This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/mFyMx5ZIFOiSbuI1MNn2-mZXld8.roa File: mFyMx5ZIFOiSbuI1MNn2-mZXld8.roa (raw, json) Hash identifier: AzwHXOKxziHRT6MyBbYL5hwDOFonBhr6YG4FbSU0MzI= Subject key identifier: 98:5C:8C:C7:96:48:14:E8:92:6E:E2:35:30:D9:F6:FA:66:57:95:DF Certificate issuer: /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90 Certificate serial: 019B7834A255D9282BF8F6DB6AC2ECCBE3D4 Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/mFyMx5ZIFOiSbuI1MNn2-mZXld8.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.237.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a2:55:d9:28:2b:f8:f6:db:6a:c2:ec:cb:e3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=985c8cc7964814e8926ee23530d9f6fa665795df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:a7:bf:be:ec:02:f0:b1:23:6d:e8:71:82: 55:bf:90:3a:2c:8b:61:5e:86:2c:08:96:c9:a1:66: 32:54:e2:e0:6f:c8:c6:07:fc:d6:37:d0:44:59:fa: 19:9b:73:ba:af:db:dc:df:ae:3c:ba:08:e3:59:c1: 23:32:a6:38:89:17:1b:bb:fd:e8:54:4e:d4:46:14: 02:e6:65:60:f0:e4:3f:7c:4d:a3:5e:d6:e2:59:df: d9:7c:d3:c8:21:ed:4e:a6:95:70:24:0c:f4:0c:8a: 3f:a4:29:94:e3:6a:d9:e4:b0:81:ec:26:62:e1:39: a7:82:60:b4:f0:38:b0:c8:06:87:f0:8d:12:23:07: ce:e6:83:5b:c8:34:c3:bf:bc:88:3c:ae:a5:43:a0: 1b:e0:d4:b8:37:c4:c6:34:3e:37:4a:a5:57:68:20: bb:f8:7b:68:01:a6:9e:a2:cd:31:91:6c:08:8a:16: 3b:da:5c:74:4a:11:f4:f7:90:74:a1:af:03:01:36: 2f:31:bb:49:be:4c:4a:df:e1:32:66:a8:10:3d:29: cd:b5:4e:bf:b9:e4:82:27:83:7a:1c:32:94:ca:07: a9:f3:56:51:a1:95:4e:1e:93:21:fb:ea:db:ed:8a: 6f:d7:33:74:be:3b:46:a8:80:89:37:a1:68:91:b8: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:8C:C7:96:48:14:E8:92:6E:E2:35:30:D9:F6:FA:66:57:95:DF X509v3 Authority Key Identifier: keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/mFyMx5ZIFOiSbuI1MNn2-mZXld8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.95.0/24 Signature Algorithm: sha256WithRSAEncryption 08:c2:44:a4:d8:a7:b4:96:5e:22:db:18:b3:24:a9:f2:1a:27: 64:97:1f:49:43:25:64:7a:5a:b7:4b:ae:12:3c:de:a9:7f:ad: d9:0b:ad:20:a6:7c:61:83:a6:de:37:ec:35:b7:2f:97:b9:a4: 50:52:8d:ca:c0:8b:65:ff:9f:f0:08:6e:05:3d:b3:5c:5d:a6: d2:0e:eb:0d:d9:11:7d:0b:32:b6:07:46:9d:15:7f:51:1d:61: 0a:84:e4:d9:81:8e:ec:ab:88:7b:46:c8:5f:d9:8d:d1:05:00: c2:6a:5f:68:11:fe:85:1e:54:e5:02:a5:3d:68:44:4a:a4:3e: 23:2b:bb:5b:03:bf:93:48:cd:5a:7d:6d:55:75:e2:81:b0:ac: ee:ce:c8:28:e3:48:11:54:8e:9a:00:1d:fa:80:b7:f4:d9:3d: ff:d1:af:a7:73:1f:8b:1f:9c:4f:d3:9f:14:76:c7:c7:63:1e: fd:76:70:fe:bd:87:b4:a0:9a:20:a9:1d:e2:ed:53:7c:34:16: 23:99:1f:8b:16:04:f9:f6:9b:bd:9f:e7:e2:15:b4:af:60:f4: 5b:54:d3:4b:2d:62:95:05:b4:17:69:82:16:74:34:77:4b:bb: e3:09:6b:3d:9c:78:21:a1:68:31:95:5d:a2:fb:c5:be:2d:81: 46:af:fa:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKJV2Sgr+PbbasLsy+PUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODNmM2YxOTU5NzRmMGU5MDA4NGUwZTMyN2ZmNWI2Njdl NmZkOTAwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODVjOGNjNzk2NDgxNGU4OTI2ZWUyMzUzMGQ5ZjZmYTY2NTc5NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvqnv77sAvCxI23ocYJVv5A6LIth XoYsCJbJoWYyVOLgb8jGB/zWN9BEWfoZm3O6r9vc3648ugjjWcEjMqY4iRcbu/3o VE7URhQC5mVg8OQ/fE2jXtbiWd/ZfNPIIe1OppVwJAz0DIo/pCmU42rZ5LCB7CZi 4TmngmC08DiwyAaH8I0SIwfO5oNbyDTDv7yIPK6lQ6Ab4NS4N8TGND43SqVXaCC7 +HtoAaaeos0xkWwIihY72lx0ShH095B0oa8DATYvMbtJvkxK3+EyZqgQPSnNtU6/ ueSCJ4N6HDKUygep81ZRoZVOHpMh++rb7Ypv1zN0vjtGqICJN6FokbgSzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhcjMeWSBTokm7iNTDZ9vpmV5XfMB8GA1UdIwQY MBaAFBCD8/GVl08OkAhODjJ/9bZn5v2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUt M2IxYzU1ZTNkZTk3LzEvbUZ5TXg1WklGT2lTYnVJMU1ObjItbVpYbGQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUtM2IxYzU1ZTNkZTk3 LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1fMA0G CSqGSIb3DQEBCwUAA4IBAQAIwkSk2Ke0ll4i2xizJKnyGidklx9JQyVkelq3S64S PN6pf63ZC60gpnxhg6beN+w1ty+XuaRQUo3KwItl/5/wCG4FPbNcXabSDusN2RF9 CzK2B0adFX9RHWEKhOTZgY7sq4h7Rshf2Y3RBQDCal9oEf6FHlTlAqU9aERKpD4j K7tbA7+TSM1afW1VdeKBsKzuzsgo40gRVI6aAB36gLf02T3/0a+ncx+LH5xP058U dsfHYx79dnD+vYe0oJogqR3i7VN8NBYjmR+LFgT59pu9n+fiFbSvYPRbVNNLLWKV BbQXaYIWdDR3S7vjCWs9nHghoWgxlV2i+8W+LYFGr/qy -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:56 2026 by rpki-client