This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/MJofjdkMEmgx2BydUOl_6hfgSP0.roa File: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (raw, json) Hash identifier: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk= Subject key identifier: 30:9A:1F:8D:D9:0C:12:68:31:D8:1C:9D:50:E9:7F:EA:17:E0:48:FD Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Certificate serial: 019B7F144D5B74C923400890FD401BCFA306 Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/MJofjdkMEmgx2BydUOl_6hfgSP0.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204720 IP address blocks: 185.141.224.0/24 maxlen: 24 185.141.225.0/24 maxlen: 24 185.141.226.0/24 maxlen: 24 185.141.227.0/24 maxlen: 24 2a0c:4480:1::/48 maxlen: 48 2a0c:4480:2::/48 maxlen: 48 2a0c:4480:3::/48 maxlen: 48 2a0c:4480:6::/48 maxlen: 48 2a0c:4480:7::/48 maxlen: 48 2a0c:4480:8::/48 maxlen: 48 2a0c:4480:9::/48 maxlen: 48 2a0c:4480:a::/48 maxlen: 48 2a0c:4480:b::/48 maxlen: 48 2a0c:4480:c::/48 maxlen: 48 2a0c:4480:d::/48 maxlen: 48 2a0c:4481::/48 maxlen: 48 2a0c:4481:1::/48 maxlen: 48 2a0c:4481:2::/48 maxlen: 48 2a0c:4481:3::/48 maxlen: 48 2a0c:4481:4::/48 maxlen: 48 2a0c:4481:5::/48 maxlen: 48 2a0c:4481:6::/48 maxlen: 48 2a0c:4481:7::/48 maxlen: 48 2a0c:4481:8::/48 maxlen: 48 2a0c:4481:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4d:5b:74:c9:23:40:08:90:fd:40:1b:cf:a3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=309a1f8dd90c126831d81c9d50e97fea17e048fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:a3:78:c0:a2:70:73:cf:f0:ad:99:a6:74: 68:a2:bc:e9:91:11:b5:95:33:1c:9f:73:27:2a:c6: 20:a1:ca:33:aa:d0:21:18:3d:be:cf:f0:07:0c:5a: 64:e9:77:4e:65:e1:a7:58:a3:a3:0f:eb:80:23:4b: 80:20:43:9f:58:7d:ee:35:63:f4:c2:04:7a:e3:22: c1:0f:46:ea:07:26:08:8d:13:d2:dc:91:7d:f2:c7: f8:5d:a3:c1:8c:62:a6:f4:06:57:04:ed:20:c6:13: 67:2f:c2:83:d2:be:de:a3:8e:10:3c:3f:cd:51:6d: ef:ae:37:5c:40:16:b9:2f:e9:f1:69:26:b0:2e:14: a5:b3:1a:09:c7:27:49:37:6e:0d:21:44:80:05:ac: 51:b5:20:eb:34:3e:27:5c:0b:4a:99:c6:a8:9a:3f: 34:4f:7f:02:db:5c:91:38:58:28:31:58:2e:a5:4f: 0a:26:91:6c:67:0d:ce:d7:bd:7f:cf:88:3d:ff:10: 85:09:a1:dd:16:fa:3f:61:ce:85:fa:b4:34:36:e5: 51:1f:84:39:d2:8b:fc:08:cc:32:7b:db:71:2b:c7: 11:30:34:ba:7b:4c:31:90:cd:62:3c:a4:ae:34:94: f1:0d:74:18:8a:88:fa:c8:6a:c4:be:fb:a1:c2:0b: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:1F:8D:D9:0C:12:68:31:D8:1C:9D:50:E9:7F:EA:17:E0:48:FD X509v3 Authority Key Identifier: keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/MJofjdkMEmgx2BydUOl_6hfgSP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.224.0/22 