This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/z-MXjyMeqnX_NpzieD8tASjlAeQ.roa File: z-MXjyMeqnX_NpzieD8tASjlAeQ.roa (raw, json) Hash identifier: 1ZP6YNbM06t/s4yBjd4f2/fgSt5y8HV5ipSLGrndupQ= Subject key identifier: CF:E3:17:8F:23:1E:AA:75:FF:36:9C:E2:78:3F:2D:01:28:E5:01:E4 Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Certificate serial: 019B25E9106016A7FAFA35BAF9E999742E67 Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/z-MXjyMeqnX_NpzieD8tASjlAeQ.roa Signing time: Tue 16 Dec 2025 06:46:29 +0000 ROA not before: Tue 16 Dec 2025 06:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60388 IP address blocks: 185.31.108.0/22 maxlen: 22 212.73.96.0/19 maxlen: 19 212.73.96.0/23 maxlen: 23 212.73.98.0/24 maxlen: 24 212.73.99.0/24 maxlen: 24 212.73.100.0/23 maxlen: 23 212.73.102.0/24 maxlen: 24 212.73.103.0/24 maxlen: 24 212.73.104.0/21 maxlen: 21 212.73.105.0/24 maxlen: 24 212.73.110.0/24 maxlen: 24 212.73.112.0/20 maxlen: 20 212.73.113.0/24 maxlen: 24 2a00:b4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:e9:10:60:16:a7:fa:fa:35:ba:f9:e9:99:74:2e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Validity Not Before: Dec 16 06:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfe3178f231eaa75ff369ce2783f2d0128e501e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:f1:bc:a2:17:e4:d1:a7:15:89:69:b7:20: e1:c8:43:eb:45:c1:fd:6a:8c:a7:36:7d:fc:4d:61: a5:16:3f:72:2a:f6:69:6c:0e:65:cf:5a:4e:36:d9: f8:3b:f5:f0:b1:82:6b:7a:69:08:b0:6f:13:38:d7: 1d:dd:fc:0f:c6:3e:bc:a6:7a:af:cd:a7:79:23:dd: 49:35:55:f9:a5:e4:54:1f:a6:c3:d3:2d:ac:72:a0: 0d:0e:07:c6:e4:e8:80:d6:09:36:13:95:45:30:8c: 15:63:df:07:0e:0a:35:29:00:29:02:90:69:52:b4: 1a:df:4a:1d:c9:a4:a7:94:25:ea:f8:49:79:84:f8: 0a:b5:45:42:e6:ab:80:18:95:f9:0c:4f:45:7b:61: 13:85:4e:65:a9:5e:17:b5:c7:3b:e3:36:67:5f:c5: 16:e6:25:aa:8c:e7:19:dc:9b:93:a7:60:1d:01:71: ff:04:79:de:b7:0d:9f:a5:ee:80:2e:74:89:bf:0f: e6:99:ec:86:09:9a:08:1b:0c:79:07:56:79:90:31: 1c:12:ea:1e:25:07:ac:0e:1c:26:a8:d0:b8:b0:9f: bc:d2:8d:63:e3:5f:89:d9:df:4d:25:cb:9b:93:c5: dd:36:f2:e7:cd:50:c9:b0:40:d7:2a:73:09:ce:cd: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:17:8F:23:1E:AA:75:FF:36:9C:E2:78:3F:2D:01:28:E5:01:E4 X509v3 Authority Key Identifier: keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/z-MXjyMeqnX_NpzieD8tASjlAeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.108.0/22 212.73.96.0/19 IPv6: 2a00:b4a0::/32 Signature Algorithm: sha256WithRSAEncryption 27:1c:36:aa:25:46:53:8e:e7:c8:4a:f6:08:32:e2:8b:82:3f: ef:65:8b:b4:df:68:b3:db:6f:38:e4:e9:68:3c:8e:d2:59:0b: 0a:d2:f0:e4:56:eb:35:61:86:a1:9e:de:4f:29:32:da:90:a0: 80:63:4f:20:77:f9:dd:06:71:30:c6:a3:9a:48:6e:12:ef:03: f5:dc:85:64:dd:82:a0:39:db:cc:64:8c:62:ac:fc:7a:3d:00: d2:c5:d3:36:d4:29:e5:9b:99:cc:2c:50:fe:5e:62:02:06:bd: 91:7c:fd:37:d3:08:c7:aa:29:f3:89:74:de:2e:d8:84:8d:f4: 63:df:b4:35:0c:06:83:e7:1d:4f:af:6c:b8:8b:85:b1:d6:25: 79:b0:a4:24:bb:58:7f:74:6a:02:14:12:e4:5f:89:e8:03:1b: 80:f8:d8:f6:7e:c1:c6:f4:4f:1a:dd:94:ea:32:3c:28:3a:57: 6b:50:e2:71:d3:67:0e:7d:a7:db:20:8d:aa:0e:47:00:c7:c1: e7:4d:16:e7:bb:40:75:f4:e0:f0:f2:e2:ac:01:3d:57:13:dc: 62:1f:1a:f0:a9:90:4d:1f:19:09:4b:9d:6c:21:4e:f2:91:0f: 17:2f:7f:ea:4e:29:6c:df:ed:18:75:64:1f:85:27:b3:a2:9f: 5b:44:6f:5e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsl6RBgFqf6+jW6+emZdC5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi ZmRkNGQwHhcNMjUxMjE2MDY0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmUzMTc4ZjIzMWVhYTc1ZmYzNjljZTI3ODNmMmQwMTI4ZTUwMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/nxvKIX5NGnFYlptyDhyEPrRcH9 aoynNn38TWGlFj9yKvZpbA5lz1pONtn4O/XwsYJremkIsG8TONcd3fwPxj68pnqv zad5I91JNVX5peRUH6bD0y2scqANDgfG5OiA1gk2E5VFMIwVY98HDgo1KQApApBp UrQa30odyaSnlCXq+El5hPgKtUVC5quAGJX5DE9Fe2EThU5lqV4Xtcc74zZnX8UW 5iWqjOcZ3JuTp2AdAXH/BHnetw2fpe6ALnSJvw/mmeyGCZoIGwx5B1Z5kDEcEuoe JQesDhwmqNC4sJ+80o1j41+J2d9NJcubk8XdNvLnzVDJsEDXKnMJzs24zQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM/jF48jHqp1/zac4ng/LQEo5QHkMB8GA1UdIwQY MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt ZjMwMjhhZWE5OTc3LzEvei1NWGp5TWVxblhfTnB6aWVEOHRBU2psQWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3 LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuR9sAwQF 1ElgMA0EAgACMAcDBQAqALSgMA0GCSqGSIb3DQEBCwUAA4IBAQAnHDaqJUZTjufI SvYIMuKLgj/vZYu032iz22845OloPI7SWQsK0vDkVus1YYahnt5PKTLakKCAY08g d/ndBnEwxqOaSG4S7wP13IVk3YKgOdvMZIxirPx6PQDSxdM21Cnlm5nMLFD+XmIC Br2RfP030wjHqinziXTeLtiEjfRj37Q1DAaD5x1Pr2y4i4Wx1iV5sKQku1h/dGoC FBLkX4noAxuA+Nj2fsHG9E8a3ZTqMjwoOldrUOJx02cOfafbII2qDkcAx8HnTRbn u0B19ODw8uKsAT1XE9xiHxrwqZBNHxkJS51sIU7ykQ8XL3/qTils3+0YdWQfhSez op9bRG9e -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:45 2025 by rpki-client