This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa File: mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa (raw, json) Hash identifier: OdsGFptNtjlJ7JmhEzxm/t0Cz+2j+Ta4zs8y6b8C4bU= Subject key identifier: 99:C7:C5:C7:45:9B:E8:DB:83:5A:79:54:BE:CC:43:98:58:1A:F6:2D Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B0902B010CB7B07D2C184576A06A7D313 Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa Signing time: Wed 10 Dec 2025 16:05:29 +0000 ROA not before: Wed 10 Dec 2025 16:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203001 IP address blocks: 185.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:02:b0:10:cb:7b:07:d2:c1:84:57:6a:06:a7:d3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Dec 10 16:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99c7c5c7459be8db835a7954becc4398581af62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:cd:9b:d1:a7:50:de:3d:05:ca:9c:4a:f3: 39:30:45:40:89:20:e3:39:f8:50:da:2c:10:18:91: 5f:05:4f:a5:57:04:a7:67:3e:40:8b:31:fe:30:bb: 25:7b:75:69:71:0f:8e:85:21:5e:45:66:07:d2:b4: 19:01:cb:cb:5f:5e:38:f2:85:5c:e4:e6:2d:81:85: b3:14:57:7f:98:10:3c:36:ed:dd:53:61:cc:b0:d6: b5:17:34:b3:ba:6f:2a:b5:8f:14:17:9f:a0:91:7b: b5:b8:9d:04:de:d8:0a:70:de:33:8f:63:ac:e9:e5: 33:96:23:40:92:7f:85:c8:0d:d2:87:89:e2:59:71: 2c:96:4e:35:a0:cc:60:23:9b:c3:27:c1:8f:cc:6e: e9:e3:c1:de:12:b5:0d:6a:62:90:ed:85:78:23:c6: d0:36:0e:6c:57:d6:6e:90:09:df:8d:a5:3c:27:dc: 89:75:3a:31:63:73:8a:d4:e4:2a:f5:53:df:7c:90: 0a:c1:3e:70:72:12:8b:df:c6:2e:ac:09:32:5e:be: ba:0f:fe:7e:0e:de:b3:3c:50:73:2d:30:77:1e:b5: f7:d0:ff:c7:00:51:2f:5e:91:01:1c:47:f5:c5:a3: 5c:cc:b9:d0:26:5e:6d:e9:c2:c7:51:50:6a:3d:51: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:C5:C7:45:9B:E8:DB:83:5A:79:54:BE:CC:43:98:58:1A:F6:2D X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.123.0/24 Signature Algorithm: sha256WithRSAEncryption 48:9e:0a:ae:ef:ad:42:1d:6e:1e:1f:19:fe:53:9a:a9:a5:da: 3d:cf:e4:65:5a:92:c5:6e:43:a3:2e:4c:84:5a:27:79:bc:34: ce:c8:91:8e:96:b9:ef:6d:d2:8f:ce:0d:4d:33:08:53:07:b2: a8:d8:49:8a:db:0e:fb:53:a7:c0:9f:4d:db:34:49:93:8f:cd: b6:fe:54:6f:f3:c8:2c:33:67:ec:2c:2d:ab:8e:bc:d8:8d:3e: dc:a2:c8:a0:de:24:45:0b:fd:df:ec:16:84:d2:26:8e:c6:d9: 5d:9b:f5:49:01:ce:01:49:0c:a0:3a:42:62:29:b9:95:5a:4a: 73:72:4f:77:89:ae:45:8d:36:0c:7b:57:10:4d:b8:25:76:75: 04:e6:02:75:b6:ac:bb:60:c1:ff:a5:4b:26:fc:23:c6:da:95: 99:c0:37:e1:78:29:87:03:b1:36:4c:13:17:01:67:cd:d5:db: c3:f2:32:49:c3:ae:d6:ec:8a:e4:c0:a9:78:c9:0e:62:09:86: a6:57:f6:51:d2:a8:6f:93:cd:f4:4e:c9:82:4a:3a:00:9b:e0: 43:22:8a:48:16:ca:10:77:24:6d:7e:d2:bd:a0:9e:a0:16:58: 74:4b:58:0b:4f:db:39:1d:0d:a6:43:5d:a4:9d:04:ea:19:cd: 3c:68:0a:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsJArAQy3sH0sGEV2oGp9MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjUxMjEwMTYwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM3YzVjNzQ1OWJlOGRiODM1YTc5NTRiZWNjNDM5ODU4MWFmNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bnNm9GnUN49BcqcSvM5MEVAiSDj OfhQ2iwQGJFfBU+lVwSnZz5AizH+MLsle3VpcQ+OhSFeRWYH0rQZAcvLX1448oVc 5OYtgYWzFFd/mBA8Nu3dU2HMsNa1FzSzum8qtY8UF5+gkXu1uJ0E3tgKcN4zj2Os 6eUzliNAkn+FyA3Sh4niWXEslk41oMxgI5vDJ8GPzG7p48HeErUNamKQ7YV4I8bQ Ng5sV9ZukAnfjaU8J9yJdToxY3OK1OQq9VPffJAKwT5wchKL38YurAkyXr66D/5+ Dt6zPFBzLTB3HrX30P/HAFEvXpEBHEf1xaNczLnQJl5t6cLHUVBqPVFIDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnHxcdFm+jbg1p5VL7MQ5hYGvYtMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvbWNmRngwV2I2TnVEV25sVXZzeERtRmdhOWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR17MA0G CSqGSIb3DQEBCwUAA4IBAQBIngqu761CHW4eHxn+U5qppdo9z+RlWpLFbkOjLkyE Wid5vDTOyJGOlrnvbdKPzg1NMwhTB7Ko2EmK2w77U6fAn03bNEmTj822/lRv88gs M2fsLC2rjrzYjT7cosig3iRFC/3f7BaE0iaOxtldm/VJAc4BSQygOkJiKbmVWkpz ck93ia5FjTYMe1cQTbgldnUE5gJ1tqy7YMH/pUsm/CPG2pWZwDfheCmHA7E2TBMX AWfN1dvD8jJJw67W7IrkwKl4yQ5iCYamV/ZR0qhvk830TsmCSjoAm+BDIopIFsoQ dyRtftK9oJ6gFlh0S1gLT9s5HQ2mQ12knQTqGc08aApq -----END CERTIFICATE-----Generated at Tue Dec 16 09:48:54 2025 by rpki-client