This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/MkSFILdBcvHxyl3ayJE96taLdHo.roa File: MkSFILdBcvHxyl3ayJE96taLdHo.roa (raw, json) Hash identifier: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4= Subject key identifier: 32:44:85:20:B7:41:72:F1:F1:CA:5D:DA:C8:91:3D:EA:D6:8B:74:7A Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Certificate serial: 019B7E37957226EDA8BF087F2FACF0952A93 Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/MkSFILdBcvHxyl3ayJE96taLdHo.roa Signing time: Fri 02 Jan 2026 10:18:50 +0000 ROA not before: Fri 02 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 185.87.78.0/23 maxlen: 24 185.87.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:95:72:26:ed:a8:bf:08:7f:2f:ac:f0:95:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32448520b74172f1f1ca5ddac8913dead68b747a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:99:86:7f:b6:3a:93:31:ca:2b:b1:11:de: 22:1c:a5:04:3c:0e:70:40:2f:99:e5:bd:d4:a1:e5: 12:cf:ac:98:22:ba:6a:d5:6a:81:32:83:cc:bf:a9: e0:9d:8c:8c:4a:78:89:3f:44:bb:6f:4c:13:eb:09: 97:80:61:f0:8b:82:7e:d4:5d:fd:7d:d9:f7:01:bd: de:41:76:84:dc:08:85:eb:49:74:8b:f6:ba:c0:94: 99:d1:2f:56:f6:45:3f:16:04:66:97:99:4e:ad:d4: f8:b8:a1:28:da:53:f1:ef:0d:c1:02:89:c2:0f:65: a8:22:74:42:ec:c0:a6:62:39:1b:df:07:ad:19:13: 46:5b:83:7a:e4:bc:33:6b:91:48:6b:d3:7f:11:8d: 97:7e:64:eb:37:2a:87:12:ef:f1:ec:73:de:7f:fb: a9:4f:b4:0b:9b:ff:0b:8d:e3:e4:a8:30:6c:34:de: 17:d1:c9:34:0f:cb:75:70:98:63:91:08:7b:87:2f: 1d:12:37:1e:35:37:40:d0:dc:a4:6b:48:98:99:e9: aa:35:5d:93:4c:a3:1f:6a:a7:4e:e4:ee:12:71:e6: 7e:eb:b9:64:d5:49:b1:11:39:f4:35:ae:73:9a:0c: 9c:d4:cc:6b:d1:69:9d:51:16:1c:27:c4:02:8a:a5: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:44:85:20:B7:41:72:F1:F1:CA:5D:DA:C8:91:3D:EA:D6:8B:74:7A X509v3 Authority Key Identifier: keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/MkSFILdBcvHxyl3ayJE96taLdHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.78.0/23 Signature Algorithm: sha256WithRSAEncryption bc:1c:4a:ff:33:ae:e7:c8:ce:f0:1d:55:18:bd:a9:b1:3a:20: 72:ab:1e:a0:ff:e1:fd:8f:72:e5:19:9b:37:db:7a:a4:52:17: 8a:bf:56:db:d9:92:4d:a6:36:06:b1:7d:45:98:1d:2b:22:2a: a8:16:4b:53:d4:ba:6b:54:8c:8e:44:62:72:08:be:c0:63:57: 29:a7:64:80:58:6e:51:3f:77:87:bf:08:f1:5d:33:9d:7e:dd: 0e:f1:c3:76:61:b8:ee:ff:8f:01:38:17:03:c0:81:1e:cd:89: 03:9f:b8:5e:8e:88:96:fc:b6:94:eb:95:bf:16:4b:e5:db:41: d7:53:5b:f8:ab:a5:4e:98:52:35:84:b9:91:47:46:cc:8b:d8: a2:82:e5:85:5d:75:e9:a6:0e:2f:97:54:a4:4f:ca:cd:f1:96: 5a:c9:5b:50:43:78:de:1d:cf:10:42:2e:9e:b1:d3:fb:3c:67: 6f:58:00:53:7d:88:43:95:df:2a:1f:bb:63:37:d5:ef:bc:fd: bb:86:91:59:0b:b8:6c:0f:41:90:eb:36:11:16:ff:b3:db:f6: ba:64:95:f5:78:a4:a6:19:59:84:d8:e6:2d:dc:04:81:3a:27: 7a:c0:01:af:d2:b0:fe:98:c7:5a:ba:d4:b9:22:7f:ce:f4:25: e2:fd:93:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5VyJu2ovwh/L6zwlSqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx OTlkNDkwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjQ0ODUyMGI3NDE3MmYxZjFjYTVkZGFjODkxM2RlYWQ2OGI3NDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfuZhn+2OpMxyiuxEd4iHKUEPA5w QC+Z5b3UoeUSz6yYIrpq1WqBMoPMv6ngnYyMSniJP0S7b0wT6wmXgGHwi4J+1F39 fdn3Ab3eQXaE3AiF60l0i/a6wJSZ0S9W9kU/FgRml5lOrdT4uKEo2lPx7w3BAonC D2WoInRC7MCmYjkb3wetGRNGW4N65Lwza5FIa9N/EY2XfmTrNyqHEu/x7HPef/up T7QLm/8LjePkqDBsNN4X0ck0D8t1cJhjkQh7hy8dEjceNTdA0Nyka0iYmemqNV2T TKMfaqdO5O4SceZ+67lk1UmxETn0Na5zmgyc1Mxr0WmdURYcJ8QCiqV79wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJEhSC3QXLx8cpd2siRPerWi3R6MB8GA1UdIwQY MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt YjgzNGZhZjZhY2VkLzEvTWtTRklMZEJjdkh4eWwzYXlKRTk2dGFMZEhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVdOMA0G CSqGSIb3DQEBCwUAA4IBAQC8HEr/M67nyM7wHVUYvamxOiByqx6g/+H9j3LlGZs3 23qkUheKv1bb2ZJNpjYGsX1FmB0rIiqoFktT1LprVIyORGJyCL7AY1cpp2SAWG5R P3eHvwjxXTOdft0O8cN2Ybju/48BOBcDwIEezYkDn7hejoiW/LaU65W/Fkvl20HX U1v4q6VOmFI1hLmRR0bMi9iiguWFXXXppg4vl1SkT8rN8ZZayVtQQ3jeHc8QQi6e sdP7PGdvWABTfYhDld8qH7tjN9XvvP27hpFZC7hsD0GQ6zYRFv+z2/a6ZJX1eKSm GVmE2OYt3ASBOid6wAGv0rD+mMdautS5In/O9CXi/ZNf -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:41 2026 by rpki-client