This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/mPlMjkqTZkC57IBLKPd0EfNj7iw.roa File: mPlMjkqTZkC57IBLKPd0EfNj7iw.roa (raw, json) Hash identifier: VIIonFkOVhOCVYivwNgIVRIKhtGM74oWX8Z6MBeWXm4= Subject key identifier: 98:F9:4C:8E:4A:93:66:40:B9:EC:80:4B:28:F7:74:11:F3:63:EE:2C Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Certificate serial: 019B7A5AF11E8E773F938905374CD05E5EB9 Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/mPlMjkqTZkC57IBLKPd0EfNj7iw.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211694 IP address blocks: 185.171.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f1:1e:8e:77:3f:93:89:05:37:4c:d0:5e:5e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98f94c8e4a936640b9ec804b28f77411f363ee2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:a9:fa:27:af:83:14:c1:c7:f2:eb:1b:99: 4a:47:37:04:cf:71:78:78:22:db:65:17:6f:30:98: 69:90:ee:5a:e8:d8:f4:65:75:c1:3a:4a:e7:ea:2a: f2:a9:40:bd:60:42:88:f0:16:0f:98:24:b1:ce:39: 0a:4f:c8:15:40:10:ba:47:3a:01:d5:18:c1:2b:a5: b3:90:f5:72:3d:c5:6e:a9:90:6c:6d:95:94:7e:eb: 4d:8d:4d:39:a3:e9:f5:73:65:32:4b:b6:9a:9d:39: c4:1f:42:0c:d8:a8:35:e1:b3:11:38:1d:ba:f4:87: d7:2e:f1:b5:73:30:72:6c:4e:df:94:94:23:99:f9: 66:05:e5:99:60:c7:50:36:d0:02:c1:a9:cb:8c:09: 40:c5:e2:ea:e9:f3:4b:43:29:94:b3:50:f9:37:94: c0:aa:bf:d2:cc:58:43:0f:51:fd:15:a4:22:2b:70: 02:af:50:54:1f:46:b6:8b:8e:40:c1:40:4a:54:59: 64:45:6c:39:d3:6c:4a:c5:5c:f2:1e:d4:a4:1e:dc: 07:7e:2d:70:91:98:d7:59:a2:8b:3f:72:53:9c:a5: 73:08:92:29:da:4a:4a:8f:ac:00:8f:1c:cf:da:b6: e9:d1:5d:c3:c8:c8:0b:18:5b:9b:a8:19:aa:13:fe: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F9:4C:8E:4A:93:66:40:B9:EC:80:4B:28:F7:74:11:F3:63:EE:2C X509v3 Authority Key Identifier: keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/mPlMjkqTZkC57IBLKPd0EfNj7iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.162.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:c5:b0:bc:7e:fb:9d:f9:a2:81:87:e2:c4:11:55:a5:b5:44: 99:c4:4f:14:e4:cb:3d:9a:0d:36:9a:83:df:a0:02:d5:db:20: be:51:91:e2:b0:12:79:f4:40:2d:e1:ed:b0:0b:19:b2:62:ea: 89:e5:14:a2:e1:6a:59:95:dd:a8:d6:43:95:34:b8:f8:e8:65: be:9c:39:5c:57:e9:d8:10:52:f4:b4:a6:da:d0:d4:30:c5:43: 9c:44:6d:6b:be:33:ef:28:9b:8b:3f:41:e3:c2:72:e2:25:b0: 8b:a3:cf:50:57:43:c4:51:fc:5b:f3:67:5e:ce:8d:da:9f:60: cb:f9:91:b6:19:fd:88:bf:8d:f9:c2:4d:b4:e2:58:3b:39:e1: 7a:6a:cb:59:58:d1:87:8e:a0:49:ad:61:88:cf:ff:54:9b:2d: 31:86:3b:02:b1:24:16:92:ca:e2:02:d9:e4:b0:84:16:86:fb: f2:4d:5b:bc:bc:fc:85:5c:61:3a:04:5d:4e:6a:9c:23:cf:e4: 72:e4:4b:7b:79:5b:23:30:c4:8c:58:87:48:b5:44:70:19:d6: 43:d3:fb:9a:6f:d0:69:fc:f1:5d:19:aa:53:8a:03:09:ec:05: 61:80:9d:0c:a6:c3:1f:e8:9a:1e:93:15:58:36:9d:d7:52:f2: c4:cc:0b:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvEejnc/k4kFN0zQXl65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy MGU0NTIwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGY5NGM4ZTRhOTM2NjQwYjllYzgwNGIyOGY3NzQxMWYzNjNlZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDGp+ievgxTBx/LrG5lKRzcEz3F4 eCLbZRdvMJhpkO5a6Nj0ZXXBOkrn6iryqUC9YEKI8BYPmCSxzjkKT8gVQBC6RzoB 1RjBK6WzkPVyPcVuqZBsbZWUfutNjU05o+n1c2UyS7aanTnEH0IM2Kg14bMROB26 9IfXLvG1czBybE7flJQjmflmBeWZYMdQNtACwanLjAlAxeLq6fNLQymUs1D5N5TA qr/SzFhDD1H9FaQiK3ACr1BUH0a2i45AwUBKVFlkRWw502xKxVzyHtSkHtwHfi1w kZjXWaKLP3JTnKVzCJIp2kpKj6wAjxzP2rbp0V3DyMgLGFubqBmqE/7oewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJj5TI5Kk2ZAueyASyj3dBHzY+4sMB8GA1UdIwQY MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt OWVmMGU2NmMzYTZjLzEvbVBsTWprcVRaa0M1N0lCTEtQZDBFZk5qN2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuauiMA0G CSqGSIb3DQEBCwUAA4IBAQCMxbC8fvud+aKBh+LEEVWltUSZxE8U5Ms9mg02moPf oALV2yC+UZHisBJ59EAt4e2wCxmyYuqJ5RSi4WpZld2o1kOVNLj46GW+nDlcV+nY EFL0tKba0NQwxUOcRG1rvjPvKJuLP0HjwnLiJbCLo89QV0PEUfxb82dezo3an2DL +ZG2Gf2Iv435wk204lg7OeF6astZWNGHjqBJrWGIz/9Umy0xhjsCsSQWksriAtnk sIQWhvvyTVu8vPyFXGE6BF1Oapwjz+Ry5Et7eVsjMMSMWIdItURwGdZD0/uab9Bp /PFdGapTigMJ7AVhgJ0MpsMf6JoekxVYNp3XUvLEzAvX -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:04 2026 by rpki-client