This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/MSIj_pvmmWV611TPzznzhVyMajg.roa File: MSIj_pvmmWV611TPzznzhVyMajg.roa (raw, json) Hash identifier: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ= Subject key identifier: 31:22:23:FE:9B:E6:99:65:7A:D7:54:CF:CF:39:F3:85:5C:8C:6A:38 Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Certificate serial: 019B7C12559954D6B4812CB12B01804D4306 Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/MSIj_pvmmWV611TPzznzhVyMajg.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56909 IP address blocks: 185.164.40.0/24 maxlen: 24 185.164.41.0/24 maxlen: 24 185.164.42.0/24 maxlen: 24 185.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:55:99:54:d6:b4:81:2c:b1:2b:01:80:4d:43:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=312223fe9be699657ad754cfcf39f3855c8c6a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:f2:23:52:0a:c4:18:28:09:b2:75:00:4d: 0a:b7:a0:dd:9a:48:65:e8:8d:28:c3:d6:a5:c8:84: e2:09:ad:ac:53:fc:f2:ae:b2:ba:d5:44:93:0c:71: 85:20:95:ab:a6:d1:f3:de:d8:24:9d:01:9d:69:9a: 91:01:1f:96:de:ae:41:20:38:2c:87:fb:d9:9a:59: 3e:12:c1:58:e5:90:71:53:c4:e4:e3:08:4e:20:dd: 02:c7:d0:f3:90:b0:fd:35:86:c1:98:b0:6f:40:8d: 3f:22:17:e2:bf:39:f9:de:36:8c:a1:d7:20:f2:09: 5c:09:b2:41:5a:66:73:33:8b:2a:16:1d:fd:e1:88: 7f:9c:4f:cb:ab:e4:8e:8e:35:b7:6c:b6:e9:79:ee: ec:c8:d4:de:17:21:8d:45:9a:c6:e4:ab:3d:14:ea: 25:70:d3:2b:0c:3b:80:10:80:d3:b5:bc:a5:f1:47: b2:77:5a:99:1b:7b:ff:54:a0:20:0d:ea:1f:ed:94: a1:ba:a7:1d:22:05:82:83:48:ab:04:e6:0b:1c:be: 16:d6:fb:b6:3e:56:0f:57:e8:a1:71:26:52:c5:c9: a0:0f:96:66:5c:3b:e4:36:f0:dd:d5:00:a9:73:bc: 03:02:10:a5:97:ab:56:a2:73:bf:53:29:65:d2:8e: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:22:23:FE:9B:E6:99:65:7A:D7:54:CF:CF:39:F3:85:5C:8C:6A:38 X509v3 Authority Key Identifier: keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/MSIj_pvmmWV611TPzznzhVyMajg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.40.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:52:c1:1e:6b:1f:e5:1f:6e:3f:e1:59:bc:9d:b2:f5:ad:2f: 10:37:eb:a6:80:9f:6f:d2:fb:36:a8:86:b8:25:7a:1f:70:70: 98:3d:d2:d2:bd:a0:88:91:9a:ed:53:9c:54:99:b7:2e:f4:46: 33:26:6a:5f:a4:a9:9c:1e:df:a4:23:b8:81:60:73:e9:d4:71: fa:a6:d7:2b:e4:26:fd:7d:28:4d:12:7a:87:e2:85:69:5a:d0: 4c:41:1a:65:aa:bd:09:58:c8:f6:c3:df:ae:8e:cc:6d:31:fe: 16:3b:0a:5d:44:1d:ad:c0:b6:ca:5f:bf:7f:1c:5f:bf:07:9b: 78:f7:e6:0c:70:c1:aa:92:72:e3:c1:71:7f:2e:d0:7c:89:e6: e9:17:b0:49:29:3b:a0:b7:0d:ce:fe:1c:43:57:d6:33:e8:bc: 32:f6:d7:59:bf:0f:9e:ad:0d:3c:c6:a8:5c:67:c5:13:76:aa: 07:7c:b3:45:23:a0:5a:38:14:5d:07:a5:74:ad:4f:3f:76:73: 99:0e:fc:65:d8:0e:fe:44:dd:d4:d3:2e:5d:6f:d2:b1:bf:d9: 0e:50:47:dd:fe:3d:b9:36:d6:58:a3:8e:66:e5:96:7e:6b:d8: 0e:f8:95:41:d9:66:75:f5:ec:e0:15:8f:20:d1:54:99:74:ec: 47:5a:a2:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ElWZVNa0gSyxKwGATUMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl OWNjNzkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTIyMjNmZTliZTY5OTY1N2FkNzU0Y2ZjZjM5ZjM4NTVjOGM2YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0fyI1IKxBgoCbJ1AE0Kt6Ddmkhl 6I0ow9alyITiCa2sU/zyrrK61USTDHGFIJWrptHz3tgknQGdaZqRAR+W3q5BIDgs h/vZmlk+EsFY5ZBxU8Tk4whOIN0Cx9DzkLD9NYbBmLBvQI0/Ihfivzn53jaModcg 8glcCbJBWmZzM4sqFh394Yh/nE/Lq+SOjjW3bLbpee7syNTeFyGNRZrG5Ks9FOol cNMrDDuAEIDTtbyl8Ueyd1qZG3v/VKAgDeof7ZShuqcdIgWCg0irBOYLHL4W1vu2 PlYPV+ihcSZSxcmgD5ZmXDvkNvDd1QCpc7wDAhCll6tWonO/Uyll0o4QWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEiI/6b5plletdUz88584VcjGo4MB8GA1UdIwQY MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt ZjBkMDc1YTQzN2YxLzEvTVNJal9wdm1tV1Y2MTFUUHp6bnpoVnlNYWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaQoMA0G CSqGSIb3DQEBCwUAA4IBAQCbUsEeax/lH24/4Vm8nbL1rS8QN+umgJ9v0vs2qIa4 JXofcHCYPdLSvaCIkZrtU5xUmbcu9EYzJmpfpKmcHt+kI7iBYHPp1HH6ptcr5Cb9 fShNEnqH4oVpWtBMQRplqr0JWMj2w9+ujsxtMf4WOwpdRB2twLbKX79/HF+/B5t4 9+YMcMGqknLjwXF/LtB8iebpF7BJKTugtw3O/hxDV9Yz6Lwy9tdZvw+erQ08xqhc Z8UTdqoHfLNFI6BaOBRdB6V0rU8/dnOZDvxl2A7+RN3U0y5db9Kxv9kOUEfd/j25 NtZYo45m5ZZ+a9gO+JVB2WZ19ezgFY8g0VSZdOxHWqLa -----END CERTIFICATE-----Generated at Sat Jan 24 00:39:09 2026 by rpki-client