This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/mfev43uF2VpQ9lqx6pLZKM1_XDo.roa File: mfev43uF2VpQ9lqx6pLZKM1_XDo.roa (raw, json) Hash identifier: AGCIVtIGbKVvAlDxqr1AYqLNUuweA0rj7H4pFJdqFfQ= Subject key identifier: 99:F7:AF:E3:7B:85:D9:5A:50:F6:5A:B1:EA:92:D9:28:CD:7F:5C:3A Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B547013189840BA8BEF0A8A32A1626412 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/mfev43uF2VpQ9lqx6pLZKM1_XDo.roa Signing time: Thu 25 Dec 2025 07:36:29 +0000 ROA not before: Thu 25 Dec 2025 07:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 5.44.42.0/24 maxlen: 24 45.129.185.0/24 maxlen: 24 2a05:541:102::/48 maxlen: 48 2a05:541:103::/48 maxlen: 48 2a05:541:104::/48 maxlen: 48 2a05:541:105::/48 maxlen: 48 2a05:541:106::/48 maxlen: 48 2a05:541:107::/48 maxlen: 48 2a05:541:108::/48 maxlen: 48 2a05:541:109::/48 maxlen: 48 2a05:541:110::/48 maxlen: 48 2a05:541:111::/48 maxlen: 48 2a05:541:112::/48 maxlen: 48 2a05:541:113::/48 maxlen: 48 2a05:541:114::/48 maxlen: 48 2a05:541:115::/48 maxlen: 48 2a05:541:116::/48 maxlen: 48 2a05:541:117::/48 maxlen: 48 2a05:541:118::/48 maxlen: 48 2a05:541:119::/48 maxlen: 48 2a05:541:121::/48 maxlen: 48 2a05:541:122::/48 maxlen: 48 2a05:541:123::/48 maxlen: 48 2a05:541:124::/48 maxlen: 48 2a05:541:125::/48 maxlen: 48 2a05:541:126::/48 maxlen: 48 2a05:541:127::/48 maxlen: 48 2a05:541:129::/48 maxlen: 48 2a05:541:131::/48 maxlen: 48 2a05:541:133::/48 maxlen: 48 2a05:541:134::/48 maxlen: 48 2a05:541:135::/48 maxlen: 48 2a05:541:136::/48 maxlen: 48 2a05:541:137::/48 maxlen: 48 2a05:541:138::/48 maxlen: 48 2a05:541:139::/48 maxlen: 48 2a05:541:141::/48 maxlen: 48 2a05:541:152::/48 maxlen: 48 2a05:541:153::/48 maxlen: 48 2a05:541:156::/48 maxlen: 48 2a05:541:157::/48 maxlen: 48 2a05:541:158::/48 maxlen: 48 2a05:541:159::/48 maxlen: 48 2a05:541:170::/48 maxlen: 48 2a05:541:171::/48 maxlen: 48 2a05:541:172::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:70:13:18:98:40:ba:8b:ef:0a:8a:32:a1:62:64:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Dec 25 07:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99f7afe37b85d95a50f65ab1ea92d928cd7f5c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:f3:27:00:98:f2:c1:ef:e3:d1:78:08:2a: ef:b6:e2:5e:0e:95:19:b9:73:cc:c7:93:67:1f:5c: 82:3a:22:19:30:1f:fc:e7:cb:88:e4:0b:6b:83:33: 64:6a:d6:e5:16:5d:8d:45:f9:58:b8:00:b2:45:66: 0c:7f:de:8d:b0:07:28:dc:db:b6:08:e1:2d:a3:f7: ba:40:b7:31:4c:3d:a8:77:17:64:7a:26:8b:dd:90: 94:38:30:7a:5d:93:f7:82:e3:77:f8:e8:40:1d:e4: de:55:09:25:9f:fc:0c:b5:6a:c2:97:b4:ea:b8:02: 31:97:02:35:4a:ae:d2:7f:41:2b:af:c7:6a:b6:bf: f3:6b:b6:4b:b9:35:b8:9e:cb:66:99:36:6d:4e:12: e9:02:29:df:bf:b4:5f:16:30:89:0b:0e:81:a1:e8: 0a:89:2b:19:ae:2e:c2:ad:57:5c:4a:07:52:a0:7d: 00:27:b2:f5:56:63:e9:de:f2:59:e5:f2:de:a9:d4: 73:ab:8f:5a:51:c9:d2:eb:71:07:42:16:e7:de:8a: 23:47:79:8c:5d:3c:58:c5:da:e1:c9:f1:f7:43:8e: c9:a4:1a:c8:00:a6:19:e9:61:e8:ed:1e:63:41:2b: bb:18:37:49:78:75:8e:37:c8:69:cb:48:8d:2b:dc: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:AF:E3:7B:85:D9:5A:50:F6:5A:B1:EA:92:D9:28:CD:7F:5C:3A