This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mYTd35kRkIBF88OmyEhVri7c_EM.roa File: mYTd35kRkIBF88OmyEhVri7c_EM.roa (raw, json) Hash identifier: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0= Subject key identifier: 99:84:DD:DF:99:11:90:80:45:F3:C3:A6:C8:48:55:AE:2E:DC:FC:43 Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Certificate serial: 019B76EAA933131ED0E2438C9157F6A2D2E6 Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mYTd35kRkIBF88OmyEhVri7c_EM.roa Signing time: Thu 01 Jan 2026 00:17:28 +0000 ROA not before: Thu 01 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47187 IP address blocks: 185.29.144.0/24 maxlen: 24 185.29.145.0/24 maxlen: 24 185.29.146.0/24 maxlen: 24 185.29.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a9:33:13:1e:d0:e2:43:8c:91:57:f6:a2:d2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9984dddf9911908045f3c3a6c84855ae2edcfc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:f9:9e:86:3c:e8:02:be:ea:1e:fc:84:41: 04:da:8b:57:9f:61:bf:38:6d:6b:18:76:4c:03:0b: d5:2c:ba:35:d2:7c:e0:25:18:04:bd:6a:03:36:ac: 7f:aa:9e:ee:66:61:d4:65:36:9c:41:83:3d:ca:61: cd:57:97:26:ac:b4:70:f0:40:78:15:32:e3:e6:87: cf:eb:2f:6c:74:1b:8c:26:e0:e5:53:e2:44:8c:e3: ae:e6:98:42:84:b8:18:40:24:31:9b:c7:52:5a:c2: 62:f4:67:88:64:e4:28:76:52:50:62:64:bc:b9:e3: 5e:c4:5d:58:1c:2c:1e:bc:95:84:c0:b4:37:31:50: 94:a4:42:d1:b6:a4:6f:04:cf:f2:56:31:c5:08:2b: 5d:e5:48:06:bc:b9:bc:27:be:5a:54:91:f0:09:4b: 05:df:3a:8a:51:e1:65:f5:67:cc:ff:52:18:be:18: 3f:9d:ce:e2:29:fa:53:62:bb:61:d5:10:ab:b2:12: 4f:26:3e:f4:1a:23:60:ff:bc:b6:67:61:a4:ec:1d: 10:b3:9c:bf:98:6a:03:c7:d4:dc:47:9a:18:2d:2a: 84:5c:2e:7b:dd:69:d9:4a:df:a1:30:b6:ec:13:a4: 5a:a0:4c:e7:58:a3:80:99:c4:bf:ac:cc:8e:d6:e8: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:84:DD:DF:99:11:90:80:45:F3:C3:A6:C8:48:55:AE:2E:DC:FC:43 X509v3 Authority Key Identifier: keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mYTd35kRkIBF88OmyEhVri7c_EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.144.0/22 Signature Algorithm: sha256WithRSAEncryption 77:2d:5b:3e:6b:75:de:0b:4c:4f:1c:14:ea:19:fe:e1:13:ae: ed:ef:21:af:27:ed:f4:02:8f:19:39:d4:ff:e1:de:63:46:a8: db:0a:70:fb:64:62:74:b2:ab:04:f8:6f:96:a6:f3:88:de:18: 08:4f:90:39:19:0e:a9:07:31:92:23:2c:23:98:5d:2e:a4:37: dd:d0:89:34:07:54:19:63:a5:9f:2d:86:82:44:0e:59:b2:7a: 01:82:ad:aa:c8:9f:b8:59:fc:8c:e8:80:a5:b6:85:dc:4a:2f: 02:be:28:8c:a2:dc:c9:10:a1:bc:70:17:0c:ec:6f:e4:be:40: 74:75:5c:37:01:8b:7c:87:9f:a2:5a:49:16:0e:8e:c6:64:d5: 41:75:9f:f1:f4:5f:cc:81:67:86:28:81:9c:45:55:36:aa:97: 6a:de:19:48:e8:ce:f6:53:ea:ca:c1:24:d7:5c:05:46:94:c9: e5:29:f7:83:ee:af:bb:d7:4e:f2:d8:fa:3f:de:1f:0b:a8:70: 03:d4:6f:fd:48:fb:26:e8:82:19:99:de:9d:8a:e0:99:de:ed: 20:ce:66:cb:29:69:90:2d:6e:7b:8d:27:a6:8b:e7:20:e0:27: 05:51:79:78:1e:7d:79:50:56:43:db:5a:f0:19:df:3e:99:73: 79:8e:4e:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26qkzEx7Q4kOMkVf2otLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3 MjEwZTUwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTg0ZGRkZjk5MTE5MDgwNDVmM2MzYTZjODQ4NTVhZTJlZGNmYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5v5noY86AK+6h78hEEE2otXn2G/ OG1rGHZMAwvVLLo10nzgJRgEvWoDNqx/qp7uZmHUZTacQYM9ymHNV5cmrLRw8EB4 FTLj5ofP6y9sdBuMJuDlU+JEjOOu5phChLgYQCQxm8dSWsJi9GeIZOQodlJQYmS8 ueNexF1YHCwevJWEwLQ3MVCUpELRtqRvBM/yVjHFCCtd5UgGvLm8J75aVJHwCUsF 3zqKUeFl9WfM/1IYvhg/nc7iKfpTYrth1RCrshJPJj70GiNg/7y2Z2Gk7B0Qs5y/ mGoDx9TcR5oYLSqEXC573WnZSt+hMLbsE6RaoEznWKOAmcS/rMyO1ug9YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmE3d+ZEZCARfPDpshIVa4u3PxDMB8GA1UdIwQY MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt YWIyY2U5NGMxNDIzLzEvbVlUZDM1a1JrSUJGODhPbXlFaFZyaTdjX0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR2QMA0G CSqGSIb3DQEBCwUAA4IBAQB3LVs+a3XeC0xPHBTqGf7hE67t7yGvJ+30Ao8ZOdT/ 4d5jRqjbCnD7ZGJ0sqsE+G+WpvOI3hgIT5A5GQ6pBzGSIywjmF0upDfd0Ik0B1QZ Y6WfLYaCRA5ZsnoBgq2qyJ+4WfyM6ICltoXcSi8CviiMotzJEKG8cBcM7G/kvkB0 dVw3AYt8h5+iWkkWDo7GZNVBdZ/x9F/MgWeGKIGcRVU2qpdq3hlI6M72U+rKwSTX XAVGlMnlKfeD7q+7107y2Po/3h8LqHAD1G/9SPsm6IIZmd6diuCZ3u0gzmbLKWmQ LW57jSemi+cg4CcFUXl4Hn15UFZD21rwGd8+mXN5jk4b -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:34 2026 by rpki-client