This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/mnDV37o17I0BMCtvgbbSLcAn6Bc.roa File: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (raw, json) Hash identifier: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc= Subject key identifier: 9A:70:D5:DF:BA:35:EC:8D:01:30:2B:6F:81:B6:D2:2D:C0:27:E8:17 Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019B7AC7EEA27AB6BCEA88674252B9A87AFB Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/mnDV37o17I0BMCtvgbbSLcAn6Bc.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 185.155.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ee:a2:7a:b6:bc:ea:88:67:42:52:b9:a8:7a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a70d5dfba35ec8d01302b6f81b6d22dc027e817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:59:38:7f:4a:60:ce:40:bd:0b:ff:b2:56: ad:9d:c2:10:62:87:48:70:73:37:e4:51:03:d1:14: f1:ce:b0:95:4d:4c:46:1d:27:3d:67:d5:0d:26:79: 8f:cf:a1:3e:63:74:e7:5e:b0:bf:04:38:c8:dd:70: 79:35:46:ed:66:47:18:35:05:12:61:68:fb:a3:5b: f5:09:a6:7a:14:03:3f:cf:71:c8:04:b9:cb:88:c2: d5:d3:5f:72:11:8a:12:20:dc:5b:5f:3e:32:cf:8e: 98:3d:c6:db:ac:9d:be:87:ca:7d:19:47:ea:13:ff: b5:46:cd:9f:eb:3d:83:b0:5b:dd:fe:8e:79:ba:03: 53:ab:e7:26:09:3a:e5:6e:2d:ea:3b:04:bc:fb:e6: f3:1f:2a:28:70:10:32:f8:24:2a:b5:99:28:b7:09: da:7f:14:d6:cd:78:53:4c:91:09:ad:59:2a:23:7f: fb:bf:81:7b:f8:d7:3a:a0:0f:4c:bb:09:3a:8a:84: bb:5e:bc:b1:a3:48:9d:dc:fc:4c:4a:88:49:9f:fc: 88:ac:a3:f6:a5:5f:5b:15:c9:1c:87:f4:b9:2b:fe: ea:9c:82:5e:8e:3e:8f:24:ea:29:ff:6a:d1:b6:e7: 52:a9:b2:fe:3f:fa:9c:13:26:69:18:72:a5:44:08: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:D5:DF:BA:35:EC:8D:01:30:2B:6F:81:B6:D2:2D:C0:27:E8:17 X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/mnDV37o17I0BMCtvgbbSLcAn6Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.234.0/24 Signature Algorithm: sha256WithRSAEncryption ca:6f:06:5b:a1:f9:8a:a0:92:ff:eb:f1:74:12:70:8a:f6:40: d1:e8:46:5d:cd:9b:32:bf:32:25:8a:52:2c:41:7a:ef:3f:fe: 38:e6:f3:80:54:41:40:45:dc:80:05:40:96:4b:32:20:ab:9b: 95:0a:6b:a6:93:1a:ca:16:66:0e:53:b8:80:7b:0c:be:e4:d5: d4:34:ec:d1:63:22:91:02:67:0d:44:09:8c:14:fa:95:74:81: ed:87:81:8e:79:0a:22:cd:7f:1e:2d:62:a8:af:b9:5c:92:81: a6:55:5a:64:64:40:bb:be:6c:e1:51:4c:c7:e2:fe:2a:db:d9: 1f:c8:09:d3:07:ef:d8:31:f0:3a:16:a0:0b:df:79:ab:ec:5b: b7:6a:b1:d6:d2:33:87:c8:41:e5:5f:b1:fc:53:04:ed:77:ae: ac:af:2e:ad:f1:d0:49:60:9a:5b:7e:fa:b4:9c:22:25:4d:62: c9:7b:92:98:12:32:ff:08:4c:96:2a:5c:ce:83:e6:88:7f:0c: 95:66:a8:86:89:50:6d:57:61:82:ed:0e:69:ed:a9:23:65:1f: 5f:14:55:28:d2:41:f6:9d:ef:f0:68:25:ed:c6:33:0d:ec:fd: c4:ef:d4:23:58:5d:3f:a6:53:1f:2f:e6:b4:60:7b:49:4c:a3: c2:b9:65:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+6iera86ohnQlK5qHr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTcwZDVkZmJhMzVlYzhkMDEzMDJiNmY4MWI2ZDIyZGMwMjdlODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkNZOH9KYM5AvQv/slatncIQYodI cHM35FED0RTxzrCVTUxGHSc9Z9UNJnmPz6E+Y3TnXrC/BDjI3XB5NUbtZkcYNQUS YWj7o1v1CaZ6FAM/z3HIBLnLiMLV019yEYoSINxbXz4yz46YPcbbrJ2+h8p9GUfq E/+1Rs2f6z2DsFvd/o55ugNTq+cmCTrlbi3qOwS8++bzHyoocBAy+CQqtZkotwna fxTWzXhTTJEJrVkqI3/7v4F7+Nc6oA9Muwk6ioS7Xryxo0id3PxMSohJn/yIrKP2 pV9bFckch/S5K/7qnIJejj6PJOop/2rRtudSqbL+P/qcEyZpGHKlRAj3FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpw1d+6NeyNATArb4G20i3AJ+gXMB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvbW5EVjM3bzE3STBCTUN0dmdiYlNMY0FuNkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvqMA0G CSqGSIb3DQEBCwUAA4IBAQDKbwZbofmKoJL/6/F0EnCK9kDR6EZdzZsyvzIlilIs QXrvP/445vOAVEFARdyABUCWSzIgq5uVCmumkxrKFmYOU7iAewy+5NXUNOzRYyKR AmcNRAmMFPqVdIHth4GOeQoizX8eLWKor7lckoGmVVpkZEC7vmzhUUzH4v4q29kf yAnTB+/YMfA6FqAL33mr7Fu3arHW0jOHyEHlX7H8UwTtd66sry6t8dBJYJpbfvq0 nCIlTWLJe5KYEjL/CEyWKlzOg+aIfwyVZqiGiVBtV2GC7Q5p7akjZR9fFFUo0kH2 ne/waCXtxjMN7P3E79QjWF0/plMfL+a0YHtJTKPCuWW6 -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:35 2026 by rpki-client