This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/mwVyEN1yciChxmW_Q0x3K-DTLf0.roa File: mwVyEN1yciChxmW_Q0x3K-DTLf0.roa (raw, json) Hash identifier: 2DWQTjsCCu0McKSPCWKJ9eLeJdWuKpAg3qQ7vPTXYnc= Subject key identifier: 9B:05:72:10:DD:72:72:20:A1:C6:65:BF:43:4C:77:2B:E0:D3:2D:FD Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e Certificate serial: 019B78344F76F8AFAEC8D68C21E7B212833A Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/mwVyEN1yciChxmW_Q0x3K-DTLf0.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34636 IP address blocks: 185.238.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4f:76:f8:af:ae:c8:d6:8c:21:e7:b2:12:83:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b057210dd727220a1c665bf434c772be0d32dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:0d:1b:69:15:c0:d2:c5:4f:71:5c:35:3c: 21:bc:71:ec:a2:b6:85:38:dd:78:ca:31:ff:d8:78: 28:71:10:4d:1d:59:cf:4f:05:56:f7:c2:01:09:68: ae:2b:e4:7e:44:f1:bb:f5:f2:78:2c:1e:53:8c:0a: f0:dd:c5:56:ed:4c:d6:8d:21:9f:50:6e:72:15:bd: 5b:91:d8:42:26:0a:90:c9:5b:97:fa:6f:9f:09:6d: 48:bf:e0:6c:8c:91:57:2a:bf:ea:a6:59:8f:90:fd: c6:1a:20:65:2c:0c:e2:4e:02:78:cc:9c:90:26:9c: 09:4c:90:64:cd:8b:94:46:08:73:29:0f:38:6f:01: 92:ae:43:01:d1:15:20:70:a0:94:f5:8b:70:60:77: 14:e1:51:13:07:eb:ac:67:4c:b0:79:06:76:4d:af: 50:26:f7:73:0a:cd:bf:59:1b:1d:56:82:d1:7d:25: c0:57:1c:e0:3f:dc:04:b5:a1:4c:46:0f:d2:14:ab: 54:93:28:d9:27:75:f9:81:df:ca:25:aa:fb:2e:67: f0:3f:ed:db:78:da:01:46:16:5c:e9:09:e5:77:37: a5:3e:35:a6:30:a5:42:8f:cc:90:d8:82:60:98:f3: 68:b2:e2:77:31:27:e4:df:e2:d5:33:92:84:e0:44: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:72:10:DD:72:72:20:A1:C6:65:BF:43:4C:77:2B:E0:D3:2D:FD X509v3 Authority Key Identifier: keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/mwVyEN1yciChxmW_Q0x3K-DTLf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.140.0/24 Signature Algorithm: sha256WithRSAEncryption 57:aa:cd:34:d8:c8:41:d8:e5:e1:00:1a:b7:67:7b:3b:b0:a6: cb:c0:ee:f1:1a:60:47:56:b1:6c:a2:5a:48:cc:e1:10:28:a6: d3:f9:5c:51:ce:77:e0:8b:e6:6a:08:72:18:7c:c2:fb:b0:95: 0c:8b:76:7a:f8:bd:f6:61:9c:9e:d5:2e:88:63:4f:7e:1f:ee: 10:1b:4d:03:1a:b6:65:93:c0:b3:cc:d5:79:e3:6c:58:c6:c4: cf:9b:0c:1f:e7:44:fe:e9:08:f2:49:9d:1b:09:25:86:98:a7: 1b:db:0f:9d:9b:bf:df:e1:e5:12:de:b2:18:0a:f8:a6:33:c4: 64:0a:49:e6:52:c3:32:9e:74:ea:ed:51:eb:11:0c:f9:c1:09: d1:34:2b:d1:02:aa:01:dd:49:40:b5:f4:d7:b2:5a:f8:e7:6e: 87:60:90:4a:a4:4e:bf:11:46:66:80:66:5d:2c:36:62:37:b8: e1:72:af:0b:59:d3:d3:2c:0c:46:c8:dd:4b:09:c7:b8:3e:87: 3a:e4:4a:ba:06:c3:78:53:cb:d0:02:0b:e3:87:19:4d:b6:4e: 56:3d:8a:a3:1c:07:29:17:59:b5:16:1e:3e:d8:be:3a:4a:ad: 16:6f:bc:b9:a9:d8:50:ba:38:2a:d4:ef:75:c3:6c:7c:26:a0: 5c:65:01:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NE92+K+uyNaMIeeyEoM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh ZGFlNWUwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjA1NzIxMGRkNzI3MjIwYTFjNjY1YmY0MzRjNzcyYmUwZDMyZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ING2kVwNLFT3FcNTwhvHHsoraF ON14yjH/2HgocRBNHVnPTwVW98IBCWiuK+R+RPG79fJ4LB5TjArw3cVW7UzWjSGf UG5yFb1bkdhCJgqQyVuX+m+fCW1Iv+BsjJFXKr/qplmPkP3GGiBlLAziTgJ4zJyQ JpwJTJBkzYuURghzKQ84bwGSrkMB0RUgcKCU9YtwYHcU4VETB+usZ0yweQZ2Ta9Q JvdzCs2/WRsdVoLRfSXAVxzgP9wEtaFMRg/SFKtUkyjZJ3X5gd/KJar7LmfwP+3b eNoBRhZc6QnldzelPjWmMKVCj8yQ2IJgmPNosuJ3MSfk3+LVM5KE4ETzwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsFchDdcnIgocZlv0NMdyvg0y39MB8GA1UdIwQY MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct N2M3NDBlZjhhYTk1LzEvbXdWeUVOMXljaUNoeG1XX1EweDNLLURUTGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1 LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6MMA0G CSqGSIb3DQEBCwUAA4IBAQBXqs002MhB2OXhABq3Z3s7sKbLwO7xGmBHVrFsolpI zOEQKKbT+VxRznfgi+ZqCHIYfML7sJUMi3Z6+L32YZye1S6IY09+H+4QG00DGrZl k8CzzNV542xYxsTPmwwf50T+6QjySZ0bCSWGmKcb2w+dm7/f4eUS3rIYCvimM8Rk CknmUsMynnTq7VHrEQz5wQnRNCvRAqoB3UlAtfTXslr4526HYJBKpE6/EUZmgGZd LDZiN7jhcq8LWdPTLAxGyN1LCce4Poc65Eq6BsN4U8vQAgvjhxlNtk5WPYqjHAcp F1m1Fh4+2L46Sq0Wb7y5qdhQujgq1O91w2x8JqBcZQHq -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:33 2026 by rpki-client