This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/mjCkDc_goLItqwLjBQWXD9IpNSI.roa File: mjCkDc_goLItqwLjBQWXD9IpNSI.roa (raw, json) Hash identifier: FC0jN/3qdUHziMgksh5FjASN2bhckVnKX7P7UBiZNIM= Subject key identifier: 9A:30:A4:0D:CF:E0:A0:B2:2D:AB:02:E3:05:05:97:0F:D2:29:35:22 Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f Certificate serial: 019B797E876C966037C315E4C514898C6450 Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/mjCkDc_goLItqwLjBQWXD9IpNSI.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206570 IP address blocks: 185.179.200.0/23 maxlen: 24 213.179.210.0/23 maxlen: 23 2a00:1d23::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:87:6c:96:60:37:c3:15:e4:c5:14:89:8c:64:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a30a40dcfe0a0b22dab02e30505970fd2293522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:39:d1:83:bf:88:23:e6:81:86:b4:05:9b: 78:ac:bb:86:5c:50:ac:39:5e:2b:26:21:1e:c2:2c: 92:cc:2e:e4:38:75:7c:e5:ec:01:99:fe:6a:14:1a: 78:a7:1b:1c:3c:ca:30:c3:95:26:2e:f3:2e:e8:5d: 36:9e:cc:7e:cf:00:7e:6b:af:0e:cf:09:bf:ed:d5: 69:a2:01:0d:73:8b:70:73:39:d6:16:5f:4d:fe:d8: b2:62:74:98:97:1b:51:4f:ad:ea:e8:bc:6b:fa:66: ea:57:3a:03:55:8a:27:72:cd:99:db:15:88:d8:d6: 93:3e:28:0b:69:2c:e5:f8:30:35:eb:9f:69:7d:cd: a4:bf:09:51:35:59:25:11:88:9e:b3:54:15:96:6b: 3b:a0:e4:75:ff:3a:41:8b:30:ab:f7:c0:20:0c:fb: d1:d2:f1:10:fb:07:f8:2a:cd:d3:1f:41:8d:ac:63: 92:f6:5f:12:ed:a5:29:b0:ef:98:b0:20:8d:8d:1c: 7e:d7:e5:7c:01:f8:4a:bc:74:76:e2:83:18:96:57: e6:0b:ff:b6:4e:8e:29:02:30:27:8c:8f:64:af:42: b2:9c:e3:58:80:f3:b2:55:a0:ac:6b:f9:06:66:63: 7b:0a:58:d4:41:1c:28:46:33:b4:7a:32:56:35:78: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:A4:0D:CF:E0:A0:B2:2D:AB:02:E3:05:05:97:0F:D2:29:35:22 X509v3 Authority Key Identifier: keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/mjCkDc_goLItqwLjBQWXD9IpNSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.200.0/23 213.179.210.0/23 IPv6: 2a00:1d23::/32 Signature Algorithm: sha256WithRSAEncryption 77:c7:c2:b6:c1:23:d5:0c:43:0c:8c:cc:6a:3e:a0:60:84:c6: e4:04:ce:26:d0:af:1a:5c:10:06:c8:9e:4c:09:18:9b:6c:37: 5e:72:41:6d:7e:06:37:60:09:ad:bd:4c:60:fa:ca:be:86:56: 39:d7:d9:e1:b6:50:e7:13:57:1c:51:b6:da:7f:f2:e5:9f:65: 78:7e:d9:a6:35:38:2c:41:cb:2c:c3:bd:d0:84:8c:49:cb:40: 15:d4:9b:98:2d:27:4c:ef:16:b2:87:1b:53:73:95:de:5c:e4: c5:82:85:29:d0:78:3a:17:54:00:08:2f:eb:62:df:91:70:91: 4d:c8:6c:ea:94:cd:92:bb:10:2c:97:90:a3:3b:15:b4:b9:4c: d8:9e:98:7c:f2:d8:d6:7c:73:37:bd:7f:88:92:b8:63:d9:dd: 4d:ba:95:a8:2d:bc:36:05:d3:4c:03:5b:d1:a4:aa:be:9a:42: 33:10:bc:2e:9b:76:f7:20:95:07:8f:26:a8:35:c0:3f:43:aa: 5a:63:c3:05:76:b2:e2:a8:f7:1e:3e:40:7a:fb:44:98:31:f7: cc:4d:23:3e:4c:36:74:f7:24:c0:99:4f:0d:a7:a9:3c:61:98: 58:86:8b:a3:11:6d:d3:ac:d0:6d:db:b8:5d:74:33:b9:f0:0f: 1b:23:6b:43 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fodslmA3wxXkxRSJjGRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTcwM2RiMzAyMGNjMWVmMmZkNzEwOTFhNDY4ZjRhNjQ5 YzIzOGYwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTMwYTQwZGNmZTBhMGIyMmRhYjAyZTMwNTA1OTcwZmQyMjkzNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTc50YO/iCPmgYa0BZt4rLuGXFCs OV4rJiEewiySzC7kOHV85ewBmf5qFBp4pxscPMoww5UmLvMu6F02nsx+zwB+a68O zwm/7dVpogENc4twcznWFl9N/tiyYnSYlxtRT63q6Lxr+mbqVzoDVYoncs2Z2xWI 2NaTPigLaSzl+DA1659pfc2kvwlRNVklEYies1QVlms7oOR1/zpBizCr98AgDPvR 0vEQ+wf4Ks3TH0GNrGOS9l8S7aUpsO+YsCCNjRx+1+V8AfhKvHR24oMYllfmC/+2 To4pAjAnjI9kr0KynONYgPOyVaCsa/kGZmN7CljUQRwoRjO0ejJWNXjiXQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJowpA3P4KCyLasC4wUFlw/SKTUiMB8GA1UdIwQY MBaAFNQXA9swIMwe8v1xCRpGj0pknCOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYt NDhkMzFjNzVmMzFlLzEvbWpDa0RjX2dvTEl0cXdMakJRV1hEOUlwTlNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYtNDhkMzFjNzVmMzFl LzEvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBubPIAwQB 1bPSMA0EAgACMAcDBQAqAB0jMA0GCSqGSIb3DQEBCwUAA4IBAQB3x8K2wSPVDEMM jMxqPqBghMbkBM4m0K8aXBAGyJ5MCRibbDdeckFtfgY3YAmtvUxg+sq+hlY519nh tlDnE1ccUbbaf/Lln2V4ftmmNTgsQcssw73QhIxJy0AV1JuYLSdM7xayhxtTc5Xe XOTFgoUp0Hg6F1QACC/rYt+RcJFNyGzqlM2SuxAsl5CjOxW0uUzYnph88tjWfHM3 vX+Ikrhj2d1NupWoLbw2BdNMA1vRpKq+mkIzELwum3b3IJUHjyaoNcA/Q6paY8MF drLiqPcePkB6+0SYMffMTSM+TDZ09yTAmU8Np6k8YZhYhoujEW3TrNBt27hddDO5 8A8bI2tD -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:00 2026 by rpki-client