This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/mdkZjM6ga3dn6MNUnBbh7X7_AXI.roa File: mdkZjM6ga3dn6MNUnBbh7X7_AXI.roa (raw, json) Hash identifier: YgRym8W4VQhqhhAt9VplhLlHQdIlm7TzUCa/4diQTmg= Subject key identifier: 99:D9:19:8C:CE:A0:6B:77:67:E8:C3:54:9C:16:E1:ED:7E:FF:01:72 Certificate issuer: /CN=104a455eb31f63e390e21aa77fcc2af2ac343577 Certificate serial: 019B318D045AA9E1E4063BD56EFE7E4367BA Authority key identifier: 10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/mdkZjM6ga3dn6MNUnBbh7X7_AXI.roa Signing time: Thu 18 Dec 2025 13:01:23 +0000 ROA not before: Thu 18 Dec 2025 13:01:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42067 IP address blocks: 91.151.160.0/24 maxlen: 24 91.151.161.0/24 maxlen: 24 91.151.162.0/24 maxlen: 24 212.93.160.0/19 maxlen: 19 212.93.160.0/24 maxlen: 24 212.93.161.0/24 maxlen: 24 212.93.162.0/24 maxlen: 24 212.93.163.0/24 maxlen: 24 212.93.164.0/24 maxlen: 24 212.93.165.0/24 maxlen: 24 212.93.170.0/24 maxlen: 24 212.93.176.0/24 maxlen: 24 212.93.177.0/24 maxlen: 24 212.93.178.0/24 maxlen: 24 212.93.179.0/24 maxlen: 24 212.93.180.0/24 maxlen: 24 212.93.181.0/24 maxlen: 24 212.93.182.0/24 maxlen: 24 212.93.183.0/24 maxlen: 24 212.93.186.0/24 maxlen: 24 212.93.187.0/24 maxlen: 24 212.93.188.0/24 maxlen: 24 212.93.189.0/24 maxlen: 24 212.93.190.0/24 maxlen: 24 212.93.191.0/24 maxlen: 24 2a00:50a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:04:5a:a9:e1:e4:06:3b:d5:6e:fe:7e:43:67:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104a455eb31f63e390e21aa77fcc2af2ac343577 Validity Not Before: Dec 18 13:01:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99d9198ccea06b7767e8c3549c16e1ed7eff0172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:0e:94:8a:dc:aa:33:6e:3a:c3:4e:3f:28: 5b:81:17:c8:16:b5:60:43:d2:3c:ba:13:7e:41:f1: d8:20:08:3c:4b:0f:e6:43:f0:63:f0:20:24:39:c0: d6:f5:d8:3e:84:2d:90:30:2c:f3:ea:48:b6:fd:0b: 3c:ce:c0:ec:6c:5c:a4:f4:a8:7a:fa:8e:bc:eb:0f: 04:1b:cb:36:86:22:27:8c:38:25:ea:4e:58:17:e1: 0b:42:b4:5c:4e:06:84:c7:ac:bb:8c:03:ae:10:c9: 89:e6:30:a4:77:14:3f:8b:fb:63:41:61:c0:e3:55: 9c:f3:86:ac:a8:eb:9f:fb:58:b9:4d:f0:ff:42:8d: 0d:06:bc:6d:c6:dc:f3:32:50:54:46:d3:a6:9f:6b: 95:f0:13:ef:9a:d0:dd:bc:9b:76:65:98:42:a7:26: eb:10:9f:ad:c2:bf:bb:c2:00:08:2f:79:48:30:8b: 60:89:07:1d:f2:33:cb:9e:77:35:b7:fa:35:df:1e: 35:d5:ff:1d:b4:dc:02:be:d2:27:e0:ca:6d:e9:5d: 05:07:ee:aa:e8:1d:e6:a6:39:de:d7:db:18:ae:3e: ea:d7:b0:9d:95:a6:58:c0:46:79:ad:ba:ec:3c:ba: d0:52:0c:2d:e1:05:6f:ba:58:00:b6:d0:b4:5d:98: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D9:19:8C:CE:A0:6B:77:67:E8:C3:54:9C:16:E1:ED:7E:FF:01:72 X509v3 Authority Key Identifier: