This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/mMfA_Od6bVQoe9XLziP1BQjaefk.roa File: mMfA_Od6bVQoe9XLziP1BQjaefk.roa (raw, json) Hash identifier: sybseYJpXfIXWEJrTC3jNcJjadRJhSifMo8BV1Ei+q0= Subject key identifier: 98:C7:C0:FC:E7:7A:6D:54:28:7B:D5:CB:CE:23:F5:05:08:DA:79:F9 Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Certificate serial: 019B7EA6929CAEC84C96EDF53886A3648D72 Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/mMfA_Od6bVQoe9XLziP1BQjaefk.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39647 IP address blocks: 185.160.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:92:9c:ae:c8:4c:96:ed:f5:38:86:a3:64:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c7c0fce77a6d54287bd5cbce23f50508da79f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:99:eb:ee:a1:39:01:3f:95:57:2c:dd:40: 65:ab:2a:95:c1:0e:c7:40:86:86:84:46:da:32:b1: f7:c4:d0:42:6c:88:5f:9b:25:42:52:04:b5:5c:a5: e5:84:2f:8f:86:87:3b:86:d2:52:f9:84:e1:f5:7d: e2:48:06:b0:87:b0:90:3a:98:bd:62:63:3d:ef:29: 79:50:c8:b0:83:95:c9:5d:b9:5d:4b:f2:f9:b3:ef: b1:fa:47:50:17:73:69:6c:7d:d6:e0:1e:a1:be:38: 16:11:0f:2d:77:11:cb:21:15:23:73:94:b2:cd:1f: 56:e8:40:1b:a5:b3:7b:38:45:52:0c:bd:1f:0e:c2: 72:e3:d2:80:0b:c0:ed:f3:43:b6:46:9a:14:b1:cc: 51:b1:a5:75:a1:92:2e:cc:af:7b:86:ae:17:98:48: 95:40:1a:50:3a:03:4d:3f:27:c3:39:7b:2d:f3:fc: e1:dd:5d:a2:23:87:85:8f:30:0a:ab:76:65:af:b8: 07:34:dc:2f:50:fb:a9:a6:bb:ab:3f:19:d6:73:aa: d8:17:7e:64:2a:7b:59:82:19:d7:b5:c9:bd:74:7e: 3c:24:e5:a9:d9:aa:e3:3a:a4:5d:b6:b8:53:b2:3a: 00:47:38:0e:50:10:d4:fe:9e:1a:17:1b:21:f4:00: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C7:C0:FC:E7:7A:6D:54:28:7B:D5:CB:CE:23:F5:05:08:DA:79:F9 X509v3 Authority Key Identifier: keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/mMfA_Od6bVQoe9XLziP1BQjaefk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.74.0/23 Signature Algorithm: sha256WithRSAEncryption 76:19:b6:06:14:84:10:4c:81:c2:01:60:91:89:5c:e1:32:01: 3f:01:5e:f4:c8:f7:33:3a:a2:64:88:c8:0f:a9:f6:17:86:fe: a5:20:6e:f8:2d:2b:a1:a6:ab:9b:0e:5b:61:59:3a:c8:76:c8: 4f:60:f0:04:05:34:b0:28:46:db:34:74:44:d0:35:48:36:ca: 0b:fc:57:b9:20:08:1e:e8:59:4b:3e:56:03:de:b6:56:38:88: 1a:e9:33:76:d2:c7:d9:ae:51:11:b0:94:e4:2f:35:03:b1:f0: d1:49:a7:06:89:46:b0:a7:a2:b8:9b:c1:b6:d1:07:ab:40:c1: ef:01:79:09:e1:b0:8b:27:14:ed:ef:bc:d3:69:6d:f9:13:86: 45:f3:1a:47:94:e7:da:82:c8:cd:45:b1:ec:61:2c:43:16:6c: 22:82:26:d1:0f:33:37:3a:b6:bd:9a:12:ef:cb:f7:41:53:db: 06:1e:34:f8:33:07:45:fe:4e:f4:3f:94:96:13:82:6b:37:79: 52:40:ba:0b:03:fc:64:cd:58:40:16:db:7e:f6:2a:5e:8d:cb: e5:4e:4f:36:9c:87:ce:04:4f:58:01:80:c2:12:24:b7:c8:94: 3a:ee:de:e6:a9:e9:25:bd:90:e3:90:20:3d:a3:98:14:a9:fc: 72:f5:88:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppKcrshMlu31OIajZI1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2 ZTg5OTYwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM3YzBmY2U3N2E2ZDU0Mjg3YmQ1Y2JjZTIzZjUwNTA4ZGE3OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveuZ6+6hOQE/lVcs3UBlqyqVwQ7H QIaGhEbaMrH3xNBCbIhfmyVCUgS1XKXlhC+Phoc7htJS+YTh9X3iSAawh7CQOpi9 YmM97yl5UMiwg5XJXbldS/L5s++x+kdQF3NpbH3W4B6hvjgWEQ8tdxHLIRUjc5Sy zR9W6EAbpbN7OEVSDL0fDsJy49KAC8Dt80O2RpoUscxRsaV1oZIuzK97hq4XmEiV QBpQOgNNPyfDOXst8/zh3V2iI4eFjzAKq3Zlr7gHNNwvUPupprurPxnWc6rYF35k KntZghnXtcm9dH48JOWp2arjOqRdtrhTsjoARzgOUBDU/p4aFxsh9ABYfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjHwPznem1UKHvVy84j9QUI2nn5MB8GA1UdIwQY MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt ZjY2MzE3OTc3OTY4LzEvbU1mQV9PZDZiVlFvZTlYTHppUDFCUWphZWZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4 LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaBKMA0G CSqGSIb3DQEBCwUAA4IBAQB2GbYGFIQQTIHCAWCRiVzhMgE/AV70yPczOqJkiMgP qfYXhv6lIG74LSuhpqubDlthWTrIdshPYPAEBTSwKEbbNHRE0DVINsoL/Fe5IAge 6FlLPlYD3rZWOIga6TN20sfZrlERsJTkLzUDsfDRSacGiUawp6K4m8G20QerQMHv AXkJ4bCLJxTt77zTaW35E4ZF8xpHlOfagsjNRbHsYSxDFmwigibRDzM3Ora9mhLv y/dBU9sGHjT4MwdF/k70P5SWE4JrN3lSQLoLA/xkzVhAFtt+9ipejcvlTk82nIfO BE9YAYDCEiS3yJQ67t7mqeklvZDjkCA9o5gUqfxy9YgR -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:00 2026 by rpki-client