This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mr2bB-tRS5VMj3Vtu_ChlFXgFRM.roa File: mr2bB-tRS5VMj3Vtu_ChlFXgFRM.roa (raw, json) Hash identifier: xKbI6v5walT3faDaKvCyX7oNxglc46oU1v++LPinKTA= Subject key identifier: 9A:BD:9B:07:EB:51:4B:95:4C:8F:75:6D:BB:F0:A1:94:55:E0:15:13 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35C9CB10FC423E8DE471C6212AE79 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mr2bB-tRS5VMj3Vtu_ChlFXgFRM.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 85.31.47.0/24 maxlen: 24 91.92.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:9c:b1:0f:c4:23:e8:de:47:1c:62:12:ae:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9abd9b07eb514b954c8f756dbbf0a19455e01513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:48:4a:c3:a3:46:6f:51:4e:74:ef:b0:9b: 31:66:8a:45:ce:27:0a:72:d1:84:ba:e7:db:f7:d8: bd:89:10:c6:c2:1e:ff:eb:3a:a5:64:39:d5:4a:f6: d7:f5:cb:93:a3:ef:77:7f:ae:56:33:38:15:f2:d1: d7:1a:86:37:fd:dc:bb:53:e6:9a:1f:42:0a:47:b9: f1:6c:4c:01:f1:e4:a1:14:21:e6:bb:91:2a:79:fd: c8:91:10:6f:79:f0:59:31:fa:9c:3a:53:60:d7:d2: f9:f0:96:6a:d9:0d:ac:5b:1a:b4:7d:7f:97:47:57: a9:a8:52:f9:c4:94:65:96:2a:13:47:43:1c:d0:6c: 38:3c:ef:f9:c9:2d:4a:57:60:27:e5:16:2a:99:46: c9:a6:9d:6f:db:e1:98:56:9a:8d:74:03:87:a5:70: fd:d0:bc:49:78:b6:35:09:a0:0e:fc:f1:8b:e0:cc: 18:0c:cf:f9:55:e4:10:10:1a:ff:4e:dc:fd:0c:b7: 34:3d:6d:87:81:a8:5c:c9:ef:10:58:69:4e:90:77: 01:ad:5e:8e:39:97:4a:9b:f4:4c:ac:87:f8:20:79: 39:49:53:54:8a:5f:f6:7b:d7:80:ac:9e:f0:03:db: 46:fa:dd:4a:d8:df:ba:91:5b:4c:db:07:4c:c9:7e: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:9B:07:EB:51:4B:95:4C:8F:75:6D:BB:F0:A1:94:55:E0:15:13 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mr2bB-tRS5VMj3Vtu_ChlFXgFRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.47.0/24 91.92.195.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e3:00:e3:8c:06:62:26:b3:2e:ed:62:74:04:0d:be:7b:6f: 95:8f:49:76:8c:95:5c:29:5f:26:1b:0b:a0:e0:84:f9:93:dd: 11:c3:55:ce:2e:cb:e0:4c:9e:a4:bb:08:94:da:42:aa:35:13: 9b:ec:be:6b:b8:9a:9b:d8:92:ce:e0:60:e3:50:7b:e3:7e:10: 74:76:1b:50:e2:65:7b:5b:15:85:5e:9e:0c:5e:01:10:ad:68: d8:80:fc:55:b0:07:c8:7a:a9:72:22:53:6d:16:e4:2e:09:1b: 35:9e:98:7f:78:82:2f:e8:d4:eb:b1:84:11:20:a5:16:ce:6a: a9:e2:fd:fc:79:f4:0a:1d:5a:d8:02:0f:d6:2a:ee:a1:e9:ad: ad:f1:36:a8:20:ea:cf:be:be:97:70:f5:a8:f3:d9:f9:02:c8: 47:17:5c:3e:ad:66:7e:51:22:6e:94:ac:77:c4:58:e7:31:f3: 9d:0a:65:83:0d:52:d0:55:4c:f7:ad:d4:3e:b7:6f:01:1c:c4: 4a:65:6a:70:7f:f2:fd:92:f8:cc:be:9a:37:9e:ae:2f:4d:f0: 3f:1d:4e:d8:33:6e:8c:fd:ac:71:f7:cb:a5:62:96:7e:a2:fa: 7f:cd:25:f6:64:52:25:16:41:30:bc:8c:b5:72:86:32:67:8c: 39:95:11:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o1ycsQ/EI+jeRxxiEq55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJkOWIwN2ViNTE0Yjk1NGM4Zjc1NmRiYmYwYTE5NDU1ZTAxNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BNISsOjRm9RTnTvsJsxZopFzicK ctGEuufb99i9iRDGwh7/6zqlZDnVSvbX9cuTo+93f65WMzgV8tHXGoY3/dy7U+aa H0IKR7nxbEwB8eShFCHmu5Eqef3IkRBvefBZMfqcOlNg19L58JZq2Q2sWxq0fX+X R1epqFL5xJRllioTR0Mc0Gw4PO/5yS1KV2An5RYqmUbJpp1v2+GYVpqNdAOHpXD9 0LxJeLY1CaAO/PGL4MwYDM/5VeQQEBr/Ttz9DLc0PW2Hgahcye8QWGlOkHcBrV6O OZdKm/RMrIf4IHk5SVNUil/2e9eArJ7wA9tG+t1K2N+6kVtM2wdMyX63hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJq9mwfrUUuVTI91bbvwoZRV4BUTMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbXIyYkItdFJTNVZNajNWdHVfQ2hsRlhnRlJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVR8vAwQA W1zDMA0GCSqGSIb3DQEBCwUAA4IBAQAZ4wDjjAZiJrMu7WJ0BA2+e2+Vj0l2jJVc KV8mGwug4IT5k90Rw1XOLsvgTJ6kuwiU2kKqNROb7L5ruJqb2JLO4GDjUHvjfhB0 dhtQ4mV7WxWFXp4MXgEQrWjYgPxVsAfIeqlyIlNtFuQuCRs1nph/eIIv6NTrsYQR IKUWzmqp4v38efQKHVrYAg/WKu6h6a2t8TaoIOrPvr6XcPWo89n5AshHF1w+rWZ+ USJulKx3xFjnMfOdCmWDDVLQVUz3rdQ+t28BHMRKZWpwf/L9kvjMvpo3nq4vTfA/ HU7YM26M/axx98ulYpZ+ovp/zSX2ZFIlFkEwvIy1coYyZ4w5lRHw -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:08 2026 by rpki-client