This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/cMSq_NcYXBjORlEeP54TeKaU-zc.roa File: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (raw, json) Hash identifier: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8= Subject key identifier: 70:C4:AA:FC:D7:18:5C:18:CE:46:51:1E:3F:9E:13:78:A6:94:FB:37 Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Certificate serial: 019B7F81FA1DDE45094380846F733249ECCC Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/cMSq_NcYXBjORlEeP54TeKaU-zc.roa Signing time: Fri 02 Jan 2026 16:19:43 +0000 ROA not before: Fri 02 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 91.228.132.0/23 maxlen: 24 91.229.46.0/23 maxlen: 24 185.80.198.0/23 maxlen: 24 185.80.199.0/24 maxlen: 24 185.147.176.0/22 maxlen: 24 188.209.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fa:1d:de:45:09:43:80:84:6f:73:32:49:ec:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Validity Not Before: Jan 2 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c4aafcd7185c18ce46511e3f9e1378a694fb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:39:ee:5b:35:fa:3f:8c:a9:b9:d1:28:d1: 21:a8:d2:89:95:3f:b5:48:57:96:36:2a:47:b8:2a: 3a:2c:9f:63:82:ce:14:4b:20:a1:e6:82:1e:da:8f: 54:d8:3a:dc:af:26:5b:96:7f:e3:03:c8:fc:c0:91: 20:82:f3:52:64:ba:be:3d:f3:0b:dc:08:11:2d:7a: 02:53:d3:8c:08:30:06:bb:c5:f6:f5:0b:0f:84:28: c2:e3:6a:ac:87:92:de:38:d6:cf:05:7e:ba:20:c8: 46:ba:83:be:50:e1:70:8d:c7:ee:01:34:82:b8:a5: 7f:60:67:72:33:e1:ae:f7:28:4e:c1:df:a6:34:25: ad:58:dc:12:13:2c:5b:9b:e0:f9:87:5c:64:4c:ed: 32:48:4d:d7:35:99:cf:37:5a:d5:5d:65:c1:9b:19: be:6d:99:90:7e:cf:a4:73:0a:b0:4d:39:e1:f0:f3: 60:80:49:a0:8d:89:82:2e:b1:a8:ba:f4:5b:73:97: a0:34:4a:03:fb:3d:83:69:a2:f4:9f:fa:4d:61:89: a3:fc:dd:04:7f:6e:d7:11:78:6c:ff:d7:e8:1c:dc: d9:fa:fb:1e:55:54:71:0e:42:2c:ed:f1:45:e5:da: b7:5b:89:a5:60:e3:a1:54:bd:65:1e:84:43:11:11: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:AA:FC:D7:18:5C:18:CE:46:51:1E:3F:9E:13:78:A6:94:FB:37 X509v3 Authority Key Identifier: keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/cMSq_NcYXBjORlEeP54TeKaU-zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.132.0/23 91.229.46.0/23 185.80.198.0/23 185.147.176.0/22 188.209.116.0/22 Signature Algorithm: sha256WithRSAEncryption 14:e4:4c:74:f4:91:18:d1:1e:8f:a2:0b:21:03:fb:42:e2:37: 4f:f1:32:74:ce:66:5a:96:b2:2b:00:a9:ff:ac:fe:f4:a2:53: ec:35:cc:a6:68:7f:c9:36:68:07:86:47:7c:eb:8b:19:e3:f5: 67:51:4d:68:a6:fa:26:b5:13:7a:79:fc:6d:ec:f2:54:0f:71: 22:83:ac:81:46:e5:90:39:f9:52:d0:98:e1:8c:b1:2b:b4:6b: 54:ff:cd:35:9d:ea:f8:35:dd:18:43:93:a8:a5:07:31:93:e6: d3:7b:4d:11:e6:af:25:cd:8d:19:16:54:a0:6c:71:2b:4c:7c: 68:84:01:c2:7f:c0:75:78:46:f5:6e:76:2d:3d:52:b1:37:0a: d6:6f:a1:0b:50:8d:11:63:26:72:40:58:31:76:67:93:d7:44: 71:fc:ee:96:13:9b:7d:54:d0:16:22:45:45:54:5f:bd:c6:73: 04:d3:f8:1b:ff:c5:ac:2a:31:77:21:ae:3d:02:33:fe:2a:2c: 73:b4:17:42:e3:63:9f:66:06:99:7d:36:f7:ba:b8:6d:f4:c3: 86:23:4e:ca:a4:bb:af:89:6c:8b:0a:15:ee:9c:1f:30:f0:a7: cc:32:80:ac:82:4e:b0:7c:d9:cc:84:55:8b:c6:8d:43:14:90: a8:3d:2e:88 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/gfod3kUJQ4CEb3MySezMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3 M2JmOTUwHhcNMjYwMTAyMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM0YWFmY2Q3MTg1YzE4Y2U0NjUxMWUzZjllMTM3OGE2OTRmYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYc57ls1+j+MqbnRKNEhqNKJlT+1 SFeWNipHuCo6LJ9jgs4USyCh5oIe2o9U2DrcryZbln/jA8j8wJEggvNSZLq+PfML 3AgRLXoCU9OMCDAGu8X29QsPhCjC42qsh5LeONbPBX66IMhGuoO+UOFwjcfuATSC uKV/YGdyM+Gu9yhOwd+mNCWtWNwSEyxbm+D5h1xkTO0ySE3XNZnPN1rVXWXBmxm+ bZmQfs+kcwqwTTnh8PNggEmgjYmCLrGouvRbc5egNEoD+z2DaaL0n/pNYYmj/N0E f27XEXhs/9foHNzZ+vseVVRxDkIs7fFF5dq3W4mlYOOhVL1lHoRDERHN1QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHDEqvzXGFwYzkZRHj+eE3imlPs3MB8GA1UdIwQY MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt ZjU2N2MzZTlmNWZmLzEvY01TcV9OY1lYQmpPUmxFZVA1NFRlS2FVLXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBW+SEAwQB W+UuAwQBuVDGAwQCuZOwAwQCvNF0MA0GCSqGSIb3DQEBCwUAA4IBAQAU5Ex09JEY 0R6PogshA/tC4jdP8TJ0zmZalrIrAKn/rP70olPsNcymaH/JNmgHhkd864sZ4/Vn UU1opvomtRN6efxt7PJUD3Eig6yBRuWQOflS0JjhjLErtGtU/801ner4Nd0YQ5Oo pQcxk+bTe00R5q8lzY0ZFlSgbHErTHxohAHCf8B1eEb1bnYtPVKxNwrWb6ELUI0R YyZyQFgxdmeT10Rx/O6WE5t9VNAWIkVFVF+9xnME0/gb/8WsKjF3Ia49AjP+Kixz tBdC42OfZgaZfTb3urht9MOGI07KpLuviWyLChXunB8w8KfMMoCsgk6wfNnMhFWL xo1DFJCoPS6I -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:45 2026 by rpki-client