This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Mb0U4f5xpXwWpYt0ydhOwYxSiMk.roa File: Mb0U4f5xpXwWpYt0ydhOwYxSiMk.roa (raw, json) Hash identifier: hpXR2GNsZIBy+8epCOrZz6VQh54X3BUB6hmNxlNFEc4= Subject key identifier: 31:BD:14:E1:FE:71:A5:7C:16:A5:8B:74:C9:D8:4E:C1:8C:52:88:C9 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AB0EFC935B27C0A3E24576E805ACB3396 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Mb0U4f5xpXwWpYt0ydhOwYxSiMk.roa Signing time: Sun 23 Nov 2025 13:38:15 +0000 ROA not before: Sun 23 Nov 2025 13:38:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 109.204.104.0/21 maxlen: 24 212.134.21.0/24 maxlen: 24 212.134.22.0/24 maxlen: 24 212.134.23.0/24 maxlen: 24 212.134.24.0/24 maxlen: 24 212.134.25.0/24 maxlen: 24 212.134.38.0/24 maxlen: 24 212.134.39.0/24 maxlen: 24 212.134.45.0/24 maxlen: 24 212.134.59.0/24 maxlen: 24 212.134.95.0/24 maxlen: 24 212.134.116.0/22 maxlen: 24 212.134.158.0/24 maxlen: 24 212.135.16.0/22 maxlen: 24 212.135.159.0/24 maxlen: 24 212.135.243.0/24 maxlen: 24 212.135.250.0/24 maxlen: 24 212.135.251.0/24 maxlen: 24 212.135.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:ef:c9:35:b2:7c:0a:3e:24:57:6e:80:5a:cb:33:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 23 13:38:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31bd14e1fe71a57c16a58b74c9d84ec18c5288c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:3c:1b:e2:f3:0a:53:fd:30:7b:ab:95:89: 71:b8:b7:7e:ae:26:ee:6a:9b:20:24:bf:9b:ea:ff: b2:8b:04:28:17:ef:79:ab:73:30:5e:ac:77:2f:0d: af:b5:d2:34:53:9f:19:2c:4d:24:4b:74:c1:2e:46: 3a:6a:a5:00:61:10:18:13:ed:52:85:1e:f8:6f:19: 82:24:7b:48:bb:45:32:d3:77:0d:c6:01:1e:20:3d: 0f:f4:be:36:9a:3c:59:34:2c:4d:65:12:62:26:aa: 88:8a:f4:b4:9e:43:9b:c5:54:9a:b4:3f:fe:8c:86: 7d:2d:b0:ec:a0:fb:b5:0b:b9:ee:11:90:b8:4e:7f: 50:82:4e:17:6d:a3:3e:21:43:8a:b2:c4:73:e8:b1: 2d:8f:28:79:f8:06:2f:f9:0c:b3:d1:a7:f8:4f:79: 94:37:4f:f4:7e:d8:b5:66:67:88:f4:df:ec:39:a2: 13:92:85:b2:9a:e4:f7:e5:78:83:6f:71:f8:75:a0: 45:51:3a:c7:c8:3f:3e:22:8f:2d:d7:ee:54:26:df: bc:bc:4e:38:f1:79:67:bc:34:c1:68:e6:b3:8b:78: c2:ab:b5:0b:72:c5:bf:91:0a:ea:80:1b:a0:66:b2: 4e:91:03:7e:42:4c:c0:4d:33:b9:2e:4e:f5:a1:d3: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:14:E1:FE:71:A5:7C:16:A5:8B:74:C9:D8:4E:C1:8C:52:88:C9 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Mb0U4f5xpXwWpYt0ydhOwYxSiMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.204.104.0/21 212.134.21.0-212.134.25.255 