This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6aIDrHAQdqqMFE56BK8XfWOU_Ms.roa File: 6aIDrHAQdqqMFE56BK8XfWOU_Ms.roa (raw, json) Hash identifier: oFrmwXogC8oKHLCNQdEFArp+bpvPywSbnLOxVtG4xEI= Subject key identifier: E9:A2:03:AC:70:10:76:AA:8C:14:4E:7A:04:AF:17:7D:63:94:FC:CB Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B037E08661CE57DDDED22A4B13A1D51E1 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6aIDrHAQdqqMFE56BK8XfWOU_Ms.roa Signing time: Tue 09 Dec 2025 14:22:29 +0000 ROA not before: Tue 09 Dec 2025 14:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199653 IP address blocks: 89.36.212.0/22 maxlen: 24 89.38.148.0/22 maxlen: 24 89.40.112.0/22 maxlen: 24 94.177.232.0/21 maxlen: 24 94.177.240.0/22 maxlen: 24 185.8.48.0/22 maxlen: 24 185.35.64.0/22 maxlen: 24 217.61.96.0/21 maxlen: 24 2a03:2c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:7e:08:66:1c:e5:7d:dd:ed:22:a4:b1:3a:1d:51:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Dec 9 14:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9a203ac701076aa8c144e7a04af177d6394fccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:84:1f:2c:bd:24:b9:c9:56:1a:34:dd:68: d2:82:a5:7a:cf:48:dd:0e:de:44:d9:9c:26:b7:8e: f6:b1:3b:49:ca:79:74:dc:05:ef:bc:7a:b0:f8:07: 08:02:f8:be:37:3d:c6:6c:b2:c7:76:e0:88:39:17: e5:dc:ae:34:2d:07:b1:e6:34:86:d7:4c:fc:16:58: 52:ac:8f:5f:68:8e:50:09:91:6b:ef:59:89:c4:b7: a8:ce:98:3a:4b:3d:ed:47:7a:c0:cc:65:43:4f:93: ae:2d:4a:5f:4c:85:6f:4d:61:3d:fe:9c:99:c7:ab: 7d:df:3a:b2:c9:1f:e2:36:53:0f:f3:da:0a:ed:fe: c2:88:cc:18:17:dd:4b:d2:dc:98:2d:39:f1:b3:2f: 37:68:c3:f5:ab:ca:d8:d0:5b:f6:f7:ae:02:20:52: 63:16:00:2a:6d:d9:98:3f:1d:d9:b4:19:da:5e:c8: 79:52:38:fd:8e:94:ff:98:8e:2d:7c:56:b8:56:c2: 4e:1e:7e:2e:e3:03:c8:12:16:08:12:a0:e9:f4:a0: 3f:65:e3:a4:c5:e0:cd:9e:8e:77:f1:c8:5b:cd:3f: cd:d5:18:6f:66:23:d7:52:54:af:fa:45:5e:ec:dc: 4e:2a:e5:d8:6e:62:08:bf:4a:67:c7:d8:01:c1:73: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A2:03:AC:70:10:76:AA:8C:14:4E:7A:04:AF:17:7D:63:94:FC:CB X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6aIDrHAQdqqMFE56BK8XfWOU_Ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.212.0/22 89.38.148.0/22 89.40.112.0/22 94.177.232.0-94.177.243.255 185.8.48.0/22 185.35.64.0/22 217.61.96.0/21 IPv6: 2a03:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 66:35:26:c7:d0:00:64:13:8f:ca:73:0a:2d:01:f6:38:37:31: d8:01:f0:0d:9a:00:5e:9d:31:26:76:6f:5d:05:83:e5:d0:55: 01:0f:c7:82:58:1c:0a:db:0e:d1:da:f8:eb:8f:8e:29:01:10: c1:bf:71:ef:7a:7b:df:5c:05:6b:01:71:6d:77:9b:48:c0:6e: be:7c:a8:6a:b1:e5:41:12:54:bc:2f:1f:35:05:62:dc:5e:9f: 51:bd:84:6c:c0:e1:68:09:01:be:23:16:7c:4e:da:cc:9d:c7: 99:47:95:85:f8:0e:45:48:be:1b:f1:00:6d:0b:0c:c5:92:b8: ba:3d:30:2f:48:24:1c:e6:60:b9:74:b9:bf:bf:77:50:16:cc: 8d:c6:06:9a:7d:3a:18:cd:02:77:82:e1:df:50:5c:19:1f:f0: 6f:92:c8:49:1c:75:28:5e:df:54:43:5b:1f:17:d1:fc:da:46: 8a:da:2b:8b:6a:7a:7c:7c:a5:3c:81:b8:1b:9f:4e:39:dc:a2: 94:69:44:df:2c:6f:80:00:7e:e1:c2:61:e5:84:76:9b:be:89: cd:31:47:ca:7e:67:99:9c:c0:df:8e:f9:4b:2e:69:5c:13:48: 76:b2:f3:2a:07:54:ac:bf:bf:b3:c7:77:3b:f7:3a:10:58:dd: 96:c0:9f:13 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZsDfghmHOV93e0ipLE6HVHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMjA5MTQyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWEyMDNhYzcwMTA3NmFhOGMxNDRlN2EwNGFmMTc3ZDYzOTRmY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduEHyy9JLnJVho03WjSgqV6z0jd Dt5E2Zwmt472sTtJynl03AXvvHqw+AcIAvi+Nz3GbLLHduCIORfl3K40LQex5jSG 10z8FlhSrI9faI5QCZFr71mJxLeozpg6Sz3tR3rAzGVDT5OuLUpfTIVvTWE9/pyZ x6t93zqyyR/iNlMP89oK7f7CiMwYF91L0tyYLTnxsy83aMP1q8rY0Fv2964CIFJj FgAqbdmYPx3ZtBnaXsh5Ujj9jpT/mI4tfFa4VsJOHn4u4wPIEhYIEqDp9KA/ZeOk xeDNno538chbzT/N1RhvZiPXUlSv+kVe7NxOKuXYbmIIv0pnx9gBwXNbIwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFOmiA6xwEHaqjBROegSvF31jlPzLMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvNmFJRHJIQVFkcXFNRkU1NkJLOFhmV09VX01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQCWSTUAwQC WSaUAwQCWShwMAwDBANesegDBAJesfADBAK5CDADBAK5I0ADBAPZPWAwDQQCAAIw BwMFACoDLEAwDQYJKoZIhvcNAQELBQADggEBAGY1JsfQAGQTj8pzCi0B9jg3MdgB 8A2aAF6dMSZ2b10Fg+XQVQEPx4JYHArbDtHa+OuPjikBEMG/ce96e99cBWsBcW13 m0jAbr58qGqx5UESVLwvHzUFYtxen1G9hGzA4WgJAb4jFnxO2sydx5lHlYX4DkVI vhvxAG0LDMWSuLo9MC9IJBzmYLl0ub+/d1AWzI3GBpp9OhjNAneC4d9QXBkf8G+S yEkcdShe31RDWx8X0fzaRoraK4tqenx8pTyBuBufTjncopRpRN8sb4AAfuHCYeWE dpu+ic0xR8p+Z5mcwN+O+UsuaVwTSHay8yoHVKy/v7PHdzv3OhBY3ZbAnxM= -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:40 2025 by rpki-client