This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mmv4mSRwH2UcpP3VCjw46mgYOZI.roa File: mmv4mSRwH2UcpP3VCjw46mgYOZI.roa (raw, json) Hash identifier: DlEQ/4Neb4NTdJfq6ml14F0j9jESnkWl2OYQI/VEmIw= Subject key identifier: 9A:6B:F8:99:24:70:1F:65:1C:A4:FD:D5:0A:3C:38:EA:68:18:39:92 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B2293CD2A634B715AB98015ACD69B8614 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mmv4mSRwH2UcpP3VCjw46mgYOZI.roa Signing time: Mon 15 Dec 2025 15:14:30 +0000 ROA not before: Mon 15 Dec 2025 15:14:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210881 IP address blocks: 2a12:bec4:1ea0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:93:cd:2a:63:4b:71:5a:b9:80:15:ac:d6:9b:86:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Dec 15 15:14:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a6bf89924701f651ca4fdd50a3c38ea68183992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:d8:db:09:c3:5a:ce:76:26:83:fb:f8:63: e0:8a:8e:7a:83:50:99:c1:29:80:40:61:f5:97:54: 20:1a:99:5a:42:4c:78:18:6b:ed:ae:51:f4:22:dc: f0:83:90:d3:cb:b8:7f:2d:32:2a:39:24:74:a0:95: 69:a8:b5:67:cc:6b:79:f4:b4:a3:39:03:f2:d5:54: 59:55:28:74:74:00:0a:6d:46:54:c0:d5:5b:34:cc: d7:20:21:46:96:b0:c7:49:0a:e3:22:ec:dd:ab:ec: 22:8a:1a:bc:a9:e2:0d:cf:ce:65:b2:b0:08:97:18: c2:60:28:ef:eb:9e:97:38:9f:89:19:bc:18:56:a4: 30:80:87:c8:3f:dc:e5:21:6c:70:23:2c:ac:16:9d: 33:0d:4e:04:c0:b9:12:d6:90:2c:c0:80:74:9d:6c: 06:9f:09:f4:63:52:a0:e2:37:19:d6:43:16:c1:88: 5e:b6:45:17:28:bd:ca:4e:07:6a:99:cd:ab:05:9b: 37:da:01:fd:92:cd:ec:fc:f5:c1:72:4c:65:7b:c5: 89:3b:80:2f:ef:4e:b4:ac:9a:a1:20:27:ef:91:e6: e4:c4:c0:b8:0f:f8:be:5b:50:65:a8:7e:67:3c:af: df:e2:f4:47:85:bd:f8:00:d0:f8:fe:cb:0f:97:0b: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6B:F8:99:24:70:1F:65:1C:A4:FD:D5:0A:3C:38:EA:68:18:39:92 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mmv4mSRwH2UcpP3VCjw46mgYOZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1ea0::/44 Signature Algorithm: sha256WithRSAEncryption 30:f5:1d:4a:fd:a5:bd:d7:98:3a:cb:85:e5:0b:c5:b2:82:3b: cf:d3:09:25:b6:09:7b:d6:c9:91:9b:ba:90:63:4e:d2:7b:fa: fb:54:e2:47:77:41:7a:58:2d:cc:90:67:bd:3d:eb:18:67:13: 7b:b0:68:43:30:f9:52:0f:9b:85:b4:f8:73:6b:37:a8:0d:70: ff:8c:39:17:e2:d2:05:6b:cf:96:78:9d:78:4d:5f:86:dc:68: d4:8f:41:fd:5a:30:2e:2d:37:9a:25:a4:12:67:a1:8e:d1:73: e8:23:37:4d:b0:0b:84:8e:87:c0:ca:67:1a:f7:cb:85:bf:d1: da:03:e0:5c:03:c1:03:19:b7:40:1e:f2:70:4d:8a:85:77:ab: f9:bb:1f:aa:c4:96:d7:87:bf:74:fb:e1:f6:5c:ee:3e:33:ae: 87:d8:ba:9d:35:9b:9a:01:c1:f9:8e:13:e7:fe:0d:cf:55:94: ad:25:66:62:4f:21:76:1a:7d:0e:e0:56:11:6b:68:36:ba:17: 3a:f5:f2:0f:ab:6d:72:53:d2:3e:46:2b:46:65:6c:d5:b9:15: 50:52:f0:29:5e:78:7a:5b:01:16:92:cb:18:ea:2b:c8:94:2c: 06:26:4b:3c:7c:ae:9d:80:d8:45:7e:6f:7d:69:e4:6f:72:b6: 82:ed:c4:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsik80qY0txWrmAFazWm4YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMjE1MTUxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTZiZjg5OTI0NzAxZjY1MWNhNGZkZDUwYTNjMzhlYTY4MTgzOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyrY2wnDWs52JoP7+GPgio56g1CZ wSmAQGH1l1QgGplaQkx4GGvtrlH0Itzwg5DTy7h/LTIqOSR0oJVpqLVnzGt59LSj OQPy1VRZVSh0dAAKbUZUwNVbNMzXICFGlrDHSQrjIuzdq+wiihq8qeINz85lsrAI lxjCYCjv656XOJ+JGbwYVqQwgIfIP9zlIWxwIyysFp0zDU4EwLkS1pAswIB0nWwG nwn0Y1Kg4jcZ1kMWwYhetkUXKL3KTgdqmc2rBZs32gH9ks3s/PXBckxle8WJO4Av 7060rJqhICfvkebkxMC4D/i+W1BlqH5nPK/f4vRHhb34AND4/ssPlwu0AQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJpr+JkkcB9lHKT91Qo8OOpoGDmSMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvbW12NG1TUndIMlVjcFAzVkNqdzQ2bWdZT1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xB6g MA0GCSqGSIb3DQEBCwUAA4IBAQAw9R1K/aW915g6y4XlC8WygjvP0wkltgl71smR m7qQY07Se/r7VOJHd0F6WC3MkGe9PesYZxN7sGhDMPlSD5uFtPhzazeoDXD/jDkX 4tIFa8+WeJ14TV+G3GjUj0H9WjAuLTeaJaQSZ6GO0XPoIzdNsAuEjofAymca98uF v9HaA+BcA8EDGbdAHvJwTYqFd6v5ux+qxJbXh790++H2XO4+M66H2LqdNZuaAcH5 jhPn/g3PVZStJWZiTyF2Gn0O4FYRa2g2uhc69fIPq21yU9I+RitGZWzVuRVQUvAp Xnh6WwEWkssY6ivIlCwGJks8fK6dgNhFfm99aeRvcraC7cTZ -----END CERTIFICATE-----Generated at Sat Dec 20 17:45:37 2025 by rpki-client