This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mjB_YwpdfbzEMOoCN657fTyMgX4.roa File: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (raw, json) Hash identifier: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738= Subject key identifier: 9A:30:7F:63:0A:5D:7D:BC:C4:30:EA:02:37:AE:7B:7D:3C:8C:81:7E Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D7993858CF12BAA6093B86C92ECD Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mjB_YwpdfbzEMOoCN657fTyMgX4.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205631 IP address blocks: 185.95.30.0/24 maxlen: 24 2a05:1500:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d7:99:38:58:cf:12:ba:a6:09:3b:86:c9:2e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a307f630a5d7dbcc430ea0237ae7b7d3c8c817e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:85:82:96:5f:c8:21:05:89:38:1a:0e:a2: 27:d5:83:28:36:12:a0:c2:63:91:d9:8a:3a:e3:d7: 47:30:d7:f7:c1:8d:12:cd:66:c6:de:80:8d:6e:2e: 4f:8e:90:17:f3:b4:3e:f4:54:45:54:95:e2:84:cc: c1:20:e0:28:b8:16:40:f6:90:47:8b:ed:bd:7a:7f: b8:cc:8f:2b:d4:54:27:65:fe:ee:bb:46:b5:1c:d0: 61:0e:48:b8:c6:bd:83:38:4f:fe:22:bc:e3:e3:91: 38:dd:27:a5:54:8b:52:5e:c5:9f:23:b6:7f:a9:32: 00:07:6b:d4:4e:67:22:67:71:cd:e4:71:5b:76:4e: d5:4b:38:29:80:5c:10:8d:14:22:76:0c:34:9a:67: 7b:88:a5:e4:9d:ce:84:b2:a6:da:8b:3d:9e:35:77: 2f:b4:57:88:96:2d:48:78:e7:f0:03:e6:87:39:e5: 82:2f:9c:4f:d3:a8:af:f5:68:21:6d:ed:64:7e:a0: 95:6a:96:01:9c:42:16:80:e6:fa:94:9a:d3:aa:0d: cf:98:8d:31:99:66:06:76:0a:97:e6:ce:8b:f6:fd: f2:94:95:c9:af:98:68:d6:e8:7f:9a:fd:44:92:84: 42:d7:a5:c5:55:44:56:20:af:6d:fe:22:aa:02:a6: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:7F:63:0A:5D:7D:BC:C4:30:EA:02:37:AE:7B:7D:3C:8C:81:7E X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mjB_YwpdfbzEMOoCN657fTyMgX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.30.0/24 IPv6: 2a05:1500:400::/40 Signature Algorithm: sha256WithRSAEncryption 33:6e:f3:1f:f8:14:7f:fc:ab:51:f4:e3:ee:95:d3:84:eb:c2: af:6f:34:e9:6a:10:d2:25:03:7d:ef:32:d5:af:82:82:78:54: 70:a6:4f:3a:cc:cd:8b:ad:ba:3b:73:0d:82:d5:e1:09:ff:e8: 38:6e:64:d5:6c:ed:d0:dd:da:3a:07:6d:29:6c:fe:05:b6:f2: c8:1c:3a:6e:75:b6:51:d3:bb:dc:72:5b:2f:73:d1:86:08:c1: 02:7d:e5:e4:c6:76:51:0c:14:ce:11:d8:89:21:e5:70:57:45: cb:8d:e4:6c:f4:26:43:9b:e6:a4:91:27:a8:7f:76:dc:ab:2c: 7c:23:aa:7c:9e:ed:1d:97:af:70:0f:c1:55:7d:e8:98:c6:99: 02:21:7d:ac:d4:e0:c5:1f:ea:93:7f:a2:49:21:e7:04:09:67: 6b:80:08:ef:b3:36:f0:1a:03:a8:5f:26:76:99:3b:06:8c:75: 70:68:0c:c6:26:56:58:91:78:76:07:22:d6:03:2c:7f:eb:e5: 5f:92:b9:f5:bc:da:13:10:b1:f3:9e:65:1b:40:f5:e5:10:46: bf:89:a6:f4:40:3b:35:d8:db:17:4b:b8:aa:a6:44:8a:db:42: ab:3a:00:a4:49:e7:5a:1a:92:a2:fd:5a:65:68:b7:a2:b1:72: 09:d6:f8:af -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/gNeZOFjPErqmCTuGyS7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTMwN2Y2MzBhNWQ3ZGJjYzQzMGVhMDIzN2FlN2I3ZDNjOGM4MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJeFgpZfyCEFiTgaDqIn1YMoNhKg wmOR2Yo649dHMNf3wY0SzWbG3oCNbi5PjpAX87Q+9FRFVJXihMzBIOAouBZA9pBH i+29en+4zI8r1FQnZf7uu0a1HNBhDki4xr2DOE/+Irzj45E43SelVItSXsWfI7Z/ qTIAB2vUTmciZ3HN5HFbdk7VSzgpgFwQjRQidgw0mmd7iKXknc6Esqbaiz2eNXcv tFeIli1IeOfwA+aHOeWCL5xP06iv9Wghbe1kfqCVapYBnEIWgOb6lJrTqg3PmI0x mWYGdgqX5s6L9v3ylJXJr5ho1uh/mv1EkoRC16XFVURWIK9t/iKqAqZK4wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJowf2MKXX28xDDqAjeue308jIF+MB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvbWpCX1l3cGRmYnpFTU9vQ042NTdmVHlNZ1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuV8eMA4E AgACMAgDBgAqBRUABDANBgkqhkiG9w0BAQsFAAOCAQEAM27zH/gUf/yrUfTj7pXT hOvCr2806WoQ0iUDfe8y1a+CgnhUcKZPOszNi626O3MNgtXhCf/oOG5k1Wzt0N3a OgdtKWz+BbbyyBw6bnW2UdO73HJbL3PRhgjBAn3l5MZ2UQwUzhHYiSHlcFdFy43k bPQmQ5vmpJEnqH923KssfCOqfJ7tHZevcA/BVX3omMaZAiF9rNTgxR/qk3+iSSHn BAlna4AI77M28BoDqF8mdpk7Box1cGgMxiZWWJF4dgci1gMsf+vlX5K59bzaExCx 855lG0D15RBGv4mm9EA7NdjbF0u4qqZEittCqzoApEnnWhqSov1aZWi3orFyCdb4 rw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:05 2026 by rpki-client