This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa File: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (raw, json) Hash identifier: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg= Subject key identifier: 98:DB:41:FB:11:FE:42:17:4A:2E:A2:6C:8C:68:FA:C6:9F:56:2A:2C Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019B7C7F6BF14A1D855D5341D4D00337AD84 Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa Signing time: Fri 02 Jan 2026 02:18:04 +0000 ROA not before: Fri 02 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.60.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6b:f1:4a:1d:85:5d:53:41:d4:d0:03:37:ad:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Jan 2 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98db41fb11fe42174a2ea26c8c68fac69f562a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:02:90:60:62:c6:72:f4:f7:c6:59:ea:fc: b3:80:99:7f:29:92:96:b7:6b:8c:fe:95:7f:a2:9a: 89:f3:78:1a:99:2f:84:15:41:bc:02:14:31:b2:eb: bc:24:62:7b:24:9e:db:cd:5c:a7:a3:db:92:d8:11: 5b:a4:e9:6a:5e:21:ba:4c:2d:4a:83:c8:cc:0c:31: c7:89:e9:82:5b:88:37:ac:b7:d7:af:2a:54:a5:0c: d2:45:c0:6c:a4:96:6c:42:71:0d:51:e4:f0:6f:4c: 6f:0d:07:a6:59:96:3d:13:d9:53:0e:96:f1:c0:e4: b6:9d:69:2a:2b:08:7e:6c:91:27:9a:c9:6a:35:f8: 74:69:f8:13:48:97:e1:02:9e:89:c9:81:9c:ef:50: cc:d5:83:12:69:5e:c7:61:f1:f0:c5:7e:13:2c:33: 28:15:c6:e5:84:3c:c4:bb:ff:7a:2c:35:5c:b0:09: 3c:0b:04:38:88:29:e6:11:65:14:c9:a8:3f:86:60: 53:ba:fa:70:16:4a:43:26:2c:28:12:24:71:ac:aa: 56:e7:04:e7:20:a9:74:f0:a1:f0:ed:d4:a5:25:0d: 38:fb:c4:6d:8a:85:d8:e3:87:71:14:00:f0:79:f2: 61:1c:a1:c9:7f:4d:80:c0:10:5a:91:03:39:2a:48: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:41:FB:11:FE:42:17:4A:2E:A2:6C:8C:68:FA:C6:9F:56:2A:2C X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.248.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e7:36:cd:43:d8:78:a7:85:90:d5:d9:c2:fe:69:d0:69:87: d2:94:2f:5b:71:a5:75:e0:ae:27:7f:5c:79:52:41:8d:39:27: 2c:b9:f3:73:77:f6:4f:f6:d0:b6:22:97:e2:1f:0e:9e:41:e9: 49:dc:90:96:d2:50:cb:15:7a:34:4f:96:66:e4:fe:32:0b:33: 30:20:eb:ea:e2:a6:11:ec:54:0a:da:94:39:6c:68:fd:6d:fa: 30:42:9e:ae:af:f3:23:b3:47:6b:64:a7:0b:d9:15:fe:0e:8d: 3f:da:5e:df:53:15:83:19:4f:31:a3:1d:d4:65:52:ea:b4:15: dd:34:09:e2:4b:ce:ed:fe:ba:c8:e9:16:93:85:46:7f:65:ce: a3:eb:6b:7d:e1:85:ad:e9:3b:14:6c:11:7a:8d:77:8d:ae:75: 6a:7e:cc:6e:d1:fc:e9:e1:49:85:18:f7:6b:15:a7:45:26:25: 4a:ba:76:17:8a:3f:76:f2:60:b8:8c:e5:d8:a1:0b:12:52:eb: 31:7f:74:5d:9d:a2:57:16:1d:2e:5f:3e:ce:67:97:d9:05:05: a0:bf:10:62:53:e0:7d:7c:37:af:00:5e:2c:df:1b:35:84:86: 01:a4:db:f0:49:82:43:c4:b5:4a:a9:7b:b0:0a:2f:7c:fe:1e: 9f:fd:bf:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2vxSh2FXVNB1NADN62EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjYwMTAyMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRiNDFmYjExZmU0MjE3NGEyZWEyNmM4YzY4ZmFjNjlmNTYyYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxwCkGBixnL098ZZ6vyzgJl/KZKW t2uM/pV/opqJ83gamS+EFUG8AhQxsuu8JGJ7JJ7bzVyno9uS2BFbpOlqXiG6TC1K g8jMDDHHiemCW4g3rLfXrypUpQzSRcBspJZsQnENUeTwb0xvDQemWZY9E9lTDpbx wOS2nWkqKwh+bJEnmslqNfh0afgTSJfhAp6JyYGc71DM1YMSaV7HYfHwxX4TLDMo FcblhDzEu/96LDVcsAk8CwQ4iCnmEWUUyag/hmBTuvpwFkpDJiwoEiRxrKpW5wTn IKl08KHw7dSlJQ04+8RtioXY44dxFADwefJhHKHJf02AwBBakQM5KkhAPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjbQfsR/kIXSi6ibIxo+safViosMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvbU50Qi14SC1RaGRLTHFKc2pHajZ4cDlXS2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTz4MA0G CSqGSIb3DQEBCwUAA4IBAQCb5zbNQ9h4p4WQ1dnC/mnQaYfSlC9bcaV14K4nf1x5 UkGNOScsufNzd/ZP9tC2IpfiHw6eQelJ3JCW0lDLFXo0T5Zm5P4yCzMwIOvq4qYR 7FQK2pQ5bGj9bfowQp6ur/Mjs0drZKcL2RX+Do0/2l7fUxWDGU8xox3UZVLqtBXd NAniS87t/rrI6RaThUZ/Zc6j62t94YWt6TsUbBF6jXeNrnVqfsxu0fzp4UmFGPdr FadFJiVKunYXij928mC4jOXYoQsSUusxf3RdnaJXFh0uXz7OZ5fZBQWgvxBiU+B9 fDevAF4s3xs1hIYBpNvwSYJDxLVKqXuwCi98/h6f/b/N -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client