This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MM2wV1TAN1YNa36U794v7d2EC7E.roa File: MM2wV1TAN1YNa36U794v7d2EC7E.roa (raw, json) Hash identifier: wbBzSVRZkzLfvsmfjCYplp4nf0ufoKo2qW11YcY8XMc= Subject key identifier: 30:CD:B0:57:54:C0:37:56:0D:6B:7E:94:EF:DE:2F:ED:DD:84:0B:B1 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A59B000C2E88A1D6A13694C922317CA38 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MM2wV1TAN1YNa36U794v7d2EC7E.roa Signing time: Thu 06 Nov 2025 15:01:37 +0000 ROA not before: Thu 06 Nov 2025 15:01:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 89.125.8.0/22 maxlen: 22 89.125.20.0/22 maxlen: 22 89.125.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:b0:00:c2:e8:8a:1d:6a:13:69:4c:92:23:17:ca:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 6 15:01:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30cdb05754c037560d6b7e94efde2feddd840bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:0b:6e:74:14:1d:b7:48:ae:3c:43:04:58: 8b:06:32:f2:69:a9:df:f3:2c:9e:e4:4f:f7:d1:39: b8:56:84:2f:1f:b7:1f:83:fa:e0:64:fc:0f:29:3e: 78:db:f4:c5:98:54:46:7b:53:92:ca:53:14:6f:eb: ee:e8:fc:28:51:92:58:c5:8c:f1:69:53:2b:91:fe: c9:e9:ca:a0:51:8a:e0:6b:6d:c7:d0:dd:a5:9c:57: 78:da:ef:5c:b6:22:b5:40:a1:7f:61:f0:e3:14:88: a6:4f:6f:d0:12:07:a2:90:9d:52:9d:a3:c4:2a:ee: cc:03:94:fa:8a:56:e2:b9:8c:62:5c:da:4d:e4:dc: 8f:31:5a:67:73:aa:7f:fd:c8:2f:6d:88:76:5c:dc: 68:c7:28:b7:ed:1b:8e:1f:35:c8:09:6a:eb:cc:66: b8:d5:89:01:0a:93:38:5d:fe:ff:d3:57:08:8e:b1: 1d:8b:77:a4:75:dc:8e:2a:0e:33:c3:9b:79:a2:48: c6:07:00:ac:d2:20:b0:13:d5:3e:93:7f:d6:28:36: 8e:bc:ce:02:89:52:be:06:39:fe:db:cf:01:41:29: ae:1c:56:2b:ea:e4:9c:ce:39:20:43:64:71:a1:82: f9:cf:f2:7e:01:43:cc:21:cc:3c:13:07:4a:88:21: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CD:B0:57:54:C0:37:56:0D:6B:7E:94:EF:DE:2F:ED:DD:84:0B:B1 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MM2wV1TAN1YNa36U794v7d2EC7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.8.0/22 89.125.20.0/22 89.125.32.0/22 Signature Algorithm: sha256WithRSAEncryption 14:f8:33:73:b4:cc:10:96:75:65:87:ea:39:e2:ab:d1:2e:2c: 5c:64:ed:32:02:11:39:2f:b6:85:83:f6:a5:12:82:09:7d:94: b8:00:84:f0:d5:32:2e:77:02:50:b4:39:a3:30:63:86:d9:0d: 0d:39:8c:7e:bd:d2:7d:bd:4e:16:fb:92:74:7b:ce:7f:8f:a5: 61:5a:8d:1f:1c:74:29:79:aa:b4:f4:eb:d7:30:5d:67:34:8f: be:a1:da:c4:69:19:de:21:57:68:94:89:80:26:f8:24:d2:52: 11:5b:2c:37:8b:72:c3:bf:e7:cf:37:d0:8a:4c:45:03:79:27: 24:e5:4e:0e:10:2c:9b:a8:8f:d1:63:06:d2:7d:a3:be:3d:00: 54:53:76:1e:60:90:0c:6a:c2:9c:c7:ed:27:3e:ad:3b:9f:70: a0:7e:f8:2c:eb:70:fa:50:39:ab:e6:df:be:d6:b9:6c:fd:8d: 84:52:51:32:53:0a:1c:ec:45:33:aa:ad:77:13:16:00:1d:b8: 8f:0b:4a:9e:06:87:59:8a:47:11:b8:ff:be:f5:98:ea:b2:a5: 29:ec:6c:f5:e8:b0:6b:cc:a6:e9:dd:02:b7:f0:2d:98:04:20: 5a:06:1c:ec:eb:1d:fe:af:2a:20:e9:89:57:f1:a2:8e:e0:ed: 0b:23:e4:77 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpZsADC6IodahNpTJIjF8o4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA2MTUwMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGNkYjA1NzU0YzAzNzU2MGQ2YjdlOTRlZmRlMmZlZGRkODQwYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv0LbnQUHbdIrjxDBFiLBjLyaanf 8yye5E/30Tm4VoQvH7cfg/rgZPwPKT542/TFmFRGe1OSylMUb+vu6PwoUZJYxYzx aVMrkf7J6cqgUYrga23H0N2lnFd42u9ctiK1QKF/YfDjFIimT2/QEgeikJ1SnaPE Ku7MA5T6ilbiuYxiXNpN5NyPMVpnc6p//cgvbYh2XNxoxyi37RuOHzXICWrrzGa4 1YkBCpM4Xf7/01cIjrEdi3ekddyOKg4zw5t5okjGBwCs0iCwE9U+k3/WKDaOvM4C iVK+Bjn+288BQSmuHFYr6uSczjkgQ2RxoYL5z/J+AUPMIcw8EwdKiCEYewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDDNsFdUwDdWDWt+lO/eL+3dhAuxMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTU0yd1YxVEFOMVlOYTM2VTc5NHY3ZDJFQzdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0IAwQC WX0UAwQCWX0gMA0GCSqGSIb3DQEBCwUAA4IBAQAU+DNztMwQlnVlh+o54qvRLixc ZO0yAhE5L7aFg/alEoIJfZS4AITw1TIudwJQtDmjMGOG2Q0NOYx+vdJ9vU4W+5J0 e85/j6VhWo0fHHQpeaq09OvXMF1nNI++odrEaRneIVdolImAJvgk0lIRWyw3i3LD v+fPN9CKTEUDeSck5U4OECybqI/RYwbSfaO+PQBUU3YeYJAMasKcx+0nPq07n3Cg fvgs63D6UDmr5t++1rls/Y2EUlEyUwoc7EUzqq13ExYAHbiPC0qeBodZikcRuP++ 9ZjqsqUp7Gz16LBrzKbp3QK38C2YBCBaBhzs6x3+ryog6YlX8aKO4O0LI+R3 -----END CERTIFICATE-----Generated at Fri Dec 5 07:56:52 2025 by rpki-client