IPv6: 2a0c:4480:1::-2a0c:4480:3:ffff:ffff:ffff:ffff:ffff 2a0c:4480:6::-2a0c:4480:d:ffff:ffff:ffff:ffff:ffff 2a0c:4481::-2a0c:4481:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 78:af:88:2e:be:4f:f4:96:11:0e:9e:a4:64:12:f7:21:14:59: ff:b2:12:6c:7e:f3:ba:1c:34:e1:29:6b:66:71:b0:c5:7f:7a: b4:ab:03:cf:f9:94:54:8e:41:97:1f:37:a7:ed:f1:b7:bb:36: f0:b2:b6:dc:91:76:7b:37:d2:49:c5:f7:b6:d6:2b:38:bd:58: d0:d6:2b:cf:cf:df:01:4a:1d:d6:d1:a7:85:59:24:27:ce:2e: 5f:94:20:07:fb:91:a2:d5:fa:88:25:46:01:ca:6e:29:67:cf: c1:09:e1:4f:ae:31:ce:71:59:77:2d:c2:db:7a:09:b6:73:78: f5:9d:aa:bb:25:81:f4:9a:cf:7c:d5:06:73:40:34:24:f9:77: 1c:4a:6d:d7:92:05:99:83:56:7d:4e:5d:96:eb:97:90:9a:1b: 5e:60:44:6e:f2:89:cd:fa:ad:e3:cc:c5:47:54:ff:6c:df:9d: c2:d5:21:e5:e0:2b:1a:cb:d1:fa:44:b9:5c:1d:84:64:9c:db: f7:3a:6f:0c:36:28:8f:0e:56:28:ca:a8:a3:1c:5b:3c:a0:c3: a1:b9:77:5d:f1:23:e5:8f:99:db:58:24:18:62:22:5c:15:da: dd:27:67:fe:d9:40:5e:07:81:f2:ef:6e:7b:f3:2e:75:21:49: 6f:1b:e4:ba -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/FE1bdMkjQAiQ/UAbz6MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0 ZWI3YjkwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDlhMWY4ZGQ5MGMxMjY4MzFkODFjOWQ1MGU5N2ZlYTE3ZTA0OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZejeMCicHPP8K2ZpnRoorzpkRG1 lTMcn3MnKsYgocozqtAhGD2+z/AHDFpk6XdOZeGnWKOjD+uAI0uAIEOfWH3uNWP0 wgR64yLBD0bqByYIjRPS3JF98sf4XaPBjGKm9AZXBO0gxhNnL8KD0r7eo44QPD/N UW3vrjdcQBa5L+nxaSawLhSlsxoJxydJN24NIUSABaxRtSDrND4nXAtKmcaomj80 T38C21yROFgoMVgupU8KJpFsZw3O171/z4g9/xCFCaHdFvo/Yc6F+rQ0NuVRH4Q5 0ov8CMwye9txK8cRMDS6e0wxkM1iPKSuNJTxDXQYioj6yGrEvvuhwgucVwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDCaH43ZDBJoMdgcnVDpf+oX4Ej9MB8GA1UdIwQY MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt NzU2OGExMGRmNDQzLzEvTUpvZmpka01FbWd4MkJ5ZFVPbF82aGZnU1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAMBAIAATAGAwQCuY3gMEAE AgACMDowEgMHACoMRIAAAQMHAioMRIAAADASAwcBKgxEgAAGAwcBKgxEgAAMMBAD BQAqDESBAwcBKgxEgQAIMA0GCSqGSIb3DQEBCwUAA4IBAQB4r4guvk/0lhEOnqRk EvchFFn/shJsfvO6HDThKWtmcbDFf3q0qwPP+ZRUjkGXHzen7fG3uzbwsrbckXZ7 N9JJxfe21is4vVjQ1ivPz98BSh3W0aeFWSQnzi5flCAH+5Gi1fqIJUYBym4pZ8/B CeFPrjHOcVl3LcLbegm2c3j1naq7JYH0ms981QZzQDQk+XccSm3XkgWZg1Z9Tl2W 65eQmhteYERu8onN+q3jzMVHVP9s353C1SHl4Csay9H6RLlcHYRknNv3Om8MNiiP DlYoyqijHFs8oMOhuXdd8SPlj5nbWCQYYiJcFdrdJ2f+2UBeB4Hy72578y51IUlv G+S6 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:46 2026 by rpki-client