This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S_cMNHwGmO53SbTaPSTvEUZSyO4.roa File: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (raw, json) Hash identifier: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4= Subject key identifier: 4B:F7:0C:34:7C:06:98:EE:77:49:B4:DA:3D:24:EF:11:46:52:C8:EE Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FCD947BD7048E6CFE360339F79DF Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S_cMNHwGmO53SbTaPSTvEUZSyO4.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 185.213.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fc:d9:47:bd:70:48:e6:cf:e3:60:33:9f:79:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bf70c347c0698ee7749b4da3d24ef114652c8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:9b:f4:2f:fb:1b:96:7f:88:d7:05:6f:0d: 30:23:3e:83:66:9a:6b:86:a5:9a:fd:1e:58:69:b2: 52:48:d0:fc:7f:ba:f9:f1:5f:fd:0c:be:25:b2:b5: 28:a0:b6:0a:f7:ec:c1:90:6f:7f:2a:54:8e:57:01: f1:37:cf:32:ec:f3:c4:c7:07:4c:df:07:d1:34:20: f0:52:a8:b2:f4:a1:05:85:23:ce:d6:cf:22:17:b9: 97:47:64:26:25:37:41:cb:d3:2e:de:f6:c0:0e:71: 75:7e:47:fe:1a:0d:e3:2c:d0:73:9e:14:1b:86:55: f1:d0:f0:83:92:5f:51:53:d0:b4:09:fe:6b:a2:d9: 19:20:5c:06:7b:a0:9b:d2:59:95:2e:80:10:2f:76: ba:6b:10:e6:ac:33:55:f9:85:00:93:72:ea:9d:dd: 2a:fe:f4:96:4d:04:03:44:a3:fa:a8:6b:ce:9b:3e: f1:70:18:48:c5:e9:ae:7f:7a:ac:c4:41:a1:f4:89: a3:0e:30:52:87:cc:36:c6:89:6f:53:59:20:87:55: 10:2b:27:fd:d1:5e:84:a8:01:23:16:df:e1:f6:38: fc:a9:fb:f1:cd:6c:dd:08:cf:19:57:27:3a:c8:43: fb:ab:33:84:4d:9c:2c:4e:0a:db:35:e4:cf:bd:2c: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F7:0C:34:7C:06:98:EE:77:49:B4:DA:3D:24:EF:11:46:52:C8:EE X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S_cMNHwGmO53SbTaPSTvEUZSyO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.193.0/24 Signature Algorithm: sha256WithRSAEncryption b3:0d:db:18:23:b9:34:4a:a6:da:a2:44:05:f7:df:3c:b6:c6: e9:1c:34:2b:2f:6f:6c:65:e1:8e:4a:b0:99:5a:21:b9:73:3f: 7c:84:81:21:e1:64:db:64:8b:59:fc:9e:52:c8:2d:3c:75:10: c1:0c:66:a9:cb:a3:d1:8c:d2:f7:ba:82:0e:29:40:a6:01:2b: 69:27:cb:6e:03:80:fa:46:e8:71:a4:e6:b6:09:3c:57:71:17: b5:f0:23:64:36:f2:b3:7b:18:91:82:79:9c:7a:c5:c5:d9:72: d1:9d:b3:d3:38:dd:bc:d0:99:3c:6e:03:48:9c:c0:1a:e4:52: 7b:59:57:63:18:4d:67:f9:01:85:1b:b3:21:b5:8a:67:1f:09: d1:2b:c7:90:38:4f:f9:cb:ca:3d:bf:05:6f:7d:09:4d:c2:2e: 0e:2d:d8:5e:38:99:7b:3f:1b:4d:aa:d6:22:43:64:0b:80:74: 30:8c:bc:5e:9e:b0:2d:4b:39:06:8e:ad:55:7a:0e:5c:e0:f7: b8:e0:ab:6f:4d:a3:59:b4:0a:86:32:93:a4:27:4e:b0:f8:87: 59:bf:6e:a4:87:b0:f7:b0:c6:af:be:6b:77:a4:9b:7f:9a:48: 58:95:0e:7b:28:26:67:c8:ef:bb:43:8b:14:68:80:77:e0:2b: b6:35:84:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovzZR71wSObP42Azn3nfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmY3MGMzNDdjMDY5OGVlNzc0OWI0ZGEzZDI0ZWYxMTQ2NTJjOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nmb9C/7G5Z/iNcFbw0wIz6DZppr hqWa/R5YabJSSND8f7r58V/9DL4lsrUooLYK9+zBkG9/KlSOVwHxN88y7PPExwdM 3wfRNCDwUqiy9KEFhSPO1s8iF7mXR2QmJTdBy9Mu3vbADnF1fkf+Gg3jLNBznhQb hlXx0PCDkl9RU9C0Cf5rotkZIFwGe6Cb0lmVLoAQL3a6axDmrDNV+YUAk3Lqnd0q /vSWTQQDRKP6qGvOmz7xcBhIxemuf3qsxEGh9ImjDjBSh8w2xolvU1kgh1UQKyf9 0V6EqAEjFt/h9jj8qfvxzWzdCM8ZVyc6yEP7qzOETZwsTgrbNeTPvSxyiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEv3DDR8Bpjud0m02j0k7xFGUsjuMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvU19jTU5Id0dtTzUzU2JUYVBTVHZFVVpTeU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudXBMA0G CSqGSIb3DQEBCwUAA4IBAQCzDdsYI7k0SqbaokQF9988tsbpHDQrL29sZeGOSrCZ WiG5cz98hIEh4WTbZItZ/J5SyC08dRDBDGapy6PRjNL3uoIOKUCmAStpJ8tuA4D6 RuhxpOa2CTxXcRe18CNkNvKzexiRgnmcesXF2XLRnbPTON280Jk8bgNInMAa5FJ7 WVdjGE1n+QGFG7MhtYpnHwnRK8eQOE/5y8o9vwVvfQlNwi4OLdheOJl7PxtNqtYi Q2QLgHQwjLxenrAtSzkGjq1Veg5c4Pe44KtvTaNZtAqGMpOkJ06w+IdZv26kh7D3 sMavvmt3pJt/mkhYlQ57KCZnyO+7Q4sUaIB34Cu2NYSE -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:07 2026 by rpki-client