This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/MQJyHdCQqrR49YtqfP5n2nCmdBc.roa File: MQJyHdCQqrR49YtqfP5n2nCmdBc.roa (raw, json) Hash identifier: tayylzbDzrQ2vAXY3YULZKX+Mr7ci8knVpJFx/AOaaM= Subject key identifier: 31:02:72:1D:D0:90:AA:B4:78:F5:8B:6A:7C:FE:67:DA:70:A6:74:17 Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Certificate serial: 019B7F15E4206BD43BB91B0F7DFD0434CEC1 Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/MQJyHdCQqrR49YtqfP5n2nCmdBc.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6724 IP address blocks: 185.122.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:20:6b:d4:3b:b9:1b:0f:7d:fd:04:34:ce:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3102721dd090aab478f58b6a7cfe67da70a67417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:d3:9a:7f:18:b2:27:6f:f9:04:46:53:91: 46:65:bc:4f:7d:e1:54:6b:2f:bb:29:b3:6b:a9:e0: 99:36:09:82:09:02:eb:fe:ca:96:ab:de:e1:c1:ae: 33:dc:71:98:dc:40:14:79:2a:63:46:ba:2c:26:53: 5a:65:aa:57:fe:e2:e6:e7:2d:68:f1:b4:cc:68:57: 78:f1:d0:e0:0c:c7:a7:fb:37:1e:92:00:22:11:ac: f6:30:ae:99:1f:ac:50:c2:42:8c:b8:35:c9:aa:cc: cb:b5:c2:0f:38:f9:10:c6:24:1f:c6:af:ec:40:eb: a2:7b:e7:ef:6e:3c:8f:44:5f:7c:66:cc:f8:66:a4: 02:4a:0b:2d:dd:72:94:5c:0a:ba:9d:69:eb:99:e5: c4:d3:78:42:a8:93:76:58:05:a4:45:b6:43:9a:70: f5:98:d1:54:a7:a5:f5:5c:a2:9f:61:c3:e0:7e:45: ec:51:a0:30:fb:32:0b:24:53:79:4f:00:f0:85:0b: cf:06:89:4a:f8:0b:97:ca:aa:6c:05:ce:a7:b4:05: d2:b4:ae:31:a4:59:f9:a8:20:25:c5:c7:98:22:a9: b6:7a:2a:34:8a:50:d5:17:40:be:87:e7:74:b4:07: d8:ca:8d:90:cc:ca:04:15:94:01:b8:f9:62:80:48: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:72:1D:D0:90:AA:B4:78:F5:8B:6A:7C:FE:67:DA:70:A6:74:17 X509v3 Authority Key Identifier: keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/MQJyHdCQqrR49YtqfP5n2nCmdBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.183.0/24 Signature Algorithm: sha256WithRSAEncryption 05:81:f4:89:ea:d0:41:d0:fb:57:df:54:2b:a0:68:f0:8a:fd: 6e:6b:11:61:66:b2:48:1d:92:bd:5d:35:e9:45:9e:58:90:0c: 0d:20:fc:0f:ac:c3:51:11:a5:fd:26:cf:a4:85:22:94:c5:9b: 9f:4f:f1:b3:14:ca:ce:73:00:29:64:af:54:09:9c:33:73:f6: 26:6f:2f:4f:73:0f:c2:d5:1b:f5:9e:ce:71:67:ab:0e:cb:64: 26:15:ca:2a:06:31:7a:4b:db:03:af:73:94:c6:3b:f3:b4:16: 8b:68:8a:19:3d:60:48:50:bd:d6:dd:1a:02:28:cc:d1:5f:ca: d9:84:33:82:f7:ca:cb:c2:83:f4:ad:a7:12:d8:1e:24:34:d4: d9:88:04:ab:ee:0e:b8:b8:bc:56:f3:80:34:2d:c4:d0:8c:fb: 5a:9f:ea:24:9f:ea:1c:21:df:50:6e:36:3e:0a:24:3d:5e:cb: 04:0a:54:f1:86:8b:c7:83:4b:5f:09:1a:45:e5:5f:2d:ce:5a: 40:7d:42:cc:c9:82:e8:78:84:2b:21:2d:4f:c6:21:ac:38:0a: 9a:51:7d:6a:5b:7d:da:30:91:03:e8:38:22:93:fd:b5:1e:b5: fa:9d:2f:f5:f9:10:25:30:07:18:f6:fe:60:12:b5:cf:ca:56: 12:11:f8:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeQga9Q7uRsPff0ENM7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3 ZTZjOTgwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTAyNzIxZGQwOTBhYWI0NzhmNThiNmE3Y2ZlNjdkYTcwYTY3NDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmibTmn8Ysidv+QRGU5FGZbxPfeFU ay+7KbNrqeCZNgmCCQLr/sqWq97hwa4z3HGY3EAUeSpjRrosJlNaZapX/uLm5y1o 8bTMaFd48dDgDMen+zcekgAiEaz2MK6ZH6xQwkKMuDXJqszLtcIPOPkQxiQfxq/s QOuie+fvbjyPRF98Zsz4ZqQCSgst3XKUXAq6nWnrmeXE03hCqJN2WAWkRbZDmnD1 mNFUp6X1XKKfYcPgfkXsUaAw+zILJFN5TwDwhQvPBolK+AuXyqpsBc6ntAXStK4x pFn5qCAlxceYIqm2eio0ilDVF0C+h+d0tAfYyo2QzMoEFZQBuPligEilDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDECch3QkKq0ePWLanz+Z9pwpnQXMB8GA1UdIwQY MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt MzhhMzkyNDc3NmU5LzEvTVFKeUhkQ1FxclI0OVl0cWZQNW4ybkNtZEJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5 LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXq3MA0G CSqGSIb3DQEBCwUAA4IBAQAFgfSJ6tBB0PtX31QroGjwiv1uaxFhZrJIHZK9XTXp RZ5YkAwNIPwPrMNREaX9Js+khSKUxZufT/GzFMrOcwApZK9UCZwzc/Ymby9Pcw/C 1Rv1ns5xZ6sOy2QmFcoqBjF6S9sDr3OUxjvztBaLaIoZPWBIUL3W3RoCKMzRX8rZ hDOC98rLwoP0racS2B4kNNTZiASr7g64uLxW84A0LcTQjPtan+okn+ocId9QbjY+ CiQ9XssEClTxhovHg0tfCRpF5V8tzlpAfULMyYLoeIQrIS1PxiGsOAqaUX1qW33a MJED6Dgik/21HrX6nS/1+RAlMAcY9v5gErXPylYSEfhq -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:04 2026 by rpki-client