This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa File: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (raw, json) Hash identifier: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M= Subject key identifier: 31:DC:97:D5:E7:63:96:9F:B2:CF:54:63:DE:B3:E3:CE:21:57:07:D6 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B78344036AC0286A7E6AEAF18C525DAD5 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57724 IP address blocks: 185.9.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:40:36:ac:02:86:a7:e6:ae:af:18:c5:25:da:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31dc97d5e763969fb2cf5463deb3e3ce215707d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:d1:ff:2a:b8:08:09:16:5b:ab:26:bf:63: 49:4c:63:63:71:d5:c8:66:24:01:5c:d8:a8:1f:d3: c9:67:ab:50:c4:57:a7:50:a4:0e:ed:fb:22:6f:41: d4:d3:4f:13:26:92:09:92:19:89:21:bb:a0:19:f8: 8a:7b:90:7f:47:30:c5:b9:e4:ee:22:5c:95:4a:ed: 2a:0d:44:3c:9e:4a:f4:3e:47:c2:bc:3e:f3:b9:b0: 24:ac:dc:ed:49:2e:90:40:b7:2f:75:12:33:d0:20: 0d:03:45:04:93:45:9a:17:c8:4b:98:ae:34:9a:6a: 3a:b1:0c:08:f4:5d:62:be:f2:42:43:54:a2:5e:32: 6e:99:76:21:9d:da:6c:8e:00:a7:c6:81:b2:d2:a1: df:9d:4c:7e:fc:43:93:92:ef:e8:c0:dc:42:0a:92: f8:01:28:6e:4b:f5:bf:28:92:69:83:90:a5:73:6c: 9b:a6:29:ad:b3:ab:a0:04:24:44:ae:49:55:90:e3: 21:5b:95:fe:9e:79:90:59:24:b8:cb:22:8d:11:83: fa:72:88:67:c6:52:d1:5e:60:fb:1e:2f:0c:4c:ab: 5f:ab:a5:07:35:2a:a1:8d:80:22:2d:25:79:a8:c9: 07:5d:e4:e7:70:0f:fc:2a:2c:44:58:14:50:67:e1: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:97:D5:E7:63:96:9F:B2:CF:54:63:DE:B3:E3:CE:21:57:07:D6 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.185.0/24 Signature Algorithm: sha256WithRSAEncryption 52:af:1e:a0:5f:89:4d:2d:79:0a:3d:fd:e9:bf:04:28:68:1a: 8b:35:bb:2c:ae:5c:71:e1:ee:c8:39:c3:2e:c4:f0:81:cc:cf: 23:40:37:1e:93:cf:2e:42:dc:bd:73:34:c5:15:ad:99:e0:1b: 6b:03:c4:dc:70:f3:74:d4:16:e1:67:71:12:69:3b:11:87:5c: 55:3f:c8:2e:c1:a9:79:8b:7b:36:cf:4e:02:da:f1:ad:36:62: 8c:1e:32:9b:e5:cd:a7:d3:27:98:cc:fe:3d:dd:b0:96:eb:e1: ff:05:05:f2:1f:b7:a3:30:65:3f:0e:33:cf:56:51:a6:0b:de: e0:ba:00:c6:4d:3d:51:ef:18:f6:c5:3b:86:2b:7a:c5:c0:ca: cf:89:fb:69:88:a3:cb:29:a4:e6:f1:26:5a:85:69:5b:95:35: f1:2c:05:67:81:68:29:40:d7:0c:cd:18:5e:ce:3b:4f:46:24: 8c:62:fe:57:ef:86:e7:e3:19:f8:bd:10:67:c7:7f:2e:8c:a6: f1:3c:aa:6a:bf:af:d4:c7:bf:ef:7f:0c:c7:89:3d:82:d5:4b: e4:16:87:e5:8f:59:83:42:f0:7c:ff:19:1f:c5:45:f7:b3:96: 70:5e:7d:6c:aa:89:e2:15:26:90:d4:c6:e2:5c:5a:c9:f0:34: 34:17:e4:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEA2rAKGp+aurxjFJdrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRjOTdkNWU3NjM5NjlmYjJjZjU0NjNkZWIzZTNjZTIxNTcwN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fR/yq4CAkWW6smv2NJTGNjcdXI ZiQBXNioH9PJZ6tQxFenUKQO7fsib0HU008TJpIJkhmJIbugGfiKe5B/RzDFueTu IlyVSu0qDUQ8nkr0PkfCvD7zubAkrNztSS6QQLcvdRIz0CANA0UEk0WaF8hLmK40 mmo6sQwI9F1ivvJCQ1SiXjJumXYhndpsjgCnxoGy0qHfnUx+/EOTku/owNxCCpL4 AShuS/W/KJJpg5Clc2ybpimts6ugBCRErklVkOMhW5X+nnmQWSS4yyKNEYP6cohn xlLRXmD7Hi8MTKtfq6UHNSqhjYAiLSV5qMkHXeTncA/8KixEWBRQZ+FNHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHcl9XnY5afss9UY96z484hVwfWMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvTWR5WDFlZGpscC15ejFSajNyUGp6aUZYQjlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G CSqGSIb3DQEBCwUAA4IBAQBSrx6gX4lNLXkKPf3pvwQoaBqLNbssrlxx4e7IOcMu xPCBzM8jQDcek88uQty9czTFFa2Z4BtrA8TccPN01BbhZ3ESaTsRh1xVP8guwal5 i3s2z04C2vGtNmKMHjKb5c2n0yeYzP493bCW6+H/BQXyH7ejMGU/DjPPVlGmC97g ugDGTT1R7xj2xTuGK3rFwMrPiftpiKPLKaTm8SZahWlblTXxLAVngWgpQNcMzRhe zjtPRiSMYv5X74bn4xn4vRBnx38ujKbxPKpqv6/Ux7/vfwzHiT2C1UvkFoflj1mD QvB8/xkfxUX3s5ZwXn1sqoniFSaQ1MbiXFrJ8DQ0F+RJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:50 2026 by rpki-client