This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa File: mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa (raw, json) Hash identifier: 54jP0qFsXw4LB88KxrDKN6WgxZjAC7fRz1J28jdpG7w= Subject key identifier: 99:C5:26:DD:E4:0F:19:7F:E5:B7:21:8A:F1:50:45:1C:4F:AE:60:3F Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B30E2D2B7735FBE61E2CAAA3D676A2683 Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa Signing time: Thu 18 Dec 2025 09:55:29 +0000 ROA not before: Thu 18 Dec 2025 09:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12312 IP address blocks: 62.26.0.0/15 maxlen: 23 62.144.0.0/16 maxlen: 16 62.144.0.0/19 maxlen: 19 62.144.32.0/19 maxlen: 19 62.144.64.0/19 maxlen: 19 62.144.96.0/19 maxlen: 19 62.144.128.0/17 maxlen: 17 62.246.0.0/16 maxlen: 16 79.140.176.0/20 maxlen: 20 80.83.96.0/20 maxlen: 20 185.210.52.0/23 maxlen: 23 194.112.16.0/20 maxlen: 20 194.112.16.0/22 maxlen: 22 194.112.24.0/21 maxlen: 21 195.52.0.0/16 maxlen: 23 195.63.0.0/17 maxlen: 17 195.63.192.0/18 maxlen: 18 195.78.160.0/19 maxlen: 19 195.185.0.0/16 maxlen: 16 212.172.0.0/16 maxlen: 16 2001:4090::/32 maxlen: 32 2001:4091::/32 maxlen: 32 2a01:5c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e2:d2:b7:73:5f:be:61:e2:ca:aa:3d:67:6a:26:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Dec 18 09:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99c526dde40f197fe5b7218af150451c4fae603f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:60:ec:9f:f2:8e:72:39:a8:bf:5c:9e:9f:a2: 1c:a4:04:89:ba:21:17:b6:73:22:30:dd:4d:31:4f: 54:0c:0e:b3:a2:50:65:fb:c6:16:8a:c9:6f:56:68: dd:03:3a:5e:57:cc:9f:fa:c8:1c:a7:6a:27:af:7f: 1f:3e:d3:d9:55:8c:6a:7b:7c:9e:af:bd:93:95:d9: fa:b8:ac:5f:6b:16:d8:7d:c1:8e:70:bb:07:74:4b: 11:22:62:15:66:e6:3f:f1:ea:c7:98:b6:eb:61:49: ac:cc:c2:ec:1d:83:f6:92:2a:a8:cf:e3:8b:a1:61: be:bf:97:4d:74:c3:4b:ec:ad:16:db:34:0f:de:be: 40:07:c3:61:de:fe:31:26:f5:06:aa:f6:06:2a:f1: f1:c2:2e:44:53:31:b5:21:8c:91:4b:3f:ba:0d:3b: 4b:79:4b:77:d4:f9:95:f5:71:e8:cd:ba:92:f1:62: af:5b:79:cf:b3:53:dd:46:8e:65:93:1e:bd:9c:61: 61:e7:84:a6:59:4e:ab:92:cf:f1:af:ae:9d:64:89: 8a:47:16:fd:fc:eb:b0:8a:2b:99:eb:8e:a4:54:d0: 26:55:67:cb:93:d9:83:8c:f1:43:a2:95:89:76:9a: 8e:db:f9:c8:5f:7a:ae:2f:c5:74:8e:b0:e8:a3:0f: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:26:DD:E4:0F:19:7F:E5:B7:21:8A:F1:50:45:1C:4F:AE:60:3F X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.26.0.0/15 62.144.0.0/16 62.246.0.0/16 79.140.176.0/20 