This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa File: pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa (raw, json) Hash identifier: sQxhTOTD/GUr5MiuJD9ZZ0PcinvbqcgtboX08lOVang= Subject key identifier: A4:C3:53:03:AA:40:9A:07:0C:82:5F:1B:E9:EF:49:78:72:0A:94:C6 Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff Certificate serial: 019B7A5B243ED92F63663C3E015A6192216B Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57151 IP address blocks: 185.1.142.0/24 maxlen: 24 2001:7f8:dd::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:24:3e:d9:2f:63:66:3c:3e:01:5a:61:92:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c35303aa409a070c825f1be9ef4978720a94c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:37:88:a1:66:4b:20:74:55:39:41:ab:49: 3c:8f:b5:27:7a:58:0f:4e:1c:92:cb:e3:25:5e:88: ab:79:f8:8e:0e:2f:f7:60:2d:a6:f8:be:dc:15:0e: a3:0d:48:8e:fe:79:18:f8:42:71:1d:d8:11:3a:4b: 86:75:c9:02:e6:3b:e9:e5:99:92:2a:8a:76:be:17: c2:c7:5b:02:ac:f6:b4:63:76:16:27:fc:b8:d4:f9: f3:2e:db:89:a8:37:cf:02:65:ec:f9:4f:34:8b:e9: 56:82:0d:0d:e9:8b:09:30:e1:74:ba:39:f9:17:c3: ca:5e:43:d6:31:30:ce:90:f1:0c:bc:47:5a:c0:5d: 2e:c3:d0:a7:4e:1d:0d:4e:fa:0a:eb:f5:65:e2:65: f2:4f:ac:d8:e0:76:ff:22:0d:2c:7a:46:79:37:e9: 61:23:af:4e:01:99:f9:8d:fc:7a:11:2d:d9:39:2c: bd:1f:6c:b1:6a:e5:94:64:93:89:41:cd:e0:71:5d: c5:7e:24:ac:f7:e1:66:77:38:f5:42:ac:b8:57:4f: 4e:52:4c:27:39:2b:81:e0:bc:0c:b8:64:8f:95:e9: 41:39:e3:c8:7c:d5:4f:50:cd:39:fd:f4:6d:da:b9: d9:7c:31:f8:1f:38:73:25:90:5c:a6:c6:8b:8c:76: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C3:53:03:AA:40:9A:07:0C:82:5F:1B:E9:EF:49:78:72:0A:94:C6 X509v3 Authority Key Identifier: keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.142.0/24 IPv6: 2001:7f8:dd::/48 Signature Algorithm: sha256WithRSAEncryption 1b:f3:cd:73:e0:11:62:90:a9:17:87:1a:ad:8e:f3:91:4f:e4: e6:f6:1d:78:d6:1a:fb:2a:3d:7e:dd:54:9d:1f:c7:1f:bc:c4: 85:4d:ef:44:3c:86:71:81:14:b4:3b:04:ce:b8:36:29:a9:91: fd:69:0f:0e:e2:db:95:10:2e:85:7d:40:68:a2:5c:d4:fb:be: d8:21:50:91:e9:e0:7e:18:37:fd:0e:46:f1:2a:56:39:8d:87: 44:3c:0e:4f:22:b3:39:73:c6:76:e7:ed:30:48:e2:6c:fc:0e: 33:84:9b:c7:2a:c8:24:bc:13:17:f7:2b:e3:ea:30:9f:ad:89: 4a:5d:8c:05:5e:bd:10:cc:26:b1:8c:37:54:8b:8c:50:02:7e: 8e:30:f4:9c:5a:10:f7:d5:5f:a2:37:88:3c:be:88:1b:29:60: 54:09:4d:15:a5:8e:66:69:a5:a3:e1:de:1c:23:07:bf:95:de: b0:e9:1d:c3:c3:3d:c6:a7:bc:77:85:c0:7e:3e:36:58:28:cb: 80:53:bf:e2:d2:c1:6a:8e:3a:99:02:78:bc:a8:d3:75:b7:13: 3c:56:7b:32:d1:8b:43:01:2e:0d:66:2e:e6:48:a8:5b:f7:87: a3:64:0e:fc:00:9e:17:b2:56:66:7c:13:44:db:38:88:94:c1: 06:94:ca:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WyQ+2S9jZjw+AVphkiFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU5NzQ3MGM2M2ZkYTE0YzMyNjVlYjc0MWE3MGUzYThi NjlhZmYwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGMzNTMwM2FhNDA5YTA3MGM4MjVmMWJlOWVmNDk3ODcyMGE5NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpM3iKFmSyB0VTlBq0k8j7UnelgP ThySy+MlXoirefiODi/3YC2m+L7cFQ6jDUiO/nkY+EJxHdgROkuGdckC5jvp5ZmS Kop2vhfCx1sCrPa0Y3YWJ/y41PnzLtuJqDfPAmXs+U80i+lWgg0N6YsJMOF0ujn5 F8PKXkPWMTDOkPEMvEdawF0uw9CnTh0NTvoK6/Vl4mXyT6zY4Hb/Ig0sekZ5N+lh I69OAZn5jfx6ES3ZOSy9H2yxauWUZJOJQc3gcV3FfiSs9+Fmdzj1Qqy4V09OUkwn OSuB4LwMuGSPlelBOePIfNVPUM05/fRt2rnZfDH4HzhzJZBcpsaLjHY1+QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKTDUwOqQJoHDIJfG+nvSXhyCpTGMB8GA1UdIwQY MBaAFFGel0cMY/2hTDJl63QacOOotpr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo2WFJ3eGpfYUZNTW1YcmRCcHc0NmkybXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZmQ5MTAtNzhiYy00NDJhLTg4YWMt OGM1MmRlNmZhODg4LzEvcE1OVEE2cEFtZ2NNZ2w4YjZlOUplSElLbE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZmQ5MTAtNzhiYy00NDJhLTg4YWMtOGM1MmRlNmZhODg4 LzEvVVo2WFJ3eGpfYUZNTW1YcmRCcHc0NmkybXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGOMA8E AgACMAkDBwAgAQf4AN0wDQYJKoZIhvcNAQELBQADggEBABvzzXPgEWKQqReHGq2O 85FP5Ob2HXjWGvsqPX7dVJ0fxx+8xIVN70Q8hnGBFLQ7BM64Nimpkf1pDw7i25UQ LoV9QGiiXNT7vtghUJHp4H4YN/0ORvEqVjmNh0Q8Dk8iszlzxnbn7TBI4mz8DjOE m8cqyCS8Exf3K+PqