50:c7:9c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Nov 18 13:14:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=312840b47796ced0253dcde3954432dfae3ebac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:3f:d9:2b:9b:1c:3e:6b:a7:9b:a9:e7:d3: 87:b9:8c:24:2b:a9:54:d5:7e:01:65:a0:44:fc:d8: c3:30:4f:5b:20:53:f7:39:a9:a2:52:86:03:b7:23: 8c:69:7c:2b:a0:bb:a7:e7:22:4e:db:4c:7a:b1:4d: bb:0f:e4:fa:fa:b6:bb:5e:72:d0:a7:74:a8:08:67: 49:47:e6:99:e1:1b:51:13:1b:37:82:b4:51:14:3d: ac:96:be:14:fc:53:05:3b:c5:09:1f:ba:0d:04:e1: 0b:e1:5d:cc:21:68:c8:75:a5:aa:b9:51:8f:5b:7a: da:94:fa:5a:e7:ba:3e:f3:e9:7f:2b:bc:a0:7e:d2: 26:67:8d:90:0a:7e:84:5f:a3:75:ed:54:ee:59:36: bb:53:33:e3:74:bb:17:3f:1e:1e:55:7b:c0:41:f7: 85:1d:e3:cd:20:98:02:3f:c4:e5:20:bd:8f:d5:32: c0:55:8a:29:d5:26:a2:8d:cb:b8:84:5d:74:f2:77: 98:70:0a:28:1f:b6:1c:e8:e3:9c:de:ea:df:91:82: 19:8b:0a:8e:da:22:47:27:b9:e9:35:4f:9a:47:bf: f0:59:a0:0b:b5:b1:3c:98:cd:13:b6:d4:e8:4c:04: 64:98:a2:6a:e9:8b:a8:5a:b2:09:76:d6:8a:67:87: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:28:40:B4:77:96:CE:D0:25:3D:CD:E3:95:44:32:DF:AE:3E:BA:C2 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/MShAtHeWztAlPc3jlUQy364-usI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.142.0/24 89.252.157.0/24 94.102.12.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e6:aa:4f:fe:0e:9e:1f:b5:fa:9c:4f:83:53:03:ae:b3:9f: b8:7c:e9:54:82:83:80:a7:5d:18:a0:d4:8c:97:f7:0d:bd:14: df:7b:06:d5:1d:3a:f1:91:32:c8:b1:f2:18:89:f6:6c:35:7f: 2d:d5:eb:6c:0e:ae:57:94:1b:b5:7c:73:fb:7a:f1:f8:59:3c: 75:86:72:4e:99:8d:bf:c7:3f:5f:a0:9d:d0:6c:08:44:d4:bb: ec:66:c5:78:cf:1e:58:9e:02:44:3a:fe:10:11:75:18:aa:95: 24:ab:e0:16:fa:0e:8c:9d:f8:fc:73:fa:08:a6:30:1c:30:1c: 17:76:43:23:17:9d:b6:e7:02:c3:d2:92:07:97:09:ba:24:7a: 68:b6:68:c5:89:28:e7:3a:53:91:9f:f2:6d:28:7a:b1:b2:8b: a4:66:da:bb:45:48:d6:ed:b9:38:57:57:43:12:3d:11:83:db: 70:08:1e:5f:8b:66:b4:67:94:49:75:db:74:19:f3:ab:64:df: 97:7d:b6:13:27:34:8e:f9:b0:77:ad:77:14:4f:f0:fe:a4:76: 0a:2d:fc:c2:f1:93:cb:4f:e8:bb:33:e1:48:03:4b:9c:fa:f0: b1:41:25:e9:1b:a2:20:d5:e5:07:2e:3e:dc:ab:7a:6c:35:8c: 3e:10:5c:fc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqXGlnGB37MJPFsso1Qx5xqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUxMTE4MTMxNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTI4NDBiNDc3OTZjZWQwMjUzZGNkZTM5NTQ0MzJkZmFlM2ViYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssE/2SubHD5rp5up59OHuYwkK6lU 1X4BZaBE/NjDME9bIFP3OamiUoYDtyOMaXwroLun5yJO20x6sU27D+T6+ra7XnLQ p3SoCGdJR+aZ4RtRExs3grRRFD2slr4U/FMFO8UJH7oNBOEL4V3MIWjIdaWquVGP W3ralPpa57o+8+l/K7ygftImZ42QCn6EX6N17VTuWTa7UzPjdLsXPx4eVXvAQfeF HePNIJgCP8TlIL2P1TLAVYop1Saijcu4hF108neYcAooH7Yc6OOc3urfkYIZiwqO 2iJHJ7npNU+aR7/wWaALtbE8mM0TttToTARkmKJq6YuoWrIJdtaKZ4ff2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDEoQLR3ls7QJT3N45VEMt+uPrrCMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvTVNoQXRIZVd6dEFsUGMzamxVUXkzNjQtdXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWfyOAwQA WfydAwQAXmYMMA0GCSqGSIb3DQEBCwUAA4IBAQCJ5qpP/g6eH7X6nE+DUwOus5+4 fOlUgoOAp10YoNSMl/cNvRTfewbVHTrxkTLIsfIYifZsNX8t1etsDq5XlBu1fHP7 evH4WTx1hnJOmY2/xz9foJ3QbAhE1LvsZsV4zx5YngJEOv4QEXUYqpUkq+AW+g6M nfj8c/oIpjAcMBwXdkMjF5225wLD0pIHlwm6JHpotmjFiSjnOlORn/JtKHqxsouk Ztq7RUjW7bk4V1dDEj0Rg9twCB5fi2a0Z5RJddt0GfOrZN+XfbYTJzSO+bB3rXcU T/D+pHYKLfzC8ZPLT+i7M+FIA0uc+vCxQSXpG6Ig1eUHLj7cq3psNYw+EFz8 -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:13 2025 by rpki-client