This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa File: MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa (raw, json) Hash identifier: NsITOI3k4qxMk9t6uldTtNFi2z9FnXsMOLB/akZmaQE= Subject key identifier: 32:13:79:31:1B:EF:82:8A:1F:A6:E1:49:E6:6E:18:2C:7C:AA:DC:D7 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1318EAADF7CCB77488FD96080B5AC0 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 89.185.78.0/24 maxlen: 24 92.240.201.0/24 maxlen: 24 92.240.205.0/24 maxlen: 24 92.240.214.0/24 maxlen: 24 92.240.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:18:ea:ad:f7:cc:b7:74:88:fd:96:08:0b:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=321379311bef828a1fa6e149e66e182c7caadcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:01:25:49:52:85:d3:79:b4:6c:f0:0c:ed: c4:e3:b0:2a:bb:d7:9d:20:d3:41:55:01:74:ca:4b: 95:57:f9:ed:6b:d0:37:1b:12:33:a6:ec:45:c1:b5: 1f:a7:e8:8f:3b:24:ee:76:a6:e8:7d:b2:65:bf:50: 4c:9e:39:48:8d:e7:f3:9a:1d:69:c2:45:af:9b:f7: 7d:37:16:44:1b:b3:70:63:56:74:2a:f9:cb:95:da: e0:65:cd:0b:2c:09:88:b1:50:3f:ee:7e:a2:8f:62: ac:9a:c0:ef:37:e1:ea:83:db:fe:cb:d3:77:61:b5: f7:84:ed:3a:e1:91:a4:cd:4b:c2:16:9e:d4:ad:8d: 4d:e8:42:b6:a0:f4:c2:82:fa:bc:e5:02:93:f3:c8: fd:83:2d:d9:4f:81:56:d7:a4:e6:b9:df:15:e6:80: a0:7c:51:f4:df:a3:59:76:93:06:9e:e7:36:17:e5: 5b:87:be:7d:1e:ac:dd:83:e2:9e:f1:ed:68:4c:45: 4f:14:da:37:63:6f:76:25:28:2b:6b:94:40:85:09: b2:f9:00:e9:df:29:1b:8e:24:73:db:bc:a1:d6:4a: 6c:74:ac:bd:8e:f7:c1:c8:4d:bd:57:43:47:b3:35: ae:bc:21:b9:eb:f0:47:6b:9a:93:e5:64:5a:4b:f3: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:79:31:1B:EF:82:8A:1F:A6:E1:49:E6:6E:18:2C:7C:AA:DC:D7 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.78.0/24 92.240.201.0/24 92.240.205.0/24 92.240.214.0/24 92.240.216.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9f:08:c2:ff:50:4e:d5:46:df:10:25:2b:95:ce:38:3c:37: 28:e6:24:1a:36:10:92:de:48:fd:d9:95:91:40:d8:64:73:a3: 90:02:d5:11:a9:0b:da:2b:d7:41:82:1d:07:4c:03:f4:9c:91: ed:a7:ff:09:1c:a7:7d:1a:6e:cc:de:00:2f:ea:9e:2c:a3:98: 8a:3f:74:41:b1:cf:2c:f3:32:ac:fd:c1:3c:20:d1:f5:63:0d: 9e:be:bb:50:1d:ce:ed:9b:05:a1:19:85:51:d1:6c:92:97:55: 6d:25:f6:f1:a6:e5:14:75:c5:cc:d9:4f:a3:20:bc:6e:75:0d: 9f:3f:6e:b2:10:b5:3d:1c:20:8a:d2:18:1c:89:3b:eb:1a:58: 80:68:97:a3:d4:92:0e:28:84:fd:79:63:c5:c2:e2:e1:77:d2: 7d:90:24:a6:35:54:86:93:33:79:f4:46:f2:41:c5:50:47:8f: 7f:6c:bd:c9:57:52:a1:55:6b:0c:86:06:1a:99:2d:57:90:7a: cb:bb:fb:4e:f3:92:50:cb:5f:d5:a2:22:92:98:b0:e1:b5:96: c2:3e:56:7a:a9:a9:b2:2e:bb:6c:8b:cf:fd:a3:16:a8:e4:e6: 5f:51:a0:12:8b:f1:21:b3:07:c0:10:54:65:b8:50:35:ba:3c: a0:7f:1b:c0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8ExjqrffMt3SI/ZYIC1rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjEzNzkzMTFiZWY4MjhhMWZhNmUxNDllNjZlMTgyYzdjYWFkY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl98BJUlShdN5tGzwDO3E47Aqu9ed INNBVQF0ykuVV/nta9A3GxIzpuxFwbUfp+iPOyTudqbofbJlv1BMnjlIjefzmh1p wkWvm/d9NxZEG7NwY1Z0KvnLldrgZc0LLAmIsVA/7n6ij2KsmsDvN+Hqg9v+y9N3 YbX3hO064ZGkzUvCFp7UrY1N6EK2oPTCgvq85QKT88j9gy3ZT4FW16Tmud8V5oCg fFH036NZdpMGnuc2F+Vbh759Hqzdg+Ke8e1oTEVPFNo3Y292JSgra5RAhQmy+QDp 3ykbjiRz27yh1kpsdKy9jvfByE29V0NHszWuvCG56/BHa5qT5WRaS/NwmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDITeTEb74KKH6bhSeZuGCx8qtzXMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvTWhONU1SdnZnb29mcHVGSjVtNFlMSHlxM05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWblOAwQA XPDJAwQAXPDNAwQAXPDWAwQAXPDYMA0GCSqGSIb3DQEBCwUAA4IBAQB3nwjC/1BO 1UbfECUrlc44PDco5iQaNhCS3kj92ZWRQNhkc6OQAtURqQvaK9dBgh0HTAP0nJHt p/8JHKd9Gm7M3gAv6p4so5iKP3RBsc8s8zKs/cE8INH1Yw2evrtQHc7tmwWhGYVR 0WySl1VtJfbxpuUUdcXM2U+jILxudQ2fP26yELU9HCCK0hgciTvrGliAaJej1JIO KIT9eWPFwuLhd9J9kCSmNVSGkzN59EbyQcVQR49/bL3JV1KhVWsMhgYamS1XkHrL u/tO85JQy1/VoiKSmLDhtZbCPlZ6qamyLrtsi8/9oxao5OZfUaASi/EhswfAEFRl uFA1ujygfxvA -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client