This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa File: MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa (raw, json) Hash identifier: 70yTR5hwY1yOvZbE5DDGYInarTbe9F4DtBLzW3EAThU= Subject key identifier: 30:A6:FD:C1:7B:5B:A8:65:AD:13:FB:DE:FE:CE:D8:6E:B9:FA:DC:5C Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019A799CE947A6C9F77C41C49BA4EFE98CE4 Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa Signing time: Wed 12 Nov 2025 19:48:37 +0000 ROA not before: Wed 12 Nov 2025 19:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62651 IP address blocks: 176.67.82.0/24 maxlen: 24 176.67.85.0/24 maxlen: 24 176.67.86.0/24 maxlen: 24 176.67.87.0/24 maxlen: 24 185.91.120.0/23 maxlen: 23 2a05:e9c0:1000::/40 maxlen: 40 2a05:e9c0:1400::/40 maxlen: 40 2a05:e9c0:1800::/40 maxlen: 40 2a05:e9c0:3800::/40 maxlen: 40 2a05:e9c0:4400::/40 maxlen: 40 2a05:e9c0:5000::/40 maxlen: 40 2a05:e9c0:6800::/40 maxlen: 40 2a05:e9c0:7400::/40 maxlen: 40 2a05:e9c0:7800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:9c:e9:47:a6:c9:f7:7c:41:c4:9b:a4:ef:e9:8c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Nov 12 19:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30a6fdc17b5ba865ad13fbdefeced86eb9fadc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:cc:de:b3:2f:0e:c7:31:ff:8a:16:00:64: a0:a7:91:12:69:e9:7f:18:a7:ab:70:74:d8:0b:de: 72:78:34:5f:91:97:7a:03:f2:63:17:1b:f2:94:87: f1:6f:b7:c0:77:5c:9d:c0:11:66:3a:ff:e7:fb:c0: e3:37:c7:0d:ca:84:7d:a2:2a:f5:e7:9f:d9:75:34: aa:c8:bd:96:b7:65:c5:ca:12:27:7b:6e:36:76:64: d3:af:e9:d5:4f:3d:be:c5:36:56:33:ce:3b:96:c4: 4b:12:cb:40:f6:2c:4d:9b:ba:22:3b:6d:f3:fe:ba: 62:aa:a8:c6:45:1a:d5:57:57:65:6f:0b:a9:50:cd: 7b:a1:af:4d:62:43:3a:0f:15:be:aa:36:33:22:8e: b5:9b:ba:79:15:7c:0c:5b:f7:32:87:49:27:b8:f0: d1:6a:e5:49:5d:f7:ea:4a:20:90:ec:00:dd:16:0b: f4:ea:03:1f:70:21:4f:c1:e0:95:55:08:07:cc:8b: 9b:53:b5:2a:62:d9:d2:b7:0e:0a:0d:d8:2c:b5:18: ef:e8:af:07:62:4d:40:2d:1a:0e:a3:1f:61:86:8b: 5a:48:c5:ad:bb:5f:b5:95:a5:a1:50:56:37:9e:3f: 93:43:9c:32:a1:c0:a0:00:17:c2:73:cb:a8:3d:eb: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A6:FD:C1:7B:5B:A8:65:AD:13:FB:DE:FE:CE:D8:6E:B9:FA:DC:5C X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.67.82.0/24 176.67.85.0-176.67.87.255 185.91.120.0/23 IPv6: 2a05:e9c0:1000::/40 2a05:e9c0:1400::/40 2a05:e9c0:1800::/40 2a05:e9c0:3800::/40 2a05:e9c0:4400::/40 