This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/MjYgj5PkJtwB52FzuT0YsILbMY0.roa File: MjYgj5PkJtwB52FzuT0YsILbMY0.roa (raw, json) Hash identifier: Indk9YkEk2hK3dLWnIDlZYz40E8hqE2V87I+wxoCcUk= Subject key identifier: 32:36:20:8F:93:E4:26:DC:01:E7:61:73:B9:3D:18:B0:82:DB:31:8D Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B49862853D4BDE95BA38597DB297C Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/MjYgj5PkJtwB52FzuT0YsILbMY0.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45691 IP address blocks: 185.217.5.0/24 maxlen: 24 193.56.180.0/24 maxlen: 24 2a12:f8c2:200::/40 maxlen: 40 2a12:f8c3:4000::/36 maxlen: 36 2a12:f8c6::/32 maxlen: 48 2a12:f8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:86:28:53:d4:bd:e9:5b:a3:85:97:db:29:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3236208f93e426dc01e76173b93d18b082db318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:b6:2b:d9:b6:51:97:d5:ad:0e:0b:d7:e4: 8b:a2:70:1f:33:58:71:9f:7a:32:a3:4d:de:81:55: d4:c0:f8:93:18:10:b7:6d:df:5a:bf:29:b6:0b:e1: 9c:f6:17:e5:06:31:52:b6:57:1b:8e:24:72:9c:4c: 2b:ba:3a:93:da:63:dc:d7:b1:85:08:5d:ba:d8:ac: eb:67:88:5b:91:a4:94:2b:25:50:a3:71:53:dc:b4: ea:10:40:c4:2e:4e:1e:94:f3:09:0f:d9:87:2a:ee: 25:b7:f3:eb:16:d8:d6:63:c0:ea:38:6a:2c:e7:11: ca:77:af:c9:c8:74:c1:50:7e:d4:fe:ad:8f:64:0f: b7:52:e5:3c:c8:a9:47:58:be:39:5b:5f:0c:9f:75: 1e:86:58:18:48:ac:14:41:d6:e5:b1:b4:77:d1:42: f0:46:49:47:34:50:ea:2a:6f:2f:88:6b:41:3b:8c: 86:4e:55:86:c9:70:f5:64:9f:c7:43:0f:09:a9:3c: 23:9d:ba:06:7f:35:ac:51:03:24:d4:5b:6b:b2:3e: f1:bd:9a:34:ce:6b:93:fd:58:3c:e6:c7:62:4c:f2: eb:9e:14:13:ec:57:61:bc:af:f0:9e:d9:5c:ed:ab: ec:19:21:5d:ce:1a:8a:21:6f:e4:ea:d7:82:3c:fe: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:20:8F:93:E4:26:DC:01:E7:61:73:B9:3D:18:B0:82:DB:31:8D X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/MjYgj5PkJtwB52FzuT0YsILbMY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.5.0/24 193.56.180.0/24 IPv6: 2a12:f8c2:200::/40 2a12:f8c3:4000::/36 2a12:f8c6::/31 Signature Algorithm: sha256WithRSAEncryption 5c:9f:81:67:b2:85:60:44:e7:63:65:54:a1:8a:c0:2f:51:e2: d2:28:0c:cd:fd:c9:3b:7a:06:31:1b:33:70:68:49:1b:06:46: 1c:44:a3:31:01:ac:f5:75:4e:fa:0e:a5:ec:34:f2:c2:f1:70: d7:3a:00:09:1d:33:28:9b:96:f6:22:11:a7:81:8f:41:21:a9: f0:a0:e7:7d:27:c1:6a:72:ec:df:10:cf:d1:eb:c2:0f:32:4a: 00:0b:86:3c:2e:13:25:e1:bb:e1:ec:74:dd:b4:f2:46:c7:b9: f3:ca:ef:a3:9a:08:8a:36:88:0e:58:a7:90:0d:32:e1:51:b5: 1f:46:7c:71:09:df:85:42:15:d3:cc:fa:de:e2:31:ab:73:fa: 92:2b:7c:5f:7f:b9:fe:97:fc:d9:b2:5c:ee:28:cb:12:26:18: 16:66:49:3d:a7:af:31:39:7e:a7:bf:6a:ea:99:88:41:2c:46: 6c:b9:9a:7e:ef:80:46:f0:86:ca:3c:d7:43:00:69:cb:c2:35: 0a:d4:4b:bf:d8:79:66:b4:1b:b5:3d:a4:6d:f2:33:30:c0:a9: ef:eb:c5:f2:81:a7:3b:c2:57:35:bf:f6:5f:92:63:66:6e:76: 5f:60:a0:b0:8a:ed:40:7e:a8:c1:b9:0e:57:05:67:9f:78:97: 3e:7e:df:48 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt6W0mGKFPUvelbo4WX2yl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjM2MjA4ZjkzZTQyNmRjMDFlNzYxNzNiOTNkMThiMDgyZGIzMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1+2K9m2UZfVrQ4L1+SLonAfM1hx n3oyo03egVXUwPiTGBC3bd9avym2C+Gc9hflBjFStlcbjiRynEwrujqT2mPc17GF CF262KzrZ4hbkaSUKyVQo3FT3LTqEEDELk4elPMJD9mHKu4lt/PrFtjWY8DqOGos 5xHKd6/JyHTBUH7U/q2PZA+3UuU8yKlHWL45W18Mn3UehlgYSKwUQdblsbR30ULw RklHNFDqKm8viGtBO4yGTlWGyXD1ZJ/HQw8JqTwjnboGfzWsUQMk1Ftrsj7xvZo0 zmuT/Vg85sdiTPLrnhQT7FdhvK/wntlc7avsGSFdzhqKIW/k6teCPP4LdwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFDI2II+T5CbcAedhc7k9GLCC2zGNMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvTWpZZ2o1UGtKdHdCNTJGenVUMFlzSUxiTVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAudkFAwQA wTi0MB0EAgACMBcDBgAqEvjCAgMGBCoS+MNAAwUBKhL4xjANBgkqhkiG9w0BAQsF AAOCAQEAXJ+BZ7KFYETnY2VUoYrAL1Hi0igMzf3JO3oGMRszcGhJGwZGHESjMQGs 9XVO+g6l7DTywvFw1zoACR0zKJuW9iIRp4GPQSGp8KDnfSfBanLs3xDP0evCDzJK AAuGPC4TJeG74ex03bTyRse588rvo5oIijaIDlinkA0y4VG1H0Z8cQnfhUIV08z6 3uIxq3P6kit8X3+5/pf82bJc7ijLEiYYFmZJPaevMTl+p79q6pmIQSxGbLmafu+A RvCGyjzXQwBpy8I1CtRLv9h5ZrQbtT2kbfIzMMCp7+vF8oGnO8JXNb/2X5JjZm52 X2CgsIrtQH6owbkOVwVnn3iXPn7fSA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:36 2026 by rpki-client