This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa File: 1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa (raw, json) Hash identifier: dCtfEERTL+DVPDzOeI+W+YlER3CfocSmb5i2ct7B3hg= Subject key identifier: FB:E3:30:50:30:69:27:E4:3E:A8:AD:0F:69:06:C9:BE:24:CE:9E:76 Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019ADF1D1E8167FABDF30C62AA50B8BB08E6 Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa Signing time: Tue 02 Dec 2025 12:50:18 +0000 ROA not before: Tue 02 Dec 2025 12:50:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206406 IP address blocks: 185.187.92.0/24 maxlen: 24 185.187.93.0/24 maxlen: 24 185.187.94.0/24 maxlen: 24 185.187.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1d:1e:81:67:fa:bd:f3:0c:62:aa:50:b8:bb:08:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Dec 2 12:50:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbe33050306927e43ea8ad0f6906c9be24ce9e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:97:49:cf:89:3b:97:c9:87:a7:d8:20:5f: 02:81:cc:f5:c9:b2:c3:ac:cb:ee:1f:74:e1:8e:01: e1:e4:66:82:c6:14:be:5b:22:31:7a:23:6c:f3:ac: d7:7b:1b:c4:0b:17:a1:82:4f:58:dd:5f:2f:38:10: a3:2b:b9:04:11:4e:e9:ef:85:fb:e1:77:6f:e3:07: 41:a9:d4:6b:f0:1f:23:10:6f:17:15:1a:f4:d7:f4: 36:7f:7a:af:d4:82:7c:48:a6:38:4c:ea:99:a1:30: 3b:00:24:81:5d:d5:3a:de:be:fd:d3:9d:b7:12:6e: 58:c7:d1:d6:34:96:43:0f:6d:3c:e3:57:3d:41:d5: 92:fb:a4:0d:2a:ef:62:e5:2a:a2:af:8b:99:ad:03: 70:59:ff:58:23:ba:15:7e:3d:35:5a:b0:91:a7:ab: f9:92:70:2b:13:e5:89:ee:2e:1e:f8:3d:39:15:f8: 40:03:bc:f4:fa:09:ab:d6:7c:3f:c3:e5:9f:c9:79: aa:b6:b2:75:0f:b2:3e:84:33:36:d0:c0:93:5c:60: d0:95:49:b8:5d:b5:61:be:0c:83:84:76:b5:42:cc: 5d:81:b3:f3:23:bf:9b:ae:d3:fb:6a:5c:44:0d:a2: 0a:4b:1e:17:f0:95:ed:26:b4:9b:6a:08:25:7d:93: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E3:30:50:30:69:27:E4:3E:A8:AD:0F:69:06:C9:BE:24:CE:9E:76 X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.92.0/22 Signature Algorithm: sha256WithRSAEncryption 44:06:48:68:31:86:55:bc:65:00:8d:a5:b0:4d:98:06:fc:b9: d6:44:2a:37:16:6e:33:ea:93:02:be:66:ac:98:7f:4e:cd:c1: bf:7e:18:ed:ce:a3:b4:a2:06:af:ec:f8:f1:0f:8a:27:b5:41: 64:8e:c4:69:ce:ee:97:f7:18:5c:96:6e:4f:96:4e:00:74:e6: e6:b2:43:0d:12:00:e4:4c:a4:1d:92:9c:20:af:a2:0d:f7:3d: fc:de:54:bb:d5:4f:90:ed:c3:22:1b:13:71:ba:ae:7c:a6:b3: b1:87:88:02:8a:1e:62:88:67:fc:4d:33:de:a8:c1:8b:06:be: 5c:ba:57:97:87:7b:b1:97:63:01:0b:0a:09:e0:aa:92:e1:f0: c0:82:5c:f2:0d:a9:44:19:c6:c6:11:a2:b0:f1:57:04:57:34: 0f:44:2b:38:29:60:10:03:16:e9:19:c4:74:75:97:45:c0:8d: 67:09:52:35:73:d0:db:dd:26:03:3a:5e:0b:95:46:f0:6b:33: a7:ad:1c:8a:33:80:93:48:eb:8f:78:7e:28:b3:09:01:04:32: 72:de:64:0f:63:f4:70:9d:eb:d4:2b:e4:f7:7c:be:9f:6e:47: 9a:7e:92:65:93:84:80:7d:29:82:3e:dd:c0:f0:8e:bd:fe:23: 32:63:c5:68 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrfHR6BZ/q98wxiqlC4uwjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjUxMjAyMTI1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmUzMzA1MDMwNjkyN2U0M2VhOGFkMGY2OTA2YzliZTI0Y2U5ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RuXSc+JO5fJh6fYIF8Cgcz1ybLD rMvuH3ThjgHh5GaCxhS+WyIxeiNs86zXexvECxehgk9Y3V8vOBCjK7kEEU7p74X7 4Xdv4wdBqdRr8B8jEG8XFRr01/Q2f3qv1IJ8SKY4TOqZoTA7ACSBXdU63r790523 Em5Yx9HWNJZDD20841c9QdWS+6QNKu9i5Sqir4uZrQNwWf9YI7oVfj01WrCRp6v5 knArE+WJ7i4e+D05FfhAA7z0+gmr1nw/w+WfyXmqtrJ1D7I+hDM20MCTXGDQlUm4 XbVhvgyDhHa1QsxdgbPzI7+brtP7alxEDaIKSx4X8JXtJrSbagglfZMNNQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvjMFAwaSfkPqitD2kGyb4kzp52MB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvMS0tTXdVREJwSi1RLXFLMFBhUWJKdmlUT25uWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjMvMGMzN2MzLTk5OTAtNDU5Ni05OWU5LWRkNWZmZDUzMTU3 MS8xL25qU3hoaWNjeTRuRjVZc3c1d3ZYUVFuTUtFby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm7XDAN BgkqhkiG9w0BAQsFAAOCAQEARAZIaDGGVbxlAI2lsE2YBvy51kQqNxZuM+qTAr5m rJh/Ts3Bv34Y7c6jtKIGr+z48Q+KJ7VBZI7Eac7ul/cYXJZuT5ZOAHTm5rJDDRIA 5EykHZKcIK+iDfc9/N5Uu9VPkO3DIhsTcbqufKazsYeIAooeYohn/E0z3qjBiwa+ XLpXl4d7sZdjAQsKCeCqkuHwwIJc8g2pRBnGxhGisPFXBFc0D0QrOClgEAMW6RnE dHWXRcCNZwlSNXPQ290mAzpeC5VG8Gszp60cijOAk0jrj3h+KLMJAQQyct5kD2P0 cJ3r1Cvk93y+n25Hmn6SZZOEgH0pgj7dwPCOvf4jMmPFaA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:16 2025 by rpki-client