This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/murlFmYx_3jII0U53z-9rIh7SG8.roa File: murlFmYx_3jII0U53z-9rIh7SG8.roa (raw, json) Hash identifier: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM= Subject key identifier: 9A:EA:E5:16:66:31:FF:78:C8:23:45:39:DF:3F:BD:AC:88:7B:48:6F Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284 Certificate serial: 019B7E3865EC17B43A6CD4F6DADA4D633179 Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/murlFmYx_3jII0U53z-9rIh7SG8.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44399 IP address blocks: 185.252.72.0/22 maxlen: 22 2a0c:2340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:65:ec:17:b4:3a:6c:d4:f6:da:da:4d:63:31:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aeae5166631ff78c8234539df3fbdac887b486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:c0:75:7a:6e:67:81:68:20:22:ac:5e:fe: a0:8d:6d:8c:80:66:1d:1e:28:da:77:ea:d6:34:7c: 3c:89:f6:9d:52:b4:2d:7f:9e:8f:ef:02:82:98:18: 92:5d:3b:34:96:01:68:7d:c4:2b:60:e2:55:b9:cc: 2f:d8:8a:92:14:a6:35:dc:37:cd:f1:f7:c6:a4:c8: c3:08:0e:a6:21:7b:88:80:37:40:a1:01:31:3d:8a: 7b:7c:af:71:a6:d6:6f:e2:0c:c3:c3:58:8d:80:a4: c2:59:cb:bf:40:14:0c:47:d5:28:cf:eb:3e:13:16: 3e:a0:3f:46:50:12:ab:b1:5d:39:d9:b2:ea:cf:64: aa:83:64:a9:fc:aa:63:d2:a9:b9:38:5d:e1:7d:86: e0:88:5f:b8:37:0f:4a:5f:48:af:3a:c2:b5:54:71: 56:6c:35:0e:23:3f:6a:ef:64:fa:ba:46:c5:af:69: dc:96:3c:10:cb:9c:92:08:62:88:ce:2b:89:76:35: fc:0f:71:46:ca:12:ec:da:05:89:ae:65:d5:e9:8c: a1:4f:29:54:37:34:74:21:15:ea:f7:83:8d:df:31: 8d:44:4e:71:b9:a6:19:17:72:9d:a4:1e:a2:a3:4b: fe:f9:bc:a2:72:58:aa:c4:cd:8c:16:8d:c6:b9:6e: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:E5:16:66:31:FF:78:C8:23:45:39:DF:3F:BD:AC:88:7B:48:6F X509v3 Authority Key Identifier: keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/murlFmYx_3jII0U53z-9rIh7SG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.72.0/22 IPv6: 2a0c:2340::/29 Signature Algorithm: sha256WithRSAEncryption 1a:3f:ee:9a:68:18:57:9a:3f:2b:46:40:17:4f:94:9d:e2:94: 21:2b:f1:38:99:08:6b:15:92:8f:60:ee:dd:98:ac:79:bf:2d: b2:fc:59:7f:86:3b:9d:7a:32:65:08:f9:83:8b:fc:c3:75:f6: 4a:eb:7c:a3:54:a7:65:62:b9:a0:45:11:bb:07:06:bc:30:a3: b7:5a:dc:02:d9:1e:ec:a9:fc:75:72:5b:bc:e5:93:25:33:ca: 09:f0:18:15:e4:93:ee:0e:a7:a5:20:50:d4:c1:f5:fd:aa:af: f4:dd:1d:26:20:46:64:f2:b9:cc:5a:79:8f:b0:d4:7d:7f:55: aa:3e:b8:75:a3:cd:64:c1:7f:39:70:6d:32:3e:78:fc:00:de: 2b:5c:0c:26:d5:e7:a7:76:c0:87:3c:3b:25:2d:32:e7:54:a1: a9:16:e0:70:8b:5f:55:ec:e1:18:85:ba:f4:ea:fb:d0:71:87: 06:20:c8:c6:97:f6:c7:83:13:d7:2e:84:2f:83:9d:ef:a0:e3: 54:a0:a6:98:a7:c2:b3:45:c5:d4:3a:1d:e3:79:2c:56:bc:38: 6d:70:83:5b:49:d3:72:e4:7b:46:46:d7:ac:41:6e:bf:ff:82: 8d:57:a9:f1:05:50:b0:93:f0:b7:0b:2b:0b:1a:5c:ea:2e:2f: f7:c0:60:7e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGXsF7Q6bNT22tpNYzF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDM0ZmMwMzAwMmVhYTdmMzZiMmU3ZTYzNWVkYThjMzBj NDgyODQwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVhZTUxNjY2MzFmZjc4YzgyMzQ1MzlkZjNmYmRhYzg4N2I0ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLPAdXpuZ4FoICKsXv6gjW2MgGYd Hijad+rWNHw8ifadUrQtf56P7wKCmBiSXTs0lgFofcQrYOJVucwv2IqSFKY13DfN 8ffGpMjDCA6mIXuIgDdAoQExPYp7fK9xptZv4gzDw1iNgKTCWcu/QBQMR9Uoz+s+ ExY+oD9GUBKrsV052bLqz2Sqg2Sp/Kpj0qm5OF3hfYbgiF+4Nw9KX0ivOsK1VHFW bDUOIz9q72T6ukbFr2ncljwQy5ySCGKIziuJdjX8D3FGyhLs2gWJrmXV6YyhTylU NzR0IRXq94ON3zGNRE5xuaYZF3KdpB6io0v++byicliqxM2MFo3GuW6BnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJrq5RZmMf94yCNFOd8/vayIe0hvMB8GA1UdIwQY MBaAFGfTT8AwAuqn82sufmNe2owwxIKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMt ZGM0MmM3NjkzZGY5LzEvbXVybEZtWXhfM2pJSTBVNTN6LTlySWg3U0c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMtZGM0MmM3NjkzZGY5 LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufxIMA0E AgACMAcDBQMqDCNAMA0GCSqGSIb3DQEBCwUAA4IBAQAaP+6aaBhXmj8rRkAXT5Sd 4pQhK/E4mQhrFZKPYO7dmKx5vy2y/Fl/hjudejJlCPmDi/zDdfZK63yjVKdlYrmg RRG7Bwa8MKO3WtwC2R7sqfx1clu85ZMlM8oJ8BgV5JPuDqelIFDUwfX9qq/03R0m IEZk8rnMWnmPsNR9f1WqPrh1o81kwX85cG0yPnj8AN4rXAwm1eendsCHPDslLTLn VKGpFuBwi19V7OEYhbr06vvQcYcGIMjGl/bHgxPXLoQvg53voONUoKaYp8KzRcXU Oh3jeSxWvDhtcINbSdNy5HtGRtesQW6//4KNV6nxBVCwk/C3CysLGlzqLi/3wGB+ -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:13 2026 by rpki-client