This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Mn5g5ih6bs_B2RQzmUEJOvkm4ew.roa File: Mn5g5ih6bs_B2RQzmUEJOvkm4ew.roa (raw, json) Hash identifier: CH+7cl5p2ran+BeHG+ah/11mRCglP15iWd2fsZ2nGWk= Subject key identifier: 32:7E:60:E6:28:7A:6E:CF:C1:D9:14:33:99:41:09:3A:F9:26:E1:EC Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Certificate serial: 019B3118D56D92037FC32FBC429F20781DBA Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Mn5g5ih6bs_B2RQzmUEJOvkm4ew.roa Signing time: Thu 18 Dec 2025 10:54:29 +0000 ROA not before: Thu 18 Dec 2025 10:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202651 IP address blocks: 176.105.236.0/24 maxlen: 24 193.219.112.0/24 maxlen: 24 195.7.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:18:d5:6d:92:03:7f:c3:2f:bc:42:9f:20:78:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Validity Not Before: Dec 18 10:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=327e60e6287a6ecfc1d914339941093af926e1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:5d:4c:97:f6:50:20:0e:39:94:ad:55:67: 9c:76:d4:35:0a:40:64:81:07:09:aa:7b:36:9e:95: f6:a2:e2:b9:d9:be:be:52:d0:bc:33:01:e8:75:ba: c3:37:14:34:1b:4e:43:26:ef:2d:a0:48:7c:17:09: bb:a0:02:58:03:19:57:19:9e:46:a4:d8:f8:09:48: 29:60:74:6c:7a:49:63:c3:86:5a:5c:10:94:f5:09: fc:9b:68:db:c0:58:da:9c:f1:a3:cd:3e:a1:56:f2: 55:b5:39:09:2b:be:5a:8b:79:0d:cf:95:9d:34:f8: d9:76:2a:a2:7a:a9:c6:7c:01:c1:a2:21:77:11:81: 14:4d:f6:61:62:b6:d3:94:ca:c7:8d:87:c3:a5:6a: ee:f8:9a:ff:85:22:a5:9e:26:f6:a8:c4:03:ec:db: 29:38:94:e6:5b:3a:43:75:b5:35:b2:45:a4:90:79: 9f:e9:05:2d:c3:23:2d:82:71:47:ec:d6:d2:59:b2: 83:d5:7b:e3:95:43:39:1a:70:c8:86:ee:01:21:34: 30:e4:83:24:23:07:55:87:e4:81:91:95:6b:e2:68: c0:06:1f:4f:5f:6a:0e:e8:1c:cb:28:33:d4:6c:9c: 06:f6:95:95:76:a1:fc:c5:e0:4c:8d:1e:26:59:d7: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:60:E6:28:7A:6E:CF:C1:D9:14:33:99:41:09:3A:F9:26:E1:EC X509v3 Authority Key Identifier: keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Mn5g5ih6bs_B2RQzmUEJOvkm4ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.236.0/24 193.219.112.0/24 195.7.8.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3a:4f:6a:10:e9:6c:df:f2:e4:79:7b:67:07:f7:9d:b9:43: c0:c7:ca:94:3c:59:86:8a:b5:79:37:0d:a4:7b:85:5c:ae:b2: f9:b3:30:fa:30:18:be:bb:0d:33:d3:26:c4:b9:f0:96:3c:a2: 12:3f:aa:82:0b:8d:c2:bf:9d:d8:1e:89:58:24:4a:74:44:50: fd:4a:4b:57:1c:79:4d:65:83:7b:ad:42:a7:14:d3:89:f6:e6: e0:14:70:53:06:40:ee:08:9b:18:3f:17:a3:29:cb:dd:6c:d8: b9:f8:b3:bb:1c:0c:84:3b:92:bc:dc:cf:31:cd:d5:56:bd:4a: 59:63:ee:b0:7a:99:6b:4a:c2:23:c5:1b:28:be:62:9d:e9:50: 6c:82:42:92:9c:4a:aa:8d:71:48:a1:f4:c5:ee:88:88:15:28: 4f:b1:d7:78:7a:8a:2c:b4:46:30:ee:ed:27:27:88:ca:10:ac: 47:a6:60:9f:b1:a1:5f:59:00:14:4a:4b:f4:c7:1f:36:97:8b: e6:7b:fc:f1:e3:43:90:38:e0:ba:ce:3a:81:18:0e:51:8d:96: c1:6a:6f:fb:d0:68:eb:88:24:e3:b5:7e:52:43:46:38:d2:a7: fd:1a:8a:89:b0:0c:96:99:64:1d:81:29:2b:c3:3e:3e:d3:ef: 62:d6:78:10 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsxGNVtkgN/wy+8Qp8geB26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2VhZjRlYzc1NGY0YTBlM2Q4NGNhMjUzYWQ0MDZlZTlj N2RlMTUwHhcNMjUxMjE4MTA1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjdlNjBlNjI4N2E2ZWNmYzFkOTE0MzM5OTQxMDkzYWY5MjZlMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ZdTJf2UCAOOZStVWecdtQ1CkBk gQcJqns2npX2ouK52b6+UtC8MwHodbrDNxQ0G05DJu8toEh8Fwm7oAJYAxlXGZ5G pNj4CUgpYHRsekljw4ZaXBCU9Qn8m2jbwFjanPGjzT6hVvJVtTkJK75ai3kNz5Wd NPjZdiqieqnGfAHBoiF3EYEUTfZhYrbTlMrHjYfDpWru+Jr/hSKlnib2qMQD7Nsp OJTmWzpDdbU1skWkkHmf6QUtwyMtgnFH7NbSWbKD1XvjlUM5GnDIhu4BITQw5IMk IwdVh+SBkZVr4mjABh9PX2oO6BzLKDPUbJwG9pWVdqH8xeBMjR4mWdfLTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDJ+YOYoem7PwdkUM5lBCTr5JuHsMB8GA1UdIwQY MBaAFC8+r07HVPSg49hMolOtQG7px94VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAt OTBjM2NjZTU2OWYwLzEvTW41ZzVpaDZic19CMlJRem1VRUpPdmttNGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAtOTBjM2NjZTU2OWYw LzEvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsGnsAwQA wdtwAwQAwwcIMA0GCSqGSIb3DQEBCwUAA4IBAQApOk9qEOls3/LkeXtnB/eduUPA x8qUPFmGirV5Nw2ke4VcrrL5szD6MBi+uw0z0ybEufCWPKISP6qCC43Cv53YHolY JEp0RFD9SktXHHlNZYN7rUKnFNOJ9ubgFHBTBkDuCJsYPxejKcvdbNi5+LO7HAyE O5K83M8xzdVWvUpZY+6weplrSsIjxRsovmKd6VBsgkKSnEqqjXFIofTF7oiIFShP sdd4eoostEYw7u0nJ4jKEKxHpmCfsaFfWQAUSkv0xx82l4vme/zx40OQOOC6zjqB GA5RjZbBam/70GjriCTjtX5SQ0Y40qf9GoqJsAyWmWQdgSkrwz4+0+9i1ngQ -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:33 2025 by rpki-client