This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/mmK4BcjEIajvATTw8BCsnASXF-E.roa File: mmK4BcjEIajvATTw8BCsnASXF-E.roa (raw, json) Hash identifier: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg= Subject key identifier: 9A:62:B8:05:C8:C4:21:A8:EF:01:34:F0:F0:10:AC:9C:04:97:17:E1 Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019B7835137992C1EE093F4BEC84CC2040FB Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/mmK4BcjEIajvATTw8BCsnASXF-E.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210281 IP address blocks: 185.135.44.0/24 maxlen: 24 195.178.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:79:92:c1:ee:09:3f:4b:ec:84:cc:20:40:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a62b805c8c421a8ef0134f0f010ac9c049717e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:84:03:6d:01:bc:8d:ed:42:c1:23:8f:98: 6f:50:2d:22:93:fc:bd:5f:db:4a:75:ce:54:de:3a: 95:67:97:b5:b5:c6:89:f8:43:b7:64:31:6d:86:22: 3f:c4:2d:cb:3b:b5:00:f0:78:38:4c:b3:d3:75:37: fc:5b:a7:46:a5:71:99:a7:bd:4a:a0:cd:5c:e2:9f: a0:49:01:b8:e6:5c:7c:43:97:a7:e2:28:5e:9c:db: ad:24:fc:fe:9d:c5:02:5b:43:d8:b0:8b:0d:c2:26: f5:91:6c:1c:88:03:d1:0d:9a:8c:18:12:51:ce:80: 12:14:df:f4:9c:b6:c7:7b:fd:48:1d:5f:d8:82:c2: 02:2b:03:7a:d6:0b:d7:e2:0b:4c:e1:bb:6f:04:c1: 7c:31:7e:b2:06:31:25:2f:bd:f5:5b:66:79:10:ec: 0f:16:98:57:6d:2f:13:d2:9f:85:5c:1f:2a:91:3e: bd:e5:a8:d0:c3:a5:05:38:97:63:78:70:d3:ce:58: 64:c1:46:92:97:98:8c:29:db:31:57:0a:1b:33:c4: cc:7f:9d:bc:1e:e4:48:81:9e:98:18:d4:d1:88:e8: a7:71:45:91:ca:60:a6:7d:d3:28:05:25:de:3f:b7: de:3e:fd:f0:62:1a:89:55:59:c4:6d:b1:86:a0:79: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:62:B8:05:C8:C4:21:A8:EF:01:34:F0:F0:10:AC:9C:04:97:17:E1 X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/mmK4BcjEIajvATTw8BCsnASXF-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.44.0/24 195.178.98.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:37:1b:f4:47:90:9a:d8:54:bf:d5:5a:8c:fc:55:00:b1:d8: 37:7e:37:0d:6c:ec:18:a8:ce:db:7d:93:f5:55:b0:91:da:ac: 91:68:90:a4:f0:76:e2:db:34:3f:39:d1:bb:79:77:8a:22:92: f2:85:0e:27:48:f0:76:61:03:0c:41:04:1c:df:aa:3a:0e:6b: 6e:f5:ad:1d:12:1c:45:e8:d6:8b:33:a6:63:b5:bd:f5:bf:cf: a8:bd:c8:5e:43:30:60:95:05:3d:33:6f:cf:6b:33:fa:ed:93: 42:05:3a:9c:2d:23:63:57:99:6b:8e:18:2b:99:6b:5b:cc:e0: a5:17:88:c4:4d:76:ec:e1:18:2f:12:b2:af:a7:5f:66:1f:a2: 56:a4:9c:2d:3f:55:c7:26:be:b0:18:6c:27:b8:82:db:bc:56: 41:69:8f:84:39:84:af:75:a8:9e:de:67:c0:15:c7:5a:e8:12: c6:31:22:82:5c:e2:60:7e:67:24:2f:c9:36:07:e7:78:58:c4: ce:85:34:20:70:03:3e:8a:8f:8e:72:75:3c:cf:f6:10:f2:d9: ca:44:d8:c8:cc:5e:3c:ae:75:63:a0:f0:95:2b:4e:3d:b7:c2: e7:3d:96:ca:73:d2:71:ba:97:1d:5a:95:9a:33:c0:22:9d:dd: 33:b0:f4:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRN5ksHuCT9L7ITMIED7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTYyYjgwNWM4YzQyMWE4ZWYwMTM0ZjBmMDEwYWM5YzA0OTcxN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0mEA20BvI3tQsEjj5hvUC0ik/y9 X9tKdc5U3jqVZ5e1tcaJ+EO3ZDFthiI/xC3LO7UA8Hg4TLPTdTf8W6dGpXGZp71K oM1c4p+gSQG45lx8Q5en4ihenNutJPz+ncUCW0PYsIsNwib1kWwciAPRDZqMGBJR zoASFN/0nLbHe/1IHV/YgsICKwN61gvX4gtM4btvBMF8MX6yBjElL731W2Z5EOwP FphXbS8T0p+FXB8qkT695ajQw6UFOJdjeHDTzlhkwUaSl5iMKdsxVwobM8TMf528 HuRIgZ6YGNTRiOincUWRymCmfdMoBSXeP7fePv3wYhqJVVnEbbGGoHkJcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJpiuAXIxCGo7wE08PAQrJwElxfhMB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvbW1LNEJjakVJYWp2QVRUdzhCQ3NuQVNYRi1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYcsAwQA w7JiMA0GCSqGSIb3DQEBCwUAA4IBAQA8Nxv0R5Ca2FS/1VqM/FUAsdg3fjcNbOwY qM7bfZP1VbCR2qyRaJCk8Hbi2zQ/OdG7eXeKIpLyhQ4nSPB2YQMMQQQc36o6Dmtu 9a0dEhxF6NaLM6Zjtb31v8+ovcheQzBglQU9M2/PazP67ZNCBTqcLSNjV5lrjhgr mWtbzOClF4jETXbs4RgvErKvp19mH6JWpJwtP1XHJr6wGGwnuILbvFZBaY+EOYSv daie3mfAFcda6BLGMSKCXOJgfmckL8k2B+d4WMTOhTQgcAM+io+OcnU8z/YQ8tnK RNjIzF48rnVjoPCVK049t8LnPZbKc9JxupcdWpWaM8Aind0zsPQW -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:52 2026 by rpki-client