This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa File: MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa (raw, json) Hash identifier: czs+Ay4tcJGJ7KwqRCeDmXFn2JgmJD3EKq749KWblW4= Subject key identifier: 32:28:91:ED:50:77:C2:3A:73:D7:E2:18:53:79:2C:73:E7:11:66:D7 Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019B77C706DA3DB1EF543C7758A3D339972A Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 144.124.208.0/24 maxlen: 24 144.124.211.0/24 maxlen: 24 158.94.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:06:da:3d:b1:ef:54:3c:77:58:a3:d3:39:97:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=322891ed5077c23a73d7e21853792c73e71166d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:16:3e:b6:44:34:fc:8c:34:24:39:d2:d5: 0b:49:ab:11:ab:e6:fb:78:5f:17:b6:db:46:a6:1a: 92:2f:16:f3:b2:f3:e5:75:8f:de:4e:76:bc:1f:e5: 20:94:ae:d5:4e:6c:81:b4:4d:3f:86:62:ab:ba:e2: 54:4b:55:09:90:b2:83:6a:41:f7:e6:5b:58:0f:67: 88:53:3b:0c:c7:ea:50:c2:3b:ec:9b:48:7a:c4:17: f4:f6:4c:a0:bf:36:7c:68:24:fe:c7:30:6e:3e:10: 9b:d4:34:99:8a:f3:74:d8:2e:e7:c5:b6:ef:60:80: fe:8a:35:a9:b7:ec:1c:94:dc:6a:d3:88:56:9f:08: 88:86:b5:48:e4:b8:21:a7:f6:5e:78:b5:ae:d6:0e: 38:0c:96:9d:61:1d:d7:b0:87:28:d2:01:67:6d:87: 16:d0:07:0a:62:3f:07:78:a6:b9:2e:7b:f4:83:00: 7c:9b:27:26:36:e4:a7:08:74:c6:5b:a8:1d:14:06: 94:e6:fe:b3:e9:46:29:01:01:c8:8d:05:9b:30:bf: 5a:da:07:25:a8:c9:c0:6f:a4:20:89:7b:23:4b:fd: 26:d5:7e:77:db:10:b8:35:6d:2c:ed:5c:54:71:74: 44:49:f8:05:9e:cf:9a:11:c7:33:30:17:2d:cc:b0: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:91:ED:50:77:C2:3A:73:D7:E2:18:53:79:2C:73:E7:11:66:D7 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.124.208.0/24 144.124.211.0/24 158.94.212.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:08:c4:71:fa:d2:40:91:c0:d0:46:2c:f6:d4:80:ea:f4:c3: 0e:18:d1:f5:35:ae:c9:1e:10:33:1d:52:ac:38:69:21:c2:cc: 25:aa:4c:5d:c4:0f:eb:33:96:7e:c5:8a:45:a4:6d:24:3e:a5: 11:29:7e:68:63:73:47:3e:77:7f:f8:e3:1f:0c:cd:b0:34:5b: d8:e8:27:d0:41:97:ff:a0:fd:2c:d7:03:fa:f1:e8:ba:11:a6: 93:69:f3:9b:03:bf:44:c6:03:85:85:59:c5:29:3b:39:23:76: 56:36:4f:85:02:a3:fc:a9:0a:7f:0c:97:fb:fa:5f:c6:3b:40: 64:6d:31:f8:eb:f4:83:8e:31:11:9e:0b:e9:3b:30:15:8b:58: 6a:37:2d:f8:d5:75:bb:81:53:67:87:af:4f:f4:c1:ee:df:29: 0b:97:83:b3:5e:c5:96:24:7e:d9:b2:5b:d4:fa:f1:ba:1b:bf: 66:8e:87:94:8e:09:a3:c1:49:a8:94:88:88:01:bd:92:81:ac: 2a:31:73:5c:e7:bb:f5:59:df:c8:73:31:3d:71:c1:93:25:c4: c3:cc:df:57:01:ee:34:b7:72:e8:14:78:17:aa:6c:e1:23:72: 4f:65:b5:34:e5:38:e7:b9:c2:6c:7a:42:96:9d:d1:6b:cb:71: d1:dc:51:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xwbaPbHvVDx3WKPTOZcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjI4OTFlZDUwNzdjMjNhNzNkN2UyMTg1Mzc5MmM3M2U3MTE2NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUWPrZENPyMNCQ50tULSasRq+b7 eF8XtttGphqSLxbzsvPldY/eTna8H+UglK7VTmyBtE0/hmKruuJUS1UJkLKDakH3 5ltYD2eIUzsMx+pQwjvsm0h6xBf09kygvzZ8aCT+xzBuPhCb1DSZivN02C7nxbbv YID+ijWpt+wclNxq04hWnwiIhrVI5Lghp/ZeeLWu1g44DJadYR3XsIco0gFnbYcW 0AcKYj8HeKa5Lnv0gwB8mycmNuSnCHTGW6gdFAaU5v6z6UYpAQHIjQWbML9a2gcl qMnAb6QgiXsjS/0m1X532xC4NW0s7VxUcXRESfgFns+aEcczMBctzLCX7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDIoke1Qd8I6c9fiGFN5LHPnEWbXMB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvTWlpUjdWQjN3anB6MS1JWVUza3NjLWNSWnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkHzQAwQA kHzTAwQAnl7UMA0GCSqGSIb3DQEBCwUAA4IBAQArCMRx+tJAkcDQRiz21IDq9MMO GNH1Na7JHhAzHVKsOGkhwswlqkxdxA/rM5Z+xYpFpG0kPqURKX5oY3NHPnd/+OMf DM2wNFvY6CfQQZf/oP0s1wP68ei6EaaTafObA79ExgOFhVnFKTs5I3ZWNk+FAqP8 qQp/DJf7+l/GO0BkbTH46/SDjjERngvpOzAVi1hqNy341XW7gVNnh69P9MHu3ykL l4OzXsWWJH7ZslvU+vG6G79mjoeUjgmjwUmolIiIAb2SgawqMXNc57v1Wd/IczE9 ccGTJcTDzN9XAe40t3LoFHgXqmzhI3JPZbU05TjnucJsekKWndFry3HR3FGz -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client