This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mGzV6gf0TwJZSCO0TAekwtzwuyM.roa File: mGzV6gf0TwJZSCO0TAekwtzwuyM.roa (raw, json) Hash identifier: Q70ZIxQ9RLiviJFSVuqLQwizoCAGTqYlNYXCtympjY4= Subject key identifier: 98:6C:D5:EA:07:F4:4F:02:59:48:23:B4:4C:07:A4:C2:DC:F0:BB:23 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B4AA9F02E292AA15DA9FDBFB955F3428A Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mGzV6gf0TwJZSCO0TAekwtzwuyM.roa Signing time: Tue 23 Dec 2025 10:03:29 +0000 ROA not before: Tue 23 Dec 2025 10:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 92.50.0.0/19 maxlen: 19 92.50.32.0/19 maxlen: 19 147.136.68.0/22 maxlen: 24 147.136.76.0/22 maxlen: 24 147.136.84.0/22 maxlen: 24 168.199.128.0/22 maxlen: 24 168.199.160.0/22 maxlen: 24 168.199.192.0/22 maxlen: 24 168.199.212.0/23 maxlen: 23 185.101.244.0/23 maxlen: 24 185.101.246.0/23 maxlen: 24 185.101.252.0/23 maxlen: 23 185.101.254.0/23 maxlen: 23 185.171.252.0/23 maxlen: 23 185.171.253.0/24 maxlen: 24 185.171.254.0/23 maxlen: 23 185.226.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a9:f0:2e:29:2a:a1:5d:a9:fd:bf:b9:55:f3:42:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Dec 23 10:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=986cd5ea07f44f02594823b44c07a4c2dcf0bb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:78:06:0c:d2:16:96:60:bc:32:95:7b:c0: 4d:1f:ac:7b:67:ac:cd:85:9f:06:e3:15:13:87:be: 03:4f:f4:1d:d5:f2:d0:c5:c4:ee:14:f9:5b:28:c2: ef:3c:cd:a4:2c:62:9c:de:43:94:66:c0:91:75:40: ff:93:d3:fb:1f:91:64:cd:50:dc:e4:7c:8e:ec:29: c9:3f:1b:99:37:1e:64:89:95:93:bb:0e:6f:18:b6: b0:f9:b4:e2:3a:8d:86:5a:47:a6:31:ab:7b:3b:de: 08:60:2f:d1:09:f6:d3:9d:a9:8d:d1:ad:0b:7c:e6: 9f:97:fe:bd:42:d1:fd:a1:33:a4:4c:9a:e7:32:99: e9:8f:10:60:9e:ac:46:cb:39:9c:9e:76:25:4f:a4: d5:a7:ea:53:86:d2:9b:fe:c5:84:2f:0e:d7:1c:07: 26:8c:49:16:0a:80:a7:07:e9:fd:76:7c:06:d1:a4: 27:43:ea:3e:90:29:7e:39:c7:aa:17:8f:8f:c9:71: df:5d:29:58:28:15:29:1d:22:07:ef:9e:d0:f0:04: 61:07:48:df:69:1c:42:38:02:3e:ef:9a:de:66:06: 46:2e:40:5d:6b:dd:3f:23:31:04:c7:77:32:70:74: 05:6b:e3:ee:79:33:bd:da:b1:ae:40:c5:c9:13:a6: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:D5:EA:07:F4:4F:02:59:48:23:B4:4C:07:A4:C2:DC:F0:BB:23 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mGzV6gf0TwJZSCO0TAekwtzwuyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.50.0.0/18 147.136.68.0/22 147.136.76.0/22 