This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/mxyRjdGL85xD1WB71F85PjRJOb0.roa File: mxyRjdGL85xD1WB71F85PjRJOb0.roa (raw, json) Hash identifier: +xewzxEDyTrzGnNo3af2vJnALePnt+9O9HzcMXJ3+M0= Subject key identifier: 9B:1C:91:8D:D1:8B:F3:9C:43:D5:60:7B:D4:5F:39:3E:34:49:39:BD Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b Certificate serial: 019B7F15338BCD17F1B9BFAA782314A100DD Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/mxyRjdGL85xD1WB71F85PjRJOb0.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198970 IP address blocks: 185.159.116.0/24 maxlen: 24 185.159.117.0/24 maxlen: 24 185.159.118.0/24 maxlen: 24 185.159.119.0/24 maxlen: 24 194.49.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:33:8b:cd:17:f1:b9:bf:aa:78:23:14:a1:00:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b1c918dd18bf39c43d5607bd45f393e344939bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:95:66:cc:2e:fa:ca:6f:f0:66:d2:fc:b5: cf:48:f9:40:7d:a1:c3:9e:1e:ef:72:28:07:26:5b: 74:ba:e1:aa:1f:d7:af:e7:04:1e:1a:2f:8a:49:e3: 67:06:aa:7f:9c:6e:3b:f1:f6:99:21:d9:ed:69:da: f4:91:79:c6:69:e9:7c:e7:e0:24:50:a2:fa:35:4c: 49:15:fa:d2:f2:8f:81:e3:01:43:8d:b0:9f:9c:af: 3e:ab:00:a4:f1:e8:b5:55:96:aa:2c:20:4a:17:89: 9f:a5:f7:ce:2b:67:99:ed:75:f8:58:a7:96:2f:0a: 4d:9a:bc:af:f3:3a:f8:dd:91:c0:5c:0c:6f:d7:0b: 02:86:32:5a:89:6e:f8:d7:f8:2c:1c:61:b7:8e:6c: 1b:e4:dd:f3:aa:08:63:fa:56:48:ac:68:78:7c:3c: 57:69:d2:9d:81:9d:44:85:32:a0:73:1c:ae:da:94: fc:62:df:41:5f:73:81:e3:1e:f8:e7:b7:51:99:20: bf:af:f9:6d:1d:56:ef:ae:9f:47:64:da:b1:25:29: 14:a0:35:5e:71:69:02:f3:e1:06:8b:d3:01:45:04: dc:3f:ab:19:ba:3f:c2:f9:b2:90:56:f6:87:94:b2: 7d:99:4e:99:39:3e:b9:36:e1:35:e5:5a:90:9a:df: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:91:8D:D1:8B:F3:9C:43:D5:60:7B:D4:5F:39:3E:34:49:39:BD X509v3 Authority Key Identifier: keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/mxyRjdGL85xD1WB71F85PjRJOb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.116.0/22 194.49.126.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:35:77:95:37:11:19:9b:2e:5c:ad:28:f7:99:47:71:59:5a: 42:62:c1:e6:2c:ec:14:24:f5:df:e0:a9:bd:ff:c3:50:d3:6e: 4e:84:9a:af:d6:55:e3:92:a5:cd:b9:f2:4d:cb:9c:f7:cf:49: de:86:68:96:30:5f:31:f9:2c:93:41:b7:cd:94:39:bb:7c:72: c0:08:b8:d2:eb:4a:37:1a:ce:09:05:80:87:e6:19:45:d4:2a: 90:54:fa:29:a9:64:cc:91:98:71:b0:aa:60:1f:dd:91:d9:55: 45:94:86:6c:88:bf:23:e7:c9:c9:3d:9f:9a:14:6c:b1:44:ef: ae:f8:55:43:3b:f0:d5:e7:82:25:76:97:1d:60:e0:b9:4e:f8: d9:52:9b:bc:28:0d:92:8c:47:3e:cb:30:26:15:86:f2:80:11: 27:8b:4e:10:60:d5:7d:94:6f:61:fd:83:6d:70:ad:67:4d:08: eb:59:f2:99:d5:f2:7e:ab:7c:53:6c:47:04:46:4b:76:92:4b: a4:52:9b:ba:4a:31:cb:1f:14:91:62:f0:f6:8c:a2:0a:f1:ae: 98:c8:81:7d:c9:67:3c:04:1b:11:d4:34:3a:5d:cb:bd:96:fd: 95:d6:6a:d5:67:e4:97:62:57:95:7e:86:52:c8:14:12:ff:49: ec:b2:e0:f5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FTOLzRfxub+qeCMUoQDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2YxNTNmMjRmYThkMzIxNGNkN2M2ZTI1MGQ0YjE5ZjUw NjcyMmIwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjFjOTE4ZGQxOGJmMzljNDNkNTYwN2JkNDVmMzkzZTM0NDkzOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYSVZswu+spv8GbS/LXPSPlAfaHD nh7vcigHJlt0uuGqH9ev5wQeGi+KSeNnBqp/nG478faZIdntadr0kXnGael85+Ak UKL6NUxJFfrS8o+B4wFDjbCfnK8+qwCk8ei1VZaqLCBKF4mfpffOK2eZ7XX4WKeW LwpNmryv8zr43ZHAXAxv1wsChjJaiW741/gsHGG3jmwb5N3zqghj+lZIrGh4fDxX adKdgZ1EhTKgcxyu2pT8Yt9BX3OB4x7457dRmSC/r/ltHVbvrp9HZNqxJSkUoDVe cWkC8+EGi9MBRQTcP6sZuj/C+bKQVvaHlLJ9mU6ZOT65NuE15VqQmt8YIwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJsckY3Ri/OcQ9Vge9RfOT40STm9MB8GA1UdIwQY MBaAFPrPFT8k+o0yFM18biUNSxn1BnIrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOFZQeVQ2alRJVXpYeHVKUTFMR2ZVR2Npcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvODYyMWU0LWU5YTktNGI2NC05NjQ4 LTlhYTczNzJiNjE2ZC8xL214eVJqZEdMODV4RDFXQjcxRjg1UGpSSk9iMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODEvODYyMWU0LWU5YTktNGI2NC05NjQ4LTlhYTczNzJiNjE2 ZC8xLzEtczhWUHlUNmpUSVV6WHh1SlExTEdmVUdjaXMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAK5n3QD BADCMX4wDQYJKoZIhvcNAQELBQADggEBAJs1d5U3ERmbLlytKPeZR3FZWkJiweYs 7BQk9d/gqb3/w1DTbk6Emq/WVeOSpc258k3LnPfPSd6GaJYwXzH5LJNBt82UObt8 csAIuNLrSjcazgkFgIfmGUXUKpBU+impZMyRmHGwqmAf3ZHZVUWUhmyIvyPnyck9 n5oUbLFE7674VUM78NXngiV2lx1g4LlO+NlSm7woDZKMRz7LMCYVhvKAESeLThBg 1X2Ub2H9g21wrWdNCOtZ8pnV8n6rfFNsRwRGS3aSS6RSm7pKMcsfFJFi8PaMogrx rpjIgX3JZzwEGxHUNDpdy72W/ZXWatVn5JdiV5V+hlLIFBL/Seyy4PU= -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:33 2026 by rpki-client