This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/pMHI94DTtKKz8gzxhVKkHUjKag0.roa File: pMHI94DTtKKz8gzxhVKkHUjKag0.roa (raw, json) Hash identifier: pFTxumvDB0SF9JNJ3IzVUzE5KL+TMh7qeatEKMQOnlg= Subject key identifier: A4:C1:C8:F7:80:D3:B4:A2:B3:F2:0C:F1:85:52:A4:1D:48:CA:6A:0D Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69 Certificate serial: 019B7CED67E1749BBA2BA3A992452CAA9641 Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/pMHI94DTtKKz8gzxhVKkHUjKag0.roa Signing time: Fri 02 Jan 2026 04:18:11 +0000 ROA not before: Fri 02 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57495 IP address blocks: 85.158.220.0/24 maxlen: 24 85.158.221.0/24 maxlen: 24 91.231.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:67:e1:74:9b:ba:2b:a3:a9:92:45:2c:aa:96:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c1c8f780d3b4a2b3f20cf18552a41d48ca6a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:29:b3:dc:d3:a0:7e:66:bd:8e:10:28:3e: a0:da:f8:46:cf:f4:23:84:a2:4f:20:64:75:ab:34: 49:99:fe:ae:15:d0:bc:01:30:97:28:f7:6b:06:1d: f2:8c:b9:b7:55:e3:6b:6d:52:a5:eb:f5:9f:0d:db: 6a:47:f2:b8:ed:c9:02:06:63:3f:3a:a0:90:bd:92: df:e6:b8:d9:8c:53:fa:00:75:b3:d5:03:c5:73:19: 7d:67:90:fe:7c:f8:33:00:8f:42:ff:8c:e1:5b:60: bb:9c:b2:d4:76:d5:5d:7b:b5:35:fa:c7:3c:b6:58: 37:64:d7:1e:85:b5:2c:99:12:c3:c3:ad:29:e8:4a: 2e:33:b9:bd:f7:d1:0a:45:37:d3:2e:c2:a3:d2:72: 58:82:4f:05:cd:38:66:ff:a5:91:be:da:fd:6e:34: be:41:42:56:32:af:6e:18:81:55:8c:c4:36:dc:f2: ef:b7:48:b0:ab:9b:39:bc:7e:17:79:a7:77:47:ad: 98:d0:4d:9f:f4:b9:6d:8a:1f:f0:5c:d9:cd:db:1a: 82:7c:6e:3e:ec:50:bc:55:32:cd:e0:7c:be:4e:f2: 73:17:cd:e2:63:cb:2c:fe:28:69:37:a1:d2:4f:15: f5:0d:12:af:52:67:39:4f:d3:5d:73:32:b8:ac:df: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:C8:F7:80:D3:B4:A2:B3:F2:0C:F1:85:52:A4:1D:48:CA:6A:0D X509v3 Authority Key Identifier: keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/pMHI94DTtKKz8gzxhVKkHUjKag0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.220.0/23 91.231.0.0/24 Signature Algorithm: sha256WithRSAEncryption aa:6f:01:d1:ba:b9:3a:2d:dd:ec:14:2c:fe:c5:03:d1:98:37: 30:ff:5c:4d:1a:52:75:83:9e:4d:f0:78:cf:54:fd:a5:b0:a1: 39:36:58:b5:f0:45:ac:a0:a8:3f:4d:36:b5:9f:5f:02:cc:f5: c8:b0:1e:a7:fb:b1:ae:f5:7e:d2:fd:60:2f:a1:54:a4:83:0a: 12:94:47:31:8d:f0:82:64:5e:2d:45:c4:e1:aa:3e:f5:4e:b9: 98:7e:eb:2f:bc:e9:10:1c:2e:2f:c1:19:f2:b6:7e:bb:ef:ad: 73:94:1a:8f:cc:e9:a9:4b:fe:45:27:64:be:8d:60:ef:bb:bb: 37:63:ca:0c:08:83:0f:db:b2:c5:39:1d:ec:d7:20:51:02:c0: 68:cb:59:7c:62:c0:19:82:3b:17:a3:0e:d3:a7:76:cf:ba:62: e6:58:7e:9e:9c:86:d2:0a:0e:05:8e:44:fe:80:c1:0f:ae:f3: 37:ff:f1:74:28:95:01:8c:8f:aa:b2:c9:39:5f:c5:fa:42:4c: ae:72:17:ed:00:d1:e9:52:00:b7:ff:40:0f:67:cd:e5:88:47: 9c:67:28:f7:dc:f3:18:f0:9e:cf:80:53:26:5a:6d:d2:dc:01: a7:b2:db:e1:fd:7d:1d:b1:37:fa:f9:35:00:a9:0f:08:49:5c: 53:8f:f2:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87WfhdJu6K6OpkkUsqpZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc3YTYyNjA3ZmI5NGM4ZTIzYjVhMDYyYzc4ZDkzZGY5 Y2JkNjkwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGMxYzhmNzgwZDNiNGEyYjNmMjBjZjE4NTUyYTQxZDQ4Y2E2YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkkps9zToH5mvY4QKD6g2vhGz/Qj hKJPIGR1qzRJmf6uFdC8ATCXKPdrBh3yjLm3VeNrbVKl6/WfDdtqR/K47ckCBmM/ OqCQvZLf5rjZjFP6AHWz1QPFcxl9Z5D+fPgzAI9C/4zhW2C7nLLUdtVde7U1+sc8 tlg3ZNcehbUsmRLDw60p6EouM7m999EKRTfTLsKj0nJYgk8FzThm/6WRvtr9bjS+ QUJWMq9uGIFVjMQ23PLvt0iwq5s5vH4Xead3R62Y0E2f9Lltih/wXNnN2xqCfG4+ 7FC8VTLN4Hy+TvJzF83iY8ss/ihpN6HSTxX1DRKvUmc5T9NdczK4rN+SpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKTByPeA07Sis/IM8YVSpB1IymoNMB8GA1UdIwQY MBaAFDtHemJgf7lMjiO1oGLHjZPfnL1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUt MzBhNmMzYWY5MDk1LzEvcE1ISTk0RFR0S0t6OGd6eGhWS2tIVWpLYWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUtMzBhNmMzYWY5MDk1 LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVZ7cAwQA W+cAMA0GCSqGSIb3DQEBCwUAA4IBAQCqbwHRurk6Ld3sFCz+xQPRmDcw/1xNGlJ1 g55N8HjPVP2lsKE5Nli18EWsoKg/TTa1n18CzPXIsB6n+7Gu9X7S/WAvoVSkgwoS lEcxjfCCZF4tRcThqj71TrmYfusvvOkQHC4vwRnytn67761zlBqPzOmpS/5FJ2S+ jWDvu7s3Y8oMCIMP27LFOR3s1yBRAsBoy1l8YsAZgjsXow7Tp3bPumLmWH6enIbS Cg4FjkT+gMEPrvM3//F0KJUBjI+qssk5X8X6QkyuchftANHpUgC3/0APZ83liEec Zyj33PMY8J7PgFMmWm3S3AGnstvh/X0dsTf6+TUAqQ8ISVxTj/L3 -----END CERTIFICATE-----Generated at Mon Jan 26 22:03:45 2026 by rpki-client