This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mQJDyOThH4p2x2LwirdnIvczJaE.roa File: mQJDyOThH4p2x2LwirdnIvczJaE.roa (raw, json) Hash identifier: ned62hcixAccTx4eIJDQe54bxK/YAX7x4YtkFkorUBg= Subject key identifier: 99:02:43:C8:E4:E1:1F:8A:76:C7:62:F0:8A:B7:67:22:F7:33:25:A1 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3416F87B6051AB850E2038E9F0555 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mQJDyOThH4p2x2LwirdnIvczJaE.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213094 IP address blocks: 185.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:6f:87:b6:05:1a:b8:50:e2:03:8e:9f:05:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990243c8e4e11f8a76c762f08ab76722f73325a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:14:a0:a1:51:c6:b5:88:54:22:35:d1:66: 22:ae:01:72:d8:eb:66:de:48:a3:43:e2:ed:fc:55: 4e:dd:a4:4f:37:72:49:22:d6:b4:f0:08:57:c8:8f: 08:e4:d0:09:18:a3:3e:5d:a2:5b:9f:87:97:63:14: 4b:e4:5e:6f:58:fd:62:db:00:ab:ac:94:da:ab:4f: 70:a0:bd:df:15:97:8a:1d:8b:c4:af:99:87:1d:2b: 6c:0d:4d:22:73:25:02:0d:68:f3:a9:2c:0b:d7:9a: 42:e5:2d:a4:ca:5b:c0:12:0e:42:a8:f7:81:30:8d: f9:03:55:86:1f:40:ed:97:a6:c2:b0:08:ed:03:3c: 01:50:a2:71:71:4b:7b:54:57:23:26:59:ae:23:6c: 60:b6:35:8d:48:93:a7:38:c0:e2:89:7c:de:ca:43: 19:78:d4:83:9e:72:e2:c2:92:39:42:6e:30:84:85: c7:0f:f9:89:b3:6a:09:27:47:3f:f4:44:e2:ee:a4: 8d:d2:29:5c:f6:18:7b:5a:28:fd:9c:8e:11:df:61: ea:f4:90:86:1a:fa:bc:c3:c3:c6:49:a2:b2:c6:83: 4d:83:9c:53:30:87:25:2c:92:7d:90:1c:ae:4f:7e: 92:c9:63:19:88:36:a0:e0:e6:c7:d2:24:cf:d4:70: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:43:C8:E4:E1:1F:8A:76:C7:62:F0:8A:B7:67:22:F7:33:25:A1 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mQJDyOThH4p2x2LwirdnIvczJaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:31:07:ac:c1:78:e5:db:52:69:35:f8:2d:80:1c:50:3f:66: 0d:ef:a0:92:16:e3:28:b3:cb:da:9f:1d:8c:19:fa:df:b7:ec: f8:6d:6d:e8:ee:d2:cd:db:ac:57:d8:77:23:47:59:a0:38:6e: 1c:cb:79:ec:05:91:e9:0b:d1:09:c6:f3:f7:a7:0a:63:ed:91: 2e:af:5d:c4:88:fb:21:62:8e:e5:62:2e:7c:5d:4b:5f:f8:19: 2d:30:86:8b:e5:e6:01:f8:c7:14:02:11:b5:7c:28:d6:b5:c9: 61:92:38:61:3f:de:1b:da:27:f6:d7:f5:a5:f4:7d:cf:eb:10: 2e:b0:76:3d:ad:9c:6d:25:c7:f4:3b:9c:8b:25:03:ea:77:1a: 56:a2:b6:45:ec:49:a4:54:6a:78:e8:ce:2d:2c:35:ae:08:14: fb:3b:20:51:6e:71:81:41:a2:88:db:5b:ad:59:c4:fe:b5:57: 7f:0f:f5:17:c2:c5:af:fd:85:22:d9:39:a4:73:21:da:26:f4: 7d:9f:ce:42:42:8f:91:36:1e:8e:59:08:fe:24:2a:b1:90:c2: 8a:f0:71:87:58:a1:c1:fe:20:dd:22:d2:32:84:a6:79:20:23: 35:70:45:72:b3:bd:c2:e3:f6:59:ef:bf:e8:65:14:fc:eb:66: 39:28:2b:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0Fvh7YFGrhQ4gOOnwVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTAyNDNjOGU0ZTExZjhhNzZjNzYyZjA4YWI3NjcyMmY3MzMyNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y0UoKFRxrWIVCI10WYirgFy2Otm 3kijQ+Lt/FVO3aRPN3JJIta08AhXyI8I5NAJGKM+XaJbn4eXYxRL5F5vWP1i2wCr rJTaq09woL3fFZeKHYvEr5mHHStsDU0icyUCDWjzqSwL15pC5S2kylvAEg5CqPeB MI35A1WGH0Dtl6bCsAjtAzwBUKJxcUt7VFcjJlmuI2xgtjWNSJOnOMDiiXzeykMZ eNSDnnLiwpI5Qm4whIXHD/mJs2oJJ0c/9ETi7qSN0ilc9hh7Wij9nI4R32Hq9JCG Gvq8w8PGSaKyxoNNg5xTMIclLJJ9kByuT36SyWMZiDag4ObH0iTP1HCA/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkCQ8jk4R+Kdsdi8Iq3ZyL3MyWhMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbVFKRHlPVGhINHAyeDJMd2lyZG5JdmN6SmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufygMA0G CSqGSIb3DQEBCwUAA4IBAQBPMQeswXjl21JpNfgtgBxQP2YN76CSFuMos8vanx2M Gfrft+z4bW3o7tLN26xX2HcjR1mgOG4cy3nsBZHpC9EJxvP3pwpj7ZEur13EiPsh Yo7lYi58XUtf+BktMIaL5eYB+McUAhG1fCjWtclhkjhhP94b2if21/Wl9H3P6xAu sHY9rZxtJcf0O5yLJQPqdxpWorZF7EmkVGp46M4tLDWuCBT7OyBRbnGBQaKI21ut WcT+tVd/D/UXwsWv/YUi2TmkcyHaJvR9n85CQo+RNh6OWQj+JCqxkMKK8HGHWKHB /iDdItIyhKZ5ICM1cEVys73C4/ZZ77/oZRT862Y5KCs9 -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:07 2026 by rpki-client