This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/MRcsgIhIgnr1q2_TU7f16T0f648.roa File: MRcsgIhIgnr1q2_TU7f16T0f648.roa (raw, json) Hash identifier: lxu206bSCIwPGq8kGz0IE+UmHoKoYjWgcdADheUh47s= Subject key identifier: 31:17:2C:80:88:48:82:7A:F5:AB:6F:D3:53:B7:F5:E9:3D:1F:EB:8F Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B2285AFE7A2FE1BD63A402B3B3A95 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/MRcsgIhIgnr1q2_TU7f16T0f648.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203668 IP address blocks: 185.155.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:85:af:e7:a2:fe:1b:d6:3a:40:2b:3b:3a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31172c808848827af5ab6fd353b7f5e93d1feb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:ee:98:fb:52:2a:24:f8:b0:40:b6:24:a4: d1:a2:56:c7:cf:e8:c8:53:f5:29:dd:3e:5b:a2:56: 19:76:86:3e:65:1a:45:12:92:e9:f6:94:2e:06:f8: e2:37:4a:64:64:ac:af:83:d7:00:b1:41:db:3a:f2: 0d:46:42:b3:d9:a7:bf:b9:82:ec:14:2b:71:7b:db: b9:07:9d:d9:fe:07:dd:1a:9b:67:46:17:e2:7f:0b: f9:2c:d0:fd:09:c0:d4:fe:c4:7f:0b:d9:fb:d6:52: a8:58:1e:ff:52:49:f1:3a:27:96:90:52:37:43:b1: c4:53:bb:9d:02:39:f0:1d:8a:11:b6:cd:9c:fc:b3: 3b:2c:94:82:a9:c0:b4:06:38:3b:8e:c8:ea:22:46: 80:df:64:b1:6b:f8:05:08:e5:c9:65:1d:3f:e1:d4: 89:1f:44:8f:14:be:7d:b5:ff:6b:94:08:45:77:ba: 3c:b0:8d:6e:ff:90:3b:6a:38:4d:96:d6:87:bd:e0: 1d:c9:0f:cb:ac:8b:4d:b8:5c:34:81:2e:f5:db:3e: 31:61:82:f9:83:39:b0:96:2e:0a:3e:5b:9a:a3:97: 3a:7d:77:ee:88:46:0b:01:a2:07:75:01:02:4f:b1: 5f:5f:84:4e:91:29:91:a6:b3:43:f1:9d:9b:61:1e: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:2C:80:88:48:82:7A:F5:AB:6F:D3:53:B7:F5:E9:3D:1F:EB:8F X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/MRcsgIhIgnr1q2_TU7f16T0f648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.114.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b1:13:ae:87:28:65:49:fe:10:49:d4:a8:9a:b5:b4:8a:2f: f3:08:92:cb:23:79:57:50:59:26:c9:a0:83:a4:9a:a7:e7:9f: d2:88:10:21:2a:5b:a9:bb:7e:9d:cd:40:ca:fa:0a:19:21:0d: 9a:d5:b0:71:94:01:45:c0:2f:08:c5:cc:c2:b5:af:02:85:88: 3b:22:ba:cc:72:91:4c:72:49:2b:e5:74:03:ba:85:83:db:7b: 2c:38:45:18:63:cf:e9:75:41:33:1b:0b:5c:e5:0b:09:ad:35: fd:cd:70:5c:c0:ea:05:5b:13:04:8f:3e:64:03:8c:30:a2:94: e1:e4:3e:d7:0d:36:c3:4f:89:ab:01:0d:e9:ae:6c:57:49:ff: 8b:2f:70:3e:82:8c:7b:c5:94:0e:75:4d:0b:07:d3:1e:b8:37: 54:35:e2:bf:af:c9:95:cb:5e:d1:cf:ee:ac:24:47:19:56:17: c6:0d:5d:51:c0:57:94:93:ee:d8:1b:fc:a7:cf:e4:c0:4e:0c: 16:f9:1e:f3:a4:a2:80:56:9b:68:3b:b8:32:8d:dc:73:3d:d0: db:de:0d:08:97:8e:1a:b1:b0:57:bc:66:b5:24:4a:30:22:60: df:ec:99:c2:d7:37:1e:5a:9b:a8:78:31:bb:4f:a4:42:f8:2e: ca:2f:b2:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyKFr+ei/hvWOkArOzqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTE3MmM4MDg4NDg4MjdhZjVhYjZmZDM1M2I3ZjVlOTNkMWZlYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdXumPtSKiT4sEC2JKTRolbHz+jI U/Up3T5bolYZdoY+ZRpFEpLp9pQuBvjiN0pkZKyvg9cAsUHbOvINRkKz2ae/uYLs FCtxe9u5B53Z/gfdGptnRhfifwv5LND9CcDU/sR/C9n71lKoWB7/UknxOieWkFI3 Q7HEU7udAjnwHYoRts2c/LM7LJSCqcC0Bjg7jsjqIkaA32Sxa/gFCOXJZR0/4dSJ H0SPFL59tf9rlAhFd7o8sI1u/5A7ajhNltaHveAdyQ/LrItNuFw0gS712z4xYYL5 gzmwli4KPluao5c6fXfuiEYLAaIHdQECT7FfX4ROkSmRprND8Z2bYR4PsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEXLICISIJ69atv01O39ek9H+uPMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvTVJjc2dJaElnbnIxcTJfVFU3ZjE2VDBmNjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtyMA0G CSqGSIb3DQEBCwUAA4IBAQAGsROuhyhlSf4QSdSomrW0ii/zCJLLI3lXUFkmyaCD pJqn55/SiBAhKlupu36dzUDK+goZIQ2a1bBxlAFFwC8IxczCta8ChYg7IrrMcpFM ckkr5XQDuoWD23ssOEUYY8/pdUEzGwtc5QsJrTX9zXBcwOoFWxMEjz5kA4wwopTh 5D7XDTbDT4mrAQ3prmxXSf+LL3A+gox7xZQOdU0LB9MeuDdUNeK/r8mVy17Rz+6s JEcZVhfGDV1RwFeUk+7YG/ynz+TATgwW+R7zpKKAVptoO7gyjdxzPdDb3g0Il44a sbBXvGa1JEowImDf7JnC1zceWpuoeDG7T6RC+C7KL7LR -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:48 2026 by rpki-client