This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/mMleahkhBsxzGvTuhDg0yXEwF_w.roa File: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (raw, json) Hash identifier: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg= Subject key identifier: 98:C9:5E:6A:19:21:06:CC:73:1A:F4:EE:84:38:34:C9:71:30:17:FC Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Certificate serial: 019B7DCAD66E361D03EAB1C5E5CCDE610989 Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/mMleahkhBsxzGvTuhDg0yXEwF_w.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59662 IP address blocks: 185.81.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d6:6e:36:1d:03:ea:b1:c5:e5:cc:de:61:09:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c95e6a192106cc731af4ee843834c9713017fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:29:f8:f2:da:18:96:0e:46:8d:36:b1:30: c6:1b:eb:1c:f5:81:83:ad:c3:6e:27:55:16:06:8e: e7:2c:e0:bb:20:48:50:ec:2b:41:dc:fc:fc:b2:29: 08:b4:c9:22:48:89:f4:9c:b5:72:72:c7:e9:ac:51: af:d6:38:3c:6e:0a:53:c2:ba:40:e4:47:65:0d:f8: 7c:86:28:f6:bd:c7:58:b0:ab:2c:15:23:fb:7f:7d: 60:ff:13:dc:74:e8:04:3e:49:74:19:35:5f:8d:2a: a3:60:ab:26:7d:67:6c:32:b0:3f:09:84:50:d3:31: 4d:18:45:9e:64:a0:1f:52:80:61:aa:8f:53:f0:3e: bb:63:3a:01:eb:24:67:00:9d:46:29:9a:91:38:96: 92:8e:43:7c:dd:9e:20:ed:ca:8c:59:a8:c9:08:20: 20:bf:6b:ef:19:de:40:2b:19:98:7a:82:03:70:3f: 9f:cc:5d:15:30:ef:69:f4:30:f7:34:5c:d2:26:a5: d9:9b:51:68:1b:2b:21:da:e8:9d:ba:0c:26:7b:77: 3c:4e:c0:f8:b6:e7:65:ce:b8:83:23:39:8d:8d:29: 16:a4:1a:5d:7c:3d:63:d8:e5:6f:84:17:92:84:d5: 0d:46:f9:c4:89:cd:01:e5:a2:d3:2e:a7:50:bd:70: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:5E:6A:19:21:06:CC:73:1A:F4:EE:84:38:34:C9:71:30:17:FC X509v3 Authority Key Identifier: keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/mMleahkhBsxzGvTuhDg0yXEwF_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.103.0/24 Signature Algorithm: sha256WithRSAEncryption 68:8d:de:d1:8a:29:c5:e6:f3:b5:7c:fd:97:29:1d:e8:da:a0: 68:7d:77:94:d3:1c:2b:d4:a4:b6:8d:ec:31:a3:87:41:a4:a7: 21:3f:ac:be:a2:2e:2c:00:8f:d9:d4:d3:94:a0:06:15:de:05: 60:04:80:2a:af:01:04:e9:34:c4:1f:68:25:c9:cc:76:cd:a7: e1:97:39:77:f8:d2:26:61:b5:db:10:ef:65:2f:82:58:cd:1e: ec:42:5a:f4:a3:a8:b6:5c:71:81:36:f6:db:96:b1:4b:03:57: 8b:d3:94:b4:e5:88:32:f6:de:79:f9:da:86:a8:71:c2:8f:2e: 70:02:01:55:8e:2a:b2:8f:14:cc:39:51:23:15:ed:74:09:c3: 4d:2d:5d:bd:56:bd:a5:90:4b:06:aa:1d:2b:20:d9:fc:00:2a: 73:3f:dc:85:b1:9c:8d:c0:ab:c1:59:1d:fa:40:45:b5:4f:43: 7e:b5:28:ab:a6:0a:57:df:d7:ab:3f:06:2c:d7:65:2c:97:b4: f0:ac:9b:e3:37:d2:78:1d:35:b3:97:8f:6c:4a:61:9d:4c:95: b3:80:47:ab:bf:45:5c:f7:47:10:32:2a:d2:05:5e:5b:63:54: dd:1f:5c:a5:17:f3:00:ab:32:aa:a1:f6:ec:73:d5:d0:5c:26: 5a:cb:93:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytZuNh0D6rHF5czeYQmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5 NmZhMmQwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM5NWU2YTE5MjEwNmNjNzMxYWY0ZWU4NDM4MzRjOTcxMzAxN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplcp+PLaGJYORo02sTDGG+sc9YGD rcNuJ1UWBo7nLOC7IEhQ7CtB3Pz8sikItMkiSIn0nLVycsfprFGv1jg8bgpTwrpA 5EdlDfh8hij2vcdYsKssFSP7f31g/xPcdOgEPkl0GTVfjSqjYKsmfWdsMrA/CYRQ 0zFNGEWeZKAfUoBhqo9T8D67YzoB6yRnAJ1GKZqROJaSjkN83Z4g7cqMWajJCCAg v2vvGd5AKxmYeoIDcD+fzF0VMO9p9DD3NFzSJqXZm1FoGysh2uidugwme3c8TsD4 tudlzriDIzmNjSkWpBpdfD1j2OVvhBeShNUNRvnEic0B5aLTLqdQvXAHZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjJXmoZIQbMcxr07oQ4NMlxMBf8MB8GA1UdIwQY MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt ZDMyZTU2ZDc5YjJhLzEvbU1sZWFoa2hCc3h6R3ZUdWhEZzB5WEV3Rl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFnMA0G CSqGSIb3DQEBCwUAA4IBAQBojd7RiinF5vO1fP2XKR3o2qBofXeU0xwr1KS2jewx o4dBpKchP6y+oi4sAI/Z1NOUoAYV3gVgBIAqrwEE6TTEH2glycx2zafhlzl3+NIm YbXbEO9lL4JYzR7sQlr0o6i2XHGBNvbblrFLA1eL05S05Ygy9t55+dqGqHHCjy5w AgFVjiqyjxTMOVEjFe10CcNNLV29Vr2lkEsGqh0rINn8ACpzP9yFsZyNwKvBWR36 QEW1T0N+tSirpgpX39erPwYs12Usl7TwrJvjN9J4HTWzl49sSmGdTJWzgEerv0Vc 90cQMirSBV5bY1TdH1ylF/MAqzKqofbsc9XQXCZay5OW -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:33 2026 by rpki-client