This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mrnreB9iglcdVmQDGbsJYTJyEc0.roa File: mrnreB9iglcdVmQDGbsJYTJyEc0.roa (raw, json) Hash identifier: 1s5/w08YSIBCdUckeVe9rwSo9VH/aGip9AdtgQPqDss= Subject key identifier: 9A:B9:EB:78:1F:62:82:57:1D:56:64:03:19:BB:09:61:32:72:11:CD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BE41AA9CD1CEE8124401A34377A9659FD Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mrnreB9iglcdVmQDGbsJYTJyEc0.roa Signing time: Thu 22 Jan 2026 05:08:31 +0000 ROA not before: Thu 22 Jan 2026 05:08:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213622 IP address blocks: 185.13.156.0/24 maxlen: 24 185.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:1a:a9:cd:1c:ee:81:24:40:1a:34:37:7a:96:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 22 05:08:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ab9eb781f6282571d56640319bb0961327211cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:70:f7:23:8d:5a:54:c6:2e:2a:09:23:9f: 22:d4:37:f4:68:88:80:56:e0:43:7e:5a:72:5c:ab: 50:97:d6:e0:3b:b6:48:f3:6c:c8:01:8a:d2:58:45: 94:61:ca:57:f8:04:05:46:64:25:fb:17:91:a2:50: da:d5:d7:f2:06:e1:c7:2a:c8:fa:56:72:ad:e6:a8: 62:10:7b:77:c0:3f:43:ae:0c:e2:a5:92:22:98:b2: 33:51:5b:58:1c:2c:e6:fa:88:f8:0c:e5:55:4d:cf: 33:46:50:a6:2c:f1:03:2e:98:c2:6a:d5:41:8a:bf: 2a:51:16:3c:8f:e2:e7:c8:07:fc:be:ae:9e:75:ab: b0:63:85:51:86:31:7d:ea:d6:65:b4:1e:76:6d:60: ff:96:14:b5:33:c3:36:18:bf:6b:57:08:e5:93:68: 3e:03:72:02:8a:9b:d9:64:5c:33:6f:46:2a:64:0b: ba:60:83:c2:e1:26:93:4c:54:64:fb:ce:09:10:42: 9c:82:22:ff:99:68:b5:2f:2f:17:9c:85:c6:fc:b6: 8f:cb:af:e2:79:2a:71:10:d0:63:3d:a9:c1:a0:74: ac:dc:45:e0:86:50:b9:df:d1:6a:4d:52:2d:71:e6: 78:3e:6b:31:fa:3c:1f:1c:63:be:c9:ad:48:ed:64: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:EB:78:1F:62:82:57:1D:56:64:03:19:BB:09:61:32:72:11:CD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mrnreB9iglcdVmQDGbsJYTJyEc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.156.0/24 185.121.69.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:c8:0b:bc:3f:a7:33:51:90:82:54:0a:2f:2d:46:07:f1:b1: e4:b8:f2:4b:50:06:ce:49:33:fd:77:fc:24:d9:23:ad:5a:e4: 2a:07:be:b5:0a:01:00:39:8b:d9:d9:e1:10:ca:8c:72:3e:b1: 65:b1:e8:fa:03:65:79:f5:2d:83:c8:f1:c7:cd:7f:07:a8:4c: c6:90:9a:1d:10:7e:54:63:32:23:f6:26:10:0f:05:5f:ec:6c: d9:27:22:b5:d6:d1:39:9f:3d:9d:4e:92:08:02:04:84:50:71: 95:cb:aa:32:25:99:9e:68:84:47:bc:1d:46:6c:e1:6f:a5:6a: fb:4e:de:27:56:80:23:7c:49:06:22:c7:65:ea:5b:c5:61:24: 2d:bc:62:62:38:2a:9d:5c:84:99:97:54:c9:ac:93:72:59:e4: f3:f9:d5:4b:22:80:55:c3:c1:a8:72:f7:a2:4d:0d:23:82:b5: 64:33:ea:aa:ff:68:9a:b9:27:b8:ca:8a:a6:a6:01:c0:e5:34: 4d:c9:eb:36:89:fa:a8:27:df:2f:05:c1:6f:45:c9:69:d1:26: 00:44:18:00:c4:7a:1b:f6:ff:82:10:d9:b8:80:fa:e8:41:71: c4:54:de:1c:24:37:41:93:d1:60:85:ab:45:3c:89:17:06:0b: 7a:71:bc:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvkGqnNHO6BJEAaNDd6lln9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIyMDUwODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWI5ZWI3ODFmNjI4MjU3MWQ1NjY0MDMxOWJiMDk2MTMyNzIxMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfxw9yONWlTGLioJI58i1Df0aIiA VuBDflpyXKtQl9bgO7ZI82zIAYrSWEWUYcpX+AQFRmQl+xeRolDa1dfyBuHHKsj6 VnKt5qhiEHt3wD9DrgzipZIimLIzUVtYHCzm+oj4DOVVTc8zRlCmLPEDLpjCatVB ir8qURY8j+LnyAf8vq6edauwY4VRhjF96tZltB52bWD/lhS1M8M2GL9rVwjlk2g+ A3ICipvZZFwzb0YqZAu6YIPC4SaTTFRk+84JEEKcgiL/mWi1Ly8XnIXG/LaPy6/i eSpxENBjPanBoHSs3EXghlC539FqTVItceZ4Pmsx+jwfHGO+ya1I7WSt/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJq563gfYoJXHVZkAxm7CWEychHNMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbXJucmVCOWlnbGNkVm1RREdic0pZVEp5RWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQ2cAwQA uXlFMA0GCSqGSIb3DQEBCwUAA4IBAQA7yAu8P6czUZCCVAovLUYH8bHkuPJLUAbO STP9d/wk2SOtWuQqB761CgEAOYvZ2eEQyoxyPrFlsej6A2V59S2DyPHHzX8HqEzG kJodEH5UYzIj9iYQDwVf7GzZJyK11tE5nz2dTpIIAgSEUHGVy6oyJZmeaIRHvB1G bOFvpWr7Tt4nVoAjfEkGIsdl6lvFYSQtvGJiOCqdXISZl1TJrJNyWeTz+dVLIoBV w8GocveiTQ0jgrVkM+qq/2iauSe4yoqmpgHA5TRNyes2ifqoJ98vBcFvRclp0SYA RBgAxHob9v+CENm4gProQXHEVN4cJDdBk9FghatFPIkXBgt6cbyu -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:18 2026 by rpki-client