This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/mDKfE9L_xC5gURXUxNvBxSesFUw.roa File: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (raw, json) Hash identifier: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U= Subject key identifier: 98:32:9F:13:D2:FF:C4:2E:60:51:15:D4:C4:DB:C1:C5:27:AC:15:4C Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Certificate serial: 019B79ED4E754C4222A8B6AB7380BFD294EE Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/mDKfE9L_xC5gURXUxNvBxSesFUw.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39419 IP address blocks: 185.237.24.0/22 maxlen: 24 2a0c:180::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:75:4c:42:22:a8:b6:ab:73:80:bf:d2:94:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98329f13d2ffc42e605115d4c4dbc1c527ac154c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:9c:39:22:7e:c5:e3:69:84:53:e9:67:d1: 9d:56:5b:d3:c7:81:ca:a4:c9:ec:17:2c:c0:a4:9f: fc:a6:43:82:66:2f:2a:81:66:10:f8:61:8a:b6:24: 3d:57:e6:c0:bf:61:94:39:cb:11:45:e6:76:fd:c6: 7c:79:48:65:06:7c:1b:47:92:20:10:97:01:19:13: 1f:02:d6:07:b5:95:b9:23:75:f6:68:70:12:ce:cb: b2:85:7f:cd:e9:3f:1b:bc:5c:64:27:c4:b0:f7:66: 76:ee:08:56:2a:16:dc:82:89:85:d9:a9:f8:fe:9c: 1c:b7:ab:cc:94:95:17:ef:f9:c3:d3:03:40:eb:36: 77:7b:02:42:6d:16:6e:d1:e6:fb:4c:ca:3f:11:c1: f2:23:e7:b0:77:17:56:7b:d2:32:c1:b3:dc:a8:45: 81:03:ef:4d:78:db:31:80:60:15:00:02:85:82:72: cf:7a:db:e1:d7:e6:5a:46:f7:53:f5:03:64:35:d6: 06:d7:ea:02:41:35:82:40:67:69:1e:8c:44:3f:4d: bd:57:75:68:18:d6:86:ec:51:2f:d5:6e:a9:36:43: 44:7d:c9:60:76:dc:09:a8:16:e4:10:f8:63:a6:a5: f1:ba:69:bf:56:bf:9b:87:10:f7:de:b8:15:2c:5a: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:9F:13:D2:FF:C4:2E:60:51:15:D4:C4:DB:C1:C5:27:AC:15:4C X509v3 Authority Key Identifier: keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/mDKfE9L_xC5gURXUxNvBxSesFUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.24.0/22 IPv6: 2a0c:180::/29 Signature Algorithm: sha256WithRSAEncryption 93:86:e3:fb:9e:ad:6f:0b:37:08:15:66:f0:63:c0:12:81:5b: 39:08:59:26:9e:bb:af:3c:2e:ae:15:59:27:76:02:c0:90:a3: 51:dd:34:70:91:8d:ab:76:28:ba:df:64:26:d4:a1:14:31:6e: 2e:d2:57:7d:64:0a:19:d9:53:8d:80:5d:ba:bf:d7:e2:49:b5: 0e:14:c1:6a:f4:4c:26:90:cb:10:70:ad:a6:fa:77:a3:b3:ea: c1:73:b3:71:c4:23:d1:4d:b4:d2:72:2b:9a:59:5c:06:bb:e0: fc:00:41:d6:93:e6:8d:bb:64:35:3c:a4:8d:e2:08:fb:53:67: bf:f9:de:01:a8:a5:d0:63:89:40:f3:08:de:d5:59:16:80:6d: 01:ec:ea:a8:8d:ba:d5:48:49:08:61:86:eb:cb:d1:95:33:5e: 49:da:9f:2f:08:33:57:90:6f:b8:0b:1f:cb:f9:ac:e9:0b:9e: f8:99:14:8d:74:33:80:93:ce:36:4a:39:bf:1f:a6:8f:aa:89: b4:a7:ec:63:cf:f1:2d:24:11:d8:20:03:bd:8e:56:dd:e7:f2: e1:25:00:e5:66:c2:7d:fe:7b:3f:5b:d8:64:54:f7:f2:51:16: 03:13:ac:e4:1d:10:63:13:e7:e0:ad:26:e8:31:75:f3:ab:88: 27:db:ad:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57U51TEIiqLarc4C/0pTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl MmY2YTUwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODMyOWYxM2QyZmZjNDJlNjA1MTE1ZDRjNGRiYzFjNTI3YWMxNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAacOSJ+xeNphFPpZ9GdVlvTx4HK pMnsFyzApJ/8pkOCZi8qgWYQ+GGKtiQ9V+bAv2GUOcsRReZ2/cZ8eUhlBnwbR5Ig EJcBGRMfAtYHtZW5I3X2aHASzsuyhX/N6T8bvFxkJ8Sw92Z27ghWKhbcgomF2an4 /pwct6vMlJUX7/nD0wNA6zZ3ewJCbRZu0eb7TMo/EcHyI+ewdxdWe9IywbPcqEWB A+9NeNsxgGAVAAKFgnLPetvh1+ZaRvdT9QNkNdYG1+oCQTWCQGdpHoxEP029V3Vo GNaG7FEv1W6pNkNEfclgdtwJqBbkEPhjpqXxumm/Vr+bhxD33rgVLFqjxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJgynxPS/8QuYFEV1MTbwcUnrBVMMB8GA1UdIwQY MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt MTE2MjdkNzQ2OWFiLzEvbURLZkU5TF94QzVnVVJYVXhOdkJ4U2VzRlV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue0YMA0E AgACMAcDBQMqDAGAMA0GCSqGSIb3DQEBCwUAA4IBAQCThuP7nq1vCzcIFWbwY8AS gVs5CFkmnruvPC6uFVkndgLAkKNR3TRwkY2rdii632Qm1KEUMW4u0ld9ZAoZ2VON gF26v9fiSbUOFMFq9EwmkMsQcK2m+nejs+rBc7NxxCPRTbTSciuaWVwGu+D8AEHW k+aNu2Q1PKSN4gj7U2e/+d4BqKXQY4lA8wje1VkWgG0B7OqojbrVSEkIYYbry9GV M15J2p8vCDNXkG+4Cx/L+azpC574mRSNdDOAk842Sjm/H6aPqom0p+xjz/EtJBHY IAO9jlbd5/LhJQDlZsJ9/ns/W9hkVPfyURYDE6zkHRBjE+fgrSboMXXzq4gn261K -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:39 2026 by rpki-client