This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/MIMB6hj-pbhZmAS4NaP7XqTgm34.roa File: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (raw, json) Hash identifier: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s= Subject key identifier: 30:83:01:EA:18:FE:A5:B8:59:98:04:B8:35:A3:FB:5E:A4:E0:9B:7E Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019B7B36361B0B840A7C44AC2CDFE1FF0D2A Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/MIMB6hj-pbhZmAS4NaP7XqTgm34.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19539 IP address blocks: 178.248.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:36:1b:0b:84:0a:7c:44:ac:2c:df:e1:ff:0d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=308301ea18fea5b8599804b835a3fb5ea4e09b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:48:0e:df:03:db:2f:47:6f:9a:cc:86:68: 89:74:92:d3:32:36:5d:cf:09:d1:a1:e0:dc:03:8b: b1:f5:f6:70:89:91:5c:e0:63:e2:a5:f5:21:db:65: e1:b7:32:65:d0:e6:18:da:20:b1:19:70:aa:8c:f7: 42:22:75:03:0e:8d:8c:a6:b0:87:39:03:f6:4b:2c: 61:40:7a:51:7e:51:63:a6:35:55:6c:b3:34:19:0c: 2b:f7:d3:59:e7:8a:c9:af:f1:d1:1d:86:e2:71:6a: 5c:d9:28:de:08:12:47:a8:62:00:3e:d7:ff:a7:bb: cb:f3:75:31:4c:83:ac:8d:d7:73:61:0d:c2:7f:85: a4:10:fb:c4:0b:aa:5b:84:9b:27:9e:5c:e8:94:3a: c0:a6:3a:7d:4b:3e:dc:54:62:3a:26:8f:8f:6c:67: 85:80:c2:51:58:97:1a:89:3b:f6:12:ac:8b:3a:43: 8a:c7:56:71:53:83:57:91:80:5f:15:eb:e6:a5:5e: a6:65:71:13:97:e5:19:b0:f4:80:ca:d5:c1:ce:6f: a4:19:62:fd:2b:f7:7d:84:79:97:85:48:ff:a2:8a: 93:27:28:85:77:94:56:40:32:ba:1b:23:0f:52:bb: cd:aa:31:3c:33:28:5f:bb:62:d7:25:54:f2:d7:f4: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:01:EA:18:FE:A5:B8:59:98:04:B8:35:A3:FB:5E:A4:E0:9B:7E X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/MIMB6hj-pbhZmAS4NaP7XqTgm34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.28.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:f2:f5:8e:54:d8:d2:43:88:2b:97:b2:6b:0f:c4:2f:35:6a: 98:0a:0e:57:72:68:c4:14:fc:18:f2:ed:12:5b:0b:90:4d:7f: f4:87:c6:68:be:11:87:77:ce:e7:28:91:c3:4b:64:40:ca:0e: 4a:7e:bf:77:52:71:22:f9:a4:4a:8e:7d:52:4e:2f:6c:ba:89: 8d:83:cf:c8:8d:a0:dc:73:b2:66:33:f9:f9:17:e9:f9:ac:23: 6c:3a:4a:2d:47:9d:f1:eb:45:c4:10:00:f4:62:5d:e2:58:dd: 51:da:3b:20:80:80:2a:6d:7d:05:49:4c:22:6f:7f:75:93:cd: e6:90:01:f4:b5:72:67:26:ee:90:cb:3f:46:53:21:62:b3:62: 94:db:b2:e2:2c:72:1a:40:85:a6:b8:f5:58:68:02:5a:dc:8b: 61:37:fa:cd:e3:49:08:93:b2:fe:69:04:66:3a:0b:9e:c2:18: e6:cf:dc:e9:19:92:96:c8:98:52:b4:fa:0f:46:39:a0:78:ee: a7:47:20:9f:92:e3:c1:e7:b6:59:ad:a0:29:a7:10:bd:cc:33: 20:b2:29:7b:b5:cd:e9:f7:3d:e9:34:7c:ec:ff:51:8e:7e:55: 84:39:ec:9f:ea:a5:0e:53:7c:5a:5f:ac:c6:95:09:89:6a:ce: 6a:6d:92:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NjYbC4QKfESsLN/h/w0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDgzMDFlYTE4ZmVhNWI4NTk5ODA0YjgzNWEzZmI1ZWE0ZTA5YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLNIDt8D2y9Hb5rMhmiJdJLTMjZd zwnRoeDcA4ux9fZwiZFc4GPipfUh22XhtzJl0OYY2iCxGXCqjPdCInUDDo2MprCH OQP2SyxhQHpRflFjpjVVbLM0GQwr99NZ54rJr/HRHYbicWpc2SjeCBJHqGIAPtf/ p7vL83UxTIOsjddzYQ3Cf4WkEPvEC6pbhJsnnlzolDrApjp9Sz7cVGI6Jo+PbGeF gMJRWJcaiTv2EqyLOkOKx1ZxU4NXkYBfFevmpV6mZXETl+UZsPSAytXBzm+kGWL9 K/d9hHmXhUj/ooqTJyiFd5RWQDK6GyMPUrvNqjE8Myhfu2LXJVTy1/TJ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCDAeoY/qW4WZgEuDWj+16k4Jt+MB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvTUlNQjZoai1wYmhabUFTNE5hUDdYcVRnbTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsvgcMA0G CSqGSIb3DQEBCwUAA4IBAQA88vWOVNjSQ4grl7JrD8QvNWqYCg5XcmjEFPwY8u0S WwuQTX/0h8ZovhGHd87nKJHDS2RAyg5Kfr93UnEi+aRKjn1STi9suomNg8/IjaDc c7JmM/n5F+n5rCNsOkotR53x60XEEAD0Yl3iWN1R2jsggIAqbX0FSUwib391k83m kAH0tXJnJu6Qyz9GUyFis2KU27LiLHIaQIWmuPVYaAJa3IthN/rN40kIk7L+aQRm Oguewhjmz9zpGZKWyJhStPoPRjmgeO6nRyCfkuPB57ZZraAppxC9zDMgsil7tc3p 9z3pNHzs/1GOflWEOeyf6qUOU3xaX6zGlQmJas5qbZJm -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:06 2026 by rpki-client