This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa File: MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa (raw, json) Hash identifier: czv9oaDX9uocQn5ZLcnNiN6ZQ7Qagrx62umbfHCmvmg= Subject key identifier: 32:20:24:D4:59:FC:87:BC:A3:97:46:44:89:E4:43:71:F2:E4:FD:8B Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019B79ED40B884118F38D19A6C5F691E456B Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52129 IP address blocks: 91.207.212.0/23 maxlen: 23 91.209.104.0/24 maxlen: 24 143.55.144.0/21 maxlen: 24 185.183.28.0/22 maxlen: 22 185.183.28.0/24 maxlen: 24 185.183.29.0/24 maxlen: 24 185.183.30.0/24 maxlen: 24 185.183.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:40:b8:84:11:8f:38:d1:9a:6c:5f:69:1e:45:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=322024d459fc87bca397464489e44371f2e4fd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:22:37:88:2d:42:73:ad:eb:23:d1:e6:bf: fc:74:5a:ad:ee:15:48:f9:81:7b:56:e4:1a:dd:3b: 0a:0d:b7:d0:91:49:50:01:b8:13:63:fc:77:fa:df: ba:ad:53:bf:51:a7:f3:8f:73:00:bc:41:8e:c7:39: 2c:be:59:66:b7:94:86:7e:a5:42:86:40:de:e6:63: 74:9d:8b:57:ea:6f:c8:6b:4f:e0:96:3a:75:ba:f1: 5d:34:09:1f:9b:38:af:83:9c:5e:b3:d8:b7:c6:4a: 56:17:85:0f:de:21:5f:ab:3b:d1:95:bd:fe:62:46: 28:76:7c:03:39:27:e7:df:ff:3c:74:54:22:3a:e7: 94:96:af:c9:ba:77:8a:0e:81:6e:af:78:f8:05:3f: ae:d1:4f:ae:0f:19:b9:91:36:61:64:af:d1:3f:30: 08:1e:91:7e:8e:72:0f:40:4a:e4:a4:2c:5e:c4:12: 31:82:84:40:d3:7b:57:72:22:57:5b:2f:2a:f7:86: ea:c7:cb:ad:72:4f:e8:47:68:c4:30:a4:52:a1:2f: f9:86:d0:45:87:08:77:5d:1c:42:27:f9:d6:63:47: 77:5f:cc:71:ba:cc:95:b1:fe:ac:fa:27:d5:3d:01: e7:94:b6:19:1c:77:0d:a3:95:25:17:07:df:36:f9: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:24:D4:59:FC:87:BC:A3:97:46:44:89:E4:43:71:F2:E4:FD:8B X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.212.0/23 91.209.104.0/24 143.55.144.0/21 185.183.28.0/22 Signature Algorithm: sha256WithRSAEncryption a1:87:e5:ec:c4:2a:f3:6f:8f:04:67:d4:f6:3f:41:39:25:cd: f1:23:33:70:fd:42:c8:f4:95:52:a1:39:04:9e:4a:0f:ac:72: 89:b5:04:e1:29:ae:63:d2:be:37:33:a2:58:41:0d:24:82:3e: 41:8c:f4:d9:5d:4b:99:59:fe:54:0a:77:be:90:24:9d:f8:25: bc:10:5a:76:54:1d:9b:fc:a8:1f:38:90:c2:19:c9:0c:70:39: 3b:c6:2a:69:38:9c:98:53:7c:86:76:15:bb:26:f7:7d:b6:94: 12:93:01:7d:05:e8:a6:fd:8c:99:ea:15:59:6a:93:0c:2d:20: 89:d3:6c:d7:1d:81:58:82:a0:17:28:c6:6e:68:14:a9:d1:78: 3d:3d:f8:e4:53:84:92:fb:92:4d:d1:aa:61:cb:7f:16:9a:56: 1a:5b:06:f4:a0:0d:09:66:b0:f7:0c:72:a9:69:3b:70:ec:98: e0:cf:37:38:41:39:64:5a:b3:e2:83:d3:84:a3:48:02:2a:e8: cf:a1:d8:65:3b:0e:7e:63:a1:19:46:76:60:ba:6a:b0:46:51: 69:c8:0e:e3:c9:d1:56:46:5b:9e:2d:63:b9:e1:8e:fa:11:7a: 78:e3:6a:be:37:c4:73:c0:25:a0:d8:62:2f:38:f3:e4:33:42: cb:2e:98:53 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57UC4hBGPONGabF9pHkVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjIwMjRkNDU5ZmM4N2JjYTM5NzQ2NDQ4OWU0NDM3MWYyZTRmZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbsiN4gtQnOt6yPR5r/8dFqt7hVI +YF7VuQa3TsKDbfQkUlQAbgTY/x3+t+6rVO/Uafzj3MAvEGOxzksvllmt5SGfqVC hkDe5mN0nYtX6m/Ia0/gljp1uvFdNAkfmzivg5xes9i3xkpWF4UP3iFfqzvRlb3+ YkYodnwDOSfn3/88dFQiOueUlq/JuneKDoFur3j4BT+u0U+uDxm5kTZhZK/RPzAI HpF+jnIPQErkpCxexBIxgoRA03tXciJXWy8q94bqx8utck/oR2jEMKRSoS/5htBF hwh3XRxCJ/nWY0d3X8xxusyVsf6s+ifVPQHnlLYZHHcNo5UlFwffNvlmjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDIgJNRZ/Ie8o5dGRInkQ3Hy5P2LMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvTWlBazFGbjhoN3lqbDBaRWllUkRjZkxrX1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW8/UAwQA W9FoAwQDjzeQAwQCubccMA0GCSqGSIb3DQEBCwUAA4IBAQChh+XsxCrzb48EZ9T2 P0E5Jc3xIzNw/ULI9JVSoTkEnkoPrHKJtQThKa5j0r43M6JYQQ0kgj5BjPTZXUuZ Wf5UCne+kCSd+CW8EFp2VB2b/KgfOJDCGckMcDk7xippOJyYU3yGdhW7Jvd9tpQS kwF9Beim/YyZ6hVZapMMLSCJ02zXHYFYgqAXKMZuaBSp0Xg9PfjkU4SS+5JN0aph y38WmlYaWwb0oA0JZrD3DHKpaTtw7Jjgzzc4QTlkWrPig9OEo0gCKujPodhlOw5+ Y6EZRnZgumqwRlFpyA7jydFWRlueLWO54Y76EXp442q+N8RzwCWg2GIvOPPkM0LL LphT -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:27 2026 by rpki-client