This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa File: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (raw, json) Hash identifier: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw= Subject key identifier: 32:34:AB:10:A3:02:59:CC:8C:10:4E:A7:4B:EA:BB:5A:E5:AF:E9:32 Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Certificate serial: 019B775950FB66AB57D3AF186C800160703A Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42073 IP address blocks: 185.64.92.0/22 maxlen: 22 194.39.240.0/24 maxlen: 24 194.102.202.0/24 maxlen: 24 194.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:50:fb:66:ab:57:d3:af:18:6c:80:01:60:70:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3234ab10a30259cc8c104ea74beabb5ae5afe932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:91:ed:a0:f6:4a:9c:63:c2:e9:14:ff:fb:a8: cb:97:a0:fd:99:a6:f7:2f:e2:d7:f3:5f:a4:2f:6f: f7:cf:fd:73:b6:dd:fe:bd:e8:30:22:77:75:84:b4: e0:0d:d3:60:70:bc:f2:2b:0a:19:f6:9d:87:b9:79: 29:e2:7d:63:66:49:0d:77:3d:be:da:3b:c7:9b:13: 23:d7:87:b8:5d:36:06:23:50:61:9e:54:d7:a5:1c: 4a:02:3d:c5:df:18:29:03:58:8f:09:51:98:e1:a3: 60:9f:b2:e5:e0:d3:dd:cb:35:7d:f8:c8:a6:4b:02: 58:2e:dd:b9:15:e0:19:44:90:02:38:18:60:df:45: 79:d3:4a:e6:19:63:9d:83:93:d6:6e:44:ab:2e:5e: be:3f:37:cc:72:8c:76:1a:7b:ad:5d:f6:13:54:60: 93:e0:d5:3b:5b:86:d9:8d:6f:dd:6f:55:3e:cc:70: 22:38:5a:cf:99:61:07:ac:52:39:92:ef:69:33:1a: a1:f1:30:18:cd:e9:03:b8:0c:5a:95:8d:16:63:d5: 9b:ba:69:11:7d:ef:b3:f7:f4:63:17:a6:db:02:d5: 93:35:54:d2:63:b2:73:3c:da:e5:f4:94:f7:98:f0: e0:48:80:14:c4:ee:35:bb:05:2c:04:b7:54:92:e3: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:AB:10:A3:02:59:CC:8C:10:4E:A7:4B:EA:BB:5A:E5:AF:E9:32 X509v3 Authority Key Identifier: keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.92.0/22 194.39.240.0/24 194.102.202.0/24 194.169.233.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:8f:47:3a:c5:04:ba:aa:d3:f5:c7:86:ed:2d:81:24:45:2f: 39:18:7d:bd:c3:47:17:6b:e9:19:94:0f:ed:cd:1a:02:f9:4d: e8:28:4d:ad:0a:b0:5f:5a:40:4f:58:5b:7f:aa:08:5f:1d:a8: 53:5b:71:6a:89:31:81:93:de:01:7e:40:ec:85:94:f1:4b:f7: f2:1f:21:eb:08:82:82:e9:4f:06:43:f8:c8:dd:a3:ab:43:67: dc:8f:03:ce:84:15:50:78:b2:b8:a0:4e:ea:9e:3c:74:93:1d: 4e:94:46:01:80:c3:02:22:9c:c3:10:d7:05:0e:b7:58:f3:6d: ad:68:73:8d:60:b7:d7:46:a5:0e:ea:28:e9:50:e1:36:b4:f1: 8e:6c:b0:c9:12:98:6f:64:2b:19:dd:e1:91:a7:c3:00:44:00: 68:e4:1c:50:48:61:1d:ac:41:d2:d8:22:fe:3c:43:a3:e4:90: 2f:e6:85:0d:41:fc:26:2e:76:0d:7d:c7:4c:d6:1c:f3:e1:60: 09:1a:57:d9:b0:cb:91:e5:59:96:13:38:93:db:cb:2b:6c:f1: 43:b7:28:85:07:4a:d4:54:05:43:8b:43:04:36:fa:f7:56:e8: 5a:46:d4:1f:72:d2:95:5d:ba:84:05:18:4b:e1:44:4d:54:1d: ba:59:91:f8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WVD7ZqtX068YbIABYHA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWUzZGMwZWJmYjEwZWJiOTQxOTc0NTQ3MzJlZjc4NmFj NzViNzAwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjM0YWIxMGEzMDI1OWNjOGMxMDRlYTc0YmVhYmI1YWU1YWZlOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZHtoPZKnGPC6RT/+6jLl6D9mab3 L+LX81+kL2/3z/1ztt3+vegwInd1hLTgDdNgcLzyKwoZ9p2HuXkp4n1jZkkNdz2+ 2jvHmxMj14e4XTYGI1BhnlTXpRxKAj3F3xgpA1iPCVGY4aNgn7Ll4NPdyzV9+Mim SwJYLt25FeAZRJACOBhg30V500rmGWOdg5PWbkSrLl6+PzfMcox2GnutXfYTVGCT 4NU7W4bZjW/db1U+zHAiOFrPmWEHrFI5ku9pMxqh8TAYzekDuAxalY0WY9WbumkR fe+z9/RjF6bbAtWTNVTSY7JzPNrl9JT3mPDgSIAUxO41uwUsBLdUkuO36wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDI0qxCjAlnMjBBOp0vqu1rlr+kyMB8GA1UdIwQY MBaAFLFePcDr+xDruUGXRUcy73hqx1twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYt MWQwMDdiZTljZGQ4LzEvTWpTckVLTUNXY3lNRUU2blMtcTdXdVd2NlRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYtMWQwMDdiZTljZGQ4 LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuUBcAwQA wifwAwQAwmbKAwQAwqnpMA0GCSqGSIb3DQEBCwUAA4IBAQCbj0c6xQS6qtP1x4bt LYEkRS85GH29w0cXa+kZlA/tzRoC+U3oKE2tCrBfWkBPWFt/qghfHahTW3FqiTGB k94BfkDshZTxS/fyHyHrCIKC6U8GQ/jI3aOrQ2fcjwPOhBVQeLK4oE7qnjx0kx1O lEYBgMMCIpzDENcFDrdY822taHONYLfXRqUO6ijpUOE2tPGObLDJEphvZCsZ3eGR p8MARABo5BxQSGEdrEHS2CL+PEOj5JAv5oUNQfwmLnYNfcdM1hzz4WAJGlfZsMuR 5VmWEziT28srbPFDtyiFB0rUVAVDi0MENvr3VuhaRtQfctKVXbqEBRhL4URNVB26 WZH4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:47 2026 by rpki-client