This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/MD2XknW8QXUXX5zjYirvLatDz1U.roa File: MD2XknW8QXUXX5zjYirvLatDz1U.roa (raw, json) Hash identifier: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E= Subject key identifier: 30:3D:97:92:75:BC:41:75:17:5F:9C:E3:62:2A:EF:2D:AB:43:CF:55 Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac Certificate serial: 019B7E38381A7768A50B865F56D81DD4BF52 Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/MD2XknW8QXUXX5zjYirvLatDz1U.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203170 IP address blocks: 185.77.190.0/23 maxlen: 23 185.77.190.0/24 maxlen: 24 185.77.191.0/24 maxlen: 24 2a05:5f00::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:38:1a:77:68:a5:0b:86:5f:56:d8:1d:d4:bf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=303d979275bc4175175f9ce3622aef2dab43cf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:44:dc:43:ba:57:47:1a:c1:ee:7c:cf:2a: 9c:09:1f:2e:d2:04:60:1b:b6:54:40:8e:eb:3f:69: 87:97:58:df:1d:80:1c:f4:02:12:98:79:34:b9:fa: 92:14:95:5a:6e:25:68:05:fe:dd:bd:14:43:2d:6c: 68:e5:9a:19:ca:7b:31:35:e2:7e:f0:71:cb:e9:3e: 3a:b9:1b:0b:9b:a2:67:1e:58:33:32:a4:d2:a9:00: 87:d0:c8:28:4d:ef:e8:7d:39:16:79:92:2e:bf:27: ef:25:45:f7:68:5e:2f:b0:f9:db:21:20:df:ce:64: 4e:c4:17:ab:70:d7:c7:69:10:8b:42:03:70:79:8b: 48:d9:43:f5:1e:e0:a3:50:ef:f5:75:0e:2e:d0:d2: 71:a4:37:cf:29:59:d6:28:28:e6:df:04:43:89:42: eb:10:35:e5:6f:b2:3e:57:19:40:e5:dd:94:1a:f7: bf:4b:9e:58:59:43:85:a6:c1:4e:72:02:35:f8:60: c2:75:65:85:f6:42:0d:1c:bf:5f:9e:27:f7:4f:ed: 9c:12:c7:24:c2:95:95:8e:2f:8a:0a:fc:33:05:da: 56:b9:09:3f:b9:4c:a1:62:a4:00:5c:a3:8e:95:36: e8:2e:00:19:3f:4e:7a:a6:91:16:2e:73:a0:cb:03: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:97:92:75:BC:41:75:17:5F:9C:E3:62:2A:EF:2D:AB:43:CF:55 X509v3 Authority Key Identifier: keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/MD2XknW8QXUXX5zjYirvLatDz1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.190.0/23 IPv6: 2a05:5f00::/30 Signature Algorithm: sha256WithRSAEncryption 41:4b:26:40:b6:b1:21:6d:3b:0c:b0:19:7c:8c:f3:32:f8:7b: 5c:ad:22:b8:2b:de:7f:2d:76:ab:cf:8f:ce:ed:c1:30:d5:25: 00:1b:89:2d:93:9c:f9:5c:35:9c:75:d6:10:32:f9:a9:06:12: c4:fd:7e:e7:e3:fb:2d:9d:6b:70:3b:0f:62:8b:b9:79:0a:8f: fa:94:3f:fd:43:de:ed:2b:2c:4f:2b:e5:19:b4:28:69:7d:08: b8:84:14:6f:02:c7:0c:2c:d7:4a:f3:73:f1:bd:6a:60:8a:60: 08:df:8c:ac:a5:f0:43:b6:bb:61:3a:30:8b:86:82:2e:ce:58: 87:b2:6e:dd:6b:9f:f8:96:eb:fc:0d:01:01:4b:7f:9f:c6:23: 15:e5:23:90:5f:86:39:6b:4b:d2:8e:ee:ac:ad:30:c0:04:59: c0:72:56:bb:17:fb:91:68:6d:5c:22:cc:2f:2d:20:e4:b7:76: 30:cc:18:a7:e9:a9:26:77:fe:aa:b2:2a:ab:c0:0e:dd:18:f4: eb:a8:79:d3:7e:0f:0b:ba:2f:d0:0e:4e:83:ed:65:b9:af:24: f9:8c:91:33:f1:9d:65:88:df:75:6b:c3:14:fd:5f:41:f3:bf: 30:a6:1e:b9:ea:0f:09:9a:c9:ee:69:97:2c:10:d3:cd:7b:71: f4:41:4c:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ODgad2ilC4ZfVtgd1L9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZTZmNDczMzAyYzZhM2M4OWRmN2I4OTMyYzU2YmM4NDFj YjVmYWMwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDNkOTc5Mjc1YmM0MTc1MTc1ZjljZTM2MjJhZWYyZGFiNDNjZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr5E3EO6V0cawe58zyqcCR8u0gRg G7ZUQI7rP2mHl1jfHYAc9AISmHk0ufqSFJVabiVoBf7dvRRDLWxo5ZoZynsxNeJ+ 8HHL6T46uRsLm6JnHlgzMqTSqQCH0MgoTe/ofTkWeZIuvyfvJUX3aF4vsPnbISDf zmROxBercNfHaRCLQgNweYtI2UP1HuCjUO/1dQ4u0NJxpDfPKVnWKCjm3wRDiULr EDXlb7I+VxlA5d2UGve/S55YWUOFpsFOcgI1+GDCdWWF9kINHL9fnif3T+2cEsck wpWVji+KCvwzBdpWuQk/uUyhYqQAXKOOlTboLgAZP056ppEWLnOgywPU3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDA9l5J1vEF1F1+c42Iq7y2rQ89VMB8GA1UdIwQY MBaAFJTm9HMwLGo8id97iTLFa8hBy1+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAt OWExZjBkZGI5ZTcwLzEvTUQyWGtuVzhRWFVYWDV6allpcnZMYXREejFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAtOWExZjBkZGI5ZTcw LzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuU2+MA0E AgACMAcDBQIqBV8AMA0GCSqGSIb3DQEBCwUAA4IBAQBBSyZAtrEhbTsMsBl8jPMy +HtcrSK4K95/LXarz4/O7cEw1SUAG4ktk5z5XDWcddYQMvmpBhLE/X7n4/stnWtw Ow9ii7l5Co/6lD/9Q97tKyxPK+UZtChpfQi4hBRvAscMLNdK83PxvWpgimAI34ys pfBDtrthOjCLhoIuzliHsm7da5/4luv8DQEBS3+fxiMV5SOQX4Y5a0vSju6srTDA BFnAcla7F/uRaG1cIswvLSDkt3YwzBin6akmd/6qsiqrwA7dGPTrqHnTfg8Lui/Q Dk6D7WW5ryT5jJEz8Z1liN91a8MU/V9B878wph656g8JmsnuaZcsENPNe3H0QUzV -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:41 2026 by rpki-client