This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mmUO1nos7yx4yHQGyMJo04wNTwU.roa File: mmUO1nos7yx4yHQGyMJo04wNTwU.roa (raw, json) Hash identifier: OeoDqAG6yxaji0yfog6CRjfDTIT+yKcs6XgasuuXKmk= Subject key identifier: 9A:65:0E:D6:7A:2C:EF:2C:78:C8:74:06:C8:C2:68:D3:8C:0D:4F:05 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019AE8AC5FEF96A5E244DEC6A4926FDBF850 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mmUO1nos7yx4yHQGyMJo04wNTwU.roa Signing time: Thu 04 Dec 2025 09:23:22 +0000 ROA not before: Thu 04 Dec 2025 09:23:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16125 IP address blocks: 84.32.9.0/24 maxlen: 24 84.32.25.0/24 maxlen: 24 84.32.51.0/24 maxlen: 24 84.32.97.0/24 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.178.0/23 maxlen: 23 84.32.209.0/24 maxlen: 24 84.32.214.0/24 maxlen: 24 84.32.215.0/24 maxlen: 24 84.32.244.0/24 maxlen: 24 84.32.248.0/24 maxlen: 24 88.216.62.0/24 maxlen: 24 88.216.90.0/24 maxlen: 24 88.216.127.0/24 maxlen: 24 88.216.197.0/24 maxlen: 24 88.216.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:ac:5f:ef:96:a5:e2:44:de:c6:a4:92:6f:db:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 4 09:23:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a650ed67a2cef2c78c87406c8c268d38c0d4f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:23:f9:0c:51:ff:c6:61:5f:9e:3f:f7:1f: 56:5c:f6:57:8a:76:9f:58:a3:75:3f:3c:ee:40:49: a3:b4:7b:52:e3:7e:c0:d4:33:28:94:8f:62:d5:70: f9:14:f9:fd:99:4b:74:ac:88:91:fa:00:64:a4:c4: b1:21:43:96:0c:2b:de:29:db:9b:55:1c:c5:85:56: 4f:cb:de:99:9e:c7:8e:ea:34:d9:15:17:1e:b3:e2: 21:44:2d:ff:bb:a5:5a:ed:f7:a7:57:8e:6c:6f:8c: 55:bc:ef:31:b5:f2:57:af:55:07:35:ec:51:2c:5a: b6:c2:6f:34:93:f8:76:7d:46:d4:51:0b:02:0e:18: 8a:ba:a0:7b:7e:8f:75:41:61:43:3f:cb:d1:69:6e: 03:06:cf:27:4a:ba:e1:c0:3c:58:d4:1b:07:3f:6d: e5:70:87:4e:96:33:bd:50:ea:6b:e9:d0:3b:ea:2a: 75:d7:dd:0f:a0:9d:a5:1f:55:b4:72:8b:a7:00:d7: 29:7f:26:70:dd:0c:73:8e:c2:1d:a9:dc:a9:84:bf: 9a:85:30:e3:97:38:27:9c:f2:e6:23:22:fd:ac:fe: 8d:93:db:fd:7c:a9:9c:48:08:a3:be:a6:af:5e:f9: 7f:21:41:a8:4e:55:b9:0c:8c:64:46:03:3b:eb:a1: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:65:0E:D6:7A:2C:EF:2C:78:C8:74:06:C8:C2:68:D3:8C:0D:4F:05 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mmUO1nos7yx4yHQGyMJo04wNTwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.9.0/24 84.32.25.0/24 84.32.51.0/24 84.32.97.0/24 84.32.151.0/24 84.32.178.0/23 84.32.209.0/24 84.32.214.0/23 84.32.244.0/24 84.32.248.0/24 88.216.62.0/24 88.216.90.0/24 88.216.127.0/24 88.216.197.0/24 88.216.215.