This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa File: Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa (raw, json) Hash identifier: mUVvW47r5i0R+fZsLAsCtRCsk0x6xVLyquq+qyROV1s= Subject key identifier: 32:4F:03:96:97:DE:45:16:B5:AA:0D:67:93:43:2F:BB:E6:2E:98:FC Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Certificate serial: 019B7E3872F5751CC51B8ADB7610081703D4 Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50708 IP address blocks: 193.105.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:72:f5:75:1c:c5:1b:8a:db:76:10:08:17:03:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324f039697de4516b5aa0d6793432fbbe62e98fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:bb:48:c5:1e:b2:16:8d:14:ca:be:0c:43: 4d:21:f5:55:49:87:6e:54:5f:ed:45:e8:71:b9:ad: e4:09:ae:ef:8e:cf:53:1c:aa:bd:b4:be:7b:63:ff: 55:f5:de:4e:b1:46:d3:4c:e7:3c:27:60:7a:a4:9e: ed:d2:65:e4:c4:d8:af:79:b9:a2:77:aa:3d:28:51: fa:21:14:30:ca:fa:09:91:d0:f5:b2:79:3d:5d:12: df:78:21:01:91:3e:69:f9:f5:8b:b0:04:b5:67:b3: 09:cf:87:a4:06:04:ef:56:47:97:75:dc:df:4f:c4: b9:c2:82:b4:e9:60:35:5a:e8:6e:f1:7a:1f:86:17: a9:02:29:03:15:36:fc:d6:1d:ea:c8:b6:d8:61:b2: b5:e4:6d:d6:9b:fe:21:91:93:42:6a:25:e3:e9:73: 84:08:e1:01:bc:c5:f6:91:65:fe:10:4a:a3:2b:4d: 0f:4b:e1:8b:a1:73:66:1d:6f:0c:1c:0a:c1:76:d4: 56:16:33:d8:e2:ab:32:6a:00:46:4a:3a:cf:d6:c8: e2:fe:f8:4c:68:b2:2a:a6:fe:d1:90:fc:c3:04:32: 2b:fe:4a:34:ad:2b:c4:94:f3:77:80:93:fa:35:3c: 65:17:4a:2e:ad:95:1b:c9:a1:24:73:96:0c:51:78: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4F:03:96:97:DE:45:16:B5:AA:0D:67:93:43:2F:BB:E6:2E:98:FC X509v3 Authority Key Identifier: keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.190.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:fd:30:d0:6c:e4:8f:d8:05:7a:47:8f:98:e4:71:15:0e:f5: 46:f2:df:32:12:35:5e:0e:1e:9c:bd:5f:30:eb:22:88:2b:f8: 46:d2:41:9d:a3:18:23:11:87:d5:8c:7e:da:15:1d:fe:67:89: db:5c:a9:c3:ee:e9:c3:ac:a0:0d:cf:25:c5:21:d5:96:0b:f1: d5:d1:5c:a3:66:92:7a:6f:2d:23:5b:1e:9b:81:ea:85:f6:33: 22:e1:b4:7d:f5:ea:9e:44:b5:26:16:b7:76:a1:d8:bc:a6:67: b6:d6:e9:76:fd:46:79:cf:01:ed:3c:80:ac:a5:58:78:14:29: da:59:2f:e9:1d:46:78:d7:65:70:48:a2:18:a7:dd:bc:a0:46: 5b:1e:44:ee:4b:1b:0f:51:61:fb:f1:78:65:d2:b2:86:a6:4c: 6c:d8:71:d3:5e:2f:49:ed:f8:05:af:b1:77:cc:15:c8:a3:08: 48:58:c3:1c:68:be:50:54:ad:7c:72:98:5e:09:33:2b:1b:b2: 52:c6:3c:21:fb:5a:c8:e2:5e:93:7b:ee:3a:67:9f:a5:e7:44: ce:45:d8:3f:3e:0c:10:ab:b5:98:52:79:bb:e8:a3:07:0b:5e: 8e:f7:22:ed:e5:11:dd:d7:8e:85:84:f8:6c:a8:02:92:93:43: 4d:4a:e9:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHL1dRzFG4rbdhAIFwPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz NTgzZjkwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRmMDM5Njk3ZGU0NTE2YjVhYTBkNjc5MzQzMmZiYmU2MmU5OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZe7SMUeshaNFMq+DENNIfVVSYdu VF/tRehxua3kCa7vjs9THKq9tL57Y/9V9d5OsUbTTOc8J2B6pJ7t0mXkxNivebmi d6o9KFH6IRQwyvoJkdD1snk9XRLfeCEBkT5p+fWLsAS1Z7MJz4ekBgTvVkeXddzf T8S5woK06WA1Wuhu8XofhhepAikDFTb81h3qyLbYYbK15G3Wm/4hkZNCaiXj6XOE COEBvMX2kWX+EEqjK00PS+GLoXNmHW8MHArBdtRWFjPY4qsyagBGSjrP1sji/vhM aLIqpv7RkPzDBDIr/ko0rSvElPN3gJP6NTxlF0ourZUbyaEkc5YMUXi3IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJPA5aX3kUWtaoNZ5NDL7vmLpj8MB8GA1UdIwQY MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt YWI0MjYzZWQ0MGRlLzEvTWs4RGxwZmVSUmExcWcxbmswTXZ1LVl1bVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWm+MA0G CSqGSIb3DQEBCwUAA4IBAQBP/TDQbOSP2AV6R4+Y5HEVDvVG8t8yEjVeDh6cvV8w 6yKIK/hG0kGdoxgjEYfVjH7aFR3+Z4nbXKnD7unDrKANzyXFIdWWC/HV0VyjZpJ6 by0jWx6bgeqF9jMi4bR99eqeRLUmFrd2odi8pme21ul2/UZ5zwHtPICspVh4FCna WS/pHUZ412VwSKIYp928oEZbHkTuSxsPUWH78Xhl0rKGpkxs2HHTXi9J7fgFr7F3 zBXIowhIWMMcaL5QVK18cpheCTMrG7JSxjwh+1rI4l6Te+46Z5+l50TORdg/PgwQ q7WYUnm76KMHC16O9yLt5RHd146FhPhsqAKSk0NNSuly -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:13 2026 by rpki-client