This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MFAu_EkZR9MwbcpihXf0lGT3Oj0.roa File: MFAu_EkZR9MwbcpihXf0lGT3Oj0.roa (raw, json) Hash identifier: WEpqD2HenxO1czzoy8AAi1Bn9drMpoolp5aMUMbqwNs= Subject key identifier: 30:50:2E:FC:49:19:47:D3:30:6D:CA:62:85:77:F4:94:64:F7:3A:3D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B03A6512CDCDA74EC872035DC4043440A Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MFAu_EkZR9MwbcpihXf0lGT3Oj0.roa Signing time: Tue 09 Dec 2025 15:06:29 +0000 ROA not before: Tue 09 Dec 2025 15:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 89.185.76.0/24 maxlen: 24 89.185.79.0/24 maxlen: 24 92.240.196.0/24 maxlen: 24 92.240.198.0/24 maxlen: 24 92.240.199.0/24 maxlen: 24 92.240.204.0/24 maxlen: 24 92.240.206.0/23 maxlen: 24 92.240.215.0/24 maxlen: 24 92.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:a6:51:2c:dc:da:74:ec:87:20:35:dc:40:43:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Dec 9 15:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30502efc491947d3306dca628577f49464f73a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:7c:3c:23:09:04:9b:33:5d:73:fc:d7:dc: 0f:b2:e6:aa:d6:ac:ce:44:4c:22:e8:9a:39:b5:01: 70:42:d3:5c:85:31:c5:3e:e4:21:27:02:4a:90:be: e3:d7:87:d7:ed:25:80:9c:9a:f3:68:95:94:cb:86: 53:3d:9b:68:ce:94:6d:54:4c:ce:57:ee:65:e6:3f: e2:84:e7:f7:5c:15:93:09:2b:9b:eb:1b:f5:39:da: 9a:30:c7:cf:7d:cf:e1:1a:7e:1f:ff:de:8a:f0:c9: 89:03:75:1f:91:1e:1c:f1:38:85:03:e8:b5:40:45: b6:75:f4:b8:30:11:e9:ab:69:3a:02:63:f3:00:88: 62:c5:7e:23:a4:d9:c5:14:d7:3b:5d:91:2e:86:bb: 3b:d7:cf:9b:12:a9:b7:95:9a:bd:39:5e:be:c3:ca: 33:c2:4d:86:9f:24:a1:13:33:cf:fa:29:bc:cf:25: ce:4f:4b:9a:eb:5a:8f:14:ea:a7:2b:63:47:7d:6d: 2e:c5:61:71:e1:60:85:1f:71:e0:84:fa:93:c5:64: 87:37:00:31:35:20:b0:79:0b:fe:06:78:d4:8b:48: 4d:56:04:d4:62:2d:07:c7:64:be:26:07:62:76:46: 20:32:cd:37:21:37:cc:be:3a:b7:65:25:d5:bc:c8: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:2E:FC:49:19:47:D3:30:6D:CA:62:85:77:F4:94:64:F7:3A:3D X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MFAu_EkZR9MwbcpihXf0lGT3Oj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.76.0/24 89.185.79.0/24 92.240.196.0/24 92.240.198.0/23 92.240.204.0/24 92.240.206.0/23 92.240.215.0/24 92.240.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:75:32:be:40:09:8c:49:05:33:b3:ea:d5:97:88:82:44:bb: cf:70:6c:90:e4:14:d0:04:a4:45:70:88:a2:47:91:86:b1:d5: 5c:aa:e7:3d:01:67:98:50:1c:e1:b4:e3:3d:36:3e:12:c5:95: 39:d0:0d:36:d5:87:d2:3c:8a:7c:79:6d:5d:9f:05:8c:cf:d6: 89:cc:8a:d8:66:82:e0:8f:8b:91:94:11:94:30:58:40:d2:9e: 65:8f:65:3b:a0:99:06:a5:08:39:c6:e9:40:80:d1:13:2d:e7: 85:dd:3b:cc:aa:7d:38:8b:b0:8b:e7:e5:72:cb:8f:bb:06:67: d7:63:25:4e:12:23:b0:26:b9:8d:ea:4f:d4:1f:ad:4f:04:c3: 3a:ba:5e:a5:a2:67:33:b1:1d:a7:d1:6e:a6:dc:b0:9a:67:87: 2e:a9:9a:bd:d7:64:3a:83:b7:a7:46:19:83:e4:7a:43:80:6e: db:af:d0:3d:cb:17:59:01:dd:40:3e:8c:b3:08:5f:c9:94:28: 3b:65:35:8c:7b:a2:09:e5:27:78:6a:cf:e9:8b:c1:b7:56:87: 29:19:83:11:a9:51:5c:b4:d5:5e:d2:d6:94:0f:84:31:bf:ee: 98:b8:08:a2:cf:97:37:b3:20:fe:71:ca:aa:ce:d6:28:ea:3f: 36:76:2b:46 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZsDplEs3Np07IcgNdxAQ0QKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUxMjA5MTUwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDUwMmVmYzQ5MTk0N2QzMzA2ZGNhNjI4NTc3ZjQ5NDY0ZjczYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj58PCMJBJszXXP819wPsuaq1qzO REwi6Jo5tQFwQtNchTHFPuQhJwJKkL7j14fX7SWAnJrzaJWUy4ZTPZtozpRtVEzO V+5l5j/ihOf3XBWTCSub6xv1OdqaMMfPfc/hGn4f/96K8MmJA3UfkR4c8TiFA+i1 QEW2dfS4MBHpq2k6AmPzAIhixX4jpNnFFNc7XZEuhrs718+bEqm3lZq9OV6+w8oz wk2GnyShEzPP+im8zyXOT0ua61qPFOqnK2NHfW0uxWFx4WCFH3HghPqTxWSHNwAx NSCweQv+BnjUi0hNVgTUYi0Hx2S+JgdidkYgMs03ITfMvjq3ZSXVvMipAwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDBQLvxJGUfTMG3KYoV39JRk9zo9MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvTUZBdV9Fa1pSOU13YmNwaWhYZjBsR1QzT2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAWblMAwQA WblPAwQAXPDEAwQBXPDGAwQAXPDMAwQBXPDOAwQAXPDXAwQAXPDZMA0GCSqGSIb3 DQEBCwUAA4IBAQAMdTK+QAmMSQUzs+rVl4iCRLvPcGyQ5BTQBKRFcIiiR5GGsdVc quc9AWeYUBzhtOM9Nj4SxZU50A021YfSPIp8eW1dnwWMz9aJzIrYZoLgj4uRlBGU MFhA0p5lj2U7oJkGpQg5xulAgNETLeeF3TvMqn04i7CL5+Vyy4+7BmfXYyVOEiOw JrmN6k/UH61PBMM6ul6lomczsR2n0W6m3LCaZ4cuqZq912Q6g7enRhmD5HpDgG7b r9A9yxdZAd1APoyzCF/JlCg7ZTWMe6IJ5Sd4as/pi8G3VocpGYMRqVFctNVe0taU D4Qxv+6YuAiiz5c3syD+ccqqztYo6j82ditG -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:27 2025 by rpki-client