212.134.38.0/23 212.134.45.0/24 212.134.59.0/24 212.134.95.0/24 212.134.116.0/22 212.134.158.0/24 212.135.16.0/22 212.135.159.0/24 212.135.243.0/24 212.135.250.0/23 212.135.254.0/24 Signature Algorithm: sha256WithRSAEncryption 30:cc:18:02:88:26:3d:24:08:a2:a1:d3:12:98:c9:7d:2f:f1: 46:c7:b1:77:04:b0:83:2f:e0:4e:23:a7:64:d7:51:52:34:27: 81:0a:7b:66:f2:2b:76:c3:55:a8:b9:25:30:d1:8e:ae:ca:2f: c2:e0:b4:1d:53:19:58:b2:0e:aa:b7:57:45:fb:d8:78:9f:56: a5:1a:8c:97:39:35:db:1a:98:0d:b2:8c:b9:59:9e:36:b7:21: 4a:25:3b:50:85:cb:1a:f7:b4:1f:84:6b:b0:12:a5:e8:8e:1e: bd:e5:f4:c9:67:c3:a9:50:7c:90:01:69:cc:00:ff:52:15:a0: ff:2e:d1:3d:d2:e1:de:72:38:bc:66:49:fe:ff:89:7e:b6:f9: f2:27:3d:4e:0a:8d:0e:74:1f:7a:a3:be:72:26:a7:1f:68:79: fa:2a:bb:87:0c:6e:44:e4:72:1c:b8:58:41:c3:79:1b:13:03: 69:ec:13:7e:9d:dd:c9:cd:41:d2:e3:ef:d5:3a:56:2d:17:3b: 74:ec:6d:ec:9d:88:73:3b:69:6e:a9:21:ea:e3:7a:56:1f:0f: 8b:f4:9a:c7:7f:2a:8d:75:03:8f:c6:a6:fe:2b:9e:2f:e7:fe: f6:45:51:87:f5:fb:bf:c3:e0:bd:c3:4b:05:94:a5:ec:6f:36: 37:33:31:87 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZqw78k1snwKPiRXboBayzOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTIzMTMzODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWJkMTRlMWZlNzFhNTdjMTZhNThiNzRjOWQ4NGVjMThjNTI4OGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNs8G+LzClP9MHurlYlxuLd+ribu apsgJL+b6v+yiwQoF+95q3MwXqx3Lw2vtdI0U58ZLE0kS3TBLkY6aqUAYRAYE+1S hR74bxmCJHtIu0Uy03cNxgEeID0P9L42mjxZNCxNZRJiJqqIivS0nkObxVSatD/+ jIZ9LbDsoPu1C7nuEZC4Tn9Qgk4XbaM+IUOKssRz6LEtjyh5+AYv+Qyz0af4T3mU N0/0fti1ZmeI9N/sOaITkoWymuT35XiDb3H4daBFUTrHyD8+Io8t1+5UJt+8vE44 8XlnvDTBaOazi3jCq7ULcsW/kQrqgBugZrJOkQN+QkzATTO5Lk71odMBbQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFDG9FOH+caV8FqWLdMnYTsGMUojJMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvTWIwVTRmNXhwWHdXcFl0MHlkaE93WXhTaU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQDbcxoMAwD BADUhhUDBAHUhhgDBAHUhiYDBADUhi0DBADUhjsDBADUhl8DBALUhnQDBADUhp4D BALUhxADBADUh58DBADUh/MDBAHUh/oDBADUh/4wDQYJKoZIhvcNAQELBQADggEB ADDMGAKIJj0kCKKh0xKYyX0v8UbHsXcEsIMv4E4jp2TXUVI0J4EKe2byK3bDVai5 JTDRjq7KL8LgtB1TGViyDqq3V0X72HifVqUajJc5NdsamA2yjLlZnja3IUolO1CF yxr3tB+Ea7ASpeiOHr3l9Mlnw6lQfJABacwA/1IVoP8u0T3S4d5yOLxmSf7/iX62 +fInPU4KjQ50H3qjvnImpx9oefoqu4cMbkTkchy4WEHDeRsTA2nsE36d3cnNQdLj 79U6Vi0XO3TsbeydiHM7aW6pIerjelYfD4v0msd/Ko11A4/Gpv4rni/n/vZFUYf1 +7/D4L3DSwWUpexvNjczMYc= -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:29 2025 by rpki-client