This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mMBInzFH19oMBJZYuOE4NJldxL0.roa File: mMBInzFH19oMBJZYuOE4NJldxL0.roa (raw, json) Hash identifier: QEIYWUkjiaE+u18rkhp4TPkK11QA0emG92zwGIVgKjc= Subject key identifier: 98:C0:48:9F:31:47:D7:DA:0C:04:96:58:B8:E1:38:34:99:5D:C4:BD Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2ED4121BC83FC1C5D429898F65CA Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mMBInzFH19oMBJZYuOE4NJldxL0.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 188.241.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:d4:12:1b:c8:3f:c1:c5:d4:29:89:8f:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c0489f3147d7da0c049658b8e13834995dc4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:45:91:eb:f7:6c:7f:4d:b6:b4:51:51:b8: cc:3f:b7:1e:ba:4d:33:c3:d3:48:77:e2:4d:12:03: 5d:d6:7f:dd:ea:64:7c:c0:cf:eb:8b:60:da:87:c6: 55:21:2a:8b:fc:1f:77:99:ab:20:db:fc:48:f5:a8: 0c:08:ff:68:18:a1:66:e1:44:8f:f3:f8:5c:4a:df: 6a:a0:5d:b1:b6:16:aa:1e:fa:3b:b6:57:63:87:d6: e9:6e:9f:15:0a:56:f0:fc:8c:c2:ad:8b:6b:29:ef: c0:cf:b0:07:0e:b0:42:ec:eb:3b:af:27:92:06:3f: c2:02:0e:c8:32:24:1c:5c:81:84:9a:f9:a6:8f:73: 50:09:13:8c:8f:57:bf:df:6d:cf:65:2f:f5:bb:93: 85:0b:a1:25:e4:13:25:63:73:38:23:2f:bf:47:b1: 14:b8:36:a2:c3:4d:c9:9e:c1:0c:f6:42:81:53:1f: dc:9f:78:69:e0:32:7f:7f:67:1a:b5:24:55:cf:15: 65:67:67:ca:8a:5a:ac:ab:30:04:ee:18:99:b1:ee: 0c:29:14:ce:fd:72:ed:78:83:ea:17:94:34:6b:78: 87:33:70:d9:49:52:a2:82:8d:77:88:8c:df:e9:36: fc:f2:b4:52:b6:5c:41:01:09:2a:32:1e:d1:55:24: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C0:48:9F:31:47:D7:DA:0C:04:96:58:B8:E1:38:34:99:5D:C4:BD X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mMBInzFH19oMBJZYuOE4NJldxL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.243.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:4f:b9:a5:ba:b7:5a:23:e5:a4:81:d0:35:86:63:bf:0e:85: 2c:a6:bb:66:7f:1a:2f:5b:70:38:98:76:28:1f:9e:c9:82:a7: 64:b1:d5:9b:b0:83:72:f8:c7:35:ae:05:42:1a:8a:9e:55:6d: 5b:a7:16:98:fd:40:8a:b2:29:cc:46:b6:3b:86:e0:29:1c:fe: 37:ab:85:34:53:d4:29:4c:01:36:64:96:04:e2:51:56:8c:29: f5:1b:fd:74:46:15:b5:38:1a:b1:5d:7a:3d:42:51:d7:6a:dd: a2:7d:09:6d:b8:5a:82:48:a6:f2:47:57:32:cb:63:00:3c:59: 34:f1:cd:1b:2d:59:2c:41:47:16:b0:13:ed:f6:1a:21:c6:af: 0c:f2:e4:aa:32:71:d3:48:c1:af:f5:cc:16:48:e4:97:6b:ae: 73:b6:c2:13:10:0d:bc:3a:3e:5e:e7:56:38:c2:d7:b2:14:a7: a8:d7:87:70:62:7f:eb:06:b5:33:a3:5c:14:1b:f2:2e:6a:8c: 81:02:c8:8c:34:a8:b0:32:3f:5a:ca:3f:bc:a4:07:73:46:31: 29:db:54:70:eb:e3:3d:f9:22:f1:4a:70:c9:aa:c4:92:ec:46: 8d:fd:a4:63:a0:02:6b:07:24:14:81:df:b8:13:0b:55:a2:6f: 45:ed:9d:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XS7UEhvIP8HF1CmJj2XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGMwNDg5ZjMxNDdkN2RhMGMwNDk2NThiOGUxMzgzNDk5NWRjNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBFFkev3bH9NtrRRUbjMP7ceuk0z w9NId+JNEgNd1n/d6mR8wM/ri2Dah8ZVISqL/B93masg2/xI9agMCP9oGKFm4USP 8/hcSt9qoF2xthaqHvo7tldjh9bpbp8VClbw/IzCrYtrKe/Az7AHDrBC7Os7ryeS Bj/CAg7IMiQcXIGEmvmmj3NQCROMj1e/323PZS/1u5OFC6El5BMlY3M4Iy+/R7EU uDaiw03JnsEM9kKBUx/cn3hp4DJ/f2catSRVzxVlZ2fKilqsqzAE7hiZse4MKRTO /XLteIPqF5Q0a3iHM3DZSVKigo13iIzf6Tb88rRStlxBAQkqMh7RVSTCHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjASJ8xR9faDASWWLjhODSZXcS9MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbU1CSW56RkgxOW9NQkpaWXVPRTROSmxkeEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPHzMA0G CSqGSIb3DQEBCwUAA4IBAQAtT7mlurdaI+WkgdA1hmO/DoUsprtmfxovW3A4mHYo H57JgqdksdWbsINy+Mc1rgVCGoqeVW1bpxaY/UCKsinMRrY7huApHP43q4U0U9Qp TAE2ZJYE4lFWjCn1G/10RhW1OBqxXXo9QlHXat2ifQltuFqCSKbyR1cyy2MAPFk0 8c0bLVksQUcWsBPt9hohxq8M8uSqMnHTSMGv9cwWSOSXa65ztsITEA28Oj5e51Y4 wteyFKeo14dwYn/rBrUzo1wUG/IuaoyBAsiMNKiwMj9ayj+8pAdzRjEp21Rw6+M9 +SLxSnDJqsSS7EaN/aRjoAJrByQUgd+4EwtVom9F7Z3j -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client