This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/MJnpHwqWRCcgwA2k13dIsZbF1wg.roa File: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (raw, json) Hash identifier: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw= Subject key identifier: 30:99:E9:1F:0A:96:44:27:20:C0:0D:A4:D7:77:48:B1:96:C5:D7:08 Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4 Certificate serial: 019B7BA52E3D3F2F57236FE272E1CD21843C Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/MJnpHwqWRCcgwA2k13dIsZbF1wg.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.187.104.0/24 maxlen: 24 185.187.105.0/24 maxlen: 24 185.187.106.0/24 maxlen: 24 185.187.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2e:3d:3f:2f:57:23:6f:e2:72:e1:cd:21:84:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3099e91f0a96442720c00da4d77748b196c5d708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:73:ed:68:cc:ed:2f:29:84:1d:b9:c8:7b: 6b:4b:ca:82:79:b1:a4:82:4f:a0:69:b4:ec:35:e9: 53:76:46:68:e3:9b:2e:a8:32:eb:6c:11:0d:d4:da: 20:77:9d:bb:d3:72:05:b2:a6:2d:99:eb:c4:06:75: e6:27:8b:0a:18:2c:7c:db:32:75:59:c0:e3:42:3e: 39:06:1e:75:e6:e1:e6:e1:0a:5b:ae:c0:6b:8a:93: c3:4b:a8:8c:d3:21:ed:2f:a5:71:99:f9:06:35:c1: 8e:47:24:a2:4f:99:af:5e:5c:c5:66:e8:99:e4:0a: e5:1f:33:1c:aa:ad:7f:9d:48:39:87:ab:6e:1f:58: 28:2d:4a:f0:1e:f1:98:26:4e:63:b0:f0:cc:0a:31: 7a:e8:32:ba:8e:bd:89:2d:88:5a:3a:9e:62:cc:2e: 1d:1f:90:1c:0a:9a:cf:f5:6b:54:c8:03:d5:41:54: 18:11:64:80:83:61:e3:f2:77:75:60:7d:98:8d:f3: 1e:37:d4:92:3e:aa:1a:52:c5:17:ee:cf:68:3b:0c: 57:56:d9:5f:e7:35:c9:8d:16:f6:0c:ab:c7:34:dc: b5:48:aa:f0:b3:5a:4f:ad:b4:11:a1:f1:7c:42:99: fb:65:e0:98:5d:7f:56:93:b5:8d:a9:51:a1:fe:7e: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:99:E9:1F:0A:96:44:27:20:C0:0D:A4:D7:77:48:B1:96:C5:D7:08 X509v3 Authority Key Identifier: keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/MJnpHwqWRCcgwA2k13dIsZbF1wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.104.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:58:c7:21:3d:21:0e:aa:7f:5f:bf:5a:02:e8:4b:1a:62:45: 6d:0b:1d:5f:88:3d:1f:e1:41:a7:56:28:42:35:a1:4d:05:60: f3:9f:7e:3b:b4:61:f6:c7:ab:48:a6:67:9e:17:1a:22:76:8e: c2:9e:65:32:c0:57:55:6d:da:d6:c1:e8:a9:a6:c2:48:51:b3: 8b:b7:44:b7:db:72:02:3e:1b:2a:33:61:88:41:2f:77:3f:80: bf:a0:e1:08:54:b5:26:a9:d8:1f:66:02:76:2a:17:45:61:ac: 19:69:b8:62:f9:df:45:b6:0d:37:ac:a8:45:93:bd:6e:a2:0b: c0:b7:5f:81:f0:f5:5f:8d:7b:ab:8a:76:49:88:07:1e:9a:35: 7f:10:fb:7e:12:88:d2:05:7f:ec:8d:5e:17:1d:94:c9:e4:90: 53:1f:73:39:bd:0b:47:66:c3:1e:4f:c3:d6:69:33:f8:39:de: ef:a1:87:dc:0f:19:a8:9e:03:d8:db:99:b3:44:a8:e4:4f:38: d1:b9:a5:82:1b:1e:a3:13:99:ce:8b:a8:63:be:ed:02:37:48: 7d:82:d1:9b:f6:67:84:ca:f8:ce:dd:69:33:d3:c9:35:c0:a3: 45:a3:ec:77:d3:67:23:8e:3d:bb:65:b3:c8:ea:19:04:00:c3: 74:b5:1e:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pS49Py9XI2/icuHNIYQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5 MGVjZjQwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDk5ZTkxZjBhOTY0NDI3MjBjMDBkYTRkNzc3NDhiMTk2YzVkNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WVz7WjM7S8phB25yHtrS8qCebGk gk+gabTsNelTdkZo45suqDLrbBEN1Nogd52703IFsqYtmevEBnXmJ4sKGCx82zJ1 WcDjQj45Bh515uHm4QpbrsBripPDS6iM0yHtL6VxmfkGNcGORySiT5mvXlzFZuiZ 5ArlHzMcqq1/nUg5h6tuH1goLUrwHvGYJk5jsPDMCjF66DK6jr2JLYhaOp5izC4d H5AcCprP9WtUyAPVQVQYEWSAg2Hj8nd1YH2YjfMeN9SSPqoaUsUX7s9oOwxXVtlf 5zXJjRb2DKvHNNy1SKrws1pPrbQRofF8Qpn7ZeCYXX9Wk7WNqVGh/n5zvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCZ6R8KlkQnIMANpNd3SLGWxdcIMB8GA1UdIwQY MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt YzZkYzU4MTM3ZDA3LzEvTUpucEh3cVdSQ2Nnd0EyazEzZElzWmJGMXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3 LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubtoMA0G CSqGSIb3DQEBCwUAA4IBAQAvWMchPSEOqn9fv1oC6EsaYkVtCx1fiD0f4UGnVihC NaFNBWDzn347tGH2x6tIpmeeFxoido7CnmUywFdVbdrWweippsJIUbOLt0S323IC PhsqM2GIQS93P4C/oOEIVLUmqdgfZgJ2KhdFYawZabhi+d9Ftg03rKhFk71uogvA t1+B8PVfjXurinZJiAcemjV/EPt+EojSBX/sjV4XHZTJ5JBTH3M5vQtHZsMeT8PW aTP4Od7voYfcDxmongPY25mzRKjkTzjRuaWCGx6jE5nOi6hjvu0CN0h9gtGb9meE yvjO3Wkz08k1wKNFo+x302cjjj27ZbPI6hkEAMN0tR5n -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:46 2026 by rpki-client