2a05:e9c0:5000::/40 2a05:e9c0:6800::/40 2a05:e9c0:7400::/40 2a05:e9c0:7800::/40 Signature Algorithm: sha256WithRSAEncryption 3e:20:d8:b6:3c:85:6f:f6:ca:76:fe:c2:75:ea:a0:f4:89:7a: c6:a7:bf:36:f5:67:ab:7c:c7:33:45:77:dc:19:86:c4:8b:a1: 56:13:6c:da:dd:57:a8:ff:59:0d:2b:f8:19:06:a4:04:34:04: 6f:f6:52:e1:01:67:55:34:33:12:4b:cb:39:ab:49:64:10:5d: cb:15:5a:2f:0e:05:9e:fb:43:10:74:86:6c:40:cc:88:f5:33: 7f:3d:4d:7e:91:b8:30:92:e9:1d:2b:5b:0b:ff:35:cf:a1:8e: 1b:84:42:1d:cd:da:b9:06:5b:8a:ea:95:bc:c1:23:89:85:17: 99:47:bb:c7:1e:d0:b6:dd:05:f4:b7:66:a8:48:09:c7:21:65: 5a:ea:6d:cb:a2:98:22:1c:5a:0c:a9:39:67:82:57:df:ae:91: 89:09:15:8a:34:cd:a4:41:c3:5f:3e:ca:5e:c8:b7:3e:9d:cd: b2:2e:7a:dc:60:f2:0d:a5:14:e9:bf:e5:62:e8:cb:15:cc:42: df:91:ea:63:99:b2:36:44:b5:5e:2a:ef:92:52:20:a0:14:81: 1e:c2:ec:a9:42:98:6d:84:63:7e:84:00:e5:10:4b:1e:94:38: d7:9a:9c:60:31:a2:26:14:2d:93:a4:e3:87:7c:f7:4c:ab:00: a2:01:f0:54 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZp5nOlHpsn3fEHEm6Tv6YzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjUxMTEyMTk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGE2ZmRjMTdiNWJhODY1YWQxM2ZiZGVmZWNlZDg2ZWI5ZmFkYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprbM3rMvDscx/4oWAGSgp5ESael/ GKercHTYC95yeDRfkZd6A/JjFxvylIfxb7fAd1ydwBFmOv/n+8DjN8cNyoR9oir1 55/ZdTSqyL2Wt2XFyhIne242dmTTr+nVTz2+xTZWM847lsRLEstA9ixNm7oiO23z /rpiqqjGRRrVV1dlbwupUM17oa9NYkM6DxW+qjYzIo61m7p5FXwMW/cyh0knuPDR auVJXffqSiCQ7ADdFgv06gMfcCFPweCVVQgHzIubU7UqYtnStw4KDdgstRjv6K8H Yk1ALRoOox9hhotaSMWtu1+1laWhUFY3nj+TQ5wyocCgABfCc8uoPevSIQIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFDCm/cF7W6hlrRP73v7O2G65+txcMB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvTUtiOXdYdGJxR1d0RV92ZV9zN1licm42M0Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwIAQCAAEwGgMEALBDUjAM AwQAsENVAwQDsENQAwQBuVt4ME4EAgACMEgDBgAqBenAEAMGACoF6cAUAwYAKgXp wBgDBgAqBenAOAMGACoF6cBEAwYAKgXpwFADBgAqBenAaAMGACoF6cB0AwYAKgXp wHgwDQYJKoZIhvcNAQELBQADggEBAD4g2LY8hW/2ynb+wnXqoPSJesanvzb1Z6t8 xzNFd9wZhsSLoVYTbNrdV6j/WQ0r+BkGpAQ0BG/2UuEBZ1U0MxJLyzmrSWQQXcsV Wi8OBZ77QxB0hmxAzIj1M389TX6RuDCS6R0rWwv/Nc+hjhuEQh3N2rkGW4rqlbzB I4mFF5lHu8ce0LbdBfS3ZqhICcchZVrqbcuimCIcWgypOWeCV9+ukYkJFYo0zaRB w18+yl7Itz6dzbIuetxg8g2lFOm/5WLoyxXMQt+R6mOZsjZEtV4q75JSIKAUgR7C 7KlCmG2EY36EAOUQSx6UONeanGAxoiYULZOk44d890yrAKIB8FQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:46 2025 by rpki-client