This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/Mt1633RiBIpuKnZW3jSMaHpSdRI.roa File: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (raw, json) Hash identifier: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8= Subject key identifier: 32:DD:7A:DF:74:62:04:8A:6E:2A:76:56:DE:34:8C:68:7A:52:75:12 Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d Certificate serial: 019B7CED970C08122B64EFD0E7757B734731 Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/Mt1633RiBIpuKnZW3jSMaHpSdRI.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61404 IP address blocks: 185.128.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:97:0c:08:12:2b:64:ef:d0:e7:75:7b:73:47:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32dd7adf7462048a6e2a7656de348c687a527512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:08:98:a6:86:94:ef:de:9a:f5:42:32:78: c3:45:b3:8e:be:9b:29:c5:3c:9f:88:59:f6:54:84: 46:bf:96:55:39:f5:d6:7a:50:b2:e0:33:70:b1:48: 76:12:5c:b3:a6:41:04:03:ff:1a:fc:02:a5:55:47: eb:d6:bb:93:35:5a:9c:ba:ee:89:f0:a0:ff:15:da: 1b:20:81:e0:47:7c:9c:70:43:09:81:09:9d:bd:32: 06:b5:5d:f1:3c:a1:c8:f4:3f:86:92:73:39:c1:bc: e0:6e:42:ac:b1:f7:a2:df:02:db:6d:7a:c8:57:35: 7b:5a:f6:fe:92:41:99:b8:c5:6a:5e:50:95:d5:0c: 00:1b:d3:93:e9:e4:73:88:bf:17:14:65:e2:99:fd: d7:de:45:9f:46:b4:47:24:07:51:ff:8e:b1:e0:37: 94:45:20:30:84:00:a6:cc:9a:8c:bc:29:2a:e5:a2: 98:22:1d:a0:f6:e9:e8:01:85:6a:97:b1:cb:0d:04: d2:a7:61:a7:57:8c:37:68:c4:dc:c6:cb:67:e2:e5: bf:b9:c8:0a:1e:e9:48:65:b0:81:6a:f9:51:c2:ae: 78:97:25:ae:52:7e:20:e6:b8:29:26:24:53:e5:11: b9:5c:ab:aa:cf:e6:cf:9b:52:1f:db:1c:bf:c8:41: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:7A:DF:74:62:04:8A:6E:2A:76:56:DE:34:8C:68:7A:52:75:12 X509v3 Authority Key Identifier: keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/Mt1633RiBIpuKnZW3jSMaHpSdRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.88.0/22 Signature Algorithm: sha256WithRSAEncryption 55:73:8a:7f:10:99:3a:68:dd:0c:a4:73:a0:d2:bd:e1:77:8e: cd:99:91:ba:1d:a4:30:4f:40:19:cc:89:98:57:3f:90:75:ed: 83:14:0d:0c:c6:a9:01:87:b5:fc:bd:9e:90:24:9c:7a:1a:bc: 64:4c:05:b2:a2:3f:cb:0e:1b:2d:4e:73:da:55:1b:76:c8:1e: e6:b1:24:12:e7:19:28:39:36:b5:fb:79:11:ff:e3:fa:80:a6: 86:88:0d:ea:63:22:1e:27:19:0d:cb:ca:3b:58:c5:fa:62:9e: d3:2c:9b:e6:c4:86:f8:e0:47:2a:ff:22:cc:4d:74:92:b5:6a: 9d:f4:0a:00:b0:8c:a2:99:70:78:64:0b:41:d3:40:c3:b7:6c: 6a:a9:b1:de:8e:64:ff:59:9f:a9:d1:d1:cc:e9:e0:f7:7d:77: 02:19:14:a8:de:34:02:de:ef:15:c8:20:a6:a4:56:ad:83:6b: f5:d2:e2:30:48:bf:10:f7:a1:a4:09:61:45:f6:e5:1a:7c:e3: 4d:e8:52:e0:a2:83:7d:56:14:a0:04:99:9a:4a:10:ff:d7:29: af:7a:75:d2:33:0b:99:08:d9:55:b5:c2:17:f9:1e:58:38:1b: 64:63:97:9c:4c:d1:8f:8d:fc:ac:25:53:2a:03:60:2f:4f:8f: 11:59:b7:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZcMCBIrZO/Q53V7c0cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1 YzI1MGQwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmRkN2FkZjc0NjIwNDhhNmUyYTc2NTZkZTM0OGM2ODdhNTI3NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwsImKaGlO/emvVCMnjDRbOOvpsp xTyfiFn2VIRGv5ZVOfXWelCy4DNwsUh2ElyzpkEEA/8a/AKlVUfr1ruTNVqcuu6J 8KD/FdobIIHgR3yccEMJgQmdvTIGtV3xPKHI9D+GknM5wbzgbkKssfei3wLbbXrI VzV7Wvb+kkGZuMVqXlCV1QwAG9OT6eRziL8XFGXimf3X3kWfRrRHJAdR/46x4DeU RSAwhACmzJqMvCkq5aKYIh2g9unoAYVql7HLDQTSp2GnV4w3aMTcxstn4uW/ucgK HulIZbCBavlRwq54lyWuUn4g5rgpJiRT5RG5XKuqz+bPm1If2xy/yEEi+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLdet90YgSKbip2Vt40jGh6UnUSMB8GA1UdIwQY MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt MjE0MmMwYzQzODVmLzEvTXQxNjMzUmlCSXB1S25aVzNqU01hSHBTZFJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYBYMA0G CSqGSIb3DQEBCwUAA4IBAQBVc4p/EJk6aN0MpHOg0r3hd47NmZG6HaQwT0AZzImY Vz+Qde2DFA0MxqkBh7X8vZ6QJJx6GrxkTAWyoj/LDhstTnPaVRt2yB7msSQS5xko OTa1+3kR/+P6gKaGiA3qYyIeJxkNy8o7WMX6Yp7TLJvmxIb44Ecq/yLMTXSStWqd 9AoAsIyimXB4ZAtB00DDt2xqqbHejmT/WZ+p0dHM6eD3fXcCGRSo3jQC3u8VyCCm pFatg2v10uIwSL8Q96GkCWFF9uUafONN6FLgooN9VhSgBJmaShD/1ymvenXSMwuZ CNlVtcIX+R5YOBtkY5ecTNGPjfysJVMqA2AvT48RWbde -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:46 2026 by rpki-client