This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mq4tym0Dtmrc2v4IDz-h-HIY0Q4.roa File: Mq4tym0Dtmrc2v4IDz-h-HIY0Q4.roa (raw, json) Hash identifier: lCYnWpraDsSrbnI3rROnuJCGGE+124SQRAkrEV0tjNI= Subject key identifier: 32:AE:2D:CA:6D:03:B6:6A:DC:DA:FE:08:0F:3F:A1:F8:72:18:D1:0E Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019AA76AA5A28376700B6923C5DECF7147FA Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mq4tym0Dtmrc2v4IDz-h-HIY0Q4.roa Signing time: Fri 21 Nov 2025 17:16:15 +0000 ROA not before: Fri 21 Nov 2025 17:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 5.182.28.0/22 maxlen: 22 45.67.117.0/24 maxlen: 24 89.40.161.0/24 maxlen: 24 91.242.68.0/23 maxlen: 24 91.242.70.0/24 maxlen: 24 91.242.73.0/24 maxlen: 24 91.242.74.0/24 maxlen: 24 91.242.82.0/24 maxlen: 24 91.242.105.0/24 maxlen: 24 91.242.124.0/24 maxlen: 24 91.242.126.0/24 maxlen: 24 185.147.48.0/24 maxlen: 24 185.180.145.0/24 maxlen: 24 194.50.200.0/24 maxlen: 24 194.50.201.0/24 maxlen: 24 195.138.103.0/24 maxlen: 24 195.138.104.0/22 maxlen: 24 195.138.107.0/24 maxlen: 24 195.138.111.0/24 maxlen: 24 195.138.114.0/24 maxlen: 24 195.138.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:6a:a5:a2:83:76:70:0b:69:23:c5:de:cf:71:47:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Nov 21 17:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32ae2dca6d03b66adcdafe080f3fa1f87218d10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:d8:bc:f5:e7:14:f3:4c:27:22:91:43:4e: b3:df:9b:8c:8b:f7:8e:48:b0:27:c6:2d:26:4d:f6: 1e:39:a9:c9:ac:6b:5a:2e:b3:d7:40:c0:9e:22:c3: 18:82:ee:b8:d9:53:84:18:90:6c:7a:0c:dd:54:9b: 9d:7c:55:d7:b7:a4:f9:95:01:fc:07:1e:ba:a7:b1: 76:bc:04:41:54:5f:e5:89:94:dc:b6:8d:16:78:62: 63:a5:f0:78:0f:70:8a:37:8f:c3:c3:18:13:c1:cf: d6:fd:1a:49:75:ca:64:5e:17:4c:9f:73:cc:fd:af: a7:19:24:ec:fc:d1:e9:9d:88:c3:ba:b4:01:d2:05: 59:47:f8:13:be:26:6a:e1:f9:53:4c:4b:af:33:bb: f6:27:3a:39:36:11:ec:13:1e:d0:2f:f8:0d:b7:1f: 7d:91:42:52:4c:93:c6:7e:a1:53:01:78:a3:c7:3a: 08:12:94:dc:44:e6:62:e4:e3:a0:2a:00:21:64:3c: 19:62:2a:91:6b:35:fa:4d:0b:fe:a0:ed:98:d5:ff: 55:be:af:50:d1:b8:61:e5:22:1e:9c:db:c0:30:a8: 96:e9:56:b2:61:2e:52:28:c3:17:90:a2:62:36:5f: 03:c9:b2:73:d6:74:15:71:f7:7c:b1:cc:1e:12:2c: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AE:2D:CA:6D:03:B6:6A:DC:DA:FE:08:0F:3F:A1:F8:72:18:D1:0E X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mq4tym0Dtmrc2v4IDz-h-HIY0Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.28.0/22 45.67.117.0/24 89.40.161.0/24 91.242.68.0-91.242.70.255 91.242.73.0-91.242.74.255 91.242.82.0/24 91.242.105.0/24 91.242.124.0/24 91.242.126.0/24 185.147.48.0/24 185.180.145.0/24 194.50.200.0/23 195.138.103.0-195.138.107.255 195.138.111.0/24 195.138.114.0/24 195.138.120.