This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/michsV01Z00JBjY24wayKz4Cjf8.roa File: michsV01Z00JBjY24wayKz4Cjf8.roa (raw, json) Hash identifier: e303uFjUpDcLP+u96UOiCW3TEo59fwyiJHUokZB7KIU= Subject key identifier: 9A:27:21:B1:5D:35:67:4D:09:06:36:36:E3:06:B2:2B:3E:02:8D:FF Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Certificate serial: 019B7E37E66E167A9EF55F19D90330948769 Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/michsV01Z00JBjY24wayKz4Cjf8.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48576 IP address blocks: 185.77.44.0/22 maxlen: 22 2a03:5260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e6:6e:16:7a:9e:f5:5f:19:d9:03:30:94:87:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a2721b15d35674d09063636e306b22b3e028dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:03:bf:85:ff:ca:6b:4c:fa:dc:33:41:2d: ad:ce:ed:cd:40:3a:8a:a8:aa:4f:8c:9c:eb:32:06: d4:4b:16:b8:f3:3d:6f:05:27:28:40:d8:37:df:8b: 16:af:42:e8:ee:c0:2e:50:cc:34:c6:7b:76:b4:02: 52:ae:bf:fb:25:05:58:a0:95:30:73:c3:c4:8e:ad: be:24:e1:db:db:db:2b:44:d8:e1:e1:b9:fc:79:97: ee:53:32:53:06:52:01:ac:6f:76:70:c2:71:b2:ea: 66:4f:e4:d3:91:e4:6c:cc:60:6c:d3:22:0c:31:c6: 5c:9e:f5:e4:cf:f5:2f:db:6e:60:a8:03:ee:a4:0d: f8:d0:02:29:da:0e:68:cc:26:c7:df:51:ba:ad:1e: 90:34:3c:6a:d6:2f:dd:6f:81:b4:f9:71:d2:f3:05: c3:08:9b:d2:c2:24:3e:24:b1:8f:91:3c:62:83:66: 52:a5:d0:33:4d:3b:e4:20:d1:af:8c:e9:87:13:d7: c2:f9:fa:79:14:fe:8a:c8:e4:ef:76:3b:84:26:12: 40:50:b8:84:d8:55:54:f0:52:fa:91:4c:4e:4b:34: aa:c2:b3:5e:9e:70:ae:80:37:48:4e:85:1f:95:8d: ff:e6:45:99:b6:05:23:84:c9:62:ca:e4:43:20:d5: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:27:21:B1:5D:35:67:4D:09:06:36:36:E3:06:B2:2B:3E:02:8D:FF X509v3 Authority Key Identifier: keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/michsV01Z00JBjY24wayKz4Cjf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.44.0/22 IPv6: 2a03:5260::/32 Signature Algorithm: sha256WithRSAEncryption 67:80:8f:d8:94:bf:e1:ce:a7:c5:e4:50:72:05:05:7c:d7:cd: 2c:54:48:1e:6d:5d:56:5d:0a:d5:9a:cd:13:e0:7f:31:d4:b4: 4d:80:2a:74:ac:f9:43:e3:f3:43:ea:33:06:8a:03:d1:ca:c6: 5e:e1:e9:77:0a:c5:41:42:05:a2:a0:3d:da:7f:80:4f:35:42: c4:04:3d:e7:4f:df:88:22:18:55:cc:4b:92:3c:d3:5e:59:ff: f9:d2:bc:2e:63:53:26:9e:9a:5d:c2:70:ed:ac:a1:eb:c4:ca: bb:7b:b2:f8:7e:e6:da:63:5c:50:ce:52:37:6b:90:78:bc:e2: fc:e8:d6:12:0e:8f:91:31:2a:e6:be:24:fd:1b:e4:d5:4d:36: e2:9d:b3:61:7a:37:2a:75:5b:a4:a9:d5:45:49:36:57:d8:5d: 4b:31:95:91:27:f5:c8:69:52:04:b8:42:7d:15:57:6e:07:20: 16:eb:d1:d5:e8:62:2a:9b:30:22:1c:ef:78:e7:4c:a2:0e:08: b3:e9:72:ac:c9:e4:b4:d6:a2:9b:02:cd:83:bd:a5:a7:d4:f8: 09:2a:0c:b5:43:0d:3d:14:64:d5:7b:32:9d:18:a8:93:7c:f6: ac:11:05:0c:38:b0:a1:de:b4:e1:26:0f:d8:69:33:4f:78:ec: e5:e1:7a:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N+ZuFnqe9V8Z2QMwlIdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw YjdhY2IwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTI3MjFiMTVkMzU2NzRkMDkwNjM2MzZlMzA2YjIyYjNlMDI4ZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WYDv4X/ymtM+twzQS2tzu3NQDqK qKpPjJzrMgbUSxa48z1vBScoQNg334sWr0Lo7sAuUMw0xnt2tAJSrr/7JQVYoJUw c8PEjq2+JOHb29srRNjh4bn8eZfuUzJTBlIBrG92cMJxsupmT+TTkeRszGBs0yIM McZcnvXkz/Uv225gqAPupA340AIp2g5ozCbH31G6rR6QNDxq1i/db4G0+XHS8wXD CJvSwiQ+JLGPkTxig2ZSpdAzTTvkINGvjOmHE9fC+fp5FP6KyOTvdjuEJhJAULiE 2FVU8FL6kUxOSzSqwrNennCugDdIToUflY3/5kWZtgUjhMliyuRDINXDXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJonIbFdNWdNCQY2NuMGsis+Ao3/MB8GA1UdIwQY MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt MzJlNTdiYzU0NzRiLzEvbWljaHNWMDFaMDBKQmpZMjR3YXlLejRDamY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU0sMA0E AgACMAcDBQAqA1JgMA0GCSqGSIb3DQEBCwUAA4IBAQBngI/YlL/hzqfF5FByBQV8 180sVEgebV1WXQrVms0T4H8x1LRNgCp0rPlD4/ND6jMGigPRysZe4el3CsVBQgWi oD3af4BPNULEBD3nT9+IIhhVzEuSPNNeWf/50rwuY1MmnppdwnDtrKHrxMq7e7L4 fubaY1xQzlI3a5B4vOL86NYSDo+RMSrmviT9G+TVTTbinbNhejcqdVukqdVFSTZX 2F1LMZWRJ/XIaVIEuEJ9FVduByAW69HV6GIqmzAiHO9450yiDgiz6XKsyeS01qKb As2DvaWn1PgJKgy1Qw09FGTVezKdGKiTfPasEQUMOLCh3rThJg/YaTNPeOzl4Xpx -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:36 2026 by rpki-client