This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa File: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (raw, json) Hash identifier: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w= Subject key identifier: 33:16:54:68:E2:BC:3A:FB:5D:D9:87:97:52:3F:AE:68:4F:3C:FD:E4 Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Certificate serial: 019B7E390B3E1A093F5F873C04FA5E786043 Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.170.5.0/24 maxlen: 24 185.170.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:3e:1a:09:3f:5f:87:3c:04:fa:5e:78:60:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33165468e2bc3afb5dd98797523fae684f3cfde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:0a:2c:e9:88:25:22:11:7b:0b:c5:e6:b2: d6:f7:a6:f0:60:59:ed:0f:46:66:b6:bf:8b:76:4f: 1e:a4:e4:49:3c:91:66:4e:bc:70:63:1f:71:a8:7f: e2:23:19:b5:f4:75:5b:70:5b:45:6d:e0:c3:3d:c1: 06:e8:bd:79:e0:19:95:b4:d0:f6:4f:31:de:9d:51: 76:dc:37:2e:ba:01:2f:9b:1c:b7:23:3f:9c:82:24: 32:c4:73:9f:27:f3:48:c6:64:9c:41:f6:4d:c1:ca: 1c:df:4c:a8:4e:4c:e8:b4:6c:f0:cf:15:f8:49:45: 06:e2:79:be:22:b8:fa:35:47:52:bf:75:58:a4:ad: 0e:99:82:3d:e5:b0:47:a0:4d:06:d7:1a:ad:28:8f: 8f:ef:4c:bb:d4:51:27:62:5d:38:8f:2c:a3:4a:29: 9f:54:57:a2:43:33:f1:06:ea:dc:d9:ea:63:1e:40: 3f:78:d3:bc:9c:e3:f8:42:7e:8c:fc:e6:59:b6:d1: 1f:e7:90:af:d0:a0:78:fc:ef:2f:ab:0e:90:29:1b: 5c:59:03:32:c5:e6:e7:3c:dc:d5:b6:f9:44:96:c0: 4e:5f:3b:ec:12:91:37:2b:b7:5e:13:2e:4e:c1:1d: 6c:8a:cd:b3:33:58:07:d1:12:3b:f8:c9:01:10:5a: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:54:68:E2:BC:3A:FB:5D:D9:87:97:52:3F:AE:68:4F:3C:FD:E4 X509v3 Authority Key Identifier: keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.5.0-185.170.7.255 Signature Algorithm: sha256WithRSAEncryption 1f:92:c6:c2:ed:ef:ab:39:39:46:91:8c:05:53:67:06:c0:1e: 6f:61:03:e3:d8:62:ea:00:4a:df:93:aa:50:f5:44:84:ab:cb: 9d:ce:bb:f7:f3:de:cc:00:d7:1f:8b:00:12:0c:ad:51:ea:1c: d8:7a:d3:3a:01:87:89:93:25:1c:70:cc:e4:00:f2:67:67:fd: f2:dd:9e:07:7f:f3:aa:5d:54:be:a3:31:11:07:e9:f9:5d:e5: 07:2e:a4:4e:ca:fc:cf:45:14:0f:77:22:df:0a:00:4e:22:e9: 92:33:e9:e1:9e:07:a4:b8:d3:57:ef:80:e2:09:84:0e:db:70: c3:bc:2c:70:96:db:67:f0:6e:8d:36:c1:98:99:c1:a2:6b:ac: 4b:01:eb:f6:39:4e:89:5e:c8:0b:51:11:d1:e7:64:9f:a4:55: a7:de:21:0e:90:3c:10:4a:21:3f:61:b7:3a:96:9a:bf:6f:90: f2:be:9a:f7:6f:7b:bf:5b:80:c3:e8:33:54:f4:02:8f:ae:11: 70:ba:6d:d0:ba:db:ae:87:b8:60:b5:dd:39:17:43:2c:3a:73: be:58:f7:1e:20:86:30:cf:5c:62:14:46:54:3a:d0:df:a0:f8: b7:9f:f6:b7:da:2b:68:de:43:42:70:bf:60:12:43:e3:ec:a8: d6:52:c4:25 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OQs+Ggk/X4c8BPpeeGBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk YTBlYjYwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzE2NTQ2OGUyYmMzYWZiNWRkOTg3OTc1MjNmYWU2ODRmM2NmZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OIKLOmIJSIRewvF5rLW96bwYFnt D0Zmtr+Ldk8epORJPJFmTrxwYx9xqH/iIxm19HVbcFtFbeDDPcEG6L154BmVtND2 TzHenVF23DcuugEvmxy3Iz+cgiQyxHOfJ/NIxmScQfZNwcoc30yoTkzotGzwzxX4 SUUG4nm+Irj6NUdSv3VYpK0OmYI95bBHoE0G1xqtKI+P70y71FEnYl04jyyjSimf VFeiQzPxBurc2epjHkA/eNO8nOP4Qn6M/OZZttEf55Cv0KB4/O8vqw6QKRtcWQMy xebnPNzVtvlElsBOXzvsEpE3K7deEy5OwR1sis2zM1gH0RI7+MkBEFqhAwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDMWVGjivDr7XdmHl1I/rmhPPP3kMB8GA1UdIwQY MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt OTRkMWIxZDE2Yjg1LzEvTXhaVWFPSzhPdnRkMlllWFVqLXVhRTg4X2VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1 LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5qgUD BAO5qgAwDQYJKoZIhvcNAQELBQADggEBAB+SxsLt76s5OUaRjAVTZwbAHm9hA+PY YuoASt+TqlD1RISry53Ou/fz3swA1x+LABIMrVHqHNh60zoBh4mTJRxwzOQA8mdn /fLdngd/86pdVL6jMREH6fld5QcupE7K/M9FFA93It8KAE4i6ZIz6eGeB6S401fv gOIJhA7bcMO8LHCW22fwbo02wZiZwaJrrEsB6/Y5ToleyAtREdHnZJ+kVafeIQ6Q PBBKIT9htzqWmr9vkPK+mvdve79bgMPoM1T0Ao+uEXC6bdC6266HuGC13TkXQyw6 c75Y9x4ghjDPXGIURlQ60N+g+Lef9rfaK2jeQ0Jwv2ASQ+PsqNZSxCU= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:04 2026 by rpki-client