This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/msuKydImanFvzffreUXsPKSyrYI.roa File: msuKydImanFvzffreUXsPKSyrYI.roa (raw, json) Hash identifier: StMSaAhYZIrcs8BRBAoF4EyvRe9iy8QIwB9HLAKysnU= Subject key identifier: 9A:CB:8A:C9:D2:26:6A:71:6F:CD:F7:EB:79:45:EC:3C:A4:B2:AD:82 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B3F7A2B9FCB39F093C306BCB570F28B0C Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/msuKydImanFvzffreUXsPKSyrYI.roa Signing time: Sun 21 Dec 2025 05:55:29 +0000 ROA not before: Sun 21 Dec 2025 05:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7a:2b:9f:cb:39:f0:93:c3:06:bc:b5:70:f2:8b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 21 05:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9acb8ac9d2266a716fcdf7eb7945ec3ca4b2ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:60:ea:cf:37:f4:ae:2b:d6:09:d5:45:ab:0f: eb:fe:09:b7:37:0d:3d:59:f0:04:2a:4b:0b:37:23: 5e:e0:b7:7c:78:59:68:a1:e2:80:07:88:f7:f1:51: 87:ad:9e:a2:bc:be:30:ec:16:7a:33:a1:92:35:a4: 6f:df:ef:50:59:af:a3:71:ab:05:30:fb:e3:b8:ab: 2d:05:61:1e:3a:29:98:d5:94:17:64:e2:51:67:1a: 16:81:f7:4f:a2:65:e9:60:09:76:46:04:6c:3c:a9: 34:ed:7b:77:8d:88:3a:e3:41:34:89:cf:bc:86:11: 87:b0:6d:e1:d3:63:cf:82:3e:a6:37:7c:8c:90:bf: f4:b9:77:38:eb:d5:36:f6:8e:31:28:1b:f1:ba:49: 1c:e3:70:d9:db:3f:6f:27:de:26:8e:27:26:01:d0: e2:7c:16:75:a2:2b:4d:e2:34:f6:d8:8e:bf:3c:ca: 9f:4c:61:20:84:92:e8:80:59:23:d8:f1:09:29:73: 6a:1f:fa:84:65:76:d4:2c:15:99:65:d3:cd:1c:94: 24:b2:f0:fa:25:b4:db:1c:60:05:fb:bb:85:f9:15: 60:fd:ff:b4:83:30:90:d3:6a:82:48:8d:74:04:0b: 6b:2b:a4:56:33:b3:64:5d:49:b3:a7:e5:88:c0:8c: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:8A:C9:D2:26:6A:71:6F:CD:F7:EB:79:45:EC:3C:A4:B2:AD:82 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/msuKydImanFvzffreUXsPKSyrYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.10.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 28:3f:ae:4d:d2:d5:f9:13:02:a4:1c:37:28:87:d1:a3:89:35: 97:ad:fc:66:6d:e4:b3:ba:c7:82:5c:79:0e:d4:2d:8a:6f:88: f5:13:99:5b:57:65:c1:5a:ad:d8:c7:5f:b3:e4:72:3f:85:97: e5:ae:78:1c:23:27:24:1b:9c:95:36:03:0f:82:e4:44:c1:6c: 0e:1e:61:01:31:21:b6:50:28:d7:97:aa:11:89:32:2c:84:43: 90:b8:b1:af:59:04:62:39:fa:d5:63:a8:ea:5f:0d:1a:c5:6f: 12:1c:50:09:71:0c:7c:9e:cc:4b:9d:45:9b:a0:00:f2:c8:b7: 55:bf:b9:5b:5d:82:11:be:ef:64:4b:69:cd:8f:0c:04:67:7e: 94:63:39:1e:7f:57:01:b9:86:b2:a1:af:04:a8:fd:b5:38:62: 99:54:55:b9:a5:24:b6:70:2f:0c:1e:7b:ad:c6:a6:ac:d7:0a: d2:e6:34:3f:bf:db:c9:51:e5:21:d8:6f:51:b4:1c:b0:3a:49: 42:23:22:29:66:ae:b4:f2:bf:64:42:3a:8a:35:99:87:4a:75: 0c:eb:9f:14:57:cc:ff:91:c6:70:06:0f:8d:1a:d0:f8:48:93: 1f:19:a6:8e:10:62:9c:73:12:8d:aa:02:49:fd:4e:ec:01:d0: df:92:8f:ab -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZs/eiufyznwk8MGvLVw8osMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjIxMDU1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWNiOGFjOWQyMjY2YTcxNmZjZGY3ZWI3OTQ1ZWMzY2E0YjJhZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62Dqzzf0rivWCdVFqw/r/gm3Nw09 WfAEKksLNyNe4Ld8eFlooeKAB4j38VGHrZ6ivL4w7BZ6M6GSNaRv3+9QWa+jcasF MPvjuKstBWEeOimY1ZQXZOJRZxoWgfdPomXpYAl2RgRsPKk07Xt3jYg640E0ic+8 hhGHsG3h02PPgj6mN3yMkL/0uXc469U29o4xKBvxukkc43DZ2z9vJ94mjicmAdDi fBZ1oitN4jT22I6/PMqfTGEghJLogFkj2PEJKXNqH/qEZXbULBWZZdPNHJQksvD6 JbTbHGAF+7uF+RVg/f+0gzCQ02qCSI10BAtrK6RWM7NkXUmzp+WIwIxLgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJrLisnSJmpxb83363lF7Dyksq2CMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvbXN1S3lkSW1hbkZ2emZmcmVVWHNQS1N5cllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXEKMA8E AgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBACg/rk3S1fkTAqQcNyiH 0aOJNZet/GZt5LO6x4JceQ7ULYpviPUTmVtXZcFardjHX7Pkcj+Fl+WueBwjJyQb nJU2Aw+C5ETBbA4eYQExIbZQKNeXqhGJMiyEQ5C4sa9ZBGI5+tVjqOpfDRrFbxIc UAlxDHyezEudRZugAPLIt1W/uVtdghG+72RLac2PDARnfpRjOR5/VwG5hrKhrwSo /bU4YplUVbmlJLZwLwwee63GpqzXCtLmND+/28lR5SHYb1G0HLA6SUIjIilmrrTy v2RCOoo1mYdKdQzrnxRXzP+RxnAGD40a0PhIkx8Zpo4QYpxzEo2qAkn9TuwB0N+S j6s= -----END CERTIFICATE-----Generated at Sat Dec 27 05:36:36 2025 by rpki-client