This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/mw0FVkh57HvrvYijabbc70mXZ4U.roa File: mw0FVkh57HvrvYijabbc70mXZ4U.roa (raw, json) Hash identifier: N/qzJemIzoVOCRnJfy7+YV4DilrTD55dUCMYHxmt84c= Subject key identifier: 9B:0D:05:56:48:79:EC:7B:EB:BD:88:A3:69:B6:DC:EF:49:97:67:85 Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Certificate serial: 019B21A96AF5DDD21BF9489634DEFBDC4DAF Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/mw0FVkh57HvrvYijabbc70mXZ4U.roa Signing time: Mon 15 Dec 2025 10:58:29 +0000 ROA not before: Mon 15 Dec 2025 10:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15958 IP address blocks: 109.106.224.0/20 maxlen: 20 109.245.0.0/16 maxlen: 16 109.245.0.0/21 maxlen: 21 109.245.8.0/22 maxlen: 22 109.245.16.0/20 maxlen: 20 109.245.40.0/21 maxlen: 21 109.245.48.0/20 maxlen: 20 109.245.128.0/21 maxlen: 21 109.245.144.0/21 maxlen: 21 109.245.160.0/21 maxlen: 21 109.245.168.0/21 maxlen: 21 109.245.192.0/19 maxlen: 19 109.245.228.0/22 maxlen: 22 109.245.232.0/21 maxlen: 21 109.245.240.0/20 maxlen: 20 217.65.192.0/20 maxlen: 20 217.65.196.0/22 maxlen: 22 217.65.200.0/21 maxlen: 21 217.65.201.0/24 maxlen: 24 217.65.202.0/23 maxlen: 23 217.65.204.0/22 maxlen: 22 2a01:ac80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:a9:6a:f5:dd:d2:1b:f9:48:96:34:de:fb:dc:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Validity Not Before: Dec 15 10:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b0d05564879ec7bebbd88a369b6dcef49976785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:d1:b8:ba:e5:69:9f:d1:85:f4:50:0d:e3: 47:f5:2e:30:d2:8e:14:4a:9e:21:0f:73:09:54:e3: 8b:be:e2:a5:67:54:78:f7:6f:85:ba:ef:3d:83:77: 78:ee:07:5c:59:15:da:59:2a:9b:dc:68:d6:3c:e9: d5:86:68:1e:94:59:8e:46:fb:69:92:e3:0d:dd:05: be:8e:be:2c:28:7f:45:c9:69:03:2f:50:0d:d4:a5: 6f:48:c5:52:3c:d7:37:50:b2:ab:36:2e:39:53:21: f1:a1:cb:5d:cb:fb:54:9c:2b:9a:ab:3c:46:08:64: a7:b5:8c:d1:fb:50:e1:db:fe:a7:92:0c:9c:4b:86: 4c:30:de:31:e7:0f:b5:8b:bf:93:c2:6a:12:a0:8a: 53:f0:36:ce:de:97:e4:96:a3:02:9f:bd:da:a8:67: 63:7a:b1:19:44:2a:ea:60:47:17:bd:bc:19:1d:27: 7f:e9:a5:fc:88:2a:c6:91:05:04:22:a5:8a:97:64: 5e:6e:3e:7d:4d:e8:8c:9c:fe:bc:82:87:27:cd:5d: 0d:eb:5a:33:a6:19:11:92:2c:07:03:b0:5e:db:64: d3:59:5c:e7:12:c7:d6:b4:6a:ff:92:1e:b2:e6:09: 61:fc:16:e9:84:e5:e4:49:05:54:18:4f:63:ce:19: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0D:05:56:48:79:EC:7B:EB:BD:88:A3:69:B6:DC:EF:49:97:67:85 X509v3 Authority Key