This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa File: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (raw, json) Hash identifier: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8= Subject key identifier: 99:4A:E6:75:50:26:1A:38:81:EF:3C:1F:3E:9D:DB:50:D3:FA:9D:CD Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Certificate serial: 019B7AC871F72527FAB8B562B99E72DB1AFE Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.13.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:71:f7:25:27:fa:b8:b5:62:b9:9e:72:db:1a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994ae67550261a3881ef3c1f3e9ddb50d3fa9dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:7e:e1:88:d3:3f:9f:a5:79:88:ac:3c:a9: 01:7d:d3:f4:f6:1f:cf:1c:d2:fb:9b:d5:b8:60:be: 53:c7:ff:cf:14:5c:c6:13:52:e5:03:4e:16:4b:5f: c0:61:85:7a:05:26:28:46:7f:12:56:15:7d:2c:d0: e6:86:e3:d9:9b:24:f1:2e:12:e3:9a:ba:45:25:16: 0a:cd:31:6c:ae:ec:ef:41:41:11:a6:62:6a:31:ec: 3f:1e:1a:70:e9:4e:c1:92:50:75:63:10:31:53:ea: 4d:b1:4b:ce:bf:16:fb:58:75:5d:cd:e3:81:3f:58: cf:9e:c4:7e:d3:d9:7a:1f:b5:3a:33:2a:6f:ee:d0: 35:d9:82:36:b2:4d:45:e5:c8:fa:83:1e:c4:67:b2: 1c:df:9d:3f:d5:f7:80:c4:6c:34:83:ce:63:77:dc: 30:18:18:89:37:56:9b:f2:a2:79:73:aa:8d:39:61: 17:7d:18:3e:b6:f6:c8:fa:e0:58:1e:00:81:88:2a: de:5f:42:3d:ec:2a:14:ef:50:30:72:f0:be:d3:a7: e4:48:65:e0:b0:f7:87:43:e3:15:5e:a9:39:06:c4: 35:11:90:58:c8:bd:e9:3a:81:54:f3:56:50:ee:3b: 21:79:47:3a:89:69:fd:09:18:89:65:c8:40:ab:cd: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:E6:75:50:26:1A:38:81:EF:3C:1F:3E:9D:DB:50:D3:FA:9D:CD X509v3 Authority Key Identifier: keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.14.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:20:31:12:71:fe:03:96:ee:57:ce:36:cf:77:ee:68:66:29: ea:ba:3b:ec:e0:5c:4f:97:27:dc:11:84:5b:b3:9f:22:4e:5f: d6:9a:0e:ed:f0:b2:95:0c:3e:d7:a9:ab:0e:2b:50:3e:69:ea: 81:98:38:06:fb:23:da:41:ca:cb:d3:c5:7b:4b:02:5f:e8:57: cd:2e:df:38:f8:48:b6:d1:ac:65:c5:5f:c2:bd:b8:4b:50:d5: b3:32:ce:dd:10:4c:49:83:96:9a:a0:62:96:77:09:f0:1a:5b: 7a:c7:95:d3:b5:b3:bb:ff:fd:9b:e9:d8:b5:2b:6b:88:97:e0: da:37:5a:3d:51:48:ea:7d:a8:42:63:fe:9c:7a:5f:20:65:fb: 81:4b:93:70:ed:22:d4:bf:00:75:1a:cd:33:10:e2:9b:6b:ec: 2b:d2:13:a5:87:aa:fe:e6:d7:80:18:ed:7e:90:8d:ef:15:37: 5a:95:15:73:05:76:b2:4f:ce:f4:74:07:5c:83:c0:ae:f9:c2: e1:ff:2a:91:76:ec:61:f3:ad:47:88:7f:2e:86:8e:3d:34:4b: 09:b6:55:d7:26:45:d4:09:6c:fe:75:df:0f:17:a7:0a:16:04: 5e:8f:0c:8c:91:bf:a7:64:28:8f:23:16:26:2e:6e:87:7b:1b: 9b:b0:8a:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHH3JSf6uLViuZ5y2xr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk ZGY0YjAwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRhZTY3NTUwMjYxYTM4ODFlZjNjMWYzZTlkZGI1MGQzZmE5ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6x+4YjTP5+leYisPKkBfdP09h/P HNL7m9W4YL5Tx//PFFzGE1LlA04WS1/AYYV6BSYoRn8SVhV9LNDmhuPZmyTxLhLj mrpFJRYKzTFsruzvQUERpmJqMew/Hhpw6U7BklB1YxAxU+pNsUvOvxb7WHVdzeOB P1jPnsR+09l6H7U6Mypv7tA12YI2sk1F5cj6gx7EZ7Ic350/1feAxGw0g85jd9ww GBiJN1ab8qJ5c6qNOWEXfRg+tvbI+uBYHgCBiCreX0I97CoU71AwcvC+06fkSGXg sPeHQ+MVXqk5BsQ1EZBYyL3pOoFU81ZQ7jsheUc6iWn9CRiJZchAq82h9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlK5nVQJho4ge88Hz6d21DT+p3NMB8GA1UdIwQY MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt OWVlMDA2OTQyYjRiLzEvbVVybWRWQW1HamlCN3p3ZlBwM2JVTlA2bmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ0OMA0G CSqGSIb3DQEBCwUAA4IBAQAbIDEScf4Dlu5XzjbPd+5oZinqujvs4FxPlyfcEYRb s58iTl/Wmg7t8LKVDD7XqasOK1A+aeqBmDgG+yPaQcrL08V7SwJf6FfNLt84+Ei2 0axlxV/CvbhLUNWzMs7dEExJg5aaoGKWdwnwGlt6x5XTtbO7//2b6di1K2uIl+Da N1o9UUjqfahCY/6cel8gZfuBS5Nw7SLUvwB1Gs0zEOKba+wr0hOlh6r+5teAGO1+ kI3vFTdalRVzBXayT870dAdcg8Cu+cLh/yqRduxh861HiH8uho49NEsJtlXXJkXU CWz+dd8PF6cKFgRejwyMkb+nZCiPIxYmLm6HexubsIq5 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client