This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/rdfMscZbXiPJlf2KSASmREjs5hg.roa File: rdfMscZbXiPJlf2KSASmREjs5hg.roa (raw, json) Hash identifier: mdBiFmrkLN06e+ZLJfsQJI8nVe20fMx57FxVrDcP3Eo= Subject key identifier: AD:D7:CC:B1:C6:5B:5E:23:C9:95:FD:8A:48:04:A6:44:48:EC:E6:18 Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B413C9B57FD2E91F881FD805504AC80C4 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/rdfMscZbXiPJlf2KSASmREjs5hg.roa Signing time: Sun 21 Dec 2025 14:07:29 +0000 ROA not before: Sun 21 Dec 2025 14:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12322 IP address blocks: 62.147.0.0/16 maxlen: 16 78.192.0.0/11 maxlen: 11 78.240.0.0/12 maxlen: 12 82.64.0.0/14 maxlen: 15 82.224.0.0/11 maxlen: 13 88.160.0.0/11 maxlen: 15 212.27.32.0/19 maxlen: 19 213.228.0.0/18 maxlen: 18 2a01:e00::/26 maxlen: 39 2a01:e08::/32 maxlen: 32 2a01:e08:100::/44 maxlen: 44 2a01:e08:500::/44 maxlen: 44 2a01:e0a:800::/37 maxlen: 45 2a01:e0a:1000::/37 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:3c:9b:57:fd:2e:91:f8:81:fd:80:55:04:ac:80:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 21 14:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=add7ccb1c65b5e23c995fd8a4804a64448ece618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:ff:2f:74:51:f8:c3:79:83:eb:a8:02:3a: 3d:8a:79:c4:b6:ba:67:83:8c:03:c7:1d:17:fd:ff: a0:c3:6e:ed:ed:95:a8:3d:9a:5f:a3:47:62:2d:54: d0:20:93:a8:03:c7:13:c6:af:6d:62:ec:aa:bb:13: ca:6f:b1:b6:46:e3:4a:08:18:50:c3:9c:c2:b4:7c: 7f:3e:96:a3:ca:ae:e7:45:5d:f2:f9:f0:6c:dd:f2: 7e:04:9e:7b:91:50:fc:8e:9a:b0:4a:41:2e:96:b0: ee:27:ec:0b:4e:ab:f2:1c:d1:0d:eb:26:82:d7:46: 1d:32:13:ea:23:e6:c5:3f:51:46:ab:f0:7f:be:2d: 8f:03:54:dd:77:05:63:8e:c4:c0:fd:69:55:99:78: 5e:c6:42:30:97:46:0c:9e:59:98:6b:7d:3f:c7:26: 64:14:59:d4:88:aa:5f:9a:2d:0c:a7:d6:23:28:14: 61:11:f3:b1:60:d9:ea:0d:c9:e1:6c:a1:3f:6c:c7: d4:99:63:78:91:44:05:56:b1:d6:d7:98:ea:a1:78: 50:68:fa:f2:25:0c:7d:6e:50:30:62:ba:8f:9c:19: 9a:0e:78:68:ab:ca:8d:e2:92:b5:60:7e:5f:63:2b: 2c:85:07:b4:28:69:e1:e4:bb:e3:de:bc:e0:b8:34: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:CC:B1:C6:5B:5E:23:C9:95:FD:8A:48:04:A6:44:48:EC:E6:18 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/rdfMscZbXiPJlf2KSASmREjs5hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.147.0.0/16 78.192.0.0/11 78.240.0.0/12 82.64.0.0/14 82.224.0.0/11 88.160.0.0/11 212.27.32.0/19 213.228.0.0/18 IPv6: 2a01:e00::/26 Signature Algorithm: sha256WithRSAEncryption 3f:be:aa:21:fd:be:d4:89:36:ca:ad:81:f2:13:f4:dc:4e:64: 54:31:d7:5a:11:03:dd:b6:c5:03:11:d1:75:28:c2:10:bd:82: 3d:54:b5:79:75:95:a0:61:19:a6:70:62:f7:9e:13:c1:0a:09: 54:65:94:38:46:7c:66:1c:80:3d:31:86:3b:4a:c8:10:53:02: 1c:71:43:46:f9:cb:5e:53:f1:d8:8b:bd:6d:08:86:2b:c7:86: 86:d0:35:dd:39:f0:0c:8d:0f:69:7a:66:33:79:98:4f:b6:1a: 4f:17:dd:ad:aa:19:b8:4a:43:0b:9e:11:02:b9:11:8c:1f:e8: b7:a4:b9:11:e3:54:a4:5f:9e:5e:df:58:0b:d6:d3:c5:a5:46: a8:87:16:1c:81:e7:1a:88:dd:c2:96:97:f0:85:c4:f4:5b:70: 45:14:2b:41:87:ab:11:dd:7b:21:10:4a:5e:93:c2:b3:6e:4f: 82:2b:42:9a:fe:30:c8:a1:f5:45:54:27:54:6a:5c:c9:fa:54: 30:3d:37:2f:b4:65:4f:cc:58:35:59:45:17:49:9b:71:78:7b: 17:d6:c7:1b:e3:74:e4:03:f2:fc:7b:cc:46:e1:86:02:45:03: 8b:c0:33:a4:a2:0a:c1:59:c6:80:cd:16:92:f7:43:8d:cc:00: 91:e3:57:2a -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZtBPJtX/S6R+IH9gFUErIDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjIxMTQwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ3Y2NiMWM2NWI1ZTIzYzk5NWZkOGE0ODA0YTY0NDQ4ZWNlNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+v/L3RR+MN5g+uoAjo9innEtrpn g4wDxx0X/f+gw27t7ZWoPZpfo0diLVTQIJOoA8cTxq9tYuyquxPKb7G2RuNKCBhQ w5zCtHx/Ppajyq7nRV3y+fBs3fJ+BJ57kVD8jpqwSkEulrDuJ+wLTqvyHNEN6yaC 10YdMhPqI+bFP1FGq/B/vi2PA1TddwVjjsTA/WlVmXhexkIwl0YMnlmYa30/xyZk FFnUiKpfmi0Mp9YjKBRhEfOxYNnqDcnhbKE/bMfUmWN4kUQFVrHW15jqoXhQaPry JQx9blAwYrqPnBmaDnhoq8qN4pK1YH5fYysshQe0KGnh5Lvj3rzguDQpVwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFK3XzLHGW14jyZX9ikgEpkRI7OYYMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvcmRmTXNjWmJYaVBKbGYyS1NBU21SRWpzNWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwMAPpMDAwVO wAMDBE7wAwMCUkADAwVS4AMDBVigAwQF1BsgAwQG1eQAMA0EAgACMAcDBQYqAQ4A MA0GCSqGSIb3DQEBCwUAA4IBAQA/vqoh/b7UiTbKrYHyE/TcTmRUMddaEQPdtsUD EdF1KMIQvYI9VLV5dZWgYRmmcGL3nhPBCglUZZQ4RnxmHIA9MYY7SsgQUwIccUNG +cteU/HYi71tCIYrx4aG0DXdOfAMjQ9pemYzeZhPthpPF92tqhm4SkMLnhECuRGM H+i3pLkR41SkX55e31gL1tPFpUaohxYcgecaiN3ClpfwhcT0W3BFFCtBh6sR3Xsh EEpek8Kzbk+CK0Ka/jDIofVFVCdUalzJ+lQwPTcvtGVPzFg1WUUXSZtxeHsX1scb 43TkA/L8e8xG4YYCRQOLwDOkogrBWcaAzRaS90ONzACR41cq -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:38 2025 by rpki-client