This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/mGghwIHKQBTkopfB0lg-kUS38O0.roa File: mGghwIHKQBTkopfB0lg-kUS38O0.roa (raw, json) Hash identifier: 2oNORn859cAJogo2Beqpp561liE7aDeTcBLJ5YZQz9o= Subject key identifier: 98:68:21:C0:81:CA:40:14:E4:A2:97:C1:D2:58:3E:91:44:B7:F0:ED Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Certificate serial: 019AEBD4E71707E310D12690C0CE1BFB51F8 Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/mGghwIHKQBTkopfB0lg-kUS38O0.roa Signing time: Fri 05 Dec 2025 00:06:29 +0000 ROA not before: Fri 05 Dec 2025 00:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214515 IP address blocks: 193.24.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:d4:e7:17:07:e3:10:d1:26:90:c0:ce:1b:fb:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Validity Not Before: Dec 5 00:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=986821c081ca4014e4a297c1d2583e9144b7f0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:1c:2c:1b:3e:7c:d3:95:35:6e:f7:91:b5: e0:18:92:35:a9:8c:a8:86:af:4a:7a:0f:1c:7b:84: c9:da:27:e5:f8:b4:70:6b:bb:99:1b:a6:ce:1a:25: 8b:dc:cd:a8:cc:6d:96:8b:b1:a8:76:34:9e:57:28: 55:b2:7a:a7:77:b0:be:f8:e4:3a:cb:97:60:51:4c: 0c:f2:23:82:82:17:e5:d5:3a:42:b8:98:fa:85:c7: b2:15:81:f6:7b:8d:96:d0:34:75:a5:30:ec:f0:dc: 59:ca:36:4f:82:86:26:d2:5a:8a:80:46:99:19:b7: 85:04:5a:82:e8:2e:05:57:a2:32:0e:21:41:49:fd: fd:72:3a:f2:41:eb:24:54:2d:2d:3e:29:a5:c8:79: 57:5a:c9:30:8f:a1:53:54:d6:90:b8:a1:99:d7:2e: ba:67:56:46:13:62:f9:38:7b:cd:a6:f0:fc:db:12: cc:06:40:d0:e0:ce:54:9a:b8:cb:4f:35:4e:90:6b: df:f9:d2:32:ba:0d:9e:06:30:ec:4d:41:65:49:75: 20:15:9d:6f:c9:68:4d:23:2e:ee:17:b8:d1:c8:b7: ca:af:6d:9d:bd:0f:d6:59:7d:d6:ef:8c:e9:63:79: 30:18:62:c9:81:39:eb:3e:fc:55:eb:fe:83:2b:a0: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:68:21:C0:81:CA:40:14:E4:A2:97:C1:D2:58:3E:91:44:B7:F0:ED X509v3 Authority Key Identifier: keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/mGghwIHKQBTkopfB0lg-kUS38O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.121.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ae:f1:02:47:4d:06:76:96:84:88:6b:4a:8c:eb:65:08:85: bf:68:e2:c9:6a:97:9d:b5:2d:68:f4:50:0d:4c:50:10:5f:b2: 06:de:e1:45:7c:53:8e:04:d5:6a:0b:86:47:fd:f4:01:b8:41: b1:e4:de:59:3f:8a:77:f6:2f:07:5e:13:bf:9e:64:12:d1:fe: 14:1f:4b:3a:b3:b9:18:a1:76:35:07:d7:36:93:79:d8:a5:a8: bb:ab:0a:5d:ea:5b:1b:28:53:3e:be:e8:a8:59:04:be:6b:eb: 73:c6:d8:58:ac:20:c2:01:c3:fb:9d:f2:77:67:1f:7d:4f:a4: ae:4e:2a:dc:8f:cd:5a:e4:e2:68:b0:02:33:dc:47:c6:8c:d2: be:8c:9a:7e:7a:b3:23:a1:9c:79:0e:29:eb:64:12:31:d7:7a: 75:25:7c:a8:d5:57:3f:bb:6c:92:92:8d:ef:4d:f2:58:84:03: 27:fb:0a:f6:e2:e5:a2:a7:ec:c3:43:a0:ff:9e:4b:ab:6d:fe: 4c:cf:95:19:af:4d:ce:9c:3d:a4:28:07:18:1b:40:dd:ca:02: 19:64:1a:46:e9:0e:79:1f:3b:4e:9c:48:50:5b:51:4d:ce:27: eb:ab:7f:d5:25:12:0f:5b:dd:07:10:96:64:fb:c0:e9:e9:e8: 13:5d:6c:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrr1OcXB+MQ0SaQwM4b+1H4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk OTBiODcwHhcNMjUxMjA1MDAwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODY4MjFjMDgxY2E0MDE0ZTRhMjk3YzFkMjU4M2U5MTQ0YjdmMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOocLBs+fNOVNW73kbXgGJI1qYyo hq9Keg8ce4TJ2ifl+LRwa7uZG6bOGiWL3M2ozG2Wi7GodjSeVyhVsnqnd7C++OQ6 y5dgUUwM8iOCghfl1TpCuJj6hceyFYH2e42W0DR1pTDs8NxZyjZPgoYm0lqKgEaZ GbeFBFqC6C4FV6IyDiFBSf39cjryQeskVC0tPimlyHlXWskwj6FTVNaQuKGZ1y66 Z1ZGE2L5OHvNpvD82xLMBkDQ4M5UmrjLTzVOkGvf+dIyug2eBjDsTUFlSXUgFZ1v yWhNIy7uF7jRyLfKr22dvQ/WWX3W74zpY3kwGGLJgTnrPvxV6/6DK6B2HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhoIcCBykAU5KKXwdJYPpFEt/DtMB8GA1UdIwQY MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt OWZkYjVjNTVhZTUwLzEvbUdnaHdJSEtRQlRrb3BmQjBsZy1rVVMzOE8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRh5MA0G CSqGSIb3DQEBCwUAA4IBAQANrvECR00GdpaEiGtKjOtlCIW/aOLJapedtS1o9FAN TFAQX7IG3uFFfFOOBNVqC4ZH/fQBuEGx5N5ZP4p39i8HXhO/nmQS0f4UH0s6s7kY oXY1B9c2k3nYpai7qwpd6lsbKFM+vuioWQS+a+tzxthYrCDCAcP7nfJ3Zx99T6Su Tircj81a5OJosAIz3EfGjNK+jJp+erMjoZx5DinrZBIx13p1JXyo1Vc/u2ySko3v TfJYhAMn+wr24uWip+zDQ6D/nkurbf5Mz5UZr03OnD2kKAcYG0DdygIZZBpG6Q55 HztOnEhQW1FNzifrq3/VJRIPW90HEJZk+8Dp6egTXWxE -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:34 2025 by rpki-client