This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/Mqj0Demridh190h6JIN3Gx3sPy4.roa File: Mqj0Demridh190h6JIN3Gx3sPy4.roa (raw, json) Hash identifier: AORPpnZQfRY//hqEidzjVvXW/SBvbOFeJtpk2VoU8BI= Subject key identifier: 32:A8:F4:0D:E9:AB:89:D8:75:F7:48:7A:24:83:77:1B:1D:EC:3F:2E Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Certificate serial: 019B7B36671ECCCA091063659588F3F0533D Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/Mqj0Demridh190h6JIN3Gx3sPy4.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207974 IP address blocks: 185.214.168.0/22 maxlen: 22 185.214.168.0/24 maxlen: 24 185.214.169.0/24 maxlen: 24 185.214.170.0/24 maxlen: 24 2a0a:3b40::/36 maxlen: 36 2a0a:3b40:1000::/36 maxlen: 36 2a0a:3b40:2000::/36 maxlen: 36 2a0a:3b40:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:67:1e:cc:ca:09:10:63:65:95:88:f3:f0:53:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32a8f40de9ab89d875f7487a2483771b1dec3f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:d5:28:3a:3e:ad:9b:dd:95:ac:12:82:4e: b5:6d:7c:80:83:b8:ec:fc:e0:78:d6:05:ec:56:93: c3:10:9a:b5:e2:3d:11:5d:29:a5:ec:44:65:ff:b1: 4f:d9:0b:5c:d1:cb:aa:cf:1e:6e:e5:30:00:a6:1b: 68:be:f6:41:80:64:ca:db:ee:6a:6b:bb:e8:31:3d: 84:ad:44:c6:cd:b4:4b:8d:58:6d:eb:3d:7a:70:1a: 82:4b:f9:3b:16:99:16:d0:d0:da:eb:3e:ae:57:92: d4:34:d5:e8:bb:62:44:a3:69:98:f2:3a:c5:ac:78: cf:3e:a3:78:9e:0f:58:69:be:53:f9:7e:13:df:2b: 4f:c5:46:20:89:df:a2:7c:6b:6b:d1:55:5f:73:25: 5a:25:9a:7d:3e:c1:1b:9e:8a:3d:b4:77:5b:40:cb: d7:af:9b:db:59:95:82:7d:9c:3b:4e:23:e1:ea:12: 7a:aa:af:74:c1:da:58:a3:59:cb:14:e1:f1:9c:43: e4:11:54:71:62:73:5c:f1:b4:d0:0b:de:c7:21:a8: 04:de:f2:62:1a:8b:60:22:f6:65:17:c7:44:62:90: 51:79:7a:e0:52:f2:0b:5d:d8:1f:ff:d1:97:c7:21: 7c:0c:18:ce:03:aa:cb:b5:bc:df:58:01:49:41:16: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:F4:0D:E9:AB:89:D8:75:F7:48:7A:24:83:77:1B:1D:EC:3F:2E X509v3 Authority Key Identifier: keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/Mqj0Demridh190h6JIN3Gx3sPy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.168.0/22 IPv6: 2a0a:3b40::/34 Signature Algorithm: sha256WithRSAEncryption 37:38:bc:f9:82:a5:53:84:bf:79:61:da:b9:ee:a9:eb:c6:4f: 59:54:96:59:e2:c0:fd:b3:aa:87:b7:f9:db:fd:bc:9d:91:6f: a3:50:2e:a9:44:11:42:97:44:7e:4d:92:40:5c:4b:ff:1a:25: df:6e:b6:49:0d:dd:a0:b8:4d:d7:b0:bd:0d:f0:8c:f8:7e:5c: 8f:0b:a9:3e:bc:f6:3a:41:5e:7a:c9:92:b7:1a:ad:f8:64:90: 24:43:1a:6f:e9:f0:ef:db:18:c1:d6:ec:a1:2b:26:1c:da:75: 25:b3:2e:e3:c9:af:cc:98:69:2d:8e:47:ad:55:72:f7:fa:6c: ca:7f:fa:2b:03:e6:d5:ea:4d:c5:33:37:95:28:ee:8a:e5:fe: d3:ce:54:66:fe:b8:d5:e7:e5:1e:2c:f6:0c:3b:76:33:9b:f5: 29:9b:2e:27:cc:d7:c7:0a:1e:2f:46:b3:40:ef:24:60:c1:bb: c3:a8:b9:cf:25:99:d0:84:7a:68:38:2c:0e:de:e3:fc:fb:1f: 1a:26:e6:e4:13:b1:5a:05:ec:7f:e6:ba:6b:be:f6:50:6a:ef: fd:ce:91:33:d2:a2:b2:92:d0:76:c3:60:45:8d:ff:42:87:21: 64:bb:20:12:f8:10:ea:b2:64:76:02:62:c8:72:3b:98:49:ca: 83:db:56:5c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7NmcezMoJEGNllYjz8FM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw MWFiODEwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmE4ZjQwZGU5YWI4OWQ4NzVmNzQ4N2EyNDgzNzcxYjFkZWMzZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrVKDo+rZvdlawSgk61bXyAg7js /OB41gXsVpPDEJq14j0RXSml7ERl/7FP2Qtc0cuqzx5u5TAAphtovvZBgGTK2+5q a7voMT2ErUTGzbRLjVht6z16cBqCS/k7FpkW0NDa6z6uV5LUNNXou2JEo2mY8jrF rHjPPqN4ng9Yab5T+X4T3ytPxUYgid+ifGtr0VVfcyVaJZp9PsEbnoo9tHdbQMvX r5vbWZWCfZw7TiPh6hJ6qq90wdpYo1nLFOHxnEPkEVRxYnNc8bTQC97HIagE3vJi GotgIvZlF8dEYpBReXrgUvILXdgf/9GXxyF8DBjOA6rLtbzfWAFJQRbzYwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDKo9A3pq4nYdfdIeiSDdxsd7D8uMB8GA1UdIwQY MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt MmMyMDFkMzBhZTA1LzEvTXFqMERlbXJpZGgxOTBoNkpJTjNHeDNzUHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1 LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCudaoMA4E AgACMAgDBgYqCjtAADANBgkqhkiG9w0BAQsFAAOCAQEANzi8+YKlU4S/eWHaue6p 68ZPWVSWWeLA/bOqh7f52/28nZFvo1AuqUQRQpdEfk2SQFxL/xol3262SQ3doLhN 17C9DfCM+H5cjwupPrz2OkFeesmStxqt+GSQJEMab+nw79sYwdbsoSsmHNp1JbMu 48mvzJhpLY5HrVVy9/psyn/6KwPm1epNxTM3lSjuiuX+085UZv641eflHiz2DDt2 M5v1KZsuJ8zXxwoeL0azQO8kYMG7w6i5zyWZ0IR6aDgsDt7j/PsfGibm5BOxWgXs f+a6a772UGrv/c6RM9KispLQdsNgRY3/QochZLsgEvgQ6rJkdgJiyHI7mEnKg9tW XA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:43 2026 by rpki-client