This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Mj-NOn9zizLNKb-0-RicSOUuRk0.roa File: Mj-NOn9zizLNKb-0-RicSOUuRk0.roa (raw, json) Hash identifier: hhQVdihq8/005gpS3V23Lq37Y3XHWYZymySch3SUK5k= Subject key identifier: 32:3F:8D:3A:7F:73:8B:32:CD:29:BF:B4:F9:18:9C:48:E5:2E:46:4D Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019A7E67B7236174BD78084E63C1CEC0BB24 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Mj-NOn9zizLNKb-0-RicSOUuRk0.roa Signing time: Thu 13 Nov 2025 18:08:37 +0000 ROA not before: Thu 13 Nov 2025 18:08:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 80.174.248.0/24 maxlen: 24 103.85.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:67:b7:23:61:74:bd:78:08:4e:63:c1:ce:c0:bb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 13 18:08:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=323f8d3a7f738b32cd29bfb4f9189c48e52e464d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:f0:b8:42:de:4b:0e:06:4b:e7:34:c5:8f: 8a:74:aa:4e:0b:2e:4e:48:ca:a4:f2:f4:c9:d1:7b: 6c:f5:c3:e0:f6:42:51:22:c6:b4:b1:53:a0:79:3a: 0b:a2:d9:f9:8d:32:9d:79:ab:7c:4d:c0:8d:e4:a5: 3c:ae:b9:e7:d5:e5:8f:37:b6:a4:46:60:30:c9:fe: f7:6b:9e:f3:84:fa:6b:cc:ab:bf:b7:ba:42:bb:23: e2:bd:18:63:62:fa:a3:9d:70:69:b8:fd:ab:e7:33: 92:9e:88:1e:ad:a6:2b:38:37:fb:13:60:c9:79:a0: ce:1d:41:03:25:51:ee:11:71:10:02:41:3f:fa:84: 99:47:d3:35:09:4d:08:0d:a6:07:38:b4:bd:31:17: 71:69:b9:1b:f7:ae:b8:8c:a4:f1:d9:0a:da:d0:b8: fd:70:af:b0:4b:4e:cb:52:4f:55:a1:5f:34:19:bc: 53:80:55:c7:12:1d:14:ae:27:c5:96:74:99:49:13: de:f1:3d:e0:58:6a:a5:85:39:ea:01:f4:31:44:1b: f2:e8:23:42:21:4f:c4:72:4d:e5:ac:05:11:46:bf: c0:45:d7:57:f1:45:30:e3:7a:f7:ee:f7:db:1b:b3: 04:4d:92:d7:6f:82:d4:9e:5b:65:c9:3b:e3:bf:34: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3F:8D:3A:7F:73:8B:32:CD:29:BF:B4:F9:18:9C:48:E5:2E:46:4D X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Mj-NOn9zizLNKb-0-RicSOUuRk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.248.0/24 103.85.35.0/24 Signature Algorithm: sha256WithRSAEncryption ac:fa:09:c3:cd:0b:c4:0e:55:6f:93:dc:55:72:44:2a:d8:b3: bf:d3:b7:84:8a:08:8c:b3:fe:56:89:05:46:8c:93:98:b4:62: 88:03:17:2a:fe:0c:ca:58:e6:f9:0a:d4:29:6e:75:72:21:85: 9b:81:7e:4f:22:92:20:5c:ce:af:72:2b:ac:6f:49:45:5f:43: 10:6b:a3:66:60:74:5d:99:58:33:64:9d:38:8c:17:27:db:b3: b0:a9:21:60:5a:3d:67:b9:09:48:98:58:82:af:a2:f0:3e:04: 30:c7:e7:71:0f:fd:6f:b3:e5:64:a1:07:3d:ef:19:5b:44:c5: f0:87:39:0f:0b:69:b7:4c:17:bb:dd:95:e1:a5:49:1c:4f:5d: d5:37:43:01:9e:5e:7e:92:73:5d:0a:75:fb:59:ed:f9:5b:cf: ff:9a:fd:40:0a:4d:d7:29:9e:23:5e:ba:9c:05:3e:27:c4:b6: d2:f8:ba:f2:34:3c:7d:b2:92:6b:4a:46:ac:8b:3b:7d:8c:8d: cd:cb:43:78:73:45:40:49:0c:49:fb:ad:5a:16:bb:20:28:1c: 99:7a:7a:eb:7e:9a:41:0c:7f:c1:fc:48:99:ac:01:75:49:6a: 1c:f5:c6:fb:b3:97:33:1b:71:ac:27:2d:67:45:d8:71:b0:b2: 2c:49:22:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp+Z7cjYXS9eAhOY8HOwLskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTEzMTgwODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjNmOGQzYTdmNzM4YjMyY2QyOWJmYjRmOTE4OWM0OGU1MmU0NjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XLwuELeSw4GS+c0xY+KdKpOCy5O SMqk8vTJ0Xts9cPg9kJRIsa0sVOgeToLotn5jTKdeat8TcCN5KU8rrnn1eWPN7ak RmAwyf73a57zhPprzKu/t7pCuyPivRhjYvqjnXBpuP2r5zOSnogeraYrODf7E2DJ eaDOHUEDJVHuEXEQAkE/+oSZR9M1CU0IDaYHOLS9MRdxabkb9664jKTx2Qra0Lj9 cK+wS07LUk9VoV80GbxTgFXHEh0UrifFlnSZSRPe8T3gWGqlhTnqAfQxRBvy6CNC IU/Eck3lrAURRr/ARddX8UUw43r37vfbG7METZLXb4LUnltlyTvjvzQX3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDI/jTp/c4syzSm/tPkYnEjlLkZNMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvTWotTk9uOXppekxOS2ItMC1SaWNTT1V1UmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUK74AwQA Z1UjMA0GCSqGSIb3DQEBCwUAA4IBAQCs+gnDzQvEDlVvk9xVckQq2LO/07eEigiM s/5WiQVGjJOYtGKIAxcq/gzKWOb5CtQpbnVyIYWbgX5PIpIgXM6vciusb0lFX0MQ a6NmYHRdmVgzZJ04jBcn27OwqSFgWj1nuQlImFiCr6LwPgQwx+dxD/1vs+VkoQc9 7xlbRMXwhzkPC2m3TBe73ZXhpUkcT13VN0MBnl5+knNdCnX7We35W8//mv1ACk3X KZ4jXrqcBT4nxLbS+LryNDx9spJrSkasizt9jI3Ny0N4c0VASQxJ+61aFrsgKByZ enrrfppBDH/B/EiZrAF1SWoc9cb7s5czG3GsJy1nRdhxsLIsSSKR -----END CERTIFICATE-----Generated at Sat Nov 22 20:47:24 2025 by rpki-client