keyid:10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/mdkZjM6ga3dn6MNUnBbh7X7_AXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.160.0-91.151.162.255 212.93.160.0/19 IPv6: 2a00:50a0::/48 Signature Algorithm: sha256WithRSAEncryption c7:67:bb:65:51:89:17:d6:4a:74:ca:52:6a:12:a6:39:e7:37: 90:50:19:f4:f0:09:54:88:2f:4e:b5:c0:e8:3f:a5:99:f7:06: 3f:ab:b5:85:8a:6b:cb:72:25:65:ab:9e:58:f2:f4:5a:04:54: dc:d8:34:e9:80:b0:31:bc:87:e0:1d:ef:41:08:86:cc:57:63: 47:66:96:55:32:05:68:dd:b6:11:c5:f9:8f:9a:23:5b:6f:58: 27:10:0d:57:62:58:1f:9b:52:6d:0c:22:04:e8:36:4a:01:ad: db:1c:57:b4:92:7f:7c:28:da:21:76:9f:80:8e:00:b6:9b:a8: 08:4e:9c:88:b6:53:1f:2a:ac:2e:08:5b:95:bb:63:72:a8:db: a8:9c:24:2e:43:d6:f0:b6:cf:a3:8a:8f:4a:10:98:84:fd:34: f5:ab:75:6f:38:61:fa:43:94:58:57:73:29:83:c0:6c:30:ee: 51:57:b5:e1:ef:7d:c8:05:11:d7:4a:3a:58:2f:af:72:6b:2f: 78:c8:4b:b4:a7:b4:e5:88:f0:d0:8c:dc:bf:78:e9:9d:db:51: 01:d8:2a:ec:43:c5:8a:ae:db:3c:a3:33:54:26:f5:77:40:86: c5:f8:24:fe:6a:87:00:b4:29:5e:d4:2f:23:57:09:db:f4:5e: ca:1e:31:93 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZsxjQRaqeHkBjvVbv5+Q2e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNGE0NTVlYjMxZjYzZTM5MGUyMWFhNzdmY2MyYWYyYWMz NDM1NzcwHhcNMjUxMjE4MTMwMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWQ5MTk4Y2NlYTA2Yjc3NjdlOGMzNTQ5YzE2ZTFlZDdlZmYwMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KoOlIrcqjNuOsNOPyhbgRfIFrVg Q9I8uhN+QfHYIAg8Sw/mQ/Bj8CAkOcDW9dg+hC2QMCzz6ki2/Qs8zsDsbFyk9Kh6 +o686w8EG8s2hiInjDgl6k5YF+ELQrRcTgaEx6y7jAOuEMmJ5jCkdxQ/i/tjQWHA 41Wc84asqOuf+1i5TfD/Qo0NBrxtxtzzMlBURtOmn2uV8BPvmtDdvJt2ZZhCpybr EJ+twr+7wgAIL3lIMItgiQcd8jPLnnc1t/o13x411f8dtNwCvtIn4Mpt6V0FB+6q 6B3mpjne19sYrj7q17CdlaZYwEZ5rbrsPLrQUgwt4QVvulgAttC0XZgiEQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFJnZGYzOoGt3Z+jDVJwW4e1+/wFyMB8GA1UdIwQY MBaAFBBKRV6zH2PjkOIap3/MKvKsNDV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUVwRlhyTWZZLU9RNGhxbmY4d3E4cXcwTlhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGUwYzItYmFiNC00NzEzLThlYjEt ZTY1MTM5N2NlODU1LzEvbWRrWmpNNmdhM2RuNk1OVW5CYmg3WDdfQVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84MGUwYzItYmFiNC00NzEzLThlYjEtZTY1MTM5N2NlODU1 LzEvRUVwRlhyTWZZLU9RNGhxbmY4d3E4cXcwTlhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAVbl6AD BABbl6IDBAXUXaAwDwQCAAIwCQMHACoAUKAAADANBgkqhkiG9w0BAQsFAAOCAQEA x2e7ZVGJF9ZKdMpSahKmOec3kFAZ9PAJVIgvTrXA6D+lmfcGP6u1hYpry3IlZaue WPL0WgRU3Ng06YCwMbyH4B3vQQiGzFdjR2aWVTIFaN22EcX5j5ojW29YJxANV2JY H5tSbQwiBOg2SgGt2xxXtJJ/fCjaIXafgI4AtpuoCE6ciLZTHyqsLghblbtjcqjb qJwkLkPW8LbPo4qPShCYhP009at1bzhh+kOUWFdzKYPAbDDuUVe14e99yAUR10o6 WC+vcmsveMhLtKe05Yjw0Izcv3jpndtRAdgq7EPFiq7bPKMzVCb1d0CGxfgk/mqH ALQpXtQvI1cJ2/Reyh4xkw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:17:39 2025 by rpki-client