This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/inI6eQZGlQ6HdC8cwcXFzO9o8Pw.roa File: inI6eQZGlQ6HdC8cwcXFzO9o8Pw.roa (raw, json) Hash identifier: muPjFa2s2ADU7hfNJnnupf4kCRBhE43KBzR4OF0fCoE= Subject key identifier: 8A:72:3A:79:06:46:95:0E:87:74:2F:1C:C1:C5:C5:CC:EF:68:F0:FC Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B0438570441AAF666BF327AD924A68E24 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/inI6eQZGlQ6HdC8cwcXFzO9o8Pw.roa Signing time: Tue 09 Dec 2025 17:45:59 +0000 ROA not before: Tue 09 Dec 2025 17:45:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49367 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:38:57:04:41:aa:f6:66:bf:32:7a:d9:24:a6:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Dec 9 17:45:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a723a790646950e87742f1cc1c5c5ccef68f0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5e:0c:45:e6:d5:99:2d:bf:5c:3a:eb:5f:09: 19:6a:90:60:b3:d8:ab:ac:c8:07:3f:af:d4:4a:8d: 92:f7:f9:95:00:0c:05:05:be:e6:37:b6:11:5e:f0: 4f:30:a8:e6:46:22:3e:e9:d6:ce:cb:eb:36:60:39: 05:4b:14:71:0c:2f:3f:3a:97:a7:d6:0d:b9:70:91: e1:a0:0b:89:a6:23:03:43:78:91:9d:a3:d8:86:c6: ab:8c:17:08:90:8e:01:01:7c:2a:e0:87:53:76:04: 82:8d:dd:49:4a:45:54:f9:86:0e:64:fd:39:c6:b1: 20:16:fb:93:92:5a:f9:af:f4:ac:80:0e:f9:b8:0c: 4d:13:17:a4:55:d8:b6:ec:8a:0b:17:39:cc:6a:97: 55:9e:4d:59:cd:8b:91:2e:95:6c:95:d7:5b:fa:6e: 6c:33:29:6c:4d:96:46:5a:0a:b5:0c:2f:75:d6:e5: e6:94:2e:a4:6b:2d:93:85:2e:ae:d1:22:ee:f5:7c: 1b:3b:32:87:d0:0f:f2:54:b5:2f:9c:35:0a:bb:7b: be:34:a9:c9:2c:00:e9:74:d2:30:ca:fd:3f:ec:18: 30:7c:51:c9:9f:f2:5b:00:c6:dd:57:f1:bb:44:ff: ed:bf:7b:d9:8e:60:07:d3:45:2b:5f:73:1a:d8:b7: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:72:3A:79:06:46:95:0E:87:74:2F:1C:C1:C5:C5:CC:EF:68:F0:FC X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/inI6eQZGlQ6HdC8cwcXFzO9o8Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption a3:73:50:ca:44:40:df:89:68:af:6d:47:c0:31:9b:10:e5:cb: 2f:94:2a:0f:45:5e:14:fc:4d:2c:af:07:e9:9f:6c:7b:65:a7: fb:71:5a:c2:b9:30:65:05:20:f4:96:59:71:6d:ee:45:98:9e: c6:4d:be:ad:e2:34:fc:08:c5:39:b4:7d:51:ba:8d:85:e7:37: eb:81:df:48:c4:d5:ba:e1:3b:bd:3a:0d:43:c1:bc:d3:5e:8a: 89:42:df:04:89:bb:2b:92:97:48:a4:9c:bf:24:a6:f3:23:ca: bd:f3:5b:d3:1d:d5:a1:32:e6:6a:1a:32:e9:9d:37:7b:c3:84: 82:7a:b8:65:a4:fc:d5:08:d0:81:8e:c5:f7:ef:eb:6c:cd:5e: 9b:9f:1f:c9:30:d5:e1:72:32:c6:15:a5:25:f7:1f:b5:43:9b: 97:f2:78:bc:e0:95:5c:16:ad:25:46:d2:9c:22:d2:54:51:f6: 20:cd:04:4b:7b:1a:c9:69:4b:ac:fc:14:e0:d7:4e:21:c0:1f: 9c:c1:77:e6:67:ca:d1:47:ca:e9:cb:42:4e:c1:19:b2:38:21: 77:d1:5e:a1:29:ed:41:ef:d7:58:93:0f:e1:e2:49:2d:85:94: df:67:09:f2:9a:c3:d6:df:e5:de:6b:c5:8d:39:87:c4:5c:17: 02:e5:a7:ff -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsEOFcEQar2Zr8yetkkpo4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjUxMjA5MTc0NTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTcyM2E3OTA2NDY5NTBlODc3NDJmMWNjMWM1YzVjY2VmNjhmMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V4MRebVmS2/XDrrXwkZapBgs9ir rMgHP6/USo2S9/mVAAwFBb7mN7YRXvBPMKjmRiI+6dbOy+s2YDkFSxRxDC8/Open 1g25cJHhoAuJpiMDQ3iRnaPYhsarjBcIkI4BAXwq4IdTdgSCjd1JSkVU+YYOZP05 xrEgFvuTklr5r/SsgA75uAxNExekVdi27IoLFznMapdVnk1ZzYuRLpVslddb+m5s MylsTZZGWgq1DC911uXmlC6kay2ThS6u0SLu9XwbOzKH0A/yVLUvnDUKu3u+NKnJ LADpdNIwyv0/7BgwfFHJn/JbAMbdV/G7RP/tv3vZjmAH00UrX3Ma2LfoOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIpyOnkGRpUOh3QvHMHFxczvaPD8MB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvaW5JNmVRWkdsUTZIZEM4Y3djWEZ6TzlvOFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQCjc1DKREDfiWivbUfAMZsQ 5csvlCoPRV4U/E0srwfpn2x7Zaf7cVrCuTBlBSD0lllxbe5FmJ7GTb6t4jT8CMU5 tH1Ruo2F5zfrgd9IxNW64Tu9Og1DwbzTXoqJQt8EibsrkpdIpJy/JKbzI8q981vT HdWhMuZqGjLpnTd7w4SCerhlpPzVCNCBjsX37+tszV6bnx/JMNXhcjLGFaUl9x+1 Q5uX8ni84JVcFq0lRtKcItJUUfYgzQRLexrJaUus/BTg104hwB+cwXfmZ8rRR8rp y0JOwRmyOCF30V6hKe1B79dYkw/h4kkthZTfZwnymsPW3+Xea8WNOYfEXBcC5af/ -----END CERTIFICATE-----Generated at Fri Dec 12 05:15:22 2025 by rpki-client