This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mw9I_qmTh3OP0rw3jSB6K4s8YFo.roa File: Mw9I_qmTh3OP0rw3jSB6K4s8YFo.roa (raw, json) Hash identifier: xxPNw/EehzS2JYFQCfQC2FgQACoxU4yf076pV7BEyYU= Subject key identifier: 33:0F:48:FE:A9:93:87:73:8F:D2:BC:37:8D:20:7A:2B:8B:3C:60:5A Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A59AF7AA01809AEE37561B2445B69EDDB Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mw9I_qmTh3OP0rw3jSB6K4s8YFo.roa Signing time: Thu 06 Nov 2025 15:01:03 +0000 ROA not before: Thu 06 Nov 2025 15:01:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 89.125.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:af:7a:a0:18:09:ae:e3:75:61:b2:44:5b:69:ed:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 6 15:01:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=330f48fea99387738fd2bc378d207a2b8b3c605a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:55:e2:27:2a:e0:a2:6e:a6:ed:cd:0d:a9: d1:4c:81:5a:27:1b:39:6f:82:b6:ad:49:64:bd:39: 54:a7:84:af:fd:6c:c6:ac:7b:c7:51:41:ea:62:b9: 68:a0:32:95:b3:2f:5d:49:f8:c8:e1:8f:f9:55:74: 31:d5:01:ca:e8:b2:d3:15:21:7f:9a:a1:c0:e5:85: d3:87:e0:ac:58:3c:d6:67:be:87:29:f9:62:55:96: 50:c8:93:ee:f3:88:d3:24:f8:1e:99:d8:e9:22:b2: 54:35:90:4f:34:d1:61:41:f9:e3:6b:f0:61:47:6f: eb:1b:32:31:b7:b0:67:f6:10:61:c1:93:2a:64:db: 8f:c4:4e:8a:1f:b8:d7:ee:da:c2:11:9f:1d:f4:83: 11:b4:a7:37:8a:40:d2:22:8f:96:ec:a2:18:da:a5: 61:b1:a9:6e:a4:64:7a:bc:75:58:fe:8f:a2:69:04: 5e:f2:11:db:79:fb:01:10:53:e1:cd:7d:c2:1a:2e: 94:f3:d2:cf:74:55:0a:b4:11:1f:b9:60:cd:49:82: ff:2c:5c:34:4e:f8:a1:cb:6e:69:b6:d8:6f:d7:73: 7a:42:e7:bd:03:1e:69:c8:e1:6d:68:7b:3f:51:eb: f8:dd:d1:12:62:68:3e:99:c5:23:42:78:1a:12:37: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:48:FE:A9:93:87:73:8F:D2:BC:37:8D:20:7A:2B:8B:3C:60:5A X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mw9I_qmTh3OP0rw3jSB6K4s8YFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:1b:b9:29:21:43:52:2f:fe:d5:cb:93:b4:87:0c:69:a2:84: 71:59:84:5d:3b:e5:d1:10:81:b0:af:ac:95:66:76:01:59:fb: c5:29:19:63:42:dd:4b:75:c3:25:3c:6b:db:96:d0:e0:54:ac: 76:10:26:ec:ca:8a:41:d9:92:b8:90:3b:a7:3e:0c:18:3b:cd: b0:a2:c7:ce:5d:97:fc:06:0d:59:7a:2e:bc:67:f8:bb:0a:02: d3:6b:57:71:65:8b:58:f2:1d:81:47:0f:24:07:f4:03:cd:8a: f5:04:a0:26:78:86:4b:95:c1:c2:fe:09:8b:57:50:7c:a3:f6: c5:bd:2c:be:42:8e:a6:8c:dc:ef:dc:43:1d:42:8c:43:51:4e: 5a:94:1d:b6:14:dc:6a:b0:7d:82:d0:8c:03:42:68:6c:ae:8d: 3b:6b:fd:1b:1c:d4:23:f8:4c:22:e6:0f:67:1b:19:62:51:2e: 63:ce:04:52:41:67:2e:38:5d:69:61:ba:09:0d:e6:8d:97:67: 77:12:be:d5:c2:49:c5:95:ac:ff:4c:f8:23:1e:92:ee:bb:e9: 73:1f:b2:ba:68:00:c0:13:37:f8:fd:bd:d8:b1:88:87:9b:0f: 64:50:1f:57:03:9c:03:f7:b4:2b:ea:31:8b:eb:fb:56:d2:ed: 5e:8d:30:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZr3qgGAmu43VhskRbae3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA2MTUwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzBmNDhmZWE5OTM4NzczOGZkMmJjMzc4ZDIwN2EyYjhiM2M2MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7JV4icq4KJupu3NDanRTIFaJxs5 b4K2rUlkvTlUp4Sv/WzGrHvHUUHqYrlooDKVsy9dSfjI4Y/5VXQx1QHK6LLTFSF/ mqHA5YXTh+CsWDzWZ76HKfliVZZQyJPu84jTJPgemdjpIrJUNZBPNNFhQfnja/Bh R2/rGzIxt7Bn9hBhwZMqZNuPxE6KH7jX7trCEZ8d9IMRtKc3ikDSIo+W7KIY2qVh salupGR6vHVY/o+iaQRe8hHbefsBEFPhzX3CGi6U89LPdFUKtBEfuWDNSYL/LFw0 Tvihy25ptthv13N6Que9Ax5pyOFtaHs/Uev43dESYmg+mcUjQngaEjeUjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMPSP6pk4dzj9K8N40geiuLPGBaMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTXc5SV9xbVRoM09QMHJ3M2pTQjZLNHM4WUZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWX0YMA0G CSqGSIb3DQEBCwUAA4IBAQBNG7kpIUNSL/7Vy5O0hwxpooRxWYRdO+XREIGwr6yV ZnYBWfvFKRljQt1LdcMlPGvbltDgVKx2ECbsyopB2ZK4kDunPgwYO82wosfOXZf8 Bg1Zei68Z/i7CgLTa1dxZYtY8h2BRw8kB/QDzYr1BKAmeIZLlcHC/gmLV1B8o/bF vSy+Qo6mjNzv3EMdQoxDUU5alB22FNxqsH2C0IwDQmhsro07a/0bHNQj+Ewi5g9n GxliUS5jzgRSQWcuOF1pYboJDeaNl2d3Er7VwknFlaz/TPgjHpLuu+lzH7K6aADA Ezf4/b3YsYiHmw9kUB9XA5wD97Qr6jGL6/tW0u1ejTCh -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:03 2025 by rpki-client