This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/MI1eAedSp8b3ejhW5Is6MVZnkBU.roa File: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (raw, json) Hash identifier: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10= Subject key identifier: 30:8D:5E:01:E7:52:A7:C6:F7:7A:38:56:E4:8B:3A:31:56:67:90:15 Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Certificate serial: 019B7910F7BF0C8EBA8A7F5CE31634C2E560 Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/MI1eAedSp8b3ejhW5Is6MVZnkBU.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44489 IP address blocks: 185.175.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:bf:0c:8e:ba:8a:7f:5c:e3:16:34:c2:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=308d5e01e752a7c6f77a3856e48b3a3156679015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:27:db:0c:8c:9a:49:a1:14:ec:b6:2c:8a: b9:d1:6a:29:09:bd:09:4b:47:68:de:74:1f:0e:17: 5e:fb:40:a4:d7:22:bc:48:41:86:78:9d:5e:65:d6: ac:74:1b:51:df:0e:8c:10:32:cb:17:ee:5f:9d:4a: 15:cd:2e:0a:89:be:6e:6f:14:6d:f6:99:7b:e9:75: 35:be:07:0f:69:4d:c4:61:20:46:7d:b2:96:e6:d2: 3b:dd:3b:1a:9f:f1:c1:f5:67:cd:3c:d2:f9:b1:cd: 17:a9:b7:c6:68:9b:3c:6e:48:61:16:0b:5d:31:ac: 48:39:e3:d5:4d:d0:f8:10:85:27:a0:da:c0:22:db: 60:12:a2:36:e8:d5:c6:8d:c6:0c:8a:c7:b8:9e:7f: 00:b4:a4:6d:a4:09:4a:5f:cc:48:ff:6c:84:5e:62: 3e:b0:53:38:54:3f:b8:aa:b2:0b:31:39:f2:e5:6b: 9e:4f:23:04:ba:0c:ec:8f:f4:25:ea:02:fd:f2:85: b1:de:0b:a7:4f:8e:7f:3d:28:be:70:b7:22:48:ca: 47:31:73:0e:2b:fb:06:a5:43:a0:bc:38:2d:9b:6f: 8d:77:d5:bd:94:01:38:b1:f1:34:3c:e3:04:7e:55: af:29:3a:2c:1c:d3:5a:ee:ce:e8:5c:68:7b:25:05: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:5E:01:E7:52:A7:C6:F7:7A:38:56:E4:8B:3A:31:56:67:90:15 X509v3 Authority Key Identifier: keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/MI1eAedSp8b3ejhW5Is6MVZnkBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.220.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:5d:e7:ab:bb:cd:0d:f2:96:d3:24:f1:39:d1:9b:30:a3:82: e6:9b:da:86:dd:49:64:e1:71:6f:d5:fa:ef:af:85:80:36:a0: 36:bc:6c:bc:ea:b8:18:e9:c0:43:5a:d8:2e:3e:d7:d8:0b:b8: 3b:43:42:df:79:24:6a:15:4f:d0:77:99:43:b6:1a:04:b0:93: 8b:f0:70:51:f7:e2:ce:62:09:97:20:46:54:09:71:09:c9:4e: 3c:d2:67:a8:69:94:8c:ed:2c:cd:24:f7:f4:ee:99:54:4a:17: e3:f8:2c:39:53:5e:1d:41:4c:82:a7:22:7e:10:20:fd:fa:0f: 5e:f9:0d:9b:af:48:22:8f:0a:88:ea:a7:a0:81:6d:28:4b:a5: 70:48:a6:52:50:61:87:79:62:12:83:74:8d:56:c8:d9:ee:df: be:8b:c5:4c:a0:b3:73:1d:7e:ec:71:9d:83:e7:c5:a6:25:72: 2a:ec:f7:f0:93:30:ed:4a:44:d5:12:ee:bc:cd:79:aa:8c:27: f2:09:dd:ef:46:a7:9f:31:ed:5f:78:66:98:42:b1:c0:15:46: bc:fb:8e:9b:31:60:cc:63:d2:6f:3f:dd:30:40:22:7f:0d:00: 86:2c:c3:ac:a4:53:04:0f:06:32:04:4c:bb:fc:dd:b7:6f:de: f5:13:14:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPe/DI66in9c4xY0wuVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz NDg3ODAwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDhkNWUwMWU3NTJhN2M2Zjc3YTM4NTZlNDhiM2EzMTU2Njc5MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQn2wyMmkmhFOy2LIq50WopCb0J S0do3nQfDhde+0Ck1yK8SEGGeJ1eZdasdBtR3w6MEDLLF+5fnUoVzS4Kib5ubxRt 9pl76XU1vgcPaU3EYSBGfbKW5tI73Tsan/HB9WfNPNL5sc0XqbfGaJs8bkhhFgtd MaxIOePVTdD4EIUnoNrAIttgEqI26NXGjcYMise4nn8AtKRtpAlKX8xI/2yEXmI+ sFM4VD+4qrILMTny5WueTyMEugzsj/Ql6gL98oWx3gunT45/PSi+cLciSMpHMXMO K/sGpUOgvDgtm2+Nd9W9lAE4sfE0POMEflWvKTosHNNa7s7oXGh7JQUIhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCNXgHnUqfG93o4VuSLOjFWZ5AVMB8GA1UdIwQY MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt MmFkOTY4YjM2MmRlLzEvTUkxZUFlZFNwOGIzZWpoVzVJczZNVlpua0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua/cMA0G CSqGSIb3DQEBCwUAA4IBAQB7Xeeru80N8pbTJPE50Zswo4Lmm9qG3Ulk4XFv1frv r4WANqA2vGy86rgY6cBDWtguPtfYC7g7Q0LfeSRqFU/Qd5lDthoEsJOL8HBR9+LO YgmXIEZUCXEJyU480meoaZSM7SzNJPf07plUShfj+Cw5U14dQUyCpyJ+ECD9+g9e +Q2br0gijwqI6qeggW0oS6VwSKZSUGGHeWISg3SNVsjZ7t++i8VMoLNzHX7scZ2D 58WmJXIq7PfwkzDtSkTVEu68zXmqjCfyCd3vRqefMe1feGaYQrHAFUa8+46bMWDM Y9JvP90wQCJ/DQCGLMOspFMEDwYyBEy7/N23b971ExSF -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:23 2026 by rpki-client