This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/mrbGDz_JyzHUmctgZbt8kMQCk2k.roa File: mrbGDz_JyzHUmctgZbt8kMQCk2k.roa (raw, json) Hash identifier: bHrPDy7XdNfVwQuGMxJyeHOhQdXBmJyAp8XdPQQHOUg= Subject key identifier: 9A:B6:C6:0F:3F:C9:CB:31:D4:99:CB:60:65:BB:7C:90:C4:02:93:69 Certificate issuer: /CN=032b8c544e0debcfd6d7554d1595f044c2050783 Certificate serial: 019B79ED56CDE90A9D0B53D2C3BBB9FEFD1D Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/mrbGDz_JyzHUmctgZbt8kMQCk2k.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201629 IP address blocks: 185.68.12.0/22 maxlen: 22 185.68.12.0/24 maxlen: 24 185.68.13.0/24 maxlen: 24 185.68.14.0/24 maxlen: 24 185.68.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:56:cd:e9:0a:9d:0b:53:d2:c3:bb:b9:fe:fd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ab6c60f3fc9cb31d499cb6065bb7c90c4029369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:cd:f9:93:61:29:a2:75:68:89:ab:7d:a8: 9f:c9:76:d0:aa:59:fe:28:a1:8f:7b:33:ec:d7:de: aa:88:c1:38:fb:33:ca:65:e8:d8:db:df:d0:2a:3d: 19:12:7f:b3:36:95:6c:50:94:a4:0d:02:ca:43:93: e9:80:00:37:08:a6:00:10:7b:a6:d8:37:2d:63:cc: 77:30:9e:9a:c8:31:01:7c:40:90:fb:5d:c8:a9:dc: f2:03:f1:27:0e:ad:ea:9f:43:69:98:f5:82:33:0f: 6c:54:49:a1:90:d2:1b:4e:72:b1:6c:c1:04:3f:fa: 76:d0:6d:9e:84:c6:f7:8d:e9:7b:1e:e7:6d:5e:92: 05:70:c6:2b:a8:0e:dd:db:fd:d3:56:04:db:fd:f6: 7a:0f:1d:21:54:e7:7e:4a:54:4a:bc:8a:d3:44:f4: ac:f6:ae:40:f8:16:de:29:f6:b1:bb:2f:e0:a2:e7: ba:e6:3f:99:ec:68:5f:1a:68:dd:aa:02:cb:41:5d: 08:fd:74:c8:90:63:37:f7:d3:74:e9:c2:29:26:a8: f7:69:fc:0f:91:b3:ee:34:40:c1:ae:5f:18:56:40: 66:15:7e:78:44:6d:6c:aa:4a:08:cd:c1:e4:df:ff: c1:ef:88:70:a8:37:32:27:2a:7f:87:23:c6:93:75: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:C6:0F:3F:C9:CB:31:D4:99:CB:60:65:BB:7C:90:C4:02:93:69 X509v3 Authority Key Identifier: keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/mrbGDz_JyzHUmctgZbt8kMQCk2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:4c:08:f3:e0:2f:b5:71:ab:72:ca:1a:92:cd:02:e8:12:79: 03:1e:b1:a6:50:c3:85:a9:55:d3:74:cf:65:93:56:4a:a1:3c: fd:b0:a0:0c:bb:28:ee:be:2a:9a:9e:ac:36:9f:b5:37:54:fc: 23:f7:ce:6a:e4:95:04:49:71:ca:c6:e6:a1:0a:c7:37:97:01: 64:d6:55:14:cf:3e:30:eb:ce:c2:ae:1a:50:07:e3:ba:19:72: 9b:47:9f:dd:5b:f4:61:d8:45:be:36:c0:c5:4f:c0:25:15:81: c0:08:36:df:ba:b9:06:90:b5:98:38:ed:d4:77:35:4e:25:99: ee:ed:a5:f4:5f:df:f2:5b:c6:9a:6a:05:f9:4f:8a:76:62:7f: 85:ca:14:0e:4b:0e:c3:dd:8e:97:eb:4f:3f:6c:0a:b5:48:d6: 92:9b:a7:bf:33:5a:0c:20:79:05:b6:58:69:79:47:97:75:18: 70:f7:22:17:df:81:f9:bb:01:77:21:e7:e6:4c:81:ff:15:da: 44:91:c6:a1:f2:60:6e:c4:fd:8e:e0:25:d8:ee:e2:05:97:ab: 55:eb:e2:c6:cf:7c:09:09:93:9a:af:03:5c:73:d2:82:ce:ae: 05:d5:7a:b8:18:6c:a8:a3:c2:5f:14:d3:82:7e:7a:16:17:a7: f1:b3:ab:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VbN6QqdC1PSw7u5/v0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMmI4YzU0NGUwZGViY2ZkNmQ3NTU0ZDE1OTVmMDQ0YzIw NTA3ODMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWI2YzYwZjNmYzljYjMxZDQ5OWNiNjA2NWJiN2M5MGM0MDI5MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvXN+ZNhKaJ1aImrfaifyXbQqln+ KKGPezPs196qiME4+zPKZejY29/QKj0ZEn+zNpVsUJSkDQLKQ5PpgAA3CKYAEHum 2DctY8x3MJ6ayDEBfECQ+13IqdzyA/EnDq3qn0NpmPWCMw9sVEmhkNIbTnKxbMEE P/p20G2ehMb3jel7HudtXpIFcMYrqA7d2/3TVgTb/fZ6Dx0hVOd+SlRKvIrTRPSs 9q5A+BbeKfaxuy/goue65j+Z7GhfGmjdqgLLQV0I/XTIkGM399N06cIpJqj3afwP kbPuNEDBrl8YVkBmFX54RG1sqkoIzcHk3//B74hwqDcyJyp/hyPGk3V4VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq2xg8/ycsx1JnLYGW7fJDEApNpMB8GA1UdIwQY MBaAFAMrjFRODevP1tdVTRWV8ETCBQeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEt ZmIxOTQyYjVhZmY0LzEvbXJiR0R6X0p5ekhVbWN0Z1pidDhrTVFDazJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEtZmIxOTQyYjVhZmY0 LzEvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUQMMA0G CSqGSIb3DQEBCwUAA4IBAQCPTAjz4C+1catyyhqSzQLoEnkDHrGmUMOFqVXTdM9l k1ZKoTz9sKAMuyjuviqanqw2n7U3VPwj985q5JUESXHKxuahCsc3lwFk1lUUzz4w 687CrhpQB+O6GXKbR5/dW/Rh2EW+NsDFT8AlFYHACDbfurkGkLWYOO3UdzVOJZnu 7aX0X9/yW8aaagX5T4p2Yn+FyhQOSw7D3Y6X608/bAq1SNaSm6e/M1oMIHkFtlhp eUeXdRhw9yIX34H5uwF3IefmTIH/FdpEkcah8mBuxP2O4CXY7uIFl6tV6+LGz3wJ CZOarwNcc9KCzq4F1Xq4GGyoo8JfFNOCfnoWF6fxs6vO -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:01 2026 by rpki-client