This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/mrqVIwSDxW20lv8kvtQ7QFndJZU.roa File: mrqVIwSDxW20lv8kvtQ7QFndJZU.roa (raw, json) Hash identifier: J/buU17qNgp7OI4nvhA+Zkd2w7B/8zGPPbTTlXaLVUM= Subject key identifier: 9A:BA:95:23:04:83:C5:6D:B4:96:FF:24:BE:D4:3B:40:59:DD:25:95 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019A815B063BDC9F0AA6317FC276147E3F52 Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/mrqVIwSDxW20lv8kvtQ7QFndJZU.roa Signing time: Fri 14 Nov 2025 07:53:37 +0000 ROA not before: Fri 14 Nov 2025 07:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5660 IP address blocks: 217.78.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:5b:06:3b:dc:9f:0a:a6:31:7f:c2:76:14:7e:3f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Nov 14 07:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9aba95230483c56db496ff24bed43b4059dd2595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:86:85:b2:2d:af:04:11:7d:b3:3c:ff:66: ca:a8:59:79:dd:ed:dd:01:37:11:89:9c:48:79:64: 32:9b:49:20:18:d3:56:f7:cb:b8:01:57:e2:8b:15: 33:92:ba:02:9a:07:f1:56:30:aa:0a:33:9f:12:ee: 56:fc:4e:88:8c:02:44:b4:1b:74:d0:f6:56:22:7a: 3a:1e:3d:c1:b8:cb:eb:b4:75:4a:0c:50:ec:67:94: 8b:ea:2c:75:30:04:92:0b:44:8f:02:92:0c:ce:25: 89:61:70:9b:52:ec:e3:28:21:ea:0b:9e:5c:0d:22: 4b:b9:62:f2:eb:d2:95:bb:6a:dc:a5:82:6d:8c:62: 69:ba:67:ad:7b:11:87:b9:3c:e3:d8:36:89:1c:08: e1:a8:5f:6f:f5:34:72:ca:5f:30:ac:9c:06:b9:f7: 9a:65:db:fb:14:61:fc:a4:51:65:29:9d:ce:e3:82: a9:ca:04:1f:b9:67:9a:48:e4:81:3b:52:2b:c7:d3: ed:6a:31:ae:a8:9a:d8:57:22:8e:47:cc:10:5a:0b: a8:86:41:6b:5b:69:8a:43:ca:2c:80:35:b2:d5:9d: c2:93:2c:99:e4:30:1e:ee:91:df:69:b4:c2:1e:c0: 3f:ac:bd:f5:3c:1b:92:24:6c:15:32:2c:a9:6a:60: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BA:95:23:04:83:C5:6D:B4:96:FF:24:BE:D4:3B:40:59:DD:25:95 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/mrqVIwSDxW20lv8kvtQ7QFndJZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.40.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:12:a9:9c:5a:b1:72:5a:6a:52:90:1f:54:cc:90:6f:32:30: b6:7e:fe:d6:c5:e2:9b:c1:e8:75:dc:b3:90:57:7f:b2:22:24: ef:6e:a8:80:d8:4d:05:e2:f2:bc:52:a9:b8:8a:df:ae:3a:cf: 50:bc:14:84:81:43:f1:04:8b:67:00:2f:30:00:0c:d2:80:10: b4:4f:0c:e9:f3:e9:35:8f:fa:e2:02:17:2c:0d:da:4d:33:7d: 9b:47:53:5f:29:55:ea:95:a1:91:07:8c:5b:53:47:9e:96:79: 6c:8b:c7:ba:bc:f3:c7:a9:f1:78:a7:4a:a1:b1:f6:1f:28:a4: c1:2d:88:ed:62:6b:b7:03:14:97:2b:c2:87:74:aa:60:41:dd: f4:53:62:de:fe:b1:8e:78:cc:41:d7:c1:d9:05:45:10:56:3c: eb:80:fb:d4:37:50:16:49:11:bf:f7:44:db:7a:93:5a:67:29: 40:f1:1f:05:4a:05:19:17:c7:2f:68:b2:5c:fb:c8:f6:13:25: 67:64:f4:d1:f1:23:8e:b2:cb:5c:27:ef:12:f7:7f:a6:19:0d: 98:26:51:4c:ad:6e:84:cc:f0:03:0e:bf:a7:4c:47:4f:19:3e: b6:b2:81:78:43:8d:44:3e:c5:96:cc:1d:c0:1c:e9:ee:b6:fc: 3d:98:73:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBWwY73J8KpjF/wnYUfj9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjUxMTE0MDc1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJhOTUyMzA0ODNjNTZkYjQ5NmZmMjRiZWQ0M2I0MDU5ZGQyNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1WGhbItrwQRfbM8/2bKqFl53e3d ATcRiZxIeWQym0kgGNNW98u4AVfiixUzkroCmgfxVjCqCjOfEu5W/E6IjAJEtBt0 0PZWIno6Hj3BuMvrtHVKDFDsZ5SL6ix1MASSC0SPApIMziWJYXCbUuzjKCHqC55c DSJLuWLy69KVu2rcpYJtjGJpumetexGHuTzj2DaJHAjhqF9v9TRyyl8wrJwGufea Zdv7FGH8pFFlKZ3O44KpygQfuWeaSOSBO1Irx9PtajGuqJrYVyKOR8wQWguohkFr W2mKQ8osgDWy1Z3CkyyZ5DAe7pHfabTCHsA/rL31PBuSJGwVMiypamD0tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq6lSMEg8VttJb/JL7UO0BZ3SWVMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvbXJxVkl3U0R4VzIwbHY4a3Z0UTdRRm5kSlpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2U4oMA0G CSqGSIb3DQEBCwUAA4IBAQAqEqmcWrFyWmpSkB9UzJBvMjC2fv7WxeKbweh13LOQ V3+yIiTvbqiA2E0F4vK8Uqm4it+uOs9QvBSEgUPxBItnAC8wAAzSgBC0Twzp8+k1 j/riAhcsDdpNM32bR1NfKVXqlaGRB4xbU0eelnlsi8e6vPPHqfF4p0qhsfYfKKTB LYjtYmu3AxSXK8KHdKpgQd30U2Le/rGOeMxB18HZBUUQVjzrgPvUN1AWSRG/90Tb epNaZylA8R8FSgUZF8cvaLJc+8j2EyVnZPTR8SOOsstcJ+8S93+mGQ2YJlFMrW6E zPADDr+nTEdPGT62soF4Q41EPsWWzB3AHOnutvw9mHN6 -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:17 2025 by rpki-client