This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa File: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (raw, json) Hash identifier: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY= Subject key identifier: 98:31:5C:EE:98:FB:06:8B:DC:FB:40:64:FF:78:1F:FD:83:D6:48:8F Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35 Certificate serial: 019B7D5C96E464305CC06421FEBCF0CAF87D Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58744 IP address blocks: 185.252.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:96:e4:64:30:5c:c0:64:21:fe:bc:f0:ca:f8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98315cee98fb068bdcfb4064ff781ffd83d6488f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:48:9b:18:61:07:2d:3d:a6:06:ac:90:41: ec:a3:f1:bc:d1:59:74:4a:7f:05:4e:5b:9f:c3:46: 0a:11:34:69:55:f7:67:e4:68:f5:31:a7:a2:09:ce: a0:ab:ca:82:73:37:23:39:ba:cc:d6:90:9f:11:75: 47:22:f5:67:35:3b:f3:97:b1:f9:54:52:a2:cf:44: 15:1f:99:b5:29:05:d2:9d:1a:97:c4:36:fb:99:fd: 52:33:04:dc:d9:53:b6:0b:25:6f:60:e5:1e:4c:d4: 81:11:87:e0:a5:91:5a:8f:cf:3e:08:b5:30:03:ad: 93:79:d0:eb:ee:ab:83:69:f4:3c:56:f6:b6:e3:81: 01:ac:24:cd:ac:16:94:48:b2:d9:65:7b:c3:8d:ce: 9e:f9:24:7d:89:04:a3:c3:68:db:ce:81:e8:95:29: 65:9f:32:c1:d9:a6:9c:be:03:3d:64:f9:8d:a5:73: 6d:ba:a3:09:ef:25:1f:e6:f9:07:1e:b6:f0:5b:02: 03:b8:f6:74:f8:65:c4:ce:88:12:f0:bc:67:e8:52: a7:40:75:ce:40:a2:be:5e:82:70:8d:6e:26:5e:9b: ba:40:40:02:7c:3e:58:41:ca:40:3a:6d:81:07:21: 07:fc:dd:0a:f5:cb:45:7c:c8:c4:a4:d7:d5:c6:1a: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:31:5C:EE:98:FB:06:8B:DC:FB:40:64:FF:78:1F:FD:83:D6:48:8F X509v3 Authority Key Identifier: keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.252.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:1c:51:ef:8e:ed:fa:ac:ed:0e:30:64:b5:b9:4b:dd:0b:c8: 50:34:1d:13:f9:01:44:45:20:43:7d:2d:cd:8b:4b:71:47:ca: 18:70:94:b9:fe:d2:f7:1c:4c:05:93:1c:24:f2:54:fc:cc:8a: a2:15:7e:13:7a:3d:78:f9:12:0f:03:81:43:d5:06:da:14:5f: 51:3f:9d:f3:ed:71:2c:98:30:49:f0:d8:50:b5:5a:08:6d:a8: a4:b9:b3:3a:5a:43:24:ab:9c:e8:aa:18:7a:fd:dd:bb:a1:db: b1:29:9e:36:82:07:38:3c:11:bb:d7:9e:6c:40:e5:66:55:8c: ac:c3:ca:9e:7e:34:6c:e3:e3:34:46:78:70:13:2d:4e:08:aa: 49:82:94:b9:4a:2e:3c:f2:4b:85:5b:cb:fe:77:89:70:0b:67: 8f:86:d9:3c:a9:41:66:e9:a5:b5:c7:53:75:02:bc:d9:9e:47: 86:30:c1:a8:f9:72:f6:36:da:0a:31:63:ad:9a:04:57:57:b4: 8d:dd:f4:78:cd:86:8c:52:3b:51:96:ac:91:26:49:c3:30:52: 3b:82:4f:09:46:83:13:15:56:60:fc:23:09:65:96:5d:4b:da: 20:7e:fb:31:40:80:fb:d9:ec:b2:f6:ac:7f:c5:79:a9:f8:a6: 0e:b2:70:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJbkZDBcwGQh/rzwyvh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0 NTVmMzUwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODMxNWNlZTk4ZmIwNjhiZGNmYjQwNjRmZjc4MWZmZDgzZDY0ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2pImxhhBy09pgaskEHso/G80Vl0 Sn8FTlufw0YKETRpVfdn5Gj1MaeiCc6gq8qCczcjObrM1pCfEXVHIvVnNTvzl7H5 VFKiz0QVH5m1KQXSnRqXxDb7mf1SMwTc2VO2CyVvYOUeTNSBEYfgpZFaj88+CLUw A62TedDr7quDafQ8Vva244EBrCTNrBaUSLLZZXvDjc6e+SR9iQSjw2jbzoHolSll nzLB2aacvgM9ZPmNpXNtuqMJ7yUf5vkHHrbwWwIDuPZ0+GXEzogS8Lxn6FKnQHXO QKK+XoJwjW4mXpu6QEACfD5YQcpAOm2BByEH/N0K9ctFfMjEpNfVxhorkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgxXO6Y+waL3PtAZP94H/2D1kiPMB8GA1UdIwQY MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt NDA3YWY4OWFkOGU5LzEvbURGYzdwajdCb3ZjLTBCa18zZ2ZfWVBXU0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5 LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufz8MA0G CSqGSIb3DQEBCwUAA4IBAQBNHFHvju36rO0OMGS1uUvdC8hQNB0T+QFERSBDfS3N i0txR8oYcJS5/tL3HEwFkxwk8lT8zIqiFX4Tej14+RIPA4FD1QbaFF9RP53z7XEs mDBJ8NhQtVoIbaikubM6WkMkq5zoqhh6/d27oduxKZ42ggc4PBG7155sQOVmVYys w8qefjRs4+M0RnhwEy1OCKpJgpS5Si488kuFW8v+d4lwC2ePhtk8qUFm6aW1x1N1 ArzZnkeGMMGo+XL2NtoKMWOtmgRXV7SN3fR4zYaMUjtRlqyRJknDMFI7gk8JRoMT FVZg/CMJZZZdS9ogfvsxQID72eyy9qx/xXmp+KYOsnAA -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:55 2026 by rpki-client