147.136.84.0/22 168.199.128.0/22 168.199.160.0/22 168.199.192.0/22 168.199.212.0/23 185.101.244.0/22 185.101.252.0/22 185.171.252.0/22 185.226.204.0/23 Signature Algorithm: sha256WithRSAEncryption 44:b9:d4:ae:75:c0:96:62:22:df:87:5c:95:4e:c8:87:b0:e7: 40:6f:7f:42:1a:92:a9:99:99:08:fd:cb:c5:2c:3e:94:6e:13: 2a:d4:35:c5:04:fa:56:3d:9a:7d:b7:61:8a:aa:b7:51:0f:a6: 52:3a:7a:96:e5:26:a1:37:ae:4c:59:4b:fe:83:54:61:23:a7: e4:20:d2:27:ad:89:f7:a0:b6:ed:3d:d3:29:8f:6a:52:65:44: 37:d8:b0:3c:f2:9b:2a:23:1b:93:ec:3c:a5:b3:8e:2d:d5:75: 83:80:b4:7a:4a:03:26:e8:a6:1d:b1:ca:d3:4b:97:b4:9a:5c: 1c:66:c8:10:1c:1c:ac:91:80:04:4f:2e:a9:e1:72:bf:f9:7f: ec:99:fe:17:21:9d:d2:5a:1d:b0:c5:fb:e2:88:81:fc:80:1f: 45:14:0f:f8:57:cb:7f:31:9d:f4:13:af:db:56:13:fd:ac:64: 5b:a2:33:7d:f5:27:a4:4a:b5:88:55:8f:e7:0e:a4:c0:e5:6c: c4:39:30:27:2d:b6:00:b7:84:33:be:00:05:66:77:b8:07:bf: a4:b7:2b:f0:58:4a:29:90:e3:2c:a1:5c:fc:7f:2c:10:4f:f2: 7d:6c:80:9e:46:47:f6:f5:12:bd:1d:2e:04:40:a4:24:c7:ff: d7:50:0a:9a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZtKqfAuKSqhXan9v7lV80KKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMjIzMTAwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODZjZDVlYTA3ZjQ0ZjAyNTk0ODIzYjQ0YzA3YTRjMmRjZjBiYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ14BgzSFpZgvDKVe8BNH6x7Z6zN hZ8G4xUTh74DT/Qd1fLQxcTuFPlbKMLvPM2kLGKc3kOUZsCRdUD/k9P7H5FkzVDc 5HyO7CnJPxuZNx5kiZWTuw5vGLaw+bTiOo2GWkemMat7O94IYC/RCfbTnamN0a0L fOafl/69QtH9oTOkTJrnMpnpjxBgnqxGyzmcnnYlT6TVp+pThtKb/sWELw7XHAcm jEkWCoCnB+n9dnwG0aQnQ+o+kCl+OceqF4+PyXHfXSlYKBUpHSIH757Q8ARhB0jf aRxCOAI+75reZgZGLkBda90/IzEEx3cycHQFa+PueTO92rGuQMXJE6b1gQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJhs1eoH9E8CWUgjtEwHpMLc8LsjMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvbUd6VjZnZjBUd0paU0NPMFRBZWt3dHp3dXlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGXDIAAwQC k4hEAwQCk4hMAwQCk4hUAwQCqMeAAwQCqMegAwQCqMfAAwQBqMfUAwQCuWX0AwQC uWX8AwQCuav8AwQBueLMMA0GCSqGSIb3DQEBCwUAA4IBAQBEudSudcCWYiLfh1yV TsiHsOdAb39CGpKpmZkI/cvFLD6UbhMq1DXFBPpWPZp9t2GKqrdRD6ZSOnqW5Sah N65MWUv+g1RhI6fkINInrYn3oLbtPdMpj2pSZUQ32LA88psqIxuT7Dyls44t1XWD gLR6SgMm6KYdscrTS5e0mlwcZsgQHByskYAETy6p4XK/+X/smf4XIZ3SWh2wxfvi iIH8gB9FFA/4V8t/MZ30E6/bVhP9rGRbojN99SekSrWIVY/nDqTA5WzEOTAnLbYA t4QzvgAFZne4B7+ktyvwWEopkOMsoVz8fywQT/J9bICeRkf29RK9HS4EQKQkx//X UAqa -----END CERTIFICATE-----Generated at Wed Dec 24 15:23:45 2025 by rpki-client