X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/mfev43uF2VpQ9lqx6pLZKM1_XDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.42.0/24 45.129.185.0/24 IPv6: 2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff 2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff 2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff 2a05:541:129::/48 2a05:541:131::/48 2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff 2a05:541:141::/48 2a05:541:152::/47 2a05:541:156::-2a05:541:159:ffff:ffff:ffff:ffff:ffff 2a05:541:170::-2a05:541:172:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 93:8a:1c:18:ab:77:db:3e:2e:d1:1a:ab:81:7a:2e:1d:17:be: 92:cf:81:09:6e:20:b5:23:b6:fd:01:d6:18:71:fe:1e:4f:72: 0e:c3:5c:48:75:ca:58:43:bd:c7:a9:8e:49:09:86:7a:e1:05: 65:07:ca:16:67:ce:49:34:cf:65:d6:b7:33:00:39:f3:f4:f7: a4:61:92:df:82:aa:81:5e:11:96:1a:e5:4a:ad:23:3f:cc:21: e0:e3:b1:cf:59:90:02:b8:32:95:ec:d8:6f:90:f1:e2:c7:6d: c8:20:33:db:79:9a:5e:6e:36:ab:cb:7c:05:a8:71:e1:78:5e: 17:fb:73:72:8e:43:fa:3f:66:a9:37:eb:41:8a:b2:31:ae:ee: aa:2d:dc:ba:7f:50:11:48:f6:dc:0a:fe:23:a9:8c:30:96:06: 30:0a:92:99:9c:ed:8d:d2:be:bf:52:11:49:a5:aa:8f:8f:33: 93:46:0b:6c:ae:b7:70:51:30:f0:ff:1d:28:e3:53:de:c1:ec: 40:a8:78:51:f7:02:5a:af:3d:bb:a5:3a:4b:ca:91:21:d9:b4: 59:3b:03:68:be:f9:81:3b:db:cb:0d:d4:5d:08:9b:07:eb:46: 56:6e:68:d6:84:d3:b3:51:06:2f:c6:e0:e7:b2:38:d0:13:22: 8f:6e:22:da -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZtUcBMYmEC6i+8KijKhYmQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUxMjI1MDczNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWY3YWZlMzdiODVkOTVhNTBmNjVhYjFlYTkyZDkyOGNkN2Y1YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyDzJwCY8sHv49F4CCrvtuJeDpUZ uXPMx5NnH1yCOiIZMB/858uI5AtrgzNkatblFl2NRflYuACyRWYMf96NsAco3Nu2 COEto/e6QLcxTD2odxdkeiaL3ZCUODB6XZP3guN3+OhAHeTeVQkln/wMtWrCl7Tq uAIxlwI1Sq7Sf0Err8dqtr/za7ZLuTW4nstmmTZtThLpAinfv7RfFjCJCw6BoegK iSsZri7CrVdcSgdSoH0AJ7L1VmPp3vJZ5fLeqdRzq49aUcnS63EHQhbn3oojR3mM XTxYxdrhyfH3Q47JpBrIAKYZ6WHo7R5jQSu7GDdJeHWON8hpy0iNK9z14QIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFJn3r+N7hdlaUPZaseqS2SjNf1w6MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvbWZldjQzdUYyVnBROWxxeDZwTFpLTTFfWERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujASBAIAATAMAwQABSwq AwQALYG5MIGjBAIAAjCBnDASAwcBKgUFQQECAwcBKgUFQQEIMBIDBwQqBQVBARAD BwEqBQVBARgwEgMHACoFBUEBIQMHAyoFBUEBIAMHACoFBUEBKQMHACoFBUEBMTAS AwcAKgUFQQEzAwcBKgUFQQE4AwcAKgUFQQFBAwcBKgUFQQFSMBIDBwEqBQVBAVYD BwEqBQVBAVgwEgMHBCoFBUEBcAMHACoFBUEBcjANBgkqhkiG9w0BAQsFAAOCAQEA k4ocGKt32z4u0RqrgXouHRe+ks+BCW4gtSO2/QHWGHH+Hk9yDsNcSHXKWEO9x6mO SQmGeuEFZQfKFmfOSTTPZda3MwA58/T3pGGS34KqgV4RlhrlSq0jP8wh4OOxz1mQ ArgylezYb5Dx4sdtyCAz23maXm42q8t8Bahx4XheF/tzco5D+j9mqTfrQYqyMa7u qi3cun9QEUj23Ar+I6mMMJYGMAqSmZztjdK+v1IRSaWqj48zk0YLbK63cFEw8P8d KONT3sHsQKh4UfcCWq89u6U6S8qRIdm0WTsDaL75gTvbyw3UXQibB+tGVm5o1oTT s1EGL8bg57I40BMij24i2g== -----END CERTIFICATE-----Generated at Wed Dec 31 18:04:30 2025 by rpki-client