80.83.96.0/20 185.210.52.0/23 194.112.16.0/20 195.52.0.0/16 195.63.0.0/17 195.63.192.0/18 195.78.160.0/19 195.185.0.0/16 212.172.0.0/16 IPv6: 2001:4090::/31 2a01:5c8::/32 Signature Algorithm: sha256WithRSAEncryption 1c:0f:0b:7e:3a:75:0b:bd:c4:21:b0:11:59:cd:bf:6e:c3:91: 30:cd:79:ce:9e:05:93:b6:64:a3:1b:25:a8:ed:3f:ee:82:d5: c1:23:6c:6f:3a:31:78:5a:78:c0:8b:4f:89:f2:92:5b:e0:ab: 5f:7b:ef:2e:18:9d:bb:94:79:2f:67:60:8e:8a:df:69:90:8e: 7a:dd:f2:96:5b:c2:7b:e1:7a:e0:df:28:d2:d1:41:d5:31:7c: 73:21:bd:36:be:0a:d2:7d:d0:85:c8:e9:0f:05:44:ec:6b:84: 32:0f:5b:04:7a:e7:77:b6:99:6d:e4:82:9c:d9:12:3d:35:7e: 98:9a:bd:df:f2:63:bf:1a:c2:a2:8e:30:28:0f:ec:bb:a6:82: 77:fb:15:43:16:8e:0e:af:90:76:ea:30:81:77:4b:9b:07:92: e6:f8:40:f2:b5:94:1d:39:d9:ba:88:4f:c2:41:59:e1:76:52: 34:67:38:9c:d7:ad:96:68:a2:14:6a:eb:55:91:95:d5:24:4b: 90:a8:a5:89:73:b8:e2:85:31:e3:df:e8:7c:a0:2f:ac:cd:25: 8d:71:93:28:48:b2:ff:22:45:8d:a1:0f:e4:dd:b6:8b:ab:42: cb:de:dc:dd:14:7b:c4:1a:ea:35:43:29:19:c1:0e:08:57:94: 14:8c:22:06 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZsw4tK3c1++YeLKqj1naiaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjUxMjE4MDk1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM1MjZkZGU0MGYxOTdmZTViNzIxOGFmMTUwNDUxYzRmYWU2MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Dsn/KOcjmov1yen6IcpASJuiEX tnMiMN1NMU9UDA6zolBl+8YWislvVmjdAzpeV8yf+sgcp2onr38fPtPZVYxqe3ye r72Tldn6uKxfaxbYfcGOcLsHdEsRImIVZuY/8erHmLbrYUmszMLsHYP2kiqoz+OL oWG+v5dNdMNL7K0W2zQP3r5AB8Nh3v4xJvUGqvYGKvHxwi5EUzG1IYyRSz+6DTtL eUt31PmV9XHozbqS8WKvW3nPs1PdRo5lkx69nGFh54SmWU6rks/xr66dZImKRxb9 /OuwiiuZ646kVNAmVWfLk9mDjPFDopWJdpqO2/nIX3quL8V0jrDoow+ibwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFJnFJt3kDxl/5bchivFQRRxPrmA/MB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvbWNVbTNlUVBHWF9sdHlHSzhWQkZIRS11WUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwMBPhoDAwA+ kAMDAD72AwQET4ywAwQEUFNgAwQBudI0AwQEwnAQAwMAwzQDBAfDPwADBAbDP8AD BAXDTqADAwDDuQMDANSsMBQEAgACMA4DBQEgAUCQAwUAKgEFyDANBgkqhkiG9w0B AQsFAAOCAQEAHA8Lfjp1C73EIbARWc2/bsORMM15zp4Fk7ZkoxslqO0/7oLVwSNs bzoxeFp4wItPifKSW+CrX3vvLhidu5R5L2dgjorfaZCOet3yllvCe+F64N8o0tFB 1TF8cyG9Nr4K0n3QhcjpDwVE7GuEMg9bBHrnd7aZbeSCnNkSPTV+mJq93/JjvxrC oo4wKA/su6aCd/sVQxaODq+QduowgXdLmweS5vhA8rWUHTnZuohPwkFZ4XZSNGc4 nNetlmiiFGrrVZGV1SRLkKiliXO44oUx49/ofKAvrM0ljXGTKEiy/yJFjaEP5N22 i6tCy97c3RR7xBrqNUMpGcEOCFeUFIwiBg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:01:35 2025 by rpki-client