This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/pMXoRrm1A-T70xPjALrZ4oMq61E.roa File: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (raw, json) Hash identifier: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0= Subject key identifier: A4:C5:E8:46:B9:B5:03:E4:FB:D3:13:E3:00:BA:D9:E2:83:2A:EB:51 Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Certificate serial: 019B7D5C4DF404B1A92D58DEFF42FF715676 Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/pMXoRrm1A-T70xPjALrZ4oMq61E.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204922 IP address blocks: 185.235.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4d:f4:04:b1:a9:2d:58:de:ff:42:ff:71:56:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c5e846b9b503e4fbd313e300bad9e2832aeb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:65:bc:39:92:a6:c2:a8:50:a1:11:7f:e5:34: 99:0b:97:dc:51:a2:02:cc:ba:54:98:f7:4f:e8:c9: bc:a0:5b:27:98:33:78:7c:ed:d6:f1:7b:d3:8c:78: f5:4d:35:28:2b:52:ff:92:be:d4:0f:38:7e:10:fa: 51:de:f1:a8:dc:49:21:ff:4b:86:17:fa:7a:c3:ee: 9e:d3:e5:2a:f2:d7:cb:6c:0d:e8:5e:71:17:71:36: 57:8e:78:fb:cf:4e:6e:b0:df:a2:f1:1a:d2:27:66: 14:df:59:35:c0:31:91:e8:9c:54:08:ec:54:5c:59: 0f:55:9e:79:7b:ff:e8:ca:a5:6a:21:16:c6:9a:c8: 46:67:09:50:3b:30:1e:a5:d0:aa:90:c0:d3:c7:45: a9:7a:7d:1d:10:08:6c:2d:ac:bc:43:40:8e:da:38: 83:a8:00:2d:cb:df:dc:d2:22:06:e2:a2:71:2b:a6: 96:85:90:ba:2a:4b:9e:4f:bb:b2:be:aa:6e:f2:ce: f7:d6:6a:6d:9b:d3:58:d9:a8:f0:b1:83:d0:d3:82: ee:a9:d5:d4:27:1d:b8:8c:e0:26:fc:8d:9a:c1:53: 51:d1:15:0a:2e:20:cb:77:40:75:16:7e:c6:d2:70: f6:31:53:30:1e:21:69:a0:2a:46:05:a5:f2:56:22: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:E8:46:B9:B5:03:E4:FB:D3:13:E3:00:BA:D9:E2:83:2A:EB:51 X509v3 Authority Key Identifier: keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/pMXoRrm1A-T70xPjALrZ4oMq61E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.208.0/22 Signature Algorithm: sha256WithRSAEncryption 75:64:a2:34:73:8c:b0:25:8e:d0:25:35:c2:40:ec:40:6c:39: af:90:6c:eb:eb:8a:89:da:91:fc:d2:37:72:f4:e7:3c:a3:bb: eb:99:3f:fb:fc:5f:c2:39:2a:60:a1:64:d2:29:f2:0e:f0:f7: 69:49:40:28:1c:8c:fe:6c:84:cf:6f:1b:92:82:b3:ef:a6:20: f8:bc:b6:24:7b:6a:45:fc:bf:d2:62:1b:00:d3:3c:86:62:a5: 74:06:b2:88:13:e0:d1:b0:b2:e6:fd:f3:f6:9d:46:61:b4:95: b3:06:93:3e:99:fe:88:2a:3a:fd:5f:a1:ad:a3:c0:17:d6:2a: 6b:d5:b8:be:27:12:f8:10:62:52:d0:86:41:86:8a:32:cf:76: 9e:96:fd:ff:88:33:83:4d:1c:89:37:2f:f1:3c:df:d8:01:63: 63:d2:f4:91:af:24:56:e4:80:41:e7:79:09:bc:b7:56:0b:57: 03:fa:83:ee:47:be:33:ed:f7:5a:ae:05:52:1b:5f:3f:06:11: 47:e6:14:94:35:bc:53:29:63:f4:db:27:dd:7e:08:00:e9:0b: ea:80:9b:e9:b9:28:bc:fe:b1:aa:41:1f:5d:fc:fd:8e:b9:31: 46:b4:f6:eb:39:e6:34:e3:9a:b8:fc:fe:38:2c:be:6b:d3:28: 00:94:33:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XE30BLGpLVje/0L/cVZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz MDMxZDkwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGM1ZTg0NmI5YjUwM2U0ZmJkMzEzZTMwMGJhZDllMjgzMmFlYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GW8OZKmwqhQoRF/5TSZC5fcUaIC zLpUmPdP6Mm8oFsnmDN4fO3W8XvTjHj1TTUoK1L/kr7UDzh+EPpR3vGo3Ekh/0uG F/p6w+6e0+Uq8tfLbA3oXnEXcTZXjnj7z05usN+i8RrSJ2YU31k1wDGR6JxUCOxU XFkPVZ55e//oyqVqIRbGmshGZwlQOzAepdCqkMDTx0Wpen0dEAhsLay8Q0CO2jiD qAAty9/c0iIG4qJxK6aWhZC6KkueT7uyvqpu8s731mptm9NY2ajwsYPQ04LuqdXU Jx24jOAm/I2awVNR0RUKLiDLd0B1Fn7G0nD2MVMwHiFpoCpGBaXyViJ62QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTF6Ea5tQPk+9MT4wC62eKDKutRMB8GA1UdIwQY MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt YjZkNGM0ZmMwYzIxLzEvcE1Yb1JybTFBLVQ3MHhQakFMclo0b01xNjFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuevQMA0G CSqGSIb3DQEBCwUAA4IBAQB1ZKI0c4ywJY7QJTXCQOxAbDmvkGzr64qJ2pH80jdy 9Oc8o7vrmT/7/F/COSpgoWTSKfIO8PdpSUAoHIz+bITPbxuSgrPvpiD4vLYke2pF /L/SYhsA0zyGYqV0BrKIE+DRsLLm/fP2nUZhtJWzBpM+mf6IKjr9X6Gto8AX1ipr 1bi+JxL4EGJS0IZBhooyz3aelv3/iDODTRyJNy/xPN/YAWNj0vSRryRW5IBB53kJ vLdWC1cD+oPuR74z7fdargVSG18/BhFH5hSUNbxTKWP02yfdfggA6QvqgJvpuSi8 /rGqQR9d/P2OuTFGtPbrOeY045q4/P44LL5r0ygAlDN/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:56 2026 by rpki-client