This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/Mk_VYu-LiIbY1u7SGGTXBRZs-S8.roa File: Mk_VYu-LiIbY1u7SGGTXBRZs-S8.roa (raw, json) Hash identifier: 8lD6JqafumZim7RiBVSelnl520TcSzjZJwKqxNjAI4c= Subject key identifier: 32:4F:D5:62:EF:8B:88:86:D8:D6:EE:D2:18:64:D7:05:16:6C:F9:2F Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69 Certificate serial: 019B7D5B1C636C47A80E66574907E40F0B2D Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/Mk_VYu-LiIbY1u7SGGTXBRZs-S8.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51786 IP address blocks: 185.117.12.0/24 maxlen: 24 185.117.13.0/24 maxlen: 24 2a06:8280::/44 maxlen: 44 2a06:8280:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1c:63:6c:47:a8:0e:66:57:49:07:e4:0f:0b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69 Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324fd562ef8b8886d8d6eed21864d705166cf92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:57:d3:6f:5c:52:44:69:c9:a3:bb:75:fa: 22:61:db:78:55:4d:67:dd:11:8e:e0:ac:1c:4b:a7: 02:1c:b4:0c:59:4b:c4:23:81:5b:cb:16:e0:ac:03: 9c:8c:3d:04:f8:21:de:08:ff:dc:59:c1:3c:d4:b4: f4:84:d5:c4:bd:fb:f9:2b:08:8d:10:64:da:f2:40: c1:23:ff:5a:9c:2a:3c:f9:b0:44:d9:ea:f6:d0:31: 1f:54:0b:8e:48:06:6d:a3:c7:1b:38:f5:b0:f3:1c: 49:81:46:38:5b:c8:36:18:f4:20:c9:2b:51:bd:c3: 3d:91:fd:56:2d:ce:43:f1:66:10:f7:03:21:3c:fc: 33:cf:a3:1a:ab:57:4b:92:3f:fb:b0:f2:15:8a:0a: 53:79:0e:be:28:cc:31:dd:66:2b:31:f6:e6:f6:63: 0b:2f:35:54:78:b8:75:19:eb:7a:82:21:1e:54:63: 3c:27:30:34:5b:47:c1:5d:29:5a:59:59:33:03:a2: 1d:e8:6c:94:75:be:15:1b:3b:ba:80:15:75:13:99: c1:96:d1:91:aa:f7:b3:fd:bc:79:74:04:ed:d1:08: 25:6e:1e:3c:01:73:6e:40:05:1c:a3:fc:30:25:6b: cb:64:69:03:e9:66:ed:2d:c1:02:8e:6d:f6:8b:0c: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4F:D5:62:EF:8B:88:86:D8:D6:EE:D2:18:64:D7:05:16:6C:F9:2F X509v3 Authority Key Identifier: keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/Mk_VYu-LiIbY1u7SGGTXBRZs-S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.12.0/23 IPv6: 2a06:8280::/43 Signature Algorithm: sha256WithRSAEncryption 94:81:d0:da:c4:06:2f:c3:b0:1c:be:d9:a5:f7:ed:8d:4c:40: 37:a3:88:12:d8:95:5d:44:0e:c6:3b:0f:d3:06:5f:26:75:83: ad:a6:8d:59:89:98:4b:5d:61:cd:79:2d:ba:94:8d:88:ce:d0: 97:92:d0:9a:f6:ed:7d:ac:2e:9a:2d:c9:cb:92:00:7d:87:2a: b3:44:77:3d:3f:f6:5f:f7:2e:b5:a5:ae:96:60:2f:91:f3:92: 35:7c:7e:21:99:9a:f2:6c:e3:9f:12:13:bf:9d:a1:fe:e2:76: 9d:b5:74:58:0b:c1:64:65:f1:25:1a:09:ce:4e:af:01:aa:44: 94:f4:4c:a9:c2:99:55:7b:d7:0d:fa:6e:fb:55:53:66:f3:c5: ad:ac:9d:ae:ad:73:ac:35:ec:17:b9:3f:9a:d6:b4:b2:f4:9f: b3:aa:f1:00:18:e2:b0:d5:0d:43:2e:ab:4e:bd:01:c8:99:3d: 13:24:12:f0:b8:30:a6:cc:70:a7:c9:4e:3b:06:90:9c:1a:14: 5d:f7:d0:54:ba:c4:4e:28:ee:c3:fc:1b:f8:93:9a:c6:83:41: f9:6a:8b:17:e4:bd:3c:f6:97:52:3e:8b:c1:eb:28:a0:0a:2a: b3:61:14:08:d1:41:59:68:de:a3:07:07:f8:0e:e9:c5:aa:bf: fc:62:54:5b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9WxxjbEeoDmZXSQfkDwstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj NTljNjkwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRmZDU2MmVmOGI4ODg2ZDhkNmVlZDIxODY0ZDcwNTE2NmNmOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxplX029cUkRpyaO7dfoiYdt4VU1n 3RGO4KwcS6cCHLQMWUvEI4FbyxbgrAOcjD0E+CHeCP/cWcE81LT0hNXEvfv5KwiN EGTa8kDBI/9anCo8+bBE2er20DEfVAuOSAZto8cbOPWw8xxJgUY4W8g2GPQgyStR vcM9kf1WLc5D8WYQ9wMhPPwzz6Maq1dLkj/7sPIVigpTeQ6+KMwx3WYrMfbm9mML LzVUeLh1Get6giEeVGM8JzA0W0fBXSlaWVkzA6Id6GyUdb4VGzu6gBV1E5nBltGR qvez/bx5dATt0Qglbh48AXNuQAUco/wwJWvLZGkD6WbtLcECjm32iwyxGwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDJP1WLvi4iG2Nbu0hhk1wUWbPkvMB8GA1UdIwQY MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct OTFjNzBmNjFhMDY3LzEvTWtfVll1LUxpSWJZMXU3U0dHVFhCUlpzLVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3 LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuXUMMA8E AgACMAkDBwUqBoKAAAAwDQYJKoZIhvcNAQELBQADggEBAJSB0NrEBi/DsBy+2aX3 7Y1MQDejiBLYlV1EDsY7D9MGXyZ1g62mjVmJmEtdYc15LbqUjYjO0JeS0Jr27X2s LpotycuSAH2HKrNEdz0/9l/3LrWlrpZgL5HzkjV8fiGZmvJs458SE7+dof7idp21 dFgLwWRl8SUaCc5OrwGqRJT0TKnCmVV71w36bvtVU2bzxa2sna6tc6w17Be5P5rW tLL0n7Oq8QAY4rDVDUMuq069AciZPRMkEvC4MKbMcKfJTjsGkJwaFF330FS6xE4o 7sP8G/iTmsaDQflqixfkvTz2l1I+i8HrKKAKKrNhFAjRQVlo3qMHB/gO6cWqv/xi VFs= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:15 2026 by rpki-client