This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MqyJbQTVrDAPhnm_9HkWOZjM6LE.roa File: MqyJbQTVrDAPhnm_9HkWOZjM6LE.roa (raw, json) Hash identifier: 09oOg4IkvKBU2uTWwdlMn4tlfvoD6nQx4XjxSRkAIyI= Subject key identifier: 32:AC:89:6D:04:D5:AC:30:0F:86:79:BF:F4:79:16:39:98:CC:E8:B1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A96CB9CAEADFBEEA616C22D9F3706F598 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MqyJbQTVrDAPhnm_9HkWOZjM6LE.roa Signing time: Tue 18 Nov 2025 11:48:37 +0000 ROA not before: Tue 18 Nov 2025 11:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3257 IP address blocks: 85.189.72.0/21 maxlen: 24 86.53.152.0/21 maxlen: 24 194.6.104.0/21 maxlen: 24 195.40.22.0/23 maxlen: 23 195.40.24.0/23 maxlen: 23 195.72.176.0/21 maxlen: 24 212.134.20.0/24 maxlen: 24 212.134.27.0/24 maxlen: 24 212.135.6.0/23 maxlen: 23 213.177.252.0/24 maxlen: 24 213.177.253.0/24 maxlen: 24 213.177.254.0/24 maxlen: 24 213.177.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:cb:9c:ae:ad:fb:ee:a6:16:c2:2d:9f:37:06:f5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 18 11:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32ac896d04d5ac300f8679bff479163998cce8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:50:7e:94:2c:77:b9:ab:07:36:df:03:87: ec:1f:36:d9:2c:c8:c5:df:03:1c:ad:64:db:28:ef: 12:a9:85:9e:2e:3b:1b:aa:fa:fc:01:bb:01:c9:ae: 9d:d0:6d:26:54:08:ec:68:ac:3a:a9:28:55:64:45: 62:33:5a:ba:de:91:e9:c6:42:85:6f:17:74:17:db: 2d:61:31:79:9f:71:72:fa:64:74:5e:30:2a:27:1c: b9:78:2f:c3:c7:23:c6:fc:f2:ec:ab:1c:37:03:c9: 9e:40:b8:da:5d:e3:13:37:99:cc:2a:6f:2f:d3:48: 77:13:56:a9:c7:96:13:31:2d:56:ea:64:a4:7f:e9: b1:3a:99:87:62:8a:69:7d:8a:3c:d6:58:c4:74:40: 64:13:18:63:74:5b:5b:ee:bc:d9:64:72:f4:5f:be: 0f:5a:8c:a5:11:db:2c:b5:20:d1:89:0c:58:f4:3a: fe:cb:bc:59:67:d6:00:df:e0:b4:d7:13:8f:86:dd: 62:b9:e3:c1:5b:d9:e7:54:b7:57:79:75:35:c4:b6: 85:a7:17:e4:df:98:66:e3:06:e3:43:ad:7a:0f:55: 02:bd:8f:f2:3b:c3:03:21:74:91:b9:39:2e:89:10: 5e:9d:75:76:56:0c:a2:ff:23:98:fd:31:8e:74:5c: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:89:6D:04:D5:AC:30:0F:86:79:BF:F4:79:16:39:98:CC:E8:B1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MqyJbQTVrDAPhnm_9HkWOZjM6LE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.189.72.0/21 86.53.152.0/21 194.6.104.0/21 195.40.22.0-195.40.25.255 195.72.176.0/21 212.134.20.0/24 212.134.27.0/24 212.135.6.0/23 213.177.252.0/22 Signature Algorithm: sha256WithRSAEncryption 38:e7:e1:7e:86:22:f0:86:a8:2d:f1:5b:ea:fa:4b:88:79:9b: 23:fd:2c:c0:5a:45:61:73:04:a4:e9:89:08:af:6b:b5:9e:46: 76:ce:82:8a:8e:0d:ea:14:a0:e6:17:44:ba:f1:64:a8:16:67: e5:3f:aa:37:26:49:51:e5:5c:07:fd:40:92:54:63:0f:19:81: 23:aa:77:ce:02:6e:72:1a:72:49:85:97:5a:a5:77:f3:b0:0b: 9e:90:b1:36:4f:bf:32:5f:fa:58:43:b1:09:b6:82:0e:e4:d6: 45:a5:fa:17:0b:99:df:ae:9c:e0:a7:f6:9c:5e:88:df:ca:64: e4:24:2e:a4:74:c1:05:9e:83:d0:8b:41:0f:6a:10:36:c5:31: d3:c5:73:c2:d7:d9:e9:58:57:5a:1f:80:31:b0:0c:32:b3:40: 56:b6:de:40:ce:48:4b:3a:83:9b:36:85:49:b8:6c:9a:6c:46: 61:98:6c:73:cd:47:c4:65:21:e2:88:79:22:26:4f:84:79:16: f2:6c:3d:05:b1:5f:c2:d3:4d:5e:50:78:40:f5:70:83:be:4e: 44:38:0e:cb:da:19:22:43:62:b5:fd:78:d7:bf:98:9a:f2:cd: 6a:49:92:29:33:20:48:f2:ad:ba:ac:54:e7:c4:ab:6f:44:ea: fa:ba:f6:f7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZqWy5yurfvuphbCLZ83BvWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTE4MTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFjODk2ZDA0ZDVhYzMwMGY4Njc5YmZmNDc5MTYzOTk4Y2NlOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+9QfpQsd7mrBzbfA4fsHzbZLMjF 3wMcrWTbKO8SqYWeLjsbqvr8AbsBya6d0G0mVAjsaKw6qShVZEViM1q63pHpxkKF bxd0F9stYTF5n3Fy+mR0XjAqJxy5eC/DxyPG/PLsqxw3A8meQLjaXeMTN5nMKm8v 00h3E1apx5YTMS1W6mSkf+mxOpmHYoppfYo81ljEdEBkExhjdFtb7rzZZHL0X74P WoylEdsstSDRiQxY9Dr+y7xZZ9YA3+C01xOPht1iuePBW9nnVLdXeXU1xLaFpxfk 35hm4wbjQ616D1UCvY/yO8MDIXSRuTkuiRBenXV2Vgyi/yOY/TGOdFyYewIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDKsiW0E1awwD4Z5v/R5FjmYzOixMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvTXF5SmJRVFZyREFQaG5tXzlIa1dPWmpNNkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDVb1IAwQD VjWYAwQDwgZoMAwDBAHDKBYDBAHDKBgDBAPDSLADBADUhhQDBADUhhsDBAHUhwYD BALVsfwwDQYJKoZIhvcNAQELBQADggEBADjn4X6GIvCGqC3xW+r6S4h5myP9LMBa RWFzBKTpiQiva7WeRnbOgoqODeoUoOYXRLrxZKgWZ+U/qjcmSVHlXAf9QJJUYw8Z gSOqd84CbnIackmFl1qld/OwC56QsTZPvzJf+lhDsQm2gg7k1kWl+hcLmd+unOCn 9pxeiN/KZOQkLqR0wQWeg9CLQQ9qEDbFMdPFc8LX2elYV1ofgDGwDDKzQFa23kDO SEs6g5s2hUm4bJpsRmGYbHPNR8RlIeKIeSImT4R5FvJsPQWxX8LTTV5QeED1cIO+ TkQ4DsvaGSJDYrX9eNe/mJryzWpJkikzIEjyrbqsVOfEq29E6vq69vc= -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:58 2025 by rpki-client