This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa File: MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa (raw, json) Hash identifier: 1M1oXb07BTgtuT6hZTPpfndwoJo6RVKYLwfsIu34iO8= Subject key identifier: 30:C6:BD:CE:3C:98:58:5F:4C:09:27:7D:91:68:8A:B0:14:30:30:E3 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019AE42B86BFD3E47C51B40F0BBCF9784350 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa Signing time: Wed 03 Dec 2025 12:24:08 +0000 ROA not before: Wed 03 Dec 2025 12:24:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199614 IP address blocks: 87.254.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:2b:86:bf:d3:e4:7c:51:b4:0f:0b:bc:f9:78:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Dec 3 12:24:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30c6bdce3c98585f4c09277d91688ab0143030e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:c8:f9:1b:0c:0a:66:21:ad:ee:d7:bb:1d: 77:c9:29:2d:5d:6b:e4:4e:d9:1b:9e:33:f7:e2:61: 72:88:95:cb:c0:a7:e2:4b:9a:a0:01:0e:c5:f1:77: 92:68:19:40:47:c2:d3:ab:30:60:08:ec:f2:36:8b: 6f:71:d4:d2:71:12:64:2a:d4:35:d5:d2:2b:61:58: 62:24:4d:c6:a5:58:16:2f:05:27:a4:50:9e:8c:85: 98:99:0d:8a:3e:33:a4:3d:48:5c:a7:0e:3d:4a:f9: 0a:cb:8a:b3:e9:2a:cd:4a:1b:c2:ae:4f:36:b9:fc: f3:a4:60:be:f7:fd:da:d7:c7:a0:b0:94:24:e9:43: b5:cc:dc:24:85:30:cb:7b:58:df:f9:c5:6a:58:b6: 36:36:75:c0:05:f2:25:ab:5f:98:35:d0:b9:a4:9e: be:69:68:d5:00:e6:02:68:7b:98:3a:23:7a:f2:21: 5c:b7:98:14:2b:70:2e:5d:60:08:df:09:4c:f9:4f: af:51:03:ed:4f:60:68:04:a4:7b:0b:5f:ea:07:ee: 73:a2:7d:54:68:5e:fe:b2:62:4f:d6:6d:25:81:55: 6d:b7:46:c8:16:e6:bc:1f:5c:de:d0:bd:d3:8b:59: 7e:e4:44:b4:01:5b:aa:a1:73:aa:be:4d:28:86:24: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C6:BD:CE:3C:98:58:5F:4C:09:27:7D:91:68:8A:B0:14:30:30:E3 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.12.0/23 Signature Algorithm: sha256WithRSAEncryption 20:c0:9b:3b:d0:44:7a:07:cf:76:b1:90:38:0b:71:30:ff:0e: 29:8b:db:34:64:56:53:ea:ac:4e:5c:75:43:8d:e6:5c:1e:61: 82:b0:bd:22:c5:00:ce:e9:55:78:d4:b1:02:ac:66:b3:78:72: 36:e3:01:88:49:20:e1:0d:85:92:b7:50:b2:88:1a:7f:9a:83: 19:2b:27:25:c4:f6:cc:07:b5:1f:8e:32:73:9c:fa:79:ff:4d: f3:48:b5:f0:74:7e:bf:34:d3:0b:3d:f6:da:60:f2:51:40:c3: 37:53:4d:56:0b:f7:03:2a:ce:2c:97:38:a0:a9:c4:0d:1b:0d: a5:72:7d:b4:cb:56:b9:84:96:4c:83:df:8e:dc:f1:ba:85:31: 06:d0:20:07:3e:9e:a7:42:63:8a:0b:c0:b0:27:77:c5:99:65: 98:9f:4d:d9:5e:cd:9c:5a:6c:79:a4:12:c1:b2:7e:39:1d:ce: 41:bc:05:f8:84:48:7c:4a:e3:78:8b:95:10:b9:67:88:41:3b: 8e:e6:41:97:31:96:e1:6d:c6:9d:25:8f:2c:07:aa:b4:ab:9c: 46:a4:2f:a9:eb:cc:42:68:c1:65:d0:5f:62:0f:b3:96:e6:c0: 05:5c:00:c0:f7:96:cc:83:61:19:fd:3a:51:ef:51:a9:31:5e: 36:8f:ed:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkK4a/0+R8UbQPC7z5eENQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMjAzMTIyNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGM2YmRjZTNjOTg1ODVmNGMwOTI3N2Q5MTY4OGFiMDE0MzAzMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nbI+RsMCmYhre7Xux13ySktXWvk TtkbnjP34mFyiJXLwKfiS5qgAQ7F8XeSaBlAR8LTqzBgCOzyNotvcdTScRJkKtQ1 1dIrYVhiJE3GpVgWLwUnpFCejIWYmQ2KPjOkPUhcpw49SvkKy4qz6SrNShvCrk82 ufzzpGC+9/3a18egsJQk6UO1zNwkhTDLe1jf+cVqWLY2NnXABfIlq1+YNdC5pJ6+ aWjVAOYCaHuYOiN68iFct5gUK3AuXWAI3wlM+U+vUQPtT2BoBKR7C1/qB+5zon1U aF7+smJP1m0lgVVtt0bIFua8H1ze0L3Ti1l+5ES0AVuqoXOqvk0ohiSS7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDGvc48mFhfTAknfZFoirAUMDDjMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvTU1hOXpqeVlXRjlNQ1NkOWtXaUtzQlF3TU9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/4MMA0G CSqGSIb3DQEBCwUAA4IBAQAgwJs70ER6B892sZA4C3Ew/w4pi9s0ZFZT6qxOXHVD jeZcHmGCsL0ixQDO6VV41LECrGazeHI24wGISSDhDYWSt1CyiBp/moMZKyclxPbM B7UfjjJznPp5/03zSLXwdH6/NNMLPfbaYPJRQMM3U01WC/cDKs4slzigqcQNGw2l cn20y1a5hJZMg9+O3PG6hTEG0CAHPp6nQmOKC8CwJ3fFmWWYn03ZXs2cWmx5pBLB sn45Hc5BvAX4hEh8SuN4i5UQuWeIQTuO5kGXMZbhbcadJY8sB6q0q5xGpC+p68xC aMFl0F9iD7OW5sAFXADA95bMg2EZ/TpR71GpMV42j+2e -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:45 2025 by rpki-client