This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/s8cM_dy31wLZQn4guvFF3f9HiZg.roa File: s8cM_dy31wLZQn4guvFF3f9HiZg.roa (raw, json) Hash identifier: 4BYSDQG+JLpKAQER6Y51ZvwyHGW9NfhpGsXwE25xvBw= Subject key identifier: B3:C7:0C:FD:DC:B7:D7:02:D9:42:7E:20:BA:F1:45:DD:FF:47:89:98 Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Certificate serial: 019A76EF2D714C14E0780FF9345DD8B6375F Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/s8cM_dy31wLZQn4guvFF3f9HiZg.roa Signing time: Wed 12 Nov 2025 07:19:37 +0000 ROA not before: Wed 12 Nov 2025 07:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214588 IP address blocks: 194.99.72.0/24 maxlen: 24 2a14:7340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:ef:2d:71:4c:14:e0:78:0f:f9:34:5d:d8:b6:37:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Validity Not Before: Nov 12 07:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3c70cfddcb7d702d9427e20baf145ddff478998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:64:77:21:5a:d7:3e:d2:63:66:0b:17:0f: 9d:0d:91:be:72:41:da:e2:d2:96:de:69:94:27:c0: 22:9d:29:23:9f:f6:3a:0d:62:7d:eb:a3:81:52:f7: e5:47:9b:09:5e:91:a0:b4:93:62:a5:04:f9:5d:b8: 15:0b:b0:9a:18:10:83:c2:b7:05:76:87:45:dd:6b: 8b:fa:97:21:58:9b:f8:b1:ab:49:c4:30:c6:04:01: f3:fb:0f:cd:0c:97:a1:2d:74:e1:7b:46:0c:b7:a6: 2f:1f:76:50:75:5d:ea:1a:ee:c9:80:93:e9:7a:91: a2:93:8b:be:e5:15:41:3d:cc:4e:e7:e1:bd:63:a1: 8a:b5:82:16:46:00:46:05:9f:28:ae:24:54:39:68: 7f:f7:94:7a:06:db:82:3a:7a:7c:0b:1e:9a:2b:58: 97:f7:1c:c6:83:18:6f:f1:db:8f:b7:28:00:ba:92: da:72:00:cf:81:41:2a:29:f1:6a:0e:71:5a:fb:b2: 42:de:9e:01:a0:b2:ed:41:09:1a:25:c6:6c:18:9d: b6:32:71:b3:83:69:f2:25:19:d7:20:99:21:9b:ce: 3a:60:ee:b6:eb:6d:38:df:e1:a5:2a:fb:4c:e9:dc: 1b:ff:1b:43:e1:58:07:15:7a:78:ed:6c:cb:a7:ba: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C7:0C:FD:DC:B7:D7:02:D9:42:7E:20:BA:F1:45:DD:FF:47:89:98 X509v3 Authority Key Identifier: keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/s8cM_dy31wLZQn4guvFF3f9HiZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.72.0/24 IPv6: 2a14:7340::/29 Signature Algorithm: sha256WithRSAEncryption 0b:be:5c:0f:14:f9:90:01:46:32:8b:41:bd:b4:f8:f6:9e:ff: 10:bd:3a:6a:fd:4e:d5:41:a2:72:e3:de:64:2b:ab:45:0f:b3: f9:c1:ce:8e:5e:23:3e:53:55:b1:53:55:1b:d5:e4:f9:69:57: 0b:5d:c0:86:2e:0d:af:ed:69:fb:b9:3b:23:35:41:75:99:e4: fa:df:15:29:61:9d:02:cb:45:ad:fa:72:89:b8:f2:01:bd:5b: 55:bf:49:e9:78:59:9f:ca:00:0a:b0:97:7b:6c:85:19:9d:dc: 24:89:d0:86:87:c1:72:56:5b:3f:f2:bf:a3:34:8a:cc:c0:24: 50:9b:0a:4f:8b:25:1d:c0:79:7c:10:60:26:74:c7:4d:79:e4: 0d:24:7e:bb:cd:0c:0b:ec:a2:d8:a3:28:bf:e9:87:51:23:66: 35:db:19:0a:f6:a2:78:43:81:54:70:6e:d5:ee:45:cf:57:7a: 1c:17:14:48:32:4a:e8:46:d0:41:6b:3a:a2:eb:b7:60:5e:16: 89:eb:f8:be:47:f8:bd:d8:48:f2:0a:99:2e:ba:f8:b7:1c:e9: b5:03:24:aa:ca:36:2e:7c:e8:50:f3:d2:5b:00:48:4f:e9:59: 2c:a6:8b:2d:84:ff:fe:78:e8:91:9c:98:93:a1:5d:ae:0c:01: de:2d:cb:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp27y1xTBTgeA/5NF3YtjdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm YzU5NzMwHhcNMjUxMTEyMDcxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2M3MGNmZGRjYjdkNzAyZDk0MjdlMjBiYWYxNDVkZGZmNDc4OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65ZkdyFa1z7SY2YLFw+dDZG+ckHa 4tKW3mmUJ8AinSkjn/Y6DWJ966OBUvflR5sJXpGgtJNipQT5XbgVC7CaGBCDwrcF dodF3WuL+pchWJv4satJxDDGBAHz+w/NDJehLXThe0YMt6YvH3ZQdV3qGu7JgJPp epGik4u+5RVBPcxO5+G9Y6GKtYIWRgBGBZ8oriRUOWh/95R6BtuCOnp8Cx6aK1iX 9xzGgxhv8duPtygAupLacgDPgUEqKfFqDnFa+7JC3p4BoLLtQQkaJcZsGJ22MnGz g2nyJRnXIJkhm846YO6262043+GlKvtM6dwb/xtD4VgHFXp47WzLp7og9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLPHDP3ct9cC2UJ+ILrxRd3/R4mYMB8GA1UdIwQY MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt OGYzNDcwZDgyMDU3LzEvczhjTV9keTMxd0xaUW40Z3V2RkYzZjlIaVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3 LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmNIMA0E AgACMAcDBQMqFHNAMA0GCSqGSIb3DQEBCwUAA4IBAQALvlwPFPmQAUYyi0G9tPj2 nv8QvTpq/U7VQaJy495kK6tFD7P5wc6OXiM+U1WxU1Ub1eT5aVcLXcCGLg2v7Wn7 uTsjNUF1meT63xUpYZ0Cy0Wt+nKJuPIBvVtVv0npeFmfygAKsJd7bIUZndwkidCG h8FyVls/8r+jNIrMwCRQmwpPiyUdwHl8EGAmdMdNeeQNJH67zQwL7KLYoyi/6YdR I2Y12xkK9qJ4Q4FUcG7V7kXPV3ocFxRIMkroRtBBazqi67dgXhaJ6/i+R/i92Ejy Cpkuuvi3HOm1AySqyjYufOhQ89JbAEhP6VksposthP/+eOiRnJiToV2uDAHeLcs+ -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:28 2025 by rpki-client