This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/muW9cBNMeWZbUzZWm3451nPmZy8.roa File: muW9cBNMeWZbUzZWm3451nPmZy8.roa (raw, json) Hash identifier: Une3GtFaZuE/Q/AgcVr8m9ytRRPpxQYRTGkYYful7io= Subject key identifier: 9A:E5:BD:70:13:4C:79:66:5B:53:36:56:9B:7E:39:D6:73:E6:67:2F Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Certificate serial: 019B7D5BB867E3C5C5F608847B2932DCDAAD Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/muW9cBNMeWZbUzZWm3451nPmZy8.roa Signing time: Fri 02 Jan 2026 06:18:41 +0000 ROA not before: Fri 02 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35064 IP address blocks: 85.119.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b8:67:e3:c5:c5:f6:08:84:7b:29:32:dc:da:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Validity Not Before: Jan 2 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ae5bd70134c79665b5336569b7e39d673e6672f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:2c:6f:ce:9e:9c:c7:c2:56:03:04:3e:ef: 10:0e:b8:d2:b5:f0:2a:bd:c1:fc:79:f0:b1:43:69: 1f:52:aa:bf:a3:5a:f6:cb:02:b8:6b:bb:6b:bd:91: c4:24:05:02:b6:ae:47:e5:4c:84:43:77:33:b7:da: 9b:63:87:8b:d1:cd:b5:0c:13:fb:c1:14:23:0a:de: 53:66:e5:dc:44:30:d8:b4:1f:53:32:9c:cf:ac:54: 3a:2a:5d:ce:9e:4e:92:86:08:51:fe:10:1d:05:82: 13:39:df:7d:28:dc:b2:5f:e4:5a:e3:06:97:b6:4e: d4:a2:40:e8:2b:8b:7c:dd:3e:ac:52:f6:55:84:02: 89:61:54:0e:63:15:38:42:b3:26:96:08:e3:ef:88: 96:35:61:3a:78:6d:58:ff:fa:ee:de:60:94:92:7c: 2c:d4:51:3e:6f:f7:15:14:6a:81:8f:10:3b:23:f5: b7:5e:85:26:c6:86:46:46:b6:81:12:27:a2:7c:4e: ba:4f:82:fd:ee:1c:33:6c:a9:02:f9:bb:ad:24:50: 96:c1:46:ad:37:9f:93:00:fa:65:81:a5:86:09:58: d9:86:ed:a4:dd:da:a8:0e:20:d3:bd:96:d2:57:90: 10:bf:f8:72:38:cc:54:f7:8c:09:09:30:59:9e:c9: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:BD:70:13:4C:79:66:5B:53:36:56:9B:7E:39:D6:73:E6:67:2F X509v3 Authority Key Identifier: keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/muW9cBNMeWZbUzZWm3451nPmZy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.18.0/24 Signature Algorithm: sha256WithRSAEncryption 08:63:dc:20:26:2d:e7:04:f5:12:8b:5c:4b:88:1a:ca:f2:2f: 69:55:54:25:1c:31:5b:ab:85:ec:00:c4:b3:84:a0:f2:e7:09: b7:db:54:6c:35:eb:a5:81:91:5f:58:7c:5b:d9:d5:a5:d5:cc: 83:05:1c:71:3d:73:a9:80:a0:af:ab:d6:e3:fc:f3:03:c3:14: 3a:b3:dc:e5:53:39:76:79:17:0a:d3:83:c5:6e:3b:d1:3a:e7: b6:cf:80:56:a7:60:1b:ec:b5:b5:65:78:8d:31:6a:74:c4:43: b6:e9:30:5a:8c:41:44:97:1d:78:d5:98:1f:3e:26:22:e3:cb: 5d:ec:28:43:25:d1:8d:2b:c3:2a:a1:9a:60:cb:d8:b5:c1:22: 4d:f5:09:eb:17:f9:86:08:8f:25:86:7d:4a:af:12:d7:d8:fc: d1:9c:77:cf:c1:ab:47:15:a5:b4:e8:9c:9a:82:c9:08:c7:15: 0c:e7:2a:d1:4f:b0:be:ab:36:00:fa:82:67:e0:f6:09:0d:db: c4:4e:af:5a:71:fb:c0:80:41:aa:aa:8e:df:7a:96:8a:9c:68: d7:c9:16:99:d8:0d:06:13:e0:d5:ae:84:80:10:70:ef:6d:e2: 60:1c:72:c3:30:71:4a:b8:0f:f0:f5:df:89:9c:98:73:5e:e9: ae:01:d4:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W7hn48XF9giEeyky3NqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk NTNiNGQwHhcNMjYwMTAyMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWU1YmQ3MDEzNGM3OTY2NWI1MzM2NTY5YjdlMzlkNjczZTY2NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogEsb86enMfCVgMEPu8QDrjStfAq vcH8efCxQ2kfUqq/o1r2ywK4a7trvZHEJAUCtq5H5UyEQ3czt9qbY4eL0c21DBP7 wRQjCt5TZuXcRDDYtB9TMpzPrFQ6Kl3Onk6ShghR/hAdBYITOd99KNyyX+Ra4waX tk7UokDoK4t83T6sUvZVhAKJYVQOYxU4QrMmlgjj74iWNWE6eG1Y//ru3mCUknws 1FE+b/cVFGqBjxA7I/W3XoUmxoZGRraBEieifE66T4L97hwzbKkC+butJFCWwUat N5+TAPplgaWGCVjZhu2k3dqoDiDTvZbSV5AQv/hyOMxU94wJCTBZnskqvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrlvXATTHlmW1M2Vpt+OdZz5mcvMB8GA1UdIwQY MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt MzAwOTdhMjQ2YTljLzEvbXVXOWNCTk1lV1piVXpaV20zNDUxblBtWnk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXcSMA0G CSqGSIb3DQEBCwUAA4IBAQAIY9wgJi3nBPUSi1xLiBrK8i9pVVQlHDFbq4XsAMSz hKDy5wm321RsNeulgZFfWHxb2dWl1cyDBRxxPXOpgKCvq9bj/PMDwxQ6s9zlUzl2 eRcK04PFbjvROue2z4BWp2Ab7LW1ZXiNMWp0xEO26TBajEFElx141ZgfPiYi48td 7ChDJdGNK8MqoZpgy9i1wSJN9QnrF/mGCI8lhn1KrxLX2PzRnHfPwatHFaW06Jya gskIxxUM5yrRT7C+qzYA+oJn4PYJDdvETq9acfvAgEGqqo7fepaKnGjXyRaZ2A0G E+DVroSAEHDvbeJgHHLDMHFKuA/w9d+JnJhzXumuAdTh -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:39 2026 by rpki-client