This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/MJ4RLy7CJreAqnDUSlRSwn4juMU.roa File: MJ4RLy7CJreAqnDUSlRSwn4juMU.roa (raw, json) Hash identifier: v6JFCrXijEKQQaabThj0nZbCn18vazC8HwmJq1jATUY= Subject key identifier: 30:9E:11:2F:2E:C2:26:B7:80:AA:70:D4:4A:54:52:C2:7E:23:B8:C5 Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62 Certificate serial: 019ADF6F0C7231395914D53D3EE2982E56BF Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/MJ4RLy7CJreAqnDUSlRSwn4juMU.roa Signing time: Tue 02 Dec 2025 14:19:48 +0000 ROA not before: Tue 02 Dec 2025 14:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38915 IP address blocks: 178.21.216.0/22 maxlen: 22 178.21.220.0/23 maxlen: 23 178.21.222.0/23 maxlen: 23 2a00:1de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:6f:0c:72:31:39:59:14:d5:3d:3e:e2:98:2e:56:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62 Validity Not Before: Dec 2 14:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=309e112f2ec226b780aa70d44a5452c27e23b8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:6f:f6:50:b0:32:44:e9:55:7c:b0:4d:3f: 2d:1c:34:42:c6:88:22:3f:d2:b3:3d:df:65:1e:5f: 75:a9:71:de:5b:ac:96:99:b4:45:24:55:b2:76:3f: c3:e5:03:9f:4c:c9:82:37:05:d8:c0:ea:02:dc:90: 62:24:07:54:64:b0:7e:da:6e:13:1f:6c:38:47:fe: ca:e1:70:1f:a6:30:9f:33:23:66:46:99:b4:b8:34: 6a:cb:36:58:c7:18:d7:e9:a0:6f:f5:5b:25:e1:a6: ad:31:e4:a7:43:4c:a6:25:0a:67:80:46:b3:35:7f: 3f:c2:2f:fe:0f:dd:65:bf:fd:b4:96:fc:db:48:69: f0:b7:fa:2f:f7:c5:ab:53:29:4d:95:ce:04:e0:8e: b0:9f:4e:4f:49:bc:d5:88:80:50:59:5a:ca:a9:55: de:bb:f8:46:7a:7c:35:af:9d:dc:f8:f4:9b:80:35: 11:16:53:d5:0d:31:2e:38:f4:2c:67:c2:51:64:2c: 97:67:c9:97:13:29:8c:ca:9e:b2:4a:e3:12:20:d4: 9f:5a:64:bf:a8:b8:f7:86:67:26:54:e5:97:cd:0d: fd:87:19:6b:5b:30:13:d6:e1:48:8f:7b:41:ad:51: c3:06:3c:3f:d2:95:ce:40:4e:a3:45:60:66:5d:68: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9E:11:2F:2E:C2:26:B7:80:AA:70:D4:4A:54:52:C2:7E:23:B8:C5 X509v3 Authority Key Identifier: keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/MJ4RLy7CJreAqnDUSlRSwn4juMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.216.0/21 IPv6: 2a00:1de0::/32 Signature Algorithm: sha256WithRSAEncryption c9:06:85:c3:32:51:37:91:58:ca:30:00:93:45:61:a1:6c:6f: e3:45:47:e8:1d:b1:48:78:7b:2c:75:6f:59:57:36:e3:4c:37: 69:ed:09:68:ec:84:9f:42:e7:65:da:91:8c:0d:e4:db:28:68: 80:35:9e:91:5b:6c:5a:b3:e5:ce:e5:f9:58:fc:5b:c6:44:61: 12:49:ad:52:92:91:15:fe:1e:09:02:a9:08:46:d8:74:87:ba: 10:63:98:18:6c:28:0a:45:6e:d5:15:ec:49:95:8b:92:f5:86: eb:ef:02:c6:a0:19:7b:86:09:c9:de:82:74:a4:35:28:c9:08: 69:fc:ef:b8:50:71:df:44:0b:32:92:dc:30:c7:11:e1:f5:cd: 77:3a:4d:5f:67:b0:64:4d:4b:90:24:62:b1:93:d5:18:cb:e4: de:1e:0a:95:ba:c3:61:fa:37:ea:b6:01:49:6e:1e:25:98:cc: 06:4e:2a:14:b7:0f:0b:69:cc:1e:69:8e:d7:14:8a:80:52:39: 7d:12:6f:62:69:af:2c:b8:78:32:80:2c:9e:c3:41:76:fd:fc: 18:a9:0b:be:d7:29:c3:7b:15:63:9e:ec:e5:b9:60:f0:3b:cc: 11:2c:a0:e6:d9:a5:78:06:79:2a:af:e0:75:6e:7d:25:d1:b3: 98:7b:e7:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrfbwxyMTlZFNU9PuKYLla/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz ZDFmNjIwHhcNMjUxMjAyMTQxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDllMTEyZjJlYzIyNmI3ODBhYTcwZDQ0YTU0NTJjMjdlMjNiOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsopv9lCwMkTpVXywTT8tHDRCxogi P9KzPd9lHl91qXHeW6yWmbRFJFWydj/D5QOfTMmCNwXYwOoC3JBiJAdUZLB+2m4T H2w4R/7K4XAfpjCfMyNmRpm0uDRqyzZYxxjX6aBv9Vsl4aatMeSnQ0ymJQpngEaz NX8/wi/+D91lv/20lvzbSGnwt/ov98WrUylNlc4E4I6wn05PSbzViIBQWVrKqVXe u/hGenw1r53c+PSbgDURFlPVDTEuOPQsZ8JRZCyXZ8mXEymMyp6ySuMSINSfWmS/ qLj3hmcmVOWXzQ39hxlrWzAT1uFIj3tBrVHDBjw/0pXOQE6jRWBmXWhYTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDCeES8uwia3gKpw1EpUUsJ+I7jFMB8GA1UdIwQY MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt Njc5NWU2Yzg3MjQ3LzEvTUo0Ukx5N0NKcmVBcW5EVVNsUlN3bjRqdU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3 LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDshXYMA0E AgACMAcDBQAqAB3gMA0GCSqGSIb3DQEBCwUAA4IBAQDJBoXDMlE3kVjKMACTRWGh bG/jRUfoHbFIeHssdW9ZVzbjTDdp7Qlo7ISfQudl2pGMDeTbKGiANZ6RW2xas+XO 5flY/FvGRGESSa1SkpEV/h4JAqkIRth0h7oQY5gYbCgKRW7VFexJlYuS9Ybr7wLG oBl7hgnJ3oJ0pDUoyQhp/O+4UHHfRAsyktwwxxHh9c13Ok1fZ7BkTUuQJGKxk9UY y+TeHgqVusNh+jfqtgFJbh4lmMwGTioUtw8LacweaY7XFIqAUjl9Em9iaa8suHgy gCyew0F2/fwYqQu+1ynDexVjnuzluWDwO8wRLKDm2aV4Bnkqr+B1bn0l0bOYe+cy -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:44 2025 by rpki-client