This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mdl3pf4oz74vkVo5AePjnZp4N3g.roa File: Mdl3pf4oz74vkVo5AePjnZp4N3g.roa (raw, json) Hash identifier: W08wgmCKx4jKRQbPhV/9OXt8xwKL1OzR+BCa9WLaS7k= Subject key identifier: 31:D9:77:A5:FE:28:CF:BE:2F:91:5A:39:01:E3:E3:9D:9A:78:37:78 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149E1CA46189259927321C8E639675 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mdl3pf4oz74vkVo5AePjnZp4N3g.roa Signing time: Fri 02 Jan 2026 14:20:16 +0000 ROA not before: Fri 02 Jan 2026 14:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5580 IP address blocks: 185.162.112.0/22 maxlen: 22 195.143.68.0/22 maxlen: 22 212.56.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9e:1c:a4:61:89:25:99:27:32:1c:8e:63:96:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d977a5fe28cfbe2f915a3901e3e39d9a783778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:83:30:c3:23:c8:3c:a1:0b:42:55:6f:c6: e4:fd:09:38:4c:63:e6:44:4e:0c:8d:f5:0d:ac:75: 6e:c4:b4:37:fc:6a:7e:77:b3:58:99:63:d9:b9:96: 81:92:3a:78:b8:a5:ab:71:27:4f:23:89:1f:03:e0: 20:a8:08:d2:00:f9:57:9c:d7:8f:94:99:eb:e6:8d: e6:e4:e9:15:19:41:4e:2d:e1:35:5e:9f:59:8f:c7: 51:c6:15:86:77:06:9e:f7:ed:20:9d:01:f2:9d:d0: 88:ee:01:93:a3:f8:fc:0d:cb:af:41:7b:f9:41:70: f4:82:d5:5c:ba:b4:a2:47:60:8c:c4:5b:a0:d9:9b: 3f:d5:fe:af:7a:f8:1c:5b:a5:91:39:07:c2:84:13: e5:04:6e:fb:55:ce:3d:5c:e8:e2:be:7b:b4:25:43: a4:0d:6a:80:0a:1b:80:2a:83:14:cf:7c:90:ce:87: 70:f2:23:9e:20:da:f2:e4:80:30:7f:7e:cf:fa:a4: b4:61:25:64:2c:4e:69:f0:28:d7:da:47:6d:35:15: 55:62:2c:ab:f3:1c:2a:62:c0:12:2a:72:4d:89:02: 5d:99:06:34:6c:cb:83:c1:b7:83:5e:26:27:dd:6f: c3:09:76:b0:04:52:f9:9f:00:e9:13:a0:d9:3e:22: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:77:A5:FE:28:CF:BE:2F:91:5A:39:01:E3:E3:9D:9A:78:37:78 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mdl3pf4oz74vkVo5AePjnZp4N3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.112.0/22 195.143.68.0/22 212.56.20.0/22 Signature Algorithm: sha256WithRSAEncryption 88:b6:6f:bb:a0:71:ac:e5:4d:d9:3c:08:6e:97:a2:de:ab:ca: aa:1d:9a:26:e7:ad:4a:f8:6d:97:fd:e8:fe:7d:ab:82:ca:f2: b6:e2:79:c7:7c:67:1d:a6:0c:b6:dd:80:90:6e:4d:5f:5c:fb: 44:dd:f1:bd:7c:2b:27:8e:ca:28:67:ec:1b:bc:4e:83:e3:b4: b2:aa:fd:20:97:db:d4:5f:27:26:c0:a7:59:76:25:1c:ce:c3: 29:00:cb:ab:6a:7b:ce:f1:a2:80:06:4e:b5:6d:bb:cd:05:b1: 83:60:87:41:ea:7c:2e:d6:68:e7:ee:cd:4a:92:f6:40:66:b8: 1e:a9:cf:a9:fa:04:be:54:59:c9:de:d7:c4:60:a7:74:98:4f: 7b:af:f3:59:70:f7:52:2a:ee:c1:05:66:fd:f5:04:f7:e7:39: 98:f1:fa:20:c5:7c:a5:ce:50:78:e8:94:cb:41:9c:45:aa:df: ff:94:d9:e8:fe:01:cd:16:45:d8:18:56:96:2a:4e:03:cd:ff: e1:6c:2f:04:f5:49:70:f0:98:cc:87:61:13:53:0e:a2:ed:84: d9:5e:6b:d2:2d:59:66:97:9c:ac:fc:fa:e5:64:8a:22:a7:1a: b1:81:a9:5e:a2:f3:e2:f9:bf:64:11:d3:d5:79:26:ba:40:05: 05:b3:44:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FJ4cpGGJJZknMhyOY5Z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ5NzdhNWZlMjhjZmJlMmY5MTVhMzkwMWUzZTM5ZDlhNzgzNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroKDMMMjyDyhC0JVb8bk/Qk4TGPm RE4MjfUNrHVuxLQ3/Gp+d7NYmWPZuZaBkjp4uKWrcSdPI4kfA+AgqAjSAPlXnNeP lJnr5o3m5OkVGUFOLeE1Xp9Zj8dRxhWGdwae9+0gnQHyndCI7gGTo/j8DcuvQXv5 QXD0gtVcurSiR2CMxFug2Zs/1f6vevgcW6WROQfChBPlBG77Vc49XOjivnu0JUOk DWqAChuAKoMUz3yQzodw8iOeINry5IAwf37P+qS0YSVkLE5p8CjX2kdtNRVVYiyr 8xwqYsASKnJNiQJdmQY0bMuDwbeDXiYn3W/DCXawBFL5nwDpE6DZPiIvGwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDHZd6X+KM++L5FaOQHj452aeDd4MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvTWRsM3BmNG96NzR2a1ZvNUFlUGpuWnA0TjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuaJwAwQC w49EAwQC1DgUMA0GCSqGSIb3DQEBCwUAA4IBAQCItm+7oHGs5U3ZPAhul6Leq8qq HZom561K+G2X/ej+fauCyvK24nnHfGcdpgy23YCQbk1fXPtE3fG9fCsnjsooZ+wb vE6D47Syqv0gl9vUXycmwKdZdiUczsMpAMuranvO8aKABk61bbvNBbGDYIdB6nwu 1mjn7s1KkvZAZrgeqc+p+gS+VFnJ3tfEYKd0mE97r/NZcPdSKu7BBWb99QT35zmY 8fogxXylzlB46JTLQZxFqt//lNno/gHNFkXYGFaWKk4Dzf/hbC8E9Ulw8JjMh2ET Uw6i7YTZXmvSLVlml5ys/PrlZIoipxqxgaleovPi+b9kEdPVeSa6QAUFs0Ty -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:30 2026 by rpki-client