This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/MRi2QUKiUYiuqZDbNN8AWi7khO4.roa File: MRi2QUKiUYiuqZDbNN8AWi7khO4.roa (raw, json) Hash identifier: NMGJJ7+SOJryUXuDS+WQnGKqDDO2i9Z6K8gWplB05UE= Subject key identifier: 31:18:B6:41:42:A2:51:88:AE:A9:90:DB:34:DF:00:5A:2E:E4:84:EE Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Certificate serial: 019B7C803FEE5C7F15B6BA9771A10E4608FC Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/MRi2QUKiUYiuqZDbNN8AWi7khO4.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.22.0/24 maxlen: 24 185.1.143.0/24 maxlen: 24 2001:7f8:c6::/48 maxlen: 48 2001:7f8:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3f:ee:5c:7f:15:b6:ba:97:71:a1:0e:46:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3118b64142a25188aea990db34df005a2ee484ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:7e:4f:d0:0d:b2:1f:8e:db:21:26:11:a9: 79:eb:eb:5f:71:eb:93:90:79:0e:1b:69:aa:94:73: ac:f5:c0:39:25:56:3e:1f:41:1e:f5:39:91:25:95: cf:7f:4f:e7:36:92:b1:24:42:a1:f1:2e:62:4c:d3: 2f:e6:07:db:2a:bd:ad:80:f5:b0:d9:8f:31:b3:b4: 36:22:b7:62:5f:92:60:a6:4f:f6:1d:a0:e4:ce:9f: 0f:f4:99:c1:dc:11:e3:f8:c5:35:5f:06:a4:4b:ae: 4a:6d:64:73:57:62:13:b8:59:7f:be:fd:54:3a:61: 87:ff:9e:a2:f1:38:2d:8d:4f:ea:bb:43:3b:a8:11: 0d:ab:57:e3:99:2f:c7:fd:83:76:85:eb:18:f4:29: 3a:c7:ba:df:6c:ed:b5:0b:68:2b:56:2e:c5:ed:8b: 55:10:91:ee:1a:a6:79:b3:3a:9a:ba:32:21:3d:02: 00:f3:44:ea:6e:d4:51:3c:7d:22:d2:e2:b0:56:39: df:94:3b:0c:be:b4:3c:32:81:d8:4a:2a:c9:64:b8: 56:98:30:a1:47:b0:8a:e5:1b:e5:0a:d7:eb:5a:ad: b4:a3:7e:1d:c0:9e:7b:20:14:72:6d:3e:aa:21:d1: 1a:24:be:b8:36:3a:08:52:2b:7a:38:13:56:ed:4b: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:B6:41:42:A2:51:88:AE:A9:90:DB:34:DF:00:5A:2E:E4:84:EE X509v3 Authority Key Identifier: keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/MRi2QUKiUYiuqZDbNN8AWi7khO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.22.0/24 185.1.143.0/24 IPv6: 2001:7f8:c6::/48 2001:7f8:de::/48 Signature Algorithm: sha256WithRSAEncryption 21:5b:59:fb:18:65:7c:49:2d:0f:b3:c6:6f:0d:fa:a6:a9:d4: 02:96:c9:4f:84:ca:28:54:77:00:43:b9:59:9e:36:5f:d9:93: 32:91:50:38:c6:7d:98:94:39:37:b3:37:fe:fb:70:70:fb:cd: 69:0d:8a:91:f9:88:df:0e:0e:94:3f:1a:5d:32:64:3c:6d:08: 1b:cd:11:68:5a:cf:48:cb:36:7b:4a:66:32:aa:79:cc:cf:76: 5e:af:9a:4c:6c:e4:c8:3c:bb:b5:e9:2d:49:2b:be:78:bc:2c: 35:9f:21:9f:37:88:64:ca:8f:44:94:83:ff:ac:31:f1:f2:47: 53:dd:db:87:08:d0:6e:e1:5b:52:e9:e0:5f:92:0c:c2:62:03: bf:2b:a1:ea:55:8e:cc:e6:6f:fc:26:91:55:48:31:9b:2f:ea: 69:db:ba:6c:26:02:a2:bb:35:50:55:30:aa:84:5a:a9:b6:bb: 86:15:c0:7d:81:85:1f:0a:34:75:30:7e:47:59:70:02:df:64: 65:90:7d:6c:40:59:36:2c:23:28:0d:f0:49:42:bc:79:89:3b: 12:bd:40:09:84:e4:5b:19:cc:07:e8:80:89:be:d7:90:ac:a8: cf:e9:5d:2c:45:4c:94:d9:58:fe:0a:b7:ae:3d:0a:a9:d0:8c: 18:a5:13:89 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8gD/uXH8VtrqXcaEORgj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ3YjczZWU4ZmJlZGQyNWY0MWIzYjE3YjJiZTA4ZjVi ZjY1NjMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTE4YjY0MTQyYTI1MTg4YWVhOTkwZGIzNGRmMDA1YTJlZTQ4NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTx+T9ANsh+O2yEmEal56+tfceuT kHkOG2mqlHOs9cA5JVY+H0Ee9TmRJZXPf0/nNpKxJEKh8S5iTNMv5gfbKr2tgPWw 2Y8xs7Q2IrdiX5Jgpk/2HaDkzp8P9JnB3BHj+MU1XwakS65KbWRzV2ITuFl/vv1U OmGH/56i8TgtjU/qu0M7qBENq1fjmS/H/YN2hesY9Ck6x7rfbO21C2grVi7F7YtV EJHuGqZ5szqaujIhPQIA80TqbtRRPH0i0uKwVjnflDsMvrQ8MoHYSirJZLhWmDCh R7CK5RvlCtfrWq20o34dwJ57IBRybT6qIdEaJL64NjoIUit6OBNW7Ut7uQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDEYtkFColGIrqmQ2zTfAFou5ITuMB8GA1UdIwQY MBaAFDT0e3Puj77dJfQbOxeyvgj1v2VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQt ZDg3ZTQwNDdmODUzLzEvTVJpMlFVS2lVWWl1cVpEYk5OOEFXaTdraE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQtZDg3ZTQwNDdmODUz LzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuQEWAwQA uQGPMBgEAgACMBIDBwAgAQf4AMYDBwAgAQf4AN4wDQYJKoZIhvcNAQELBQADggEB ACFbWfsYZXxJLQ+zxm8N+qap1AKWyU+EyihUdwBDuVmeNl/ZkzKRUDjGfZiUOTez N/77cHD7zWkNipH5iN8ODpQ/Gl0yZDxtCBvNEWhaz0jLNntKZjKqeczPdl6vmkxs 5Mg8u7XpLUkrvni8LDWfIZ83iGTKj0SUg/+sMfHyR1Pd24cI0G7hW1Lp4F+SDMJi A78roepVjszmb/wmkVVIMZsv6mnbumwmAqK7NVBVMKqEWqm2u4YVwH2BhR8KNHUw fkdZcALfZGWQfWxAWTYsIygN8ElCvHmJOxK9QAmE5FsZzAfogIm+15CsqM/pXSxF TJTZWP4Kt649CqnQjBilE4k= -----END CERTIFICATE-----Generated at Sat Jan 3 19:03:36 2026 by rpki-client