This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/gMu2YQ5Z-fhmlB5oCIyK-cCmYSg.roa File: gMu2YQ5Z-fhmlB5oCIyK-cCmYSg.roa (raw, json) Hash identifier: sMPAGgi9mpnmn/YsXE40d8WUtMbU8Ow14CbwPqyGySQ= Subject key identifier: 80:CB:B6:61:0E:59:F9:F8:66:94:1E:68:08:8C:8A:F9:C0:A6:61:28 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117B8419F1889C39756DA56DB48E1A Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/gMu2YQ5Z-fhmlB5oCIyK-cCmYSg.roa Signing time: Fri 02 Jan 2026 00:17:59 +0000 ROA not before: Fri 02 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41656 IP address blocks: 185.242.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7b:84:19:f1:88:9c:39:75:6d:a5:6d:b4:8e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80cbb6610e59f9f866941e68088c8af9c0a66128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:db:16:e8:2a:67:85:c4:9c:ed:3e:ef:e1: 0a:0c:a6:85:7e:ef:4d:df:69:bd:54:ee:52:6d:18: 97:96:92:8c:84:bf:07:d2:b8:51:ad:cf:f5:1c:45: f1:6e:dd:42:ae:6f:9c:5d:cc:9b:72:11:d4:6d:17: 33:26:06:dd:8b:b2:42:4f:dc:be:4f:38:e9:b3:14: 51:c7:b9:dd:af:bf:24:b8:d4:93:ef:8f:5b:24:00: fc:24:6e:78:c2:96:8b:8d:c0:38:27:d7:7f:0f:b4: 5f:6b:a3:05:52:55:bf:11:0f:87:67:74:41:19:10: 4d:97:b3:0a:80:4f:25:fd:07:e4:90:80:43:ff:f1: 02:a2:3e:fa:93:25:41:6b:c6:5e:30:7e:83:05:9d: 3a:d0:f9:09:20:12:8c:75:9c:74:51:7e:1d:b8:92: 67:10:de:d7:f5:a0:82:39:41:f6:25:fd:38:5e:cf: 38:3e:61:bc:55:11:c5:ef:c3:3f:1e:d5:5e:9d:96: 3a:27:5b:5d:86:44:9b:e1:14:7d:74:82:68:40:cb: ae:85:25:f6:87:2b:3e:f4:19:2c:64:a5:6f:b1:88: 25:d4:f4:0a:74:5b:59:2b:70:8f:de:37:65:71:02: b6:57:7f:59:63:ec:15:62:8b:05:81:d1:5a:ee:4c: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:B6:61:0E:59:F9:F8:66:94:1E:68:08:8C:8A:F9:C0:A6:61:28 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/gMu2YQ5Z-fhmlB5oCIyK-cCmYSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.0.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:34:06:6d:4a:0d:70:32:a9:6c:1f:51:62:a1:68:6a:38:52: b9:d1:53:ed:94:7b:3b:b6:82:9f:3e:6a:dc:b3:dd:e1:90:75: ae:49:a2:a5:94:90:20:c0:c1:a9:53:db:0e:8d:c6:29:ba:ed: 09:50:d1:2c:08:6e:6f:5e:6f:12:58:ef:db:5a:a6:b0:4b:8e: 7d:5e:aa:3f:69:59:85:fe:1d:72:75:8e:c9:58:0c:19:85:d8: f6:43:bd:19:da:b2:01:02:6d:ff:8a:93:46:0d:6e:a5:72:04: 84:14:ba:b9:a7:0d:4d:c7:ee:14:f3:5c:ce:02:d9:98:73:31: 89:03:6c:12:42:72:53:ce:58:cd:c8:bb:e5:4e:a1:9d:10:a2: cd:ec:92:a5:04:f7:44:00:17:e9:d3:b3:92:32:c9:66:e4:a2: 58:bc:c6:22:09:98:7d:f1:17:f2:87:a6:9b:e1:12:94:da:31: ad:9e:7c:18:41:8d:14:ec:08:05:34:4b:b9:0e:28:7a:3f:7e: 36:14:c2:2f:1d:5e:fa:a7:fe:dc:d7:4a:27:b1:3c:10:8f:09: fb:40:00:e0:21:a8:be:4d:0b:1f:7e:95:7f:79:be:8a:d1:96: 96:03:ad:13:71:03:e6:9d:50:88:b6:6d:b5:7f:c1:b2:a0:8a: 67:e4:e2:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EXuEGfGInDl1baVttI4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGNiYjY2MTBlNTlmOWY4NjY5NDFlNjgwODhjOGFmOWMwYTY2MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzbbFugqZ4XEnO0+7+EKDKaFfu9N 32m9VO5SbRiXlpKMhL8H0rhRrc/1HEXxbt1Crm+cXcybchHUbRczJgbdi7JCT9y+ TzjpsxRRx7ndr78kuNST749bJAD8JG54wpaLjcA4J9d/D7Rfa6MFUlW/EQ+HZ3RB GRBNl7MKgE8l/QfkkIBD//ECoj76kyVBa8ZeMH6DBZ060PkJIBKMdZx0UX4duJJn EN7X9aCCOUH2Jf04Xs84PmG8VRHF78M/HtVenZY6J1tdhkSb4RR9dIJoQMuuhSX2 hys+9BksZKVvsYgl1PQKdFtZK3CP3jdlcQK2V39ZY+wVYosFgdFa7kzcrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDLtmEOWfn4ZpQeaAiMivnApmEoMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvZ011MllRNVotZmhtbEI1b0NJeUstY0NtWVNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufIAMA0G CSqGSIb3DQEBCwUAA4IBAQBrNAZtSg1wMqlsH1FioWhqOFK50VPtlHs7toKfPmrc s93hkHWuSaKllJAgwMGpU9sOjcYpuu0JUNEsCG5vXm8SWO/bWqawS459Xqo/aVmF /h1ydY7JWAwZhdj2Q70Z2rIBAm3/ipNGDW6lcgSEFLq5pw1Nx+4U81zOAtmYczGJ A2wSQnJTzljNyLvlTqGdEKLN7JKlBPdEABfp07OSMslm5KJYvMYiCZh98Rfyh6ab 4RKU2jGtnnwYQY0U7AgFNEu5Dih6P342FMIvHV76p/7c10onsTwQjwn7QADgIai+ TQsffpV/eb6K0ZaWA60TcQPmnVCItm21f8GyoIpn5OKd -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:17 2026 by rpki-client