This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MjkGY9Bx0oUa6_WKGE3-YNpXxo0.roa File: MjkGY9Bx0oUa6_WKGE3-YNpXxo0.roa (raw, json) Hash identifier: iBp5meUR/VFYU0FvzoCZamkfbh04THzbP904DazRpiY= Subject key identifier: 32:39:06:63:D0:71:D2:85:1A:EB:F5:8A:18:4D:FE:60:DA:57:C6:8D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DD1FD48985EC0D76DABD70404FCB Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MjkGY9Bx0oUa6_WKGE3-YNpXxo0.roa Signing time: Fri 02 Jan 2026 16:20:41 +0000 ROA not before: Fri 02 Jan 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212508 IP address blocks: 178.218.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:dd:1f:d4:89:85:ec:0d:76:da:bd:70:40:4f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32390663d071d2851aebf58a184dfe60da57c68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:99:f7:81:fd:6e:8f:e9:0b:66:9a:d6:dc: 91:f7:bb:fa:4b:f4:ae:db:47:72:ba:a4:78:b6:56: 5d:3d:b4:45:ee:fa:9c:bc:9b:c4:02:68:fb:82:f3: 28:63:54:99:54:47:b0:1a:b5:d0:f8:2e:6f:31:41: c1:81:73:12:69:b5:1e:3b:06:80:c2:9c:d9:51:78: 51:ed:c2:d9:c8:91:82:b8:78:9a:92:45:7b:82:bf: 18:2f:b2:4c:9b:7d:0e:9a:7b:8b:8d:a7:4f:92:5a: 7b:7a:76:b6:b8:87:a4:39:0a:7f:45:83:02:c4:9b: a4:db:a3:51:e1:76:88:c6:ed:00:15:67:6b:5c:e1: 31:08:f4:82:e9:4f:60:05:0e:17:f0:47:c9:e0:4d: 67:2f:ff:7f:aa:c1:2c:43:72:77:d6:1c:80:ef:a8: 63:3d:da:46:cc:c2:ac:34:fc:21:c8:22:dd:a2:03: cc:bb:b2:83:9c:47:e7:9d:78:d5:7d:60:61:8a:7c: 07:54:8b:7e:35:96:45:05:06:6c:51:b6:e8:e7:bf: 92:3f:6e:b2:b2:18:11:66:04:70:da:4a:20:38:10: 8d:9e:36:1f:c9:30:68:f0:16:50:09:91:63:d2:b2: 91:8a:71:31:87:73:c9:b6:60:89:6e:ca:1b:b7:a3: ee:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:06:63:D0:71:D2:85:1A:EB:F5:8A:18:4D:FE:60:DA:57:C6:8D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MjkGY9Bx0oUa6_WKGE3-YNpXxo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.144.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:77:56:e9:e1:eb:8f:2b:7b:20:39:f7:54:ff:1a:66:f6:b6: e9:45:dc:49:1a:d4:c2:02:aa:8e:17:77:c5:ad:ba:31:08:3f: 11:ae:d7:00:fc:cd:bc:90:1b:3c:8e:c5:34:1a:65:8b:4b:be: 6a:1e:87:63:d6:a3:06:21:1d:c8:8b:b1:54:8f:3c:d5:b4:a9: 1a:44:69:79:a2:9d:89:11:c9:57:38:2b:0f:d4:b3:8f:fe:2b: ee:e1:ea:43:96:44:ec:9d:53:70:54:a4:54:37:67:a1:82:c9: 28:4e:95:9f:d9:96:b4:2e:c9:24:fe:52:8b:c1:99:1a:83:8e: bd:7b:e1:cc:bd:3f:f8:9f:3b:6e:71:d5:d6:4d:fb:b6:4d:2b: 51:44:a1:c9:c3:bc:d7:44:78:06:a8:73:ca:0e:f7:4d:a1:d1: 1a:a9:43:97:ed:dd:10:b1:24:85:17:fd:c4:2d:f3:62:4d:01: f8:fc:37:6f:87:c2:cc:de:b4:6b:38:cd:60:02:25:f4:b8:57: db:c1:27:51:00:8a:29:f0:8d:c7:59:5e:b2:0c:bd:5d:e5:88: b8:a5:aa:f3:5d:1d:e8:14:3b:3f:31:ae:64:00:70:cb:7e:01: 2d:74:8b:5f:30:d9:25:68:e7:9a:b0:68:3f:2d:40:dc:f2:56: c9:58:cf:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gt0f1ImF7A122r1wQE/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjM5MDY2M2QwNzFkMjg1MWFlYmY1OGExODRkZmU2MGRhNTdjNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqOZ94H9bo/pC2aa1tyR97v6S/Su 20dyuqR4tlZdPbRF7vqcvJvEAmj7gvMoY1SZVEewGrXQ+C5vMUHBgXMSabUeOwaA wpzZUXhR7cLZyJGCuHiakkV7gr8YL7JMm30OmnuLjadPklp7ena2uIekOQp/RYMC xJuk26NR4XaIxu0AFWdrXOExCPSC6U9gBQ4X8EfJ4E1nL/9/qsEsQ3J31hyA76hj PdpGzMKsNPwhyCLdogPMu7KDnEfnnXjVfWBhinwHVIt+NZZFBQZsUbbo57+SP26y shgRZgRw2kogOBCNnjYfyTBo8BZQCZFj0rKRinExh3PJtmCJbsobt6PuHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDI5BmPQcdKFGuv1ihhN/mDaV8aNMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvTWprR1k5Qngwb1VhNl9XS0dFMy1ZTnBYeG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstqQMA0G CSqGSIb3DQEBCwUAA4IBAQAMd1bp4euPK3sgOfdU/xpm9rbpRdxJGtTCAqqOF3fF rboxCD8RrtcA/M28kBs8jsU0GmWLS75qHodj1qMGIR3Ii7FUjzzVtKkaRGl5op2J EclXOCsP1LOP/ivu4epDlkTsnVNwVKRUN2ehgskoTpWf2Za0Lskk/lKLwZkag469 e+HMvT/4nztucdXWTfu2TStRRKHJw7zXRHgGqHPKDvdNodEaqUOX7d0QsSSFF/3E LfNiTQH4/Ddvh8LM3rRrOM1gAiX0uFfbwSdRAIop8I3HWV6yDL1d5Yi4parzXR3o FDs/Ma5kAHDLfgEtdItfMNklaOeasGg/LUDc8lbJWM/E -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:07 2026 by rpki-client