This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/MbNlUQjdzpnQDNMCae9f42WE5pY.roa File: MbNlUQjdzpnQDNMCae9f42WE5pY.roa (raw, json) Hash identifier: n9mXyj62N2Bl5BqH7SgmfSMdlY5E0hGp40Rxg/eQn60= Subject key identifier: 31:B3:65:51:08:DD:CE:99:D0:0C:D3:02:69:EF:5F:E3:65:84:E6:96 Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c Certificate serial: 019B7CEE105DF8BC97BCE7E0BA3CD4F593DF Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/MbNlUQjdzpnQDNMCae9f42WE5pY.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49920 IP address blocks: 185.149.60.0/22 maxlen: 24 185.234.53.0/24 maxlen: 24 185.234.54.0/23 maxlen: 23 2a05:c0c0::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:10:5d:f8:bc:97:bc:e7:e0:ba:3c:d4:f5:93:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31b3655108ddce99d00cd30269ef5fe36584e696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:18:5f:87:3d:0c:96:f5:c5:ce:28:f3:cb: 6b:6a:3d:42:dd:42:16:9f:9d:ef:02:45:15:72:01: cb:94:26:ea:dd:be:23:be:11:4b:a5:8c:67:12:d5: 54:4a:77:d5:9f:b4:9f:2c:a2:c9:4d:0a:fe:db:57: 7a:e6:95:30:53:1b:b8:4c:03:fa:db:38:c0:c3:09: 77:d2:78:55:44:08:a1:24:b6:16:98:cf:98:5f:2a: 7c:5f:6a:ab:78:6f:4d:38:b4:a9:4e:b7:83:16:83: 57:c2:3d:b0:fa:46:cd:0f:ba:0b:4f:b6:c3:5e:00: 39:13:61:83:57:69:0c:48:b3:ee:6f:7d:52:28:73: 14:59:44:f2:e1:5e:60:db:7a:bc:cd:08:48:5e:e9: 97:b9:3d:eb:3e:e7:c1:ad:9e:b5:fb:c7:c0:ed:4d: a3:9b:29:3e:bb:c1:4e:20:ce:a4:2b:75:98:3f:f3: 85:62:ad:eb:be:2e:95:4f:d0:06:55:d0:27:82:16: 4b:1b:7b:bc:9b:49:83:05:b1:59:e8:35:02:2e:2a: 4a:f1:22:16:d7:03:bd:36:e0:22:7c:c1:2a:e7:48: ae:0d:4f:4f:1d:20:26:69:b2:bc:c5:85:2f:9a:61: 74:55:2f:79:03:5c:e1:af:21:73:62:b9:d6:c5:cf: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B3:65:51:08:DD:CE:99:D0:0C:D3:02:69:EF:5F:E3:65:84:E6:96 X509v3 Authority Key Identifier: keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/MbNlUQjdzpnQDNMCae9f42WE5pY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.60.0/22 185.234.53.0-185.234.55.255 IPv6: 2a05:c0c0::/29 Signature Algorithm: sha256WithRSAEncryption 6a:7c:fd:3d:6b:8e:83:84:de:3c:96:63:89:d5:65:40:43:24: 66:64:ab:c2:fb:4a:4f:d6:08:8d:59:cb:84:89:d2:d8:b0:e1: d3:4d:36:23:3a:dd:4a:42:ac:ca:c1:b7:89:cc:46:af:38:30: 72:8e:91:79:36:7b:18:9c:8b:90:59:4a:96:28:28:2d:08:5e: 91:be:1c:d6:c3:1c:81:5c:23:45:51:da:1a:77:22:68:e4:9c: 23:69:b1:be:16:cf:b1:df:03:14:ec:a6:57:50:4b:82:44:17: 3e:aa:67:2b:8b:02:62:62:7e:fa:b5:9a:79:17:3c:00:77:ba: 88:9e:df:12:44:f3:ba:a7:e5:78:0e:84:8a:ba:e2:8c:60:c3: b4:cd:39:8e:ed:6b:51:c8:f9:29:68:2b:bf:e9:55:67:b7:94: 28:66:8e:0f:05:e0:a3:e7:7a:00:93:94:e4:c2:f6:be:ba:c7: 2e:57:db:ad:ce:b5:b7:a0:2d:d4:db:c8:d8:bf:b8:2c:8d:21: 53:04:8f:15:ba:8e:d1:6e:7e:d6:d8:cf:b3:24:87:c8:19:fd: e2:4d:07:36:87:71:52:a4:0f:5e:e0:27:fd:5a:a6:b2:a2:9d: dd:94:6c:67:47:dd:3a:32:4e:9c:96:71:90:67:1a:80:87:95: 49:7e:0f:25 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87hBd+LyXvOfgujzU9ZPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTgzOWVhNTliOTc1ODI0ZmQ3MDhhMGFkNzM1NTUwMDE3 Y2JmN2MwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWIzNjU1MTA4ZGRjZTk5ZDAwY2QzMDI2OWVmNWZlMzY1ODRlNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGoYX4c9DJb1xc4o88traj1C3UIW n53vAkUVcgHLlCbq3b4jvhFLpYxnEtVUSnfVn7SfLKLJTQr+21d65pUwUxu4TAP6 2zjAwwl30nhVRAihJLYWmM+YXyp8X2qreG9NOLSpTreDFoNXwj2w+kbND7oLT7bD XgA5E2GDV2kMSLPub31SKHMUWUTy4V5g23q8zQhIXumXuT3rPufBrZ61+8fA7U2j myk+u8FOIM6kK3WYP/OFYq3rvi6VT9AGVdAnghZLG3u8m0mDBbFZ6DUCLipK8SIW 1wO9NuAifMEq50iuDU9PHSAmabK8xYUvmmF0VS95A1zhryFzYrnWxc+CqQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDGzZVEI3c6Z0AzTAmnvX+NlhOaWMB8GA1UdIwQY MBaAFHfoOepZuXWCT9cIoK1zVVABfL98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUt Yzc5YTNmYTcxZDM0LzEvTWJObFVRamR6cG5RRE5NQ2FlOWY0MldFNXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUtYzc5YTNmYTcxZDM0 LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuZU8MAwD BAC56jUDBAO56jAwDQQCAAIwBwMFAyoFwMAwDQYJKoZIhvcNAQELBQADggEBAGp8 /T1rjoOE3jyWY4nVZUBDJGZkq8L7Sk/WCI1Zy4SJ0tiw4dNNNiM63UpCrMrBt4nM Rq84MHKOkXk2exici5BZSpYoKC0IXpG+HNbDHIFcI0VR2hp3ImjknCNpsb4Wz7Hf AxTspldQS4JEFz6qZyuLAmJifvq1mnkXPAB3uoie3xJE87qn5XgOhIq64oxgw7TN OY7ta1HI+SloK7/pVWe3lChmjg8F4KPnegCTlOTC9r66xy5X263OtbegLdTbyNi/ uCyNIVMEjxW6jtFuftbYz7Mkh8gZ/eJNBzaHcVKkD17gJ/1aprKind2UbGdH3Toy TpyWcZBnGoCHlUl+DyU= -----END CERTIFICATE-----Generated at Wed Jan 21 10:34:29 2026 by rpki-client