This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mmQ1v25AEH3NJndgIAyK2V_A3H0.roa File: mmQ1v25AEH3NJndgIAyK2V_A3H0.roa (raw, json) Hash identifier: x0b4XHRTYfBXPCge0qeG8YgnACeA60S45u7/OMcqTo0= Subject key identifier: 9A:64:35:BF:6E:40:10:7D:CD:26:77:60:20:0C:8A:D9:5F:C0:DC:7D Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117A053495C9F6E010FEEE65328514 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mmQ1v25AEH3NJndgIAyK2V_A3H0.roa Signing time: Fri 02 Jan 2026 00:17:58 +0000 ROA not before: Fri 02 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 185.248.169.0/24 maxlen: 24 185.248.170.0/24 maxlen: 24 185.248.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7a:05:34:95:c9:f6:e0:10:fe:ee:65:32:85:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a6435bf6e40107dcd267760200c8ad95fc0dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:2a:e1:5c:04:a7:4c:d6:ac:e7:d7:d4:de: 38:cf:38:bc:fd:e7:12:ff:81:42:68:5c:74:a9:4e: 12:28:6d:a3:2c:8a:42:c9:69:99:2d:24:5b:5f:c8: d1:ae:2e:01:98:77:83:9e:e3:c8:a0:30:3d:2b:5d: 97:97:94:2b:62:de:a3:f2:7b:85:55:16:4e:23:0a: 77:bd:d0:18:aa:65:ff:d6:c0:97:e6:51:fd:f4:39: 09:11:23:63:35:d6:1f:47:6e:ba:4d:bb:d2:af:b8: 03:c3:a3:94:f8:bc:c1:66:04:e9:e7:bd:1b:a5:2a: cc:77:d9:fa:3e:6a:27:07:cb:36:3a:7c:0a:49:17: 71:ad:d4:ce:7b:d9:e4:1b:69:6a:1f:82:2f:02:cd: 38:d7:a2:ab:d4:6c:20:7c:b5:a2:21:53:b4:3d:a2: 39:c5:11:fb:46:e7:3f:8c:ea:2f:b1:66:63:76:6e: 01:87:aa:09:9a:ec:24:17:50:6e:b3:bf:9b:69:94: 20:b5:87:07:25:f5:66:17:9f:7e:e7:01:51:b4:34: 7f:8b:fa:e0:15:5c:c3:c6:3e:95:e3:55:79:3f:09: bc:e6:a1:c2:cf:74:8b:0d:4d:bc:00:18:18:ee:69: d7:29:df:d0:f2:7b:e6:74:e4:4d:63:07:6f:22:b5: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:35:BF:6E:40:10:7D:CD:26:77:60:20:0C:8A:D9:5F:C0:DC:7D X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mmQ1v25AEH3NJndgIAyK2V_A3H0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.169.0-185.248.171.255 Signature Algorithm: sha256WithRSAEncryption 02:49:1b:ac:77:d7:fc:21:7e:2c:29:52:54:80:92:73:41:9d: a7:90:af:a5:19:9f:3e:95:7e:dc:1f:94:a7:42:c2:1c:ce:71: f8:30:af:a3:88:c3:2f:b6:ef:ac:2b:18:90:e2:8a:6e:ab:19: a7:f9:ca:f2:8e:13:c5:df:17:84:7b:2a:b8:dc:e6:8f:8a:58: c8:df:84:53:82:da:10:61:f4:07:04:09:2e:f6:45:86:16:01: 52:ab:96:c3:3a:02:97:99:32:a5:22:54:ae:8f:ba:c3:bd:e8: ce:69:7e:55:c0:db:7d:db:b8:ab:2d:2c:19:29:4d:90:79:bc: 35:74:eb:ae:f9:b5:ee:f7:ec:ec:42:64:ae:50:06:8c:ef:e2: be:09:bb:70:34:6a:7c:b3:d6:77:3b:3c:de:99:79:1a:43:ea: 56:2c:c8:1f:3b:b4:3f:40:16:4c:89:69:cb:1a:7c:dd:32:45: f3:c2:01:e4:ae:5e:16:7c:af:51:0c:cd:da:0d:e5:4a:59:36: 33:db:3d:36:d0:50:d7:fa:e8:aa:bf:49:d3:f4:b6:58:34:a3: 44:72:a1:76:7d:a2:02:98:d1:f3:f9:ca:5f:75:94:d7:af:48: 1f:18:fd:ce:25:26:84:8f:48:9c:44:30:b5:8e:2f:6b:14:5f: 9f:14:22:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EXoFNJXJ9uAQ/u5lMoUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTY0MzViZjZlNDAxMDdkY2QyNjc3NjAyMDBjOGFkOTVmYzBkYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hkq4VwEp0zWrOfX1N44zzi8/ecS /4FCaFx0qU4SKG2jLIpCyWmZLSRbX8jRri4BmHeDnuPIoDA9K12Xl5QrYt6j8nuF VRZOIwp3vdAYqmX/1sCX5lH99DkJESNjNdYfR266TbvSr7gDw6OU+LzBZgTp570b pSrMd9n6PmonB8s2OnwKSRdxrdTOe9nkG2lqH4IvAs0416Kr1GwgfLWiIVO0PaI5 xRH7Ruc/jOovsWZjdm4Bh6oJmuwkF1Bus7+baZQgtYcHJfVmF59+5wFRtDR/i/rg FVzDxj6V41V5Pwm85qHCz3SLDU28ABgY7mnXKd/Q8nvmdORNYwdvIrUEpwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJpkNb9uQBB9zSZ3YCAMitlfwNx9MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvbW1RMXYyNUFFSDNOSm5kZ0lBeUsyVl9BM0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5+KkD BAK5+KgwDQYJKoZIhvcNAQELBQADggEBAAJJG6x31/whfiwpUlSAknNBnaeQr6UZ nz6VftwflKdCwhzOcfgwr6OIwy+276wrGJDiim6rGaf5yvKOE8XfF4R7Krjc5o+K WMjfhFOC2hBh9AcECS72RYYWAVKrlsM6ApeZMqUiVK6PusO96M5pflXA233buKst LBkpTZB5vDV06675te737OxCZK5QBozv4r4Ju3A0anyz1nc7PN6ZeRpD6lYsyB87 tD9AFkyJacsafN0yRfPCAeSuXhZ8r1EMzdoN5UpZNjPbPTbQUNf66Kq/SdP0tlg0 o0RyoXZ9ogKY0fP5yl91lNevSB8Y/c4lJoSPSJxEMLWOL2sUX58UIqo= -----END CERTIFICATE-----Generated at Tue Jan 20 12:49:41 2026 by rpki-client