This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/mis20mCNr7-z3Juye3bJqllLhII.roa File: mis20mCNr7-z3Juye3bJqllLhII.roa (raw, json) Hash identifier: jr44OSFfE8hxxzeZqyHwzACU4GFNkuxHslOFaTPqZNE= Subject key identifier: 9A:2B:36:D2:60:8D:AF:BF:B3:DC:9B:B2:7B:76:C9:AA:59:4B:84:82 Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa Certificate serial: 019B7EA6C742052FF51E3F0AA8FFEDF85B3D Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/mis20mCNr7-z3Juye3bJqllLhII.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34113 IP address blocks: 185.97.104.0/24 maxlen: 24 185.97.105.0/24 maxlen: 24 185.97.106.0/24 maxlen: 24 185.97.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c7:42:05:2f:f5:1e:3f:0a:a8:ff:ed:f8:5b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a2b36d2608dafbfb3dc9bb27b76c9aa594b8482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5e:6f:1d:02:1b:cb:a8:a8:d5:73:ca:00:59: bb:5c:ae:b3:a5:cd:cf:2b:f8:9d:82:dd:ee:dc:c8: 52:51:1a:06:74:20:ac:eb:e5:b7:0f:dc:e0:fd:d2: 3b:fb:97:54:87:00:fe:7b:61:06:6c:2b:d8:e5:1f: 66:33:0e:4e:ce:85:6c:89:d2:72:a2:ad:b2:76:10: 0b:5e:f0:9e:a0:4b:68:f9:64:56:3d:77:66:1b:c0: 0f:22:82:14:5a:a3:4a:81:98:97:08:b6:33:4c:b6: e9:71:34:f0:c5:20:c7:6f:0d:2c:94:75:f3:80:8a: 4f:78:d6:91:bc:dc:f8:a7:e4:aa:fc:2a:6c:d0:f6: d1:25:d9:16:c5:db:f2:ea:c7:5c:86:5e:58:39:ee: 30:bf:16:74:04:cf:c2:89:31:9d:b0:d4:a0:03:97: 3d:76:e9:95:28:8b:44:28:d1:a0:87:18:ec:3c:60: 0c:70:d3:fd:63:e5:2f:2d:2b:bf:ec:f5:c2:c5:b9: 6c:61:15:35:05:f6:ba:65:40:46:47:2d:01:12:f9: a4:a6:3e:c0:b7:dd:98:b1:1c:d2:d7:38:80:ac:49: 99:e6:3e:cd:3b:2d:d4:eb:81:48:1e:99:0a:1b:c2: 3c:b8:df:e6:b5:c9:d1:2a:87:4c:95:e1:aa:85:31: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:36:D2:60:8D:AF:BF:B3:DC:9B:B2:7B:76:C9:AA:59:4B:84:82 X509v3 Authority Key Identifier: keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/mis20mCNr7-z3Juye3bJqllLhII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.104.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:2f:39:8d:92:1c:1a:41:72:67:f8:2d:e3:71:e1:93:48:df: a9:65:ce:60:e0:24:8c:a4:ff:88:6f:28:44:89:ae:e2:35:4e: bb:83:1e:e7:15:59:19:df:8f:39:2d:f4:48:7e:b9:d1:d6:47: 31:3e:5d:cd:8e:17:f6:44:9d:a6:10:f5:df:0b:f1:15:a4:69: 17:e1:27:bf:c1:76:73:04:b3:4d:73:ff:f1:f7:b1:20:5e:aa: 3d:53:f2:ae:9a:e3:9e:50:5a:45:cb:ac:1e:1c:7a:df:9e:c8: 80:ea:8f:f1:19:b5:71:de:15:4c:3c:24:e6:ea:63:8e:b2:cb: 43:a5:1f:d9:42:2c:bb:77:1b:6e:1f:70:19:41:17:11:41:fd: 30:af:d3:8b:a2:1e:2a:36:d5:5a:a2:bc:b0:73:4c:38:ea:5d: cf:25:5c:d5:46:49:37:14:6b:b7:43:b8:82:9b:a9:2e:fa:fe: 86:56:96:e0:fe:1c:0c:8b:39:2d:9b:e3:2d:d1:ec:94:89:32: d0:1e:11:18:80:e8:0f:2e:9b:2a:44:cc:a6:49:f1:d0:de:00: 82:f8:a1:7c:ef:3c:f5:ac:3d:3e:69:67:00:ba:c9:c8:9c:6e: a6:03:69:64:e7:45:5d:07:57:d3:6b:4d:b1:a4:c0:3e:7d:b8: ec:58:0c:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+psdCBS/1Hj8KqP/t+Fs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzFjNjRjM2U1YTdkZTEwNDBmNDBkYThmZWRjNDdjMzhm ZTU5ZmEwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTJiMzZkMjYwOGRhZmJmYjNkYzliYjI3Yjc2YzlhYTU5NGI4NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA915vHQIby6io1XPKAFm7XK6zpc3P K/idgt3u3MhSURoGdCCs6+W3D9zg/dI7+5dUhwD+e2EGbCvY5R9mMw5OzoVsidJy oq2ydhALXvCeoEto+WRWPXdmG8APIoIUWqNKgZiXCLYzTLbpcTTwxSDHbw0slHXz gIpPeNaRvNz4p+Sq/Cps0PbRJdkWxdvy6sdchl5YOe4wvxZ0BM/CiTGdsNSgA5c9 dumVKItEKNGghxjsPGAMcNP9Y+UvLSu/7PXCxblsYRU1Bfa6ZUBGRy0BEvmkpj7A t92YsRzS1ziArEmZ5j7NOy3U64FIHpkKG8I8uN/mtcnRKodMleGqhTFSOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJorNtJgja+/s9ybsnt2yapZS4SCMB8GA1UdIwQY MBaAFG8xxkw+Wn3hBA9A2o/txHw4/ln6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTIt YjA4MGEzNDUxYzdmLzEvbWlzMjBtQ05yNy16M0p1eWUzYkpxbGxMaElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTItYjA4MGEzNDUxYzdm LzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWFoMA0G CSqGSIb3DQEBCwUAA4IBAQBaLzmNkhwaQXJn+C3jceGTSN+pZc5g4CSMpP+IbyhE ia7iNU67gx7nFVkZ3485LfRIfrnR1kcxPl3Njhf2RJ2mEPXfC/EVpGkX4Se/wXZz BLNNc//x97EgXqo9U/KumuOeUFpFy6weHHrfnsiA6o/xGbVx3hVMPCTm6mOOsstD pR/ZQiy7dxtuH3AZQRcRQf0wr9OLoh4qNtVaorywc0w46l3PJVzVRkk3FGu3Q7iC m6ku+v6GVpbg/hwMizktm+Mt0eyUiTLQHhEYgOgPLpsqRMymSfHQ3gCC+KF87zz1 rD0+aWcAusnInG6mA2lk50VdB1fTa02xpMA+fbjsWAyd -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:02 2026 by rpki-client