This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa File: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (raw, json) Hash identifier: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50= Subject key identifier: 32:BE:9E:74:C5:4D:73:3A:E7:4C:3E:1F:3D:B1:E1:90:9F:ED:D0:12 Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Certificate serial: 019B7910028FFAB9D612CBC306E5275EF328 Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41699 IP address blocks: 195.170.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:02:8f:fa:b9:d6:12:cb:c3:06:e5:27:5e:f3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32be9e74c54d733ae74c3e1f3db1e1909fedd012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:dc:c7:01:37:09:89:0a:9f:14:85:5b:8e: 0f:5b:ed:90:20:4d:34:8f:9e:22:3a:ef:27:df:26: f8:6e:30:fe:bf:61:df:34:c8:70:c5:20:02:c5:c8: 07:72:74:98:f0:f3:b6:0f:c8:c2:38:87:55:c7:af: bf:f0:57:0f:38:ff:8c:4d:9c:76:4d:e6:d3:7e:b3: bb:df:f8:30:5e:ec:64:0a:c2:f1:26:41:58:b7:3b: 50:a2:45:16:3d:34:e3:da:d4:6b:f1:3b:7d:19:7c: f2:0f:87:6b:ad:fe:55:60:14:f5:7e:7a:2d:7d:a3: d8:ff:81:87:79:9c:e6:16:57:35:74:0f:cb:d0:29: 13:a4:62:dd:7d:df:8c:6b:1b:ec:9c:67:86:bb:22: 5f:1d:de:10:f1:b9:7b:3d:f5:c6:af:b0:14:05:d9: ef:e9:c5:12:2e:a7:09:d5:f8:4c:01:d2:85:0d:8d: 68:f8:bc:2f:f5:1b:99:52:31:d4:86:0a:7f:29:5d: a0:29:c3:11:9e:1e:fe:74:13:49:45:b3:9a:15:0a: 5a:af:3b:94:49:69:ac:86:38:1c:1f:33:82:ac:4c: 12:68:a3:c4:20:de:1a:80:5a:4b:73:67:7b:4a:e4: 27:10:95:6c:00:18:24:cf:5f:22:80:aa:49:f2:bf: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:9E:74:C5:4D:73:3A:E7:4C:3E:1F:3D:B1:E1:90:9F:ED:D0:12 X509v3 Authority Key Identifier: keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.185.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0d:2c:5c:3a:e7:e3:db:22:ed:fe:9f:04:db:88:b1:93:8b: 14:7f:a7:84:92:c6:6a:c1:b9:ca:d0:b6:65:ac:5c:e9:63:fb: 36:18:4f:d7:65:3f:56:32:68:b9:49:26:80:ca:4c:4f:64:21: db:25:9a:e6:d7:08:c0:ce:ff:6b:2c:cc:fa:e1:fd:2d:1d:4a: 2e:28:83:25:6c:ef:20:8f:c9:47:84:c5:d8:eb:bb:e2:89:2b: 3c:15:2c:dd:8f:e6:31:b4:a0:17:6c:a4:7b:88:7e:3f:d1:fe: c4:d1:89:c7:30:10:b7:5c:5b:ac:49:a4:75:cf:cd:c0:bc:60: 5d:45:d8:66:a2:99:2b:c9:c3:27:f6:72:a1:89:5b:d0:04:b1: 70:c7:14:51:1b:99:0d:86:a3:7a:f8:f4:29:e8:c1:5c:da:d4: 63:22:a2:10:3e:37:a1:62:70:a8:90:92:47:22:33:3c:cd:48: a3:01:b1:2f:f4:ca:47:f8:74:18:e4:73:38:0e:06:05:fe:b7: 1a:0c:59:a5:01:32:70:9e:c7:62:8f:46:09:2f:52:51:3b:72: 23:0d:1c:4d:91:35:8e:07:26:d5:2f:3c:08:e6:29:35:bf:78: 1d:c7:18:0e:75:da:a2:f7:99:e3:45:8c:34:08:a7:96:ec:42: fc:c7:69:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAKP+rnWEsvDBuUnXvMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2 OGNlOGIwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmJlOWU3NGM1NGQ3MzNhZTc0YzNlMWYzZGIxZTE5MDlmZWRkMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35fcxwE3CYkKnxSFW44PW+2QIE00 j54iOu8n3yb4bjD+v2HfNMhwxSACxcgHcnSY8PO2D8jCOIdVx6+/8FcPOP+MTZx2 TebTfrO73/gwXuxkCsLxJkFYtztQokUWPTTj2tRr8Tt9GXzyD4drrf5VYBT1fnot faPY/4GHeZzmFlc1dA/L0CkTpGLdfd+MaxvsnGeGuyJfHd4Q8bl7PfXGr7AUBdnv 6cUSLqcJ1fhMAdKFDY1o+Lwv9RuZUjHUhgp/KV2gKcMRnh7+dBNJRbOaFQparzuU SWmshjgcHzOCrEwSaKPEIN4agFpLc2d7SuQnEJVsABgkz18igKpJ8r9+9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDK+nnTFTXM650w+Hz2x4ZCf7dASMB8GA1UdIwQY MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt MDI5NTNjZTYzODQzLzEvTXI2ZWRNVk5jenJuVEQ0ZlBiSGhrSl90MEJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6q5MA0G CSqGSIb3DQEBCwUAA4IBAQCODSxcOufj2yLt/p8E24ixk4sUf6eEksZqwbnK0LZl rFzpY/s2GE/XZT9WMmi5SSaAykxPZCHbJZrm1wjAzv9rLMz64f0tHUouKIMlbO8g j8lHhMXY67viiSs8FSzdj+YxtKAXbKR7iH4/0f7E0YnHMBC3XFusSaR1z83AvGBd RdhmopkrycMn9nKhiVvQBLFwxxRRG5kNhqN6+PQp6MFc2tRjIqIQPjehYnCokJJH IjM8zUijAbEv9MpH+HQY5HM4DgYF/rcaDFmlATJwnsdij0YJL1JRO3IjDRxNkTWO BybVLzwI5ik1v3gdxxgOddqi95njRYw0CKeW7EL8x2lk -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:13 2026 by rpki-client