This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa File: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (raw, json) Hash identifier: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8= Subject key identifier: 32:F7:3A:75:1C:0C:3D:5D:29:DE:74:BE:C6:07:93:D6:94:A4:B3:7B Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12DE1409A8E574447B3AFEDBAB3B94 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.255.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:de:14:09:a8:e5:74:44:7b:3a:fe:db:ab:3b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f73a751c0c3d5d29de74bec60793d694a4b37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:36:aa:85:0e:8e:51:05:ac:1f:47:d4:5a: 51:f9:46:2d:1e:66:94:1f:3f:36:65:76:d3:fe:68: c6:8f:2b:8d:14:3c:cf:90:8a:14:cf:bb:d3:3d:db: 8e:0b:be:76:db:0c:5c:e9:e7:59:cb:15:1f:b9:ee: 71:5f:a8:9c:8a:cd:f1:a2:07:97:46:05:26:59:d5: b2:74:6b:5f:f1:3d:5c:00:96:7b:a9:2e:91:33:a9: e6:39:fe:a2:96:01:8c:13:3c:1a:cb:0f:88:6a:a4: 00:1b:fc:63:bd:f8:62:db:10:e4:1a:86:91:fd:d5: fa:9a:9e:15:df:39:12:41:9b:3b:76:5f:80:95:5e: 1b:64:f5:f8:e7:f5:3a:15:ea:95:da:94:74:4a:5d: 41:c7:ef:c6:76:e6:1b:ac:47:de:8c:54:93:0e:7d: 71:b9:01:70:5f:04:be:b7:a9:dc:06:b3:1c:96:dc: 4e:e1:46:48:9c:95:70:f2:83:7c:01:aa:de:06:35: 90:70:6b:44:dc:6a:db:ba:75:33:c9:7a:d8:a1:0e: 24:2f:f3:45:b5:55:3a:63:0e:b7:50:a0:ee:1e:c9: 20:71:f4:8a:4c:21:4a:77:f5:37:b5:97:c0:f2:54: b2:f3:77:12:ab:c6:4b:8a:45:c2:27:9a:a8:89:f2: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:3A:75:1C:0C:3D:5D:29:DE:74:BE:C6:07:93:D6:94:A4:B3:7B X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.6.0/24 Signature Algorithm: sha256WithRSAEncryption b0:43:98:38:a7:b0:71:f5:99:2b:a3:e4:f1:90:ba:10:63:1c: 0b:a0:2e:5d:d0:d6:43:99:4d:76:1d:82:cc:5f:00:4d:2d:88: a8:ed:3e:e7:d6:67:be:eb:06:39:3d:c0:a9:c9:85:69:c0:97: e2:9f:71:fc:0d:3b:07:e7:6c:91:a9:51:c1:78:e3:f6:ca:37: 14:1d:3b:30:e5:07:07:50:3a:30:b7:3e:c4:d6:a0:75:06:b2: d1:e3:f8:93:3a:e8:43:ae:e5:13:d4:0b:0e:55:63:57:5a:cd: 12:e8:81:80:c4:2e:e5:72:0e:31:29:19:cc:56:b8:a9:c2:c3: df:98:6c:04:1c:9e:4a:ba:03:d6:59:c2:ac:e5:6a:ad:8e:5a: f8:5e:75:79:f3:8c:a1:03:84:e6:a5:39:79:9d:6c:ea:c2:69: 3e:65:94:a4:36:fa:79:d8:e4:08:77:cd:46:94:8d:4f:4e:dc: e9:d9:79:bc:55:7b:cf:75:ef:f7:11:cb:24:69:1d:56:8a:fc: 13:cb:12:f7:37:69:95:5b:78:e9:d1:3c:88:6e:63:b2:a7:ed: 15:80:fd:03:3e:76:6f:35:cd:af:3b:96:97:16:4f:96:58:ad: 48:65:83:e0:c9:22:2e:82:54:81:3c:dd:8b:15:57:d8:57:73: 71:0c:9f:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et4UCajldER7Ov7bqzuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmY3M2E3NTFjMGMzZDVkMjlkZTc0YmVjNjA3OTNkNjk0YTRiMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmc2qoUOjlEFrB9H1FpR+UYtHmaU Hz82ZXbT/mjGjyuNFDzPkIoUz7vTPduOC7522wxc6edZyxUfue5xX6icis3xogeX RgUmWdWydGtf8T1cAJZ7qS6RM6nmOf6ilgGMEzwayw+IaqQAG/xjvfhi2xDkGoaR /dX6mp4V3zkSQZs7dl+AlV4bZPX45/U6FeqV2pR0Sl1Bx+/GduYbrEfejFSTDn1x uQFwXwS+t6ncBrMcltxO4UZInJVw8oN8AareBjWQcGtE3GrbunUzyXrYoQ4kL/NF tVU6Yw63UKDuHskgcfSKTCFKd/U3tZfA8lSy83cSq8ZLikXCJ5qoifIhQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDL3OnUcDD1dKd50vsYHk9aUpLN7MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvTXZjNmRSd01QVjBwM25TLXhnZVQxcFNrczNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8GMA0G CSqGSIb3DQEBCwUAA4IBAQCwQ5g4p7Bx9Zkro+TxkLoQYxwLoC5d0NZDmU12HYLM XwBNLYio7T7n1me+6wY5PcCpyYVpwJfin3H8DTsH52yRqVHBeOP2yjcUHTsw5QcH UDowtz7E1qB1BrLR4/iTOuhDruUT1AsOVWNXWs0S6IGAxC7lcg4xKRnMVripwsPf mGwEHJ5KugPWWcKs5Wqtjlr4XnV584yhA4TmpTl5nWzqwmk+ZZSkNvp52OQId81G lI1PTtzp2Xm8VXvPde/3EcskaR1WivwTyxL3N2mVW3jp0TyIbmOyp+0VgP0DPnZv Nc2vO5aXFk+WWK1IZYPgySIuglSBPN2LFVfYV3NxDJ85 -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:53 2026 by rpki-client