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:31:63:b7:a4:ee:39:bc:6c:f2:c5:1c:71:10:3c:92:e7:e8: 0d:2b:70:ae:f1:ce:17:52:a9:8b:75:7e:eb:ed:58:e3:65:19: f1:3d:68:77:5c:e9:4e:74:05:f7:69:18:e2:5f:f5:7f:b3:9f: f4:56:f4:a4:5c:ef:95:63:3b:e7:16:11:18:31:17:90:29:42: 71:ab:82:95:d8:fb:da:f0:de:f2:fd:f3:ed:c1:82:62:20:30: ff:17:bc:5b:c3:75:f2:84:21:14:b2:f1:52:b6:b5:40:05:15: 0a:63:ff:4f:e3:60:2e:03:90:05:bb:ab:85:77:e3:ae:0f:16: 12:68:04:0e:e2:29:2b:e7:d7:99:6b:f7:e5:eb:f0:b8:3e:e7: 16:d1:65:03:d7:e9:4e:f3:23:be:9f:b8:3f:e9:04:40:7c:0c: 56:e9:ac:de:cb:b9:bc:7e:a6:dc:9f:d5:b9:7c:33:d3:9a:7b: 3c:ed:cf:55:21:47:db:b7:d6:57:ce:ad:18:97:06:11:61:a8: d2:61:ce:03:34:46:59:ec:7d:24:b3:10:48:cc:b0:f6:71:fd: 22:61:b8:96:fe:1a:95:af:04:4b:19:49:b3:ea:58:c3:7f:68: a1:d8:47:7f:a7:59:15:31:d3:14:fa:6d:d5:18:dc:ce:ca:a0: 71:1d:e4:29 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZrorF/vlqXiRN7GpJJv2/hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjA0MDkyMzIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTY1MGVkNjdhMmNlZjJjNzhjODc0MDZjOGMyNjhkMzhjMGQ0ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pUj+QxR/8ZhX54/9x9WXPZXinaf WKN1PzzuQEmjtHtS437A1DMolI9i1XD5FPn9mUt0rIiR+gBkpMSxIUOWDCveKdub VRzFhVZPy96ZnseO6jTZFRces+IhRC3/u6Va7fenV45sb4xVvO8xtfJXr1UHNexR LFq2wm80k/h2fUbUUQsCDhiKuqB7fo91QWFDP8vRaW4DBs8nSrrhwDxY1BsHP23l cIdOljO9UOpr6dA76ip1190PoJ2lH1W0counANcpfyZw3QxzjsIdqdyphL+ahTDj lzgnnPLmIyL9rP6Nk9v9fKmcSAijvqavXvl/IUGoTlW5DIxkRgM766GsewIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFJplDtZ6LO8seMh0BsjCaNOMDU8FMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbW1VTzFub3M3eXg0eUhRR3lNSm8wNHdOVHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAVCAJAwQA VCAZAwQAVCAzAwQAVCBhAwQAVCCXAwQBVCCyAwQAVCDRAwQBVCDWAwQAVCD0AwQA VCD4AwQAWNg+AwQAWNhaAwQAWNh/AwQAWNjFAwQAWNjXMA0GCSqGSIb3DQEBCwUA A4IBAQBKMWO3pO45vGzyxRxxEDyS5+gNK3Cu8c4XUqmLdX7r7VjjZRnxPWh3XOlO dAX3aRjiX/V/s5/0VvSkXO+VYzvnFhEYMReQKUJxq4KV2Pva8N7y/fPtwYJiIDD/ F7xbw3XyhCEUsvFStrVABRUKY/9P42AuA5AFu6uFd+OuDxYSaAQO4ikr59eZa/fl 6/C4PucW0WUD1+lO8yO+n7g/6QRAfAxW6azey7m8fqbcn9W5fDPTmns87c9VIUfb t9ZXzq0YlwYRYajSYc4DNEZZ7H0ksxBIzLD2cf0iYbiW/hqVrwRLGUmz6ljDf2ih 2Ed/p1kVMdMU+m3VGNzOyqBxHeQp -----END CERTIFICATE-----Generated at Fri Dec 5 03:05:28 2025 by rpki-client