Identifier: keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/mw0FVkh57HvrvYijabbc70mXZ4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.106.224.0/20 109.245.0.0/16 217.65.192.0/20 IPv6: 2a01:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 3e:9f:cc:6a:6f:bb:df:d9:c4:46:97:63:58:86:2a:eb:66:2a: 3d:c3:9f:96:03:af:2e:e5:49:d8:c1:f2:e8:5a:0b:e9:88:de: 01:3e:01:13:ea:21:3d:0a:f0:e6:c5:1a:06:7f:7f:e1:95:b7: d2:6b:7d:6d:99:5d:d7:ce:83:ca:29:f1:f1:a5:8a:5a:5e:1a: cb:ae:b7:b1:00:0d:9e:dc:d1:f8:6d:46:ca:39:20:76:e9:50: cb:51:bb:14:90:a3:06:79:c5:1c:a0:f1:ee:d5:0e:e6:2b:7e: 3d:35:86:55:94:05:96:e6:bd:b6:bc:ec:fd:52:cc:b4:da:0c: 17:f5:a3:32:21:82:f5:71:09:85:fa:48:d4:2d:74:08:df:22: dc:69:f9:0e:4d:de:23:bb:45:c6:e8:16:6b:c7:c1:ed:e0:e7: 0a:68:e3:26:16:e7:97:19:0a:4f:e2:d4:59:a3:69:5e:78:aa: 0b:b7:44:a1:27:e4:cc:1a:62:00:2e:e0:81:95:22:67:1d:72: b7:a2:9a:06:71:06:5b:3e:16:e4:7f:02:ab:68:93:e8:9a:fc: 73:5a:23:4a:4c:0e:ec:e3:73:a4:3d:71:92:84:84:bf:a9:57: 74:c2:e9:2e:7d:12:ff:17:83:55:0e:28:93:39:2e:cf:ac:f7: fb:e6:0c:bc -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZshqWr13dIb+UiWNN773E2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5 MzlhYWIwHhcNMjUxMjE1MTA1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjBkMDU1NjQ4NzllYzdiZWJiZDg4YTM2OWI2ZGNlZjQ5OTc2Nzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn7RuLrlaZ/RhfRQDeNH9S4w0o4U Sp4hD3MJVOOLvuKlZ1R492+Fuu89g3d47gdcWRXaWSqb3GjWPOnVhmgelFmORvtp kuMN3QW+jr4sKH9FyWkDL1AN1KVvSMVSPNc3ULKrNi45UyHxoctdy/tUnCuaqzxG CGSntYzR+1Dh2/6nkgycS4ZMMN4x5w+1i7+TwmoSoIpT8DbO3pfklqMCn73aqGdj erEZRCrqYEcXvbwZHSd/6aX8iCrGkQUEIqWKl2Rebj59TeiMnP68gocnzV0N61oz phkRkiwHA7Be22TTWVznEsfWtGr/kh6y5glh/BbphOXkSQVUGE9jzhk1SwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJsNBVZIeex7672Io2m23O9Jl2eFMB8GA1UdIwQY MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt Y2Y4MThjN2M0NTFhLzEvbXcwRlZraDU3SHZydllpamFiYmM3MG1YWjRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQEbWrgAwMA bfUDBATZQcAwDQQCAAIwBwMFACoBrIAwDQYJKoZIhvcNAQELBQADggEBAD6fzGpv u9/ZxEaXY1iGKutmKj3Dn5YDry7lSdjB8uhaC+mI3gE+ARPqIT0K8ObFGgZ/f+GV t9JrfW2ZXdfOg8op8fGlilpeGsuut7EADZ7c0fhtRso5IHbpUMtRuxSQowZ5xRyg 8e7VDuYrfj01hlWUBZbmvba87P1SzLTaDBf1ozIhgvVxCYX6SNQtdAjfItxp+Q5N 3iO7RcboFmvHwe3g5wpo4yYW55cZCk/i1FmjaV54qgu3RKEn5MwaYgAu4IGVImcd creimgZxBls+FuR/Aqtok+ia/HNaI0pMDuzjc6Q9cZKEhL+pV3TC6S59Ev8Xg1UO KJM5Ls+s9/vmDLw= -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:10 2025 by rpki-client