This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/MP9GV1aDbU5FCATFFEpagOxKq5E.roa File: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (raw, json) Hash identifier: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM= Subject key identifier: 30:FF:46:57:56:83:6D:4E:45:08:04:C5:14:4A:5A:80:EC:4A:AB:91 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E99A9D09E88BF94B76A56445BFEA Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/MP9GV1aDbU5FCATFFEpagOxKq5E.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44024 IP address blocks: 185.225.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e9:9a:9d:09:e8:8b:f9:4b:76:a5:64:45:bf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30ff465756836d4e450804c5144a5a80ec4aab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:a0:1a:3f:86:81:50:ea:f4:7f:bf:cf:9a: dd:16:6b:26:33:1a:c6:2b:e6:96:82:29:29:32:55: df:f6:e9:90:7c:13:55:88:be:4a:ca:56:d2:34:e6: 9b:dd:d2:a3:f5:7f:37:95:60:0a:88:c6:ae:7e:bd: 5b:33:01:3f:8d:4f:14:d1:57:60:58:ac:81:be:55: ac:d1:20:09:25:b2:1a:cf:67:65:d6:73:b6:25:a4: c9:d0:02:c1:6f:35:17:06:2a:a9:a5:52:b2:9c:5a: 7f:65:37:99:34:79:91:4a:4a:60:55:6e:fc:b1:f9: f5:83:4f:a4:1b:5e:70:a3:66:bb:30:35:52:e7:fe: 67:5c:a9:36:54:3a:ea:d6:84:af:71:89:f7:f8:38: 7f:5b:0f:3f:b5:24:df:63:c3:b7:b8:01:90:b1:d9: 0c:81:2e:80:59:bb:9c:f3:c2:3a:57:1f:bb:73:8e: 3e:fd:36:1c:b5:c7:5f:34:14:90:8f:36:5a:7f:e7: c7:cf:7a:76:ef:90:d1:69:d0:71:36:15:05:ae:c1: 88:38:52:1c:15:33:00:f3:7d:40:8c:9b:5f:b8:e4: 78:83:5e:79:23:35:2f:7b:9f:dd:41:be:db:81:aa: 62:03:84:12:f2:c3:92:4a:bf:3f:54:d4:72:b1:0a: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FF:46:57:56:83:6D:4E:45:08:04:C5:14:4A:5A:80:EC:4A:AB:91 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/MP9GV1aDbU5FCATFFEpagOxKq5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.207.0/24 Signature Algorithm: sha256WithRSAEncryption 34:07:0b:f0:f2:aa:ba:1a:62:e8:c0:37:a8:7c:17:a9:6d:c3: 2b:1c:2e:45:67:8e:b0:17:48:f3:d1:30:7c:f9:0f:b2:82:ac: 64:06:0d:68:8a:8f:84:a4:9c:d4:e6:0d:37:4e:c1:de:3a:ff: 53:08:8f:aa:10:b1:c0:1f:6c:24:f8:0e:2d:3d:94:c7:a9:03: 6c:00:07:32:19:6e:6d:e3:f8:85:d4:d9:cb:7f:44:0e:43:3e: 21:39:2a:da:60:4e:12:46:d1:77:39:cf:e5:ee:aa:60:06:82: 6b:87:92:24:4e:99:83:06:28:6c:42:f1:be:d5:84:90:27:4e: 61:19:d2:5a:02:1f:93:de:d9:6b:77:fe:80:b1:d8:af:aa:0e: b1:6c:2f:2f:d6:a4:45:6b:4a:d6:b5:90:17:df:4e:13:00:1d: 7d:98:94:c5:85:c5:ea:ac:3c:4d:80:de:8f:63:35:0e:34:86: fd:61:5a:41:88:57:39:ef:12:b3:51:49:ee:52:cb:2a:e2:6d: ff:69:dd:fe:75:eb:53:b6:60:76:14:47:e2:ae:9c:6e:2a:b5: 22:71:80:85:ea:a8:b8:bf:e1:2f:b6:b9:5b:b6:2f:30:c4:e1: 8d:b4:42:72:f4:bb:a3:a2:cc:20:37:72:b1:4f:2e:3c:7c:53: 45:57:af:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOmanQnoi/lLdqVkRb/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGZmNDY1NzU2ODM2ZDRlNDUwODA0YzUxNDRhNWE4MGVjNGFhYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDigGj+GgVDq9H+/z5rdFmsmMxrG K+aWgikpMlXf9umQfBNViL5KylbSNOab3dKj9X83lWAKiMaufr1bMwE/jU8U0Vdg WKyBvlWs0SAJJbIaz2dl1nO2JaTJ0ALBbzUXBiqppVKynFp/ZTeZNHmRSkpgVW78 sfn1g0+kG15wo2a7MDVS5/5nXKk2VDrq1oSvcYn3+Dh/Ww8/tSTfY8O3uAGQsdkM gS6AWbuc88I6Vx+7c44+/TYctcdfNBSQjzZaf+fHz3p275DRadBxNhUFrsGIOFIc FTMA831AjJtfuOR4g155IzUve5/dQb7bgapiA4QS8sOSSr8/VNRysQpX7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDD/RldWg21ORQgExRRKWoDsSquRMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvTVA5R1YxYURiVTVGQ0FURkZFcGFnT3hLcTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHPMA0G CSqGSIb3DQEBCwUAA4IBAQA0Bwvw8qq6GmLowDeofBepbcMrHC5FZ46wF0jz0TB8 +Q+ygqxkBg1oio+EpJzU5g03TsHeOv9TCI+qELHAH2wk+A4tPZTHqQNsAAcyGW5t 4/iF1NnLf0QOQz4hOSraYE4SRtF3Oc/l7qpgBoJrh5IkTpmDBihsQvG+1YSQJ05h GdJaAh+T3tlrd/6Asdivqg6xbC8v1qRFa0rWtZAX304TAB19mJTFhcXqrDxNgN6P YzUONIb9YVpBiFc57xKzUUnuUssq4m3/ad3+detTtmB2FEfirpxuKrUicYCF6qi4 v+Evtrlbti8wxOGNtEJy9LujoswgN3KxTy48fFNFV69H -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:28 2026 by rpki-client