This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MmIYb8wrP1LfxhIufZ51w4snAKI.roa File: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (raw, json) Hash identifier: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E= Subject key identifier: 32:62:18:6F:CC:2B:3F:52:DF:C6:12:2E:7D:9E:75:C3:8B:27:00:A2 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842FD8625E309D9BDDE17287E97EEB Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MmIYb8wrP1LfxhIufZ51w4snAKI.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214379 IP address blocks: 178.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2f:d8:62:5e:30:9d:9b:dd:e1:72:87:e9:7e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3262186fcc2b3f52dfc6122e7d9e75c38b2700a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:d3:00:15:47:8a:d9:45:c4:f9:08:1e:5f: ed:97:52:ad:66:31:46:06:d0:57:b9:23:94:34:e5: 33:d0:ba:b6:28:29:2b:c5:06:64:48:7b:14:92:21: 14:90:ab:05:d9:f1:4d:96:88:66:50:da:f2:e5:6e: b7:25:71:a1:ad:b6:03:9f:3a:a6:06:5a:8a:d1:00: 12:a5:86:17:24:0d:c8:6b:52:af:9f:31:7b:7e:cc: e5:f1:8e:e9:47:de:45:cc:5c:28:f2:7b:af:e1:98: 8a:aa:76:78:b7:78:05:95:39:b9:6c:33:fd:c4:00: 7e:1d:6e:1b:68:52:77:d2:cc:35:40:75:f4:ed:21: d8:41:25:2c:13:29:7e:08:ad:d6:79:ab:81:d1:cb: 20:d9:89:07:be:45:3a:fb:7a:a4:2f:e1:0d:88:a9: c7:20:a1:68:f8:e8:94:50:99:48:52:f7:e6:f4:e4: 3a:8f:bc:68:9d:4c:e2:5e:73:c9:57:bb:1c:7a:b1: 96:e8:3a:08:52:42:d5:d1:c0:b0:86:b5:44:45:a8: fa:e4:be:be:37:18:74:e4:66:79:c9:ad:23:80:2d: fe:62:82:ae:d2:ce:2e:f2:b6:e9:0f:0a:6a:18:71: 0c:4a:0a:de:14:1d:13:87:9c:92:dd:7f:26:2d:0a: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:18:6F:CC:2B:3F:52:DF:C6:12:2E:7D:9E:75:C3:8B:27:00:A2 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MmIYb8wrP1LfxhIufZ51w4snAKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.189.0/24 Signature Algorithm: sha256WithRSAEncryption 01:51:4f:fb:36:fc:ac:90:e5:b7:5a:67:e6:49:32:c8:4c:1c: 4e:1b:84:49:71:4d:cb:39:ff:cd:9f:5e:c7:4d:77:f1:3b:a8: ec:ce:8e:5f:62:26:b0:34:d6:5b:47:72:94:37:35:21:89:d1: 2e:e5:e9:12:06:9c:0c:d3:da:ee:97:ff:a1:f8:23:f2:03:2c: cb:41:79:3b:38:bd:23:14:60:fa:da:ea:24:0d:6b:9a:67:f8: 92:a0:fa:39:3f:46:35:8d:9f:b4:47:31:63:46:32:4c:bd:82: 93:a8:ec:a3:c7:2e:84:49:31:83:0a:92:cc:21:b5:2e:54:8a: 60:67:02:8e:10:56:5f:db:69:23:e2:d0:5f:7f:95:6f:35:27: 67:b0:4b:0a:7f:c9:77:80:12:ac:e2:73:ce:ea:06:6d:92:fc: 8c:36:96:2b:c3:35:b0:d6:7a:35:97:55:df:55:be:cc:ab:cc: 23:28:c2:76:d4:54:57:1b:11:ad:75:69:73:df:86:6f:62:91: e1:be:bf:a3:0f:39:a1:fa:9c:f7:41:7b:69:33:63:7a:cc:a1: 43:33:29:27:03:0c:c2:32:bf:e2:18:46:fd:32:bf:cd:62:b5: 0d:d8:32:26:de:fe:a5:64:0d:c0:52:13:8c:37:e8:2c:10:05: ee:84:b0:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hC/YYl4wnZvd4XKH6X7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjYyMTg2ZmNjMmIzZjUyZGZjNjEyMmU3ZDllNzVjMzhiMjcwMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrDTABVHitlFxPkIHl/tl1KtZjFG BtBXuSOUNOUz0Lq2KCkrxQZkSHsUkiEUkKsF2fFNlohmUNry5W63JXGhrbYDnzqm BlqK0QASpYYXJA3Ia1KvnzF7fszl8Y7pR95FzFwo8nuv4ZiKqnZ4t3gFlTm5bDP9 xAB+HW4baFJ30sw1QHX07SHYQSUsEyl+CK3WeauB0csg2YkHvkU6+3qkL+ENiKnH IKFo+OiUUJlIUvfm9OQ6j7xonUziXnPJV7scerGW6DoIUkLV0cCwhrVERaj65L6+ Nxh05GZ5ya0jgC3+YoKu0s4u8rbpDwpqGHEMSgreFB0Th5yS3X8mLQpc1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJiGG/MKz9S38YSLn2edcOLJwCiMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvTW1JWWI4d3JQMUxmeGhJdWZaNTF3NHNuQUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvq9MA0G CSqGSIb3DQEBCwUAA4IBAQABUU/7NvyskOW3WmfmSTLITBxOG4RJcU3LOf/Nn17H TXfxO6jszo5fYiawNNZbR3KUNzUhidEu5ekSBpwM09rul/+h+CPyAyzLQXk7OL0j FGD62uokDWuaZ/iSoPo5P0Y1jZ+0RzFjRjJMvYKTqOyjxy6ESTGDCpLMIbUuVIpg ZwKOEFZf22kj4tBff5VvNSdnsEsKf8l3gBKs4nPO6gZtkvyMNpYrwzWw1no1l1Xf Vb7Mq8wjKMJ21FRXGxGtdWlz34ZvYpHhvr+jDzmh+pz3QXtpM2N6zKFDMyknAwzC Mr/iGEb9Mr/NYrUN2DIm3v6lZA3AUhOMN+gsEAXuhLBD -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:17 2026 by rpki-client