This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/3MgBeBik8U9z4rsKZn1-j_MeR28.roa File: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (raw, json) Hash identifier: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc= Subject key identifier: DC:C8:01:78:18:A4:F1:4F:73:E2:BB:0A:66:7D:7E:8F:F3:1E:47:6F Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019B7B359BA875D8DC5E20878563F94F07C0 Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/3MgBeBik8U9z4rsKZn1-j_MeR28.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1921 IP address blocks: 185.80.188.0/24 maxlen: 24 185.80.189.0/24 maxlen: 24 185.80.190.0/24 maxlen: 24 185.80.191.0/24 maxlen: 24 2a05:7f00:188::/48 maxlen: 48 2a05:7f00:189::/48 maxlen: 48 2a05:7f00:190::/48 maxlen: 48 2a05:7f00:191::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9b:a8:75:d8:dc:5e:20:87:85:63:f9:4f:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc8017818a4f14f73e2bb0a667d7e8ff31e476f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:f3:57:a0:5f:b7:5a:ce:e0:a8:db:4e:ea: b1:7e:bc:01:ad:8a:42:b0:1b:fc:3c:af:d9:76:61: 23:f4:51:1b:24:b2:73:72:48:1f:33:d8:bd:49:51: 1e:68:ce:c7:5a:6e:17:a8:8f:0e:3e:46:e0:50:83: 23:1f:65:48:1c:d7:12:92:62:33:26:ca:13:6c:0a: 64:1d:1e:3a:5a:6a:bc:84:eb:73:7f:03:11:fd:80: dc:07:16:7c:a1:db:03:2e:93:70:d8:69:ae:22:46: 1e:8f:ef:ae:be:11:42:08:eb:3d:8b:12:d5:42:56: 87:c4:2c:a0:4b:37:b4:91:6d:94:89:6d:78:df:d1: 27:e5:7d:ff:8e:0a:3f:3c:1a:da:19:ed:2e:45:6c: 4b:0a:02:77:0a:40:19:35:08:d6:98:ce:ed:84:01: ba:ca:4c:69:02:61:00:96:0b:04:12:d8:55:05:b8: bf:0c:3c:a7:51:bf:76:c7:ba:f7:c1:cc:29:b2:cb: 1e:ec:22:67:71:c9:c1:63:7f:44:aa:7c:fd:21:86: 25:db:89:f6:e8:a3:b5:8a:17:95:a2:c9:63:90:3b: bc:b6:49:f5:da:ba:28:43:c3:60:00:fe:5c:d6:d1: a1:c2:9d:54:69:49:35:58:e8:18:c6:54:8b:91:03: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C8:01:78:18:A4:F1:4F:73:E2:BB:0A:66:7D:7E:8F:F3:1E:47:6F X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/3MgBeBik8U9z4rsKZn1-j_MeR28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.188.0/22 IPv6: 2a05:7f00:188::/47 2a05:7f00:190::/47 Signature Algorithm: sha256WithRSAEncryption 2d:59:47:a7:ed:c8:ff:49:89:2c:63:32:31:9a:f4:4d:fd:08: 80:39:f2:ce:0f:66:62:ad:6f:fd:8d:e6:f6:6b:20:c8:1a:22: f0:ef:54:05:30:d5:64:57:a3:15:8f:62:c0:18:3c:47:ab:6c: 93:6c:a3:ca:92:c1:f0:bf:92:bb:11:13:b2:d9:62:e5:49:67: 3b:10:1a:4f:81:fc:3d:0c:28:bf:a2:b8:7f:4a:e3:a0:3f:27: 12:b3:5a:fa:ae:0d:61:b1:22:01:36:bc:1e:83:7b:bc:d3:61: 56:b7:24:2d:44:c2:ea:6f:79:c7:7e:ed:71:b0:99:c3:65:3a: 78:72:ec:2f:b6:c7:d7:5d:c8:fe:7e:d5:55:d1:16:75:21:a4: 0d:4e:95:6e:5c:2d:80:43:4b:0a:02:00:12:ba:5d:3c:7e:e2: 7b:df:89:71:99:62:81:4a:f0:0c:82:cd:dd:e7:9a:a8:28:fc: 2d:09:46:02:da:e7:bd:85:d7:09:1a:5c:38:f3:82:a4:2b:d0: 8e:2e:17:36:8a:6b:f3:65:ec:a0:78:7e:5a:d6:79:49:ed:52: 95:d8:1b:73:46:13:e8:ea:93:8a:0c:aa:1c:e8:7f:e5:0e:9f: fe:75:2e:f6:81:71:35:9b:ec:d1:2c:d1:82:4a:4e:db:29:89: 0b:b4:43:13 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NZuoddjcXiCHhWP5TwfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2M4MDE3ODE4YTRmMTRmNzNlMmJiMGE2NjdkN2U4ZmYzMWU0NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y/zV6Bft1rO4KjbTuqxfrwBrYpC sBv8PK/ZdmEj9FEbJLJzckgfM9i9SVEeaM7HWm4XqI8OPkbgUIMjH2VIHNcSkmIz JsoTbApkHR46Wmq8hOtzfwMR/YDcBxZ8odsDLpNw2GmuIkYej++uvhFCCOs9ixLV QlaHxCygSze0kW2UiW1439En5X3/jgo/PBraGe0uRWxLCgJ3CkAZNQjWmM7thAG6 ykxpAmEAlgsEEthVBbi/DDynUb92x7r3wcwpssse7CJnccnBY39Eqnz9IYYl24n2 6KO1iheVosljkDu8tkn12rooQ8NgAP5c1tGhwp1UaUk1WOgYxlSLkQMJDwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNzIAXgYpPFPc+K7CmZ9fo/zHkdvMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvM01nQmVCaWs4VTl6NHJzS1puMS1qX01lUjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVC8MBgE AgACMBIDBwEqBX8AAYgDBwEqBX8AAZAwDQYJKoZIhvcNAQELBQADggEBAC1ZR6ft yP9JiSxjMjGa9E39CIA58s4PZmKtb/2N5vZrIMgaIvDvVAUw1WRXoxWPYsAYPEer bJNso8qSwfC/krsRE7LZYuVJZzsQGk+B/D0MKL+iuH9K46A/JxKzWvquDWGxIgE2 vB6De7zTYVa3JC1Ewupvecd+7XGwmcNlOnhy7C+2x9ddyP5+1VXRFnUhpA1OlW5c LYBDSwoCABK6XTx+4nvfiXGZYoFK8AyCzd3nmqgo/C0JRgLa572F1wkaXDjzgqQr 0I4uFzaKa/Nl7KB4flrWeUntUpXYG3NGE+jqk4oMqhzof+UOn/51LvaBcTWb7NEs 0YJKTtspiQu0QxM= -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:50 2026 by rpki-client