This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa File: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (raw, json) Hash identifier: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI= Subject key identifier: 9A:3C:CB:0B:68:D3:F9:C4:57:7C:58:AE:60:7E:8B:F0:97:1C:E6:05 Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Certificate serial: 019B7F13B3C72AACA44E8B0C507A63A43968 Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa Signing time: Fri 02 Jan 2026 14:19:16 +0000 ROA not before: Fri 02 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206187 IP address blocks: 185.194.40.0/24 maxlen: 24 185.194.41.0/24 maxlen: 24 185.194.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b3:c7:2a:ac:a4:4e:8b:0c:50:7a:63:a4:39:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Validity Not Before: Jan 2 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a3ccb0b68d3f9c4577c58ae607e8bf0971ce605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:d7:9c:22:0f:88:59:43:65:19:eb:5c:6b: fe:69:4c:77:82:93:3f:e1:df:d4:14:c1:b2:5a:ce: fe:6f:8d:a6:bb:1f:90:6e:d9:a8:66:03:c3:ca:16: 84:aa:e2:fd:f6:20:b6:be:09:66:09:b6:ce:b4:0d: e2:28:0d:6d:76:0c:b8:53:f7:6b:ac:fd:47:3c:15: f1:dd:8c:a5:9c:a0:04:4b:87:9c:5f:db:a8:ba:99: 58:71:4f:a8:b2:6d:24:0e:de:1b:22:ff:97:ef:8b: 7f:cc:d5:3d:db:7b:f5:64:1b:48:31:a6:12:17:ed: de:90:06:53:b3:81:a5:fa:57:a9:f9:d1:d0:f8:1e: f7:56:99:d2:53:a4:0d:9f:71:10:6c:4d:db:1c:1d: 75:b8:e1:6f:f3:30:e1:05:09:95:17:94:1e:71:41: 96:db:9b:58:25:6d:de:c7:a8:ab:c7:53:ce:43:c9: 4e:64:fb:b6:c0:ca:06:6f:92:d6:a5:7d:86:b0:39: 24:68:a3:e1:e9:52:8c:ad:af:14:6c:80:1a:c6:ae: e7:c7:52:35:40:ef:47:8a:2b:1c:84:a1:a4:79:2a: 0c:1b:6a:d7:66:65:66:52:76:5e:fb:5e:9c:99:c2: ee:45:ae:f4:16:d2:54:a0:03:13:08:17:49:d1:d0: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3C:CB:0B:68:D3:F9:C4:57:7C:58:AE:60:7E:8B:F0:97:1C:E6:05 X509v3 Authority Key Identifier: keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.40.0-185.194.42.255 Signature Algorithm: sha256WithRSAEncryption 5c:15:8a:d4:28:00:36:b0:d8:d6:a1:ee:4c:f6:16:23:9b:ed: 02:4e:66:74:9a:d8:31:2c:65:78:70:d0:1a:a7:3b:41:a3:58: 60:85:02:05:75:87:ea:eb:e7:c3:2b:9f:de:1f:33:53:04:16: 89:42:e4:74:31:19:dd:99:bc:15:a2:b4:43:60:f3:d4:12:30: ce:f5:27:50:cc:27:3b:65:8d:38:9a:05:c8:a8:34:c1:84:6d: 55:af:c0:8f:b6:e9:f2:17:22:77:d1:f5:12:0e:50:20:cd:31: 27:d1:e6:03:ae:a1:bf:41:36:ce:95:02:34:7f:4d:77:00:c6: 76:30:53:18:24:72:13:0f:77:f3:96:8e:ea:d7:b4:6e:4d:4a: 77:ce:93:64:26:32:96:b3:3e:8f:55:58:d1:a4:74:60:46:2c: 11:de:f7:5b:e9:f7:ca:cb:85:0c:84:7a:fd:11:60:7a:f6:8e: e2:10:05:ae:23:80:4d:b4:d4:ae:4f:c8:f6:67:5c:b7:3e:46: 2c:07:ba:38:03:22:26:68:93:92:26:39:79:d4:0a:4d:2b:3a: 33:86:46:fd:83:20:05:cd:6b:d7:17:f0:ce:88:07:3b:ae:3d: ca:28:06:e9:23:9e:34:1c:8b:28:75:2b:52:7e:47:8e:17:6a: 22:9a:bd:dc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/E7PHKqykTosMUHpjpDloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MWQ4MzNkMzQ3ZTZjNmNhNjllYTBhOGFiMmE4M2Y0OTI2 N2FkZTQwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTNjY2IwYjY4ZDNmOWM0NTc3YzU4YWU2MDdlOGJmMDk3MWNlNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIvXnCIPiFlDZRnrXGv+aUx3gpM/ 4d/UFMGyWs7+b42mux+QbtmoZgPDyhaEquL99iC2vglmCbbOtA3iKA1tdgy4U/dr rP1HPBXx3YylnKAES4ecX9uouplYcU+osm0kDt4bIv+X74t/zNU923v1ZBtIMaYS F+3ekAZTs4Gl+lep+dHQ+B73VpnSU6QNn3EQbE3bHB11uOFv8zDhBQmVF5QecUGW 25tYJW3ex6irx1POQ8lOZPu2wMoGb5LWpX2GsDkkaKPh6VKMra8UbIAaxq7nx1I1 QO9HiischKGkeSoMG2rXZmVmUnZe+16cmcLuRa70FtJUoAMTCBdJ0dDjvwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJo8ywto0/nEV3xYrmB+i/CXHOYFMB8GA1UdIwQY MBaAFKUdgz00fmxspp6gqKsqg/SSZ63kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUt NDc4MmI3YThlYTI5LzEvbWp6TEMyalQtY1JYZkZpdVlINkw4SmNjNWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUtNDc4MmI3YThlYTI5 LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5wigD BAC5wiowDQYJKoZIhvcNAQELBQADggEBAFwVitQoADaw2Nah7kz2FiOb7QJOZnSa 2DEsZXhw0BqnO0GjWGCFAgV1h+rr58Mrn94fM1MEFolC5HQxGd2ZvBWitENg89QS MM71J1DMJztljTiaBcioNMGEbVWvwI+26fIXInfR9RIOUCDNMSfR5gOuob9BNs6V AjR/TXcAxnYwUxgkchMPd/OWjurXtG5NSnfOk2QmMpazPo9VWNGkdGBGLBHe91vp 98rLhQyEev0RYHr2juIQBa4jgE201K5PyPZnXLc+RiwHujgDIiZok5ImOXnUCk0r OjOGRv2DIAXNa9cX8M6IBzuuPcooBukjnjQciyh1K1J+R44XaiKavdw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:39 2026 by rpki-client