This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/mIMmqGKf-ZN5DKYzTDavlJ1KGjA.roa File: mIMmqGKf-ZN5DKYzTDavlJ1KGjA.roa (raw, json) Hash identifier: SuhALskk3xFgSE0CeFPBw1EpYfHdkNVOJ4mdUibXtoM= Subject key identifier: 98:83:26:A8:62:9F:F9:93:79:0C:A6:33:4C:36:AF:94:9D:4A:1A:30 Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Certificate serial: 019B4623CBBBF94598A5C15020DF3F86A491 Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/mIMmqGKf-ZN5DKYzTDavlJ1KGjA.roa Signing time: Mon 22 Dec 2025 12:58:29 +0000 ROA not before: Mon 22 Dec 2025 12:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214707 IP address blocks: 109.224.208.0/21 maxlen: 21 109.224.208.0/24 maxlen: 24 109.224.209.0/24 maxlen: 24 109.224.210.0/24 maxlen: 24 109.224.211.0/24 maxlen: 24 109.224.212.0/24 maxlen: 24 109.224.213.0/24 maxlen: 24 109.224.214.0/24 maxlen: 24 109.224.215.0/24 maxlen: 24 205.209.64.0/19 maxlen: 24 205.209.64.0/21 maxlen: 21 205.209.72.0/21 maxlen: 21 205.209.80.0/21 maxlen: 21 205.209.88.0/21 maxlen: 21 213.177.185.0/24 maxlen: 24 2a14:6540::/29 maxlen: 29 2a14:6540::/31 maxlen: 31 2a14:6542::/31 maxlen: 31 2a14:6544::/31 maxlen: 31 2a14:6546::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:23:cb:bb:f9:45:98:a5:c1:50:20:df:3f:86:a4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Validity Not Before: Dec 22 12:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=988326a8629ff993790ca6334c36af949d4a1a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:05:29:d9:c9:c4:ba:dd:0e:55:a4:2c:43: d9:7f:37:d0:fd:ee:32:74:89:a0:dc:fb:dd:46:87: 4e:87:f9:26:32:78:b7:fe:5e:32:84:7a:30:3e:55: 35:d7:2e:78:fa:d4:27:33:d1:1f:78:34:05:87:91: db:be:4d:33:df:27:83:12:40:a6:cc:ad:1e:d3:c1: 3e:92:21:c1:fd:e9:8b:ac:85:b1:59:8e:e0:89:b8: 71:8f:27:c1:b3:ce:d1:7e:62:e0:aa:22:22:f8:3e: 1e:69:20:64:93:4d:a5:52:73:59:27:4a:26:4e:23: 90:4c:d6:e8:33:c6:6d:42:48:b9:15:5d:f2:8c:e6: 53:4a:3a:2a:92:a6:24:bf:40:a3:06:ac:9e:bf:3b: 7f:8b:df:cd:0d:43:69:72:1d:52:e9:19:a8:8d:18: f9:4a:bd:3e:ec:3e:ec:16:86:11:66:64:f6:3e:7c: 9d:be:0c:45:9c:24:33:58:95:3f:57:03:db:5d:f1: 39:a5:ba:8e:19:02:4d:a4:78:85:ce:37:eb:b6:fc: 7a:f3:3f:f4:5d:60:5d:54:ca:d4:8b:34:43:5f:71: fd:74:9e:6f:5e:8a:89:70:61:73:f9:b2:3b:35:4b: 0d:8a:e8:53:e9:21:6f:16:02:9e:de:61:3d:90:43: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:83:26:A8:62:9F:F9:93:79:0C:A6:33:4C:36:AF:94:9D:4A:1A:30 X509v3 Authority Key Identifier: keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/mIMmqGKf-ZN5DKYzTDavlJ1KGjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.208.0/21 205.209.64.0/19 213.177.185.0/24 IPv6: 2a14:6540::/29 Signature Algorithm: sha256WithRSAEncryption 8c:91:ad:03:b3:1e:2a:ad:d5:16:70:35:da:48:86:c6:20:34: c1:52:b2:2c:80:64:e2:2e:5a:33:78:44:9f:6f:f4:e1:cc:60: 9d:ef:67:de:ec:b3:50:5a:5a:b8:d5:c8:cc:65:14:3e:40:41: 0a:40:a6:f4:85:ec:64:9d:d5:8f:61:3a:dc:68:2b:d9:f1:1d: 79:50:87:71:bb:ff:df:68:6e:67:6c:34:2f:e3:e5:cb:4c:85: ee:8a:e7:21:00:fa:2e:c3:f9:e4:76:8e:5e:b0:8a:76:fa:57: 7e:9f:10:15:b8:a7:e9:9f:84:12:0d:2b:34:44:a1:5b:20:af: 0a:0d:24:73:d2:6a:ca:40:aa:02:8d:9b:dd:3b:e0:ff:a5:33: 9d:e5:bb:3e:43:c5:73:24:3d:b5:c7:f8:08:67:14:e1:cb:f9: bf:d8:f6:77:e6:23:fa:27:85:9e:b0:c1:4e:e0:8f:52:a1:26: e6:ab:b5:ad:3a:01:34:46:69:f9:3e:93:c1:18:b6:ed:01:43: c3:86:26:3c:2a:af:c3:e9:47:51:12:5b:49:f3:61:2e:d1:70: 3f:2f:0a:0d:2f:18:9b:b2:df:1d:d9:48:64:24:48:30:39:9d: 45:54:d1:ec:7a:5e:00:a7:c2:f4:0d:5d:f3:89:9c:ec:ba:f3: 55:79:11:4e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZtGI8u7+UWYpcFQIN8/hqSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1 MzkzMjYwHhcNMjUxMjIyMTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgzMjZhODYyOWZmOTkzNzkwY2E2MzM0YzM2YWY5NDlkNGExYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAFKdnJxLrdDlWkLEPZfzfQ/e4y dImg3PvdRodOh/kmMni3/l4yhHowPlU11y54+tQnM9EfeDQFh5Hbvk0z3yeDEkCm zK0e08E+kiHB/emLrIWxWY7gibhxjyfBs87RfmLgqiIi+D4eaSBkk02lUnNZJ0om TiOQTNboM8ZtQki5FV3yjOZTSjoqkqYkv0CjBqyevzt/i9/NDUNpch1S6RmojRj5 Sr0+7D7sFoYRZmT2PnydvgxFnCQzWJU/VwPbXfE5pbqOGQJNpHiFzjfrtvx68z/0 XWBdVMrUizRDX3H9dJ5vXoqJcGFz+bI7NUsNiuhT6SFvFgKe3mE9kEPZyQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJiDJqhin/mTeQymM0w2r5SdShowMB8GA1UdIwQY MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt YTMwZDgyYmQ2MjE5LzEvbUlNbXFHS2YtWk41REtZelREYXZsSjFLR2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5 LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDbeDQAwQF zdFAAwQA1bG5MA0EAgACMAcDBQMqFGVAMA0GCSqGSIb3DQEBCwUAA4IBAQCMka0D sx4qrdUWcDXaSIbGIDTBUrIsgGTiLlozeESfb/ThzGCd72fe7LNQWlq41cjMZRQ+ QEEKQKb0hexkndWPYTrcaCvZ8R15UIdxu//faG5nbDQv4+XLTIXuiuchAPouw/nk do5esIp2+ld+nxAVuKfpn4QSDSs0RKFbIK8KDSRz0mrKQKoCjZvdO+D/pTOd5bs+ Q8VzJD21x/gIZxThy/m/2PZ35iP6J4WesMFO4I9SoSbmq7WtOgE0Rmn5PpPBGLbt AUPDhiY8Kq/D6UdREltJ82Eu0XA/LwoNLxibst8d2UhkJEgwOZ1FVNHsel4Ap8L0 DV3ziZzsuvNVeRFO -----END CERTIFICATE-----Generated at Thu Dec 25 04:29:41 2025 by rpki-client