This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/mEVCQMEFjnIVeZQWA2alKcZUu88.roa File: mEVCQMEFjnIVeZQWA2alKcZUu88.roa (raw, json) Hash identifier: 4Qrc1jx4TcUBTyAO1gqWdSnIZ96mNcQh6/hZeMN9bLs= Subject key identifier: 98:45:42:40:C1:05:8E:72:15:79:94:16:03:66:A5:29:C6:54:BB:CF Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B023386AC31CBB11732320847B39DD8D0 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/mEVCQMEFjnIVeZQWA2alKcZUu88.roa Signing time: Tue 09 Dec 2025 08:21:29 +0000 ROA not before: Tue 09 Dec 2025 08:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5458 IP address blocks: 212.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:33:86:ac:31:cb:b1:17:32:32:08:47:b3:9d:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Dec 9 08:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=98454240c1058e72157994160366a529c654bbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f3:48:a7:ca:0e:d9:2c:59:09:22:f9:ce:c4: 76:a7:94:6d:d9:17:b8:49:cb:08:26:f3:0e:60:07: 68:74:0b:15:da:00:3c:af:07:ec:9c:9b:33:92:ee: 25:3c:fa:fe:be:bd:1e:ed:c5:8c:c9:76:22:47:f2: 51:f0:28:05:80:19:f7:28:77:cb:d2:1f:83:72:f3: f1:b4:1c:99:b0:fe:c6:21:0c:77:3a:b7:6c:cc:c7: 93:30:8b:dd:e4:9e:52:52:46:5c:7b:1e:ef:8a:c8: 67:14:f6:cc:ab:39:66:43:26:61:98:83:d4:08:60: 5f:83:f1:85:97:8c:b7:b1:e7:fc:80:2e:48:88:ba: f6:7f:bc:a4:53:0e:42:ad:c2:1a:dd:6a:55:6a:ce: 3c:d6:fb:80:fb:8e:95:5e:bb:11:08:ff:d3:75:51: d2:6e:2f:ef:94:28:50:18:df:23:4b:ef:74:f6:35: 08:39:e9:80:5b:71:3c:d7:2e:8b:c3:66:c3:0b:3a: f3:80:4b:f6:b6:51:12:67:4f:75:38:d6:30:2e:91: 4b:5b:e5:6b:3d:a6:d7:2a:b5:af:bd:fa:2b:c0:fe: 51:ef:50:33:a7:73:f4:31:3b:8b:a0:45:84:4e:e5: 2b:06:71:28:57:75:ff:f4:3f:4b:08:e3:ef:a9:a1: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:42:40:C1:05:8E:72:15:79:94:16:03:66:A5:29:C6:54:BB:CF X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/mEVCQMEFjnIVeZQWA2alKcZUu88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.33.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b8:c1:bd:78:f4:e4:a9:f2:7a:06:7a:b9:a8:aa:49:b7:a2: 13:2e:2a:84:f1:1d:da:57:f8:19:60:33:cc:08:5b:3c:76:ba: 07:e7:0a:9c:10:4f:35:ff:4a:3c:c9:47:80:78:90:25:10:9a: 0d:16:35:a3:cf:d6:f2:80:6d:d3:2c:8c:4e:0b:34:a3:7a:ed: 7f:a8:f4:a9:f2:d3:a9:f6:d9:e3:12:4e:98:f6:7c:4f:ea:1d: d1:fd:cd:c4:73:cd:4e:b7:4d:f0:05:4c:19:22:29:55:d1:f8: 2d:ea:b4:26:5b:cf:45:3c:4f:b1:98:a4:c7:50:c3:bb:13:3e: 19:2a:2a:83:ee:b3:81:ee:3e:ca:c7:2d:f6:34:18:56:f6:9a: 4f:1d:b1:a4:a0:36:f8:1c:b5:7a:70:36:8a:60:1e:61:8b:25: b3:64:6d:13:9d:e8:93:ab:8b:a3:17:e4:04:f1:e5:f6:23:08: 82:13:93:e1:62:6c:73:2c:ec:59:f7:8d:3a:59:9e:89:76:21: a8:cd:4e:11:9f:da:a1:28:90:19:89:d2:40:b5:20:46:d8:30: a7:cc:0d:3d:02:90:a5:7f:c9:cd:c2:fe:f6:f1:b2:06:6f:e4: 1d:8f:d6:61:2d:99:f3:14:a6:58:e7:2c:b5:7c:0c:a6:3c:3c: fa:68:b2:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCM4asMcuxFzIyCEezndjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjUxMjA5MDgyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQ1NDI0MGMxMDU4ZTcyMTU3OTk0MTYwMzY2YTUyOWM2NTRiYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vNIp8oO2SxZCSL5zsR2p5Rt2Re4 ScsIJvMOYAdodAsV2gA8rwfsnJszku4lPPr+vr0e7cWMyXYiR/JR8CgFgBn3KHfL 0h+DcvPxtByZsP7GIQx3OrdszMeTMIvd5J5SUkZcex7vishnFPbMqzlmQyZhmIPU CGBfg/GFl4y3sef8gC5IiLr2f7ykUw5CrcIa3WpVas481vuA+46VXrsRCP/TdVHS bi/vlChQGN8jS+909jUIOemAW3E81y6Lw2bDCzrzgEv2tlESZ091ONYwLpFLW+Vr PabXKrWvvforwP5R71Azp3P0MTuLoEWETuUrBnEoV3X/9D9LCOPvqaE6BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhFQkDBBY5yFXmUFgNmpSnGVLvPMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvbUVWQ1FNRUZqbklWZVpRV0EyYWxLY1pVdTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PwhMA0G CSqGSIb3DQEBCwUAA4IBAQBLuMG9ePTkqfJ6Bnq5qKpJt6ITLiqE8R3aV/gZYDPM CFs8droH5wqcEE81/0o8yUeAeJAlEJoNFjWjz9bygG3TLIxOCzSjeu1/qPSp8tOp 9tnjEk6Y9nxP6h3R/c3Ec81Ot03wBUwZIilV0fgt6rQmW89FPE+xmKTHUMO7Ez4Z KiqD7rOB7j7Kxy32NBhW9ppPHbGkoDb4HLV6cDaKYB5hiyWzZG0TneiTq4ujF+QE 8eX2IwiCE5PhYmxzLOxZ9406WZ6JdiGozU4Rn9qhKJAZidJAtSBG2DCnzA09ApCl f8nNwv728bIGb+Qdj9ZhLZnzFKZY5yy1fAymPDz6aLKo -----END CERTIFICATE-----Generated at Thu Dec 11 13:42:51 2025 by rpki-client