This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/MuK0yO2EDiETMioDuWGpSy4DPrM.roa File: MuK0yO2EDiETMioDuWGpSy4DPrM.roa (raw, json) Hash identifier: 9Q7+RkAvvoGZfwpOAVIRZoNvbHTT/lKkQt6ZodDPSB0= Subject key identifier: 32:E2:B4:C8:ED:84:0E:21:13:32:2A:03:B9:61:A9:4B:2E:03:3E:B3 Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Certificate serial: 019B7F1526CDA715728A2D1AE5BF033BC770 Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/MuK0yO2EDiETMioDuWGpSy4DPrM.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197650 IP address blocks: 185.208.104.0/24 maxlen: 24 185.208.106.0/24 maxlen: 24 185.208.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:26:cd:a7:15:72:8a:2d:1a:e5:bf:03:3b:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32e2b4c8ed840e2113322a03b961a94b2e033eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:30:82:5c:0e:6d:41:a1:8f:cb:14:d2:d1: 92:67:12:17:20:55:82:87:55:2a:67:91:71:13:69: 61:42:7b:d7:36:f8:d7:8a:71:44:5a:c2:bf:5b:b3: 3b:2c:0e:da:c7:ec:6b:95:42:ab:77:8b:67:bf:e7: 98:ae:89:82:95:ed:30:82:6c:fb:47:7a:3d:7b:4f: 7d:ba:47:bd:d3:94:5b:76:f7:2d:6d:95:3d:32:2d: f6:1f:89:46:f7:d0:f5:9f:d3:2a:61:d4:e4:70:ed: cc:d6:9d:0d:92:8e:26:52:4f:9b:03:de:59:d0:66: ac:24:9f:49:6a:d3:e2:ad:e1:54:8f:6b:15:11:28: 78:6c:21:35:8a:63:43:04:99:98:66:7a:cb:8f:3f: 71:ed:97:4f:55:08:61:51:f7:77:b4:f7:9c:87:34: d7:6e:b6:8c:00:39:a6:55:3c:f9:e3:6c:0e:1d:94: ce:ea:45:38:72:20:4d:c3:1f:12:19:65:f0:f0:9a: d0:b3:bc:dd:7b:43:55:1a:ae:d6:2d:3e:9b:b1:22: 6d:3b:4e:e5:cd:50:b9:ba:6d:01:a6:a1:b8:f3:62: 18:70:ca:eb:e9:0f:bd:65:91:7b:aa:5e:b8:90:29: b8:cf:a3:c3:7b:60:82:e6:25:03:d6:62:13:72:30: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:B4:C8:ED:84:0E:21:13:32:2A:03:B9:61:A9:4B:2E:03:3E:B3 X509v3 Authority Key Identifier: keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/MuK0yO2EDiETMioDuWGpSy4DPrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.104.0/24 185.208.106.0/23 Signature Algorithm: sha256WithRSAEncryption 43:95:78:58:e1:6b:a8:f5:68:95:10:0a:3c:f7:e9:5c:93:e7: da:2a:46:99:3b:54:4d:3b:fb:ed:49:7b:c3:fd:61:6f:4d:1f: d1:a1:4b:ef:e9:07:bd:b3:1b:a4:69:84:10:7b:0b:5f:de:bc: 55:4d:c3:e8:a3:a2:37:1c:a6:a9:2d:bf:02:2c:35:ac:86:a1: 0a:84:0b:5a:57:3f:a2:e7:f8:48:4a:96:68:98:81:84:63:a7: 79:82:9a:c1:22:c1:93:06:48:f4:5e:c9:9c:08:51:1f:27:38: 40:68:0f:22:47:0d:0d:07:83:70:60:a5:25:1b:7c:72:3b:9f: 42:06:8f:dc:79:6d:30:15:04:2a:ee:cb:9e:d3:68:b2:42:46: e9:ef:66:99:45:c9:85:e6:ef:0e:92:d9:fa:3d:19:6a:97:3d: c6:43:c1:71:5a:ab:02:14:97:76:43:91:28:05:f4:9a:c9:b9: cd:2c:27:05:74:c2:f2:8b:40:dc:2e:6f:15:de:95:15:c6:12: 4d:ea:73:68:16:54:fd:9d:8f:df:f1:0e:c1:38:27:bf:79:2e: 72:10:e2:2e:1a:93:9c:c6:2a:60:90:14:07:0b:61:f5:60:50: 93:1b:19:ef:67:54:2b:82:eb:38:63:28:4a:12:ce:95:ec:34: a5:19:9e:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FSbNpxVyii0a5b8DO8dwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTI5ZGU5ZWJhNmI0NzUxNmYwYTE1NTczNDIwNWFiYmI5 OGI3YzIwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmUyYjRjOGVkODQwZTIxMTMzMjJhMDNiOTYxYTk0YjJlMDMzZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/IwglwObUGhj8sU0tGSZxIXIFWC h1UqZ5FxE2lhQnvXNvjXinFEWsK/W7M7LA7ax+xrlUKrd4tnv+eYromCle0wgmz7 R3o9e099uke905RbdvctbZU9Mi32H4lG99D1n9MqYdTkcO3M1p0Nko4mUk+bA95Z 0GasJJ9JatPireFUj2sVESh4bCE1imNDBJmYZnrLjz9x7ZdPVQhhUfd3tPechzTX braMADmmVTz542wOHZTO6kU4ciBNwx8SGWXw8JrQs7zde0NVGq7WLT6bsSJtO07l zVC5um0BpqG482IYcMrr6Q+9ZZF7ql64kCm4z6PDe2CC5iUD1mITcjBp0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDLitMjthA4hEzIqA7lhqUsuAz6zMB8GA1UdIwQY MBaAFJsSnenrprR1FvChVXNCBau7mLfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgt Y2YxZDFmMDA3YTM2LzEvTXVLMHlPMkVEaUVUTWlvRHVXR3BTeTREUHJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgtY2YxZDFmMDA3YTM2 LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudBoAwQB udBqMA0GCSqGSIb3DQEBCwUAA4IBAQBDlXhY4Wuo9WiVEAo89+lck+faKkaZO1RN O/vtSXvD/WFvTR/RoUvv6Qe9sxukaYQQewtf3rxVTcPoo6I3HKapLb8CLDWshqEK hAtaVz+i5/hISpZomIGEY6d5gprBIsGTBkj0XsmcCFEfJzhAaA8iRw0NB4NwYKUl G3xyO59CBo/ceW0wFQQq7sue02iyQkbp72aZRcmF5u8Oktn6PRlqlz3GQ8FxWqsC FJd2Q5EoBfSaybnNLCcFdMLyi0DcLm8V3pUVxhJN6nNoFlT9nY/f8Q7BOCe/eS5y EOIuGpOcxipgkBQHC2H1YFCTGxnvZ1Qrgus4YyhKEs6V7DSlGZ4x -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:19 2026 by rpki-client