This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa File: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (raw, json) Hash identifier: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg= Subject key identifier: 99:BF:2B:F6:FA:77:C0:CE:A8:24:B2:5D:3E:69:0D:95:6A:E0:2A:D1 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019B7E38BC27FF20904FA20106FB5196E36F Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.208.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bc:27:ff:20:90:4f:a2:01:06:fb:51:96:e3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99bf2bf6fa77c0cea824b25d3e690d956ae02ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:fd:f0:e6:92:01:6b:50:66:dc:c9:f9:e8: 92:0b:03:6c:cf:67:05:ec:c9:ea:77:c8:63:d0:0e: 52:4b:32:e9:04:30:97:5e:58:9e:73:1e:9e:1d:1b: 78:1a:39:0a:22:f4:f7:73:b9:9f:0c:b9:3a:db:74: 30:9b:dd:e0:29:04:70:26:bb:6e:9f:16:c5:34:54: b0:6e:42:f6:75:75:30:ab:10:3e:5c:d6:0d:2c:dd: 13:e2:13:1e:2c:48:b6:e4:b7:05:3a:c3:a3:74:7a: cb:a1:47:14:b7:d1:13:94:0b:32:79:61:57:d2:05: 2d:76:cf:e6:8c:09:b8:27:f2:73:df:bc:90:05:3b: 56:41:46:2f:99:a7:93:48:26:6d:02:55:e8:ba:45: 31:37:7c:75:25:de:fd:5b:79:0c:1f:43:2a:d8:8b: 34:e6:34:49:18:23:6e:08:84:87:ec:aa:38:d0:d7: c6:6a:00:8f:66:34:24:75:fe:b4:05:7f:1f:29:a6: c8:cb:fe:24:f7:dd:41:71:6e:06:fc:f2:66:51:d9: 7d:88:a3:37:e3:4d:8b:80:24:7d:d4:54:4f:8e:dc: b1:d5:44:5d:10:31:23:d1:34:14:01:aa:56:3a:01: 2d:6d:26:79:87:80:07:6d:55:36:73:2d:78:9e:e5: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BF:2B:F6:FA:77:C0:CE:A8:24:B2:5D:3E:69:0D:95:6A:E0:2A:D1 X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.10.0/24 Signature Algorithm: sha256WithRSAEncryption 24:be:ed:ff:29:e1:f5:38:08:97:ca:aa:6f:da:61:3c:2f:e1: df:eb:dc:34:74:de:56:ea:78:e0:c4:bf:34:02:b5:bc:f1:ea: 65:4f:5d:e3:18:9a:37:aa:6d:c5:0d:2e:cd:e7:a8:bd:09:9e: 68:57:5f:c7:79:71:38:e2:18:40:62:34:26:03:b3:7d:73:8c: ac:8b:38:9c:a5:7a:15:aa:65:67:8a:4b:ee:18:8e:5a:4f:f1: 4d:60:2f:7d:2d:c4:6e:6e:b0:53:66:29:4f:be:60:0b:de:b8: c8:84:51:96:cf:b4:cd:66:7a:35:83:92:45:9f:9e:a1:33:1b: e3:d6:b9:7f:69:d2:3b:fd:6d:03:58:3e:0f:1e:60:3b:fb:3d: fd:d6:d8:55:aa:d9:df:b4:14:00:4f:77:ac:ff:32:94:df:c2: 27:f4:9e:f1:49:cc:39:73:ae:91:46:6d:63:31:d7:4a:cd:42: 79:1b:94:4e:a4:f9:9b:48:b5:a7:bf:1a:36:90:77:ca:67:13: f6:4b:0c:f0:07:6e:07:a3:63:53:6c:92:5f:21:6c:9b:90:a6: e0:3a:f6:65:b6:6e:c2:71:5f:71:80:9e:e0:37:ce:71:04:e7: b9:c3:20:37:73:74:a3:db:64:5c:80:40:55:3e:33:bd:1e:37: d8:a0:11:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLwn/yCQT6IBBvtRluNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWJmMmJmNmZhNzdjMGNlYTgyNGIyNWQzZTY5MGQ5NTZhZTAyYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvX98OaSAWtQZtzJ+eiSCwNsz2cF 7Mnqd8hj0A5SSzLpBDCXXliecx6eHRt4GjkKIvT3c7mfDLk623Qwm93gKQRwJrtu nxbFNFSwbkL2dXUwqxA+XNYNLN0T4hMeLEi25LcFOsOjdHrLoUcUt9ETlAsyeWFX 0gUtds/mjAm4J/Jz37yQBTtWQUYvmaeTSCZtAlXoukUxN3x1Jd79W3kMH0Mq2Is0 5jRJGCNuCISH7Ko40NfGagCPZjQkdf60BX8fKabIy/4k991BcW4G/PJmUdl9iKM3 402LgCR91FRPjtyx1URdEDEj0TQUAapWOgEtbSZ5h4AHbVU2cy14nuWILwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJm/K/b6d8DOqCSyXT5pDZVq4CrRMB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvbWI4cjl2cDN3TTZvSkxKZFBta05sV3JnS3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudAKMA0G CSqGSIb3DQEBCwUAA4IBAQAkvu3/KeH1OAiXyqpv2mE8L+Hf69w0dN5W6njgxL80 ArW88eplT13jGJo3qm3FDS7N56i9CZ5oV1/HeXE44hhAYjQmA7N9c4ysizicpXoV qmVnikvuGI5aT/FNYC99LcRubrBTZilPvmAL3rjIhFGWz7TNZno1g5JFn56hMxvj 1rl/adI7/W0DWD4PHmA7+z391thVqtnftBQAT3es/zKU38In9J7xScw5c66RRm1j MddKzUJ5G5ROpPmbSLWnvxo2kHfKZxP2SwzwB24Ho2NTbJJfIWybkKbgOvZltm7C cV9xgJ7gN85xBOe5wyA3c3Sj22RcgEBVPjO9HjfYoBGE -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:11 2026 by rpki-client