This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/cMufgoQU0L0jv10NNeCceGj__mo.roa File: cMufgoQU0L0jv10NNeCceGj__mo.roa (raw, json) Hash identifier: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ= Subject key identifier: 70:CB:9F:82:84:14:D0:BD:23:BF:5D:0D:35:E0:9C:78:68:FF:FE:6A Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B7E3913645873D31D1ED86BF6F61FEB35 Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/cMufgoQU0L0jv10NNeCceGj__mo.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57193 IP address blocks: 185.11.244.0/24 maxlen: 24 185.11.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:64:58:73:d3:1d:1e:d8:6b:f6:f6:1f:eb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70cb9f828414d0bd23bf5d0d35e09c7868fffe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:95:74:22:12:db:78:72:b9:20:da:2c:6c: a2:0a:eb:09:25:23:fa:d8:eb:53:ea:8e:ce:3c:ba: 1a:b1:84:76:0f:4b:1f:1c:f2:a8:30:5d:43:b5:29: 3f:c7:d3:c2:56:9d:2e:05:23:41:ab:73:af:5c:64: a9:ce:7e:26:72:fd:d6:14:08:30:ed:93:7e:46:0e: fd:ff:09:52:61:9b:0b:aa:26:8f:2d:ca:28:9b:58: 55:38:43:87:6b:42:60:e8:13:3f:c8:ee:81:26:fb: f0:02:76:c9:84:b9:8f:85:a4:4f:f9:e3:f3:df:00: 7e:36:0d:fd:2f:a8:d3:07:72:48:94:7a:58:ba:05: 63:e3:fb:39:53:11:35:44:f6:41:4a:e7:74:61:82: 84:05:16:e9:c1:1f:e4:db:04:f4:9e:81:a2:8b:9f: cf:8f:fe:9a:a5:19:ca:b1:02:27:e7:1d:18:b0:d8: c4:4c:b6:ce:96:ef:b2:0c:a1:dd:87:3a:e7:f7:97: 57:5f:50:41:f2:ea:b6:de:96:19:4c:80:92:7a:57: 3d:0e:77:e3:3a:59:f1:91:25:79:23:79:7b:1d:2a: 0e:12:74:fd:63:63:99:83:27:1d:fc:c0:3d:c6:da: 67:63:db:b0:07:da:d7:05:05:98:8d:a1:c5:cd:ef: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:9F:82:84:14:D0:BD:23:BF:5D:0D:35:E0:9C:78:68:FF:FE:6A X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/cMufgoQU0L0jv10NNeCceGj__mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.244.0/23 Signature Algorithm: sha256WithRSAEncryption 21:89:35:e9:9d:b4:e5:d4:7e:ea:aa:e6:7f:bc:8a:bb:81:3e: f1:2a:92:fa:57:83:34:ac:31:f5:da:94:98:fa:d4:91:a1:c0: e7:dc:f7:6b:00:81:90:3e:34:c1:4d:92:f1:ad:2d:4f:b7:4a: 90:98:19:66:75:61:22:7f:e2:c7:b6:d0:54:ae:5a:08:76:c4: cb:34:14:a6:fb:5a:dd:cd:ed:a9:cd:88:af:e7:0e:f2:e2:fd: 76:d6:eb:3f:e1:30:80:8c:0a:32:2f:51:e7:7d:00:38:eb:48: d3:34:cc:ed:cc:a7:1c:dc:c7:3a:8f:57:36:04:92:1a:7b:4e: 5b:ae:20:10:65:86:f8:d7:94:f0:21:89:ef:d0:15:f6:c4:9c: 04:27:67:51:31:a8:d0:94:cd:2e:d4:46:08:6a:1f:cb:f2:b3: da:0a:2b:52:c6:bc:03:25:df:04:a7:a5:8b:53:38:37:33:82: d6:e9:cf:20:49:8c:ac:c4:9d:cf:b6:42:cc:05:9c:90:92:bb: f0:ea:7b:95:f8:f9:0b:3e:4a:41:5a:d3:58:3a:68:66:6e:d1: 3f:0c:3b:27:45:56:4c:8a:a7:f0:66:dd:d4:bb:b7:f7:ce:ec: 01:c6:cb:e9:78:73:cc:fe:a5:13:9a:c2:ff:84:38:dd:4b:a3: 14:89:6a:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORNkWHPTHR7Ya/b2H+s1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGNiOWY4Mjg0MTRkMGJkMjNiZjVkMGQzNWUwOWM3ODY4ZmZmZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDuVdCIS23hyuSDaLGyiCusJJSP6 2OtT6o7OPLoasYR2D0sfHPKoMF1DtSk/x9PCVp0uBSNBq3OvXGSpzn4mcv3WFAgw 7ZN+Rg79/wlSYZsLqiaPLcoom1hVOEOHa0Jg6BM/yO6BJvvwAnbJhLmPhaRP+ePz 3wB+Ng39L6jTB3JIlHpYugVj4/s5UxE1RPZBSud0YYKEBRbpwR/k2wT0noGii5/P j/6apRnKsQIn5x0YsNjETLbOlu+yDKHdhzrn95dXX1BB8uq23pYZTICSelc9Dnfj OlnxkSV5I3l7HSoOEnT9Y2OZgycd/MA9xtpnY9uwB9rXBQWYjaHFze8oMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDLn4KEFNC9I79dDTXgnHho//5qMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvY011ZmdvUVUwTDBqdjEwTk5lQ2NlR2pfX21vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQv0MA0G CSqGSIb3DQEBCwUAA4IBAQAhiTXpnbTl1H7qquZ/vIq7gT7xKpL6V4M0rDH12pSY +tSRocDn3PdrAIGQPjTBTZLxrS1Pt0qQmBlmdWEif+LHttBUrloIdsTLNBSm+1rd ze2pzYiv5w7y4v121us/4TCAjAoyL1HnfQA460jTNMztzKcc3Mc6j1c2BJIae05b riAQZYb415TwIYnv0BX2xJwEJ2dRMajQlM0u1EYIah/L8rPaCitSxrwDJd8Ep6WL Uzg3M4LW6c8gSYysxJ3PtkLMBZyQkrvw6nuV+PkLPkpBWtNYOmhmbtE/DDsnRVZM iqfwZt3Uu7f3zuwBxsvpeHPM/qUTmsL/hDjdS6MUiWoP -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:11 2026 by rpki-client