This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/MIazZm73J3YwzDUp7bbsr8kuYL8.roa File: MIazZm73J3YwzDUp7bbsr8kuYL8.roa (raw, json) Hash identifier: 0MU6pwWH6FcxJwPXNIBjVTh4xH74vYZeOmkrcb5dOy4= Subject key identifier: 30:86:B3:66:6E:F7:27:76:30:CC:35:29:ED:B6:EC:AF:C9:2E:60:BF Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833 Certificate serial: 019B7AC93EAD75376CE01228B20736D1CD41 Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/MIazZm73J3YwzDUp7bbsr8kuYL8.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198776 IP address blocks: 78.110.44.0/22 maxlen: 22 185.117.64.0/22 maxlen: 22 185.220.132.0/22 maxlen: 22 2a0b:f740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3e:ad:75:37:6c:e0:12:28:b2:07:36:d1:cd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3086b3666ef7277630cc3529edb6ecafc92e60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:22:d5:73:60:52:4c:52:bc:66:b8:d0:4a: 69:f7:89:6e:67:99:27:be:ef:03:5e:13:bd:85:dd: ee:fb:7b:ae:b2:43:00:1b:6e:0e:fb:90:06:73:5b: 45:71:53:85:e6:92:70:9a:f5:ff:6f:cf:bb:ed:f5: ef:b3:b8:96:66:60:22:10:cc:87:91:0d:38:59:58: 2c:fb:32:c4:1b:0d:f2:5f:c7:61:4f:cf:55:82:61: 42:bb:c3:d2:90:22:ef:ac:d1:89:4e:8f:fb:3c:56: 93:64:a2:5d:fa:5d:76:e9:02:26:ba:3e:3f:cf:44: d3:dc:e1:36:99:93:3d:61:da:4f:3e:2d:ab:f4:1d: 6c:c5:f6:a7:ce:f6:5c:3a:35:38:34:ef:2b:4d:d2: 38:7e:b6:52:96:2b:f5:df:3d:4f:83:59:f6:69:a8: ec:40:a7:85:65:80:82:dc:15:ee:b1:6a:2f:cd:af: d7:66:ab:88:38:66:31:ba:f7:2f:62:82:63:2b:44: f9:74:59:a4:c6:1b:39:0c:b9:17:8b:17:19:30:cf: 0b:c0:b5:4a:58:4c:09:4e:fc:48:8a:bc:18:36:83: 26:40:72:a5:13:e7:5b:bb:f2:8b:73:0c:10:cc:7d: 61:15:c0:27:be:d8:51:14:73:79:25:c9:18:84:ce: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:B3:66:6E:F7:27:76:30:CC:35:29:ED:B6:EC:AF:C9:2E:60:BF X509v3 Authority Key Identifier: keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/MIazZm73J3YwzDUp7bbsr8kuYL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.44.0/22 185.117.64.0/22 185.220.132.0/22 IPv6: 2a0b:f740::/29 Signature Algorithm: sha256WithRSAEncryption 0c:83:93:2f:6a:30:60:16:b3:61:2c:86:44:5d:62:fe:0c:09: 46:4c:fb:72:a2:ac:b5:a8:09:3a:70:f5:f7:f1:08:ab:dd:aa: 17:50:b8:f6:40:8f:ee:f0:d7:bf:e7:37:0f:87:58:c6:1a:6d: aa:21:39:5c:cd:a9:6a:ce:ef:ca:22:78:7b:38:65:9c:25:37: 52:4b:72:52:f5:57:2e:d3:7d:71:a5:11:af:f8:97:1c:10:12: 87:81:24:0b:7d:5b:a0:e3:90:e8:9e:f7:8d:4a:86:94:43:4c: 47:e8:9b:09:43:d0:b1:92:ee:50:96:a4:f2:af:fd:d9:cf:08: 8b:59:10:8b:9a:92:92:41:b4:7c:e5:76:ad:ff:c0:aa:ea:a3: 09:4e:c6:d1:75:01:0b:9b:ff:c6:30:92:67:c9:9f:3d:96:cb: b6:a3:82:a4:6b:37:72:2c:11:07:6e:cd:7a:ff:a5:ce:8b:ec: 64:eb:84:72:9f:eb:21:ea:5f:c9:f5:f6:78:58:18:18:f6:e1: 22:4c:58:42:7b:59:7a:e3:42:9f:81:dd:83:30:1d:42:57:15: 34:d2:40:6a:18:f1:71:89:33:da:a6:9a:81:25:fb:6f:bc:ce: f7:d5:88:10:a1:12:00:27:22:a1:cc:38:f2:c8:74:f1:c9:1e: e9:a8:f7:ba -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yT6tdTds4BIosgc20c1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDI1NDlkOGQwMDY3YTM3MjMyM2NjNzZkOGVlMDEwMmI3 NGQ4MzMwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDg2YjM2NjZlZjcyNzc2MzBjYzM1MjllZGI2ZWNhZmM5MmU2MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeMi1XNgUkxSvGa40Epp94luZ5kn vu8DXhO9hd3u+3uuskMAG24O+5AGc1tFcVOF5pJwmvX/b8+77fXvs7iWZmAiEMyH kQ04WVgs+zLEGw3yX8dhT89VgmFCu8PSkCLvrNGJTo/7PFaTZKJd+l126QImuj4/ z0TT3OE2mZM9YdpPPi2r9B1sxfanzvZcOjU4NO8rTdI4frZSliv13z1Pg1n2aajs QKeFZYCC3BXusWovza/XZquIOGYxuvcvYoJjK0T5dFmkxhs5DLkXixcZMM8LwLVK WEwJTvxIirwYNoMmQHKlE+dbu/KLcwwQzH1hFcAnvthRFHN5JckYhM6PFQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDCGs2Zu9yd2MMw1Ke227K/JLmC/MB8GA1UdIwQY MBaAFMLSVJ2NAGejcjI8x22O4BArdNgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjIt MTk3MTc4ZmYxOGYyLzEvTUlhelptNzNKM1l3ekRVcDdiYnNyOGt1WUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjItMTk3MTc4ZmYxOGYy LzEvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCTm4sAwQC uXVAAwQCudyEMA0EAgACMAcDBQMqC/dAMA0GCSqGSIb3DQEBCwUAA4IBAQAMg5Mv ajBgFrNhLIZEXWL+DAlGTPtyoqy1qAk6cPX38Qir3aoXULj2QI/u8Ne/5zcPh1jG Gm2qITlczalqzu/KInh7OGWcJTdSS3JS9Vcu031xpRGv+JccEBKHgSQLfVug45Do nveNSoaUQ0xH6JsJQ9Cxku5QlqTyr/3ZzwiLWRCLmpKSQbR85Xat/8Cq6qMJTsbR dQELm//GMJJnyZ89lsu2o4KkazdyLBEHbs16/6XOi+xk64Ryn+sh6l/J9fZ4WBgY 9uEiTFhCe1l640Kfgd2DMB1CVxU00kBqGPFxiTPappqBJftvvM731YgQoRIAJyKh zDjyyHTxyR7pqPe6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:28 2026 by rpki-client