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c7:00:ce:1d:e4:c8:b9:9d:6f:3a:df:41:65:c0:ed:b4:c4: a5:75:5d:91:d6:73:21:22:64:4c:3f:7f:94:7a:df:d4:c6:09: 46:1d:9e:8a:38:31:d6:fd:e4:1b:15:ae:86:e9:3d:56:7f:85: d9:a1:2d:52:8f:7d:9c:79:81:5c:9f:57:3c:27:f7:22:11:80: 70:43:1c:0c:86:a5:6f:7a:99:2e:a8:de:59:0a:6a:35:e5:f6: e1:57:a5:b9:6c:fc:ac:a1:ba:34:a5:d4:78:5c:bb:5f:fa:78: f3:cc:84:fb:ce:79:d2:9d:ff:10:cf:f5:df:af:79:17:b1:fa: cd:f0:65:3c:59:fa:99:d8:fa:a5:74:15:26:95:a4:65:d3:90: c0:63:a8:2b:8a:1a:7a:8c:28:ab:4a:50:d1:35:e8:5d:9c:6c: 0c:32:a8:a4:83:3b:73:ef:23:88:40:fc:ba:4a:0c:fa:f9:36: d8:88:f2:8f:d3:ac:90:08:0e:ac:f0:6c:c2:b5:f3:a5:5f:02: 5b:ee:72:f9:66:83:d9:79:09:b1:40:6e:1d:a8:d4:80:66:40: e8:b0:f3:e6:38:6e:f2:46:fd:d7:af:36:60:ad:63:54:08:41: 49:50:ae:38:7a:ca:1c:54:78:8d:7b:d7:9c:c2:00:a2:d2:29: d4:b0:33:7f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZqnaqWig3ZwC2kjxd7PcUf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjUxMTIxMTcxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFlMmRjYTZkMDNiNjZhZGNkYWZlMDgwZjNmYTFmODcyMThkMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrDYvPXnFPNMJyKRQ06z35uMi/eO SLAnxi0mTfYeOanJrGtaLrPXQMCeIsMYgu642VOEGJBsegzdVJudfFXXt6T5lQH8 Bx66p7F2vARBVF/liZTcto0WeGJjpfB4D3CKN4/DwxgTwc/W/RpJdcpkXhdMn3PM /a+nGSTs/NHpnYjDurQB0gVZR/gTviZq4flTTEuvM7v2Jzo5NhHsEx7QL/gNtx99 kUJSTJPGfqFTAXijxzoIEpTcROZi5OOgKgAhZDwZYiqRazX6TQv+oO2Y1f9Vvq9Q 0bhh5SIenNvAMKiW6VayYS5SKMMXkKJiNl8DybJz1nQVcfd8scweEizX8QIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFDKuLcptA7Zq3Nr+CA8/ofhyGNEOMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvTXE0dHltMER0bXJjMnY0SUR6LWgtSElZMFE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQCBbYc AwQALUN1AwQAWSihMAwDBAJb8kQDBABb8kYwDAMEAFvySQMEAFvySgMEAFvyUgME AFvyaQMEAFvyfAMEAFvyfgMEALmTMAMEALm0kQMEAcIyyDAMAwQAw4pnAwQCw4po AwQAw4pvAwQAw4pyAwQAw4p4MA0GCSqGSIb3DQEBCwUAA4IBAQCHxwDOHeTIuZ1v Ot9BZcDttMSldV2R1nMhImRMP3+Uet/UxglGHZ6KODHW/eQbFa6G6T1Wf4XZoS1S j32ceYFcn1c8J/ciEYBwQxwMhqVvepkuqN5ZCmo15fbhV6W5bPysobo0pdR4XLtf +njzzIT7znnSnf8Qz/Xfr3kXsfrN8GU8WfqZ2PqldBUmlaRl05DAY6grihp6jCir SlDRNehdnGwMMqikgztz7yOIQPy6Sgz6+TbYiPKP06yQCA6s8GzCtfOlXwJb7nL5 ZoPZeQmxQG4dqNSAZkDosPPmOG7yRv3XrzZgrWNUCEFJUK44esocVHiNe9ecwgCi 0inUsDN/ -----END CERTIFICATE-----Generated at Sat Nov 22 20:47:22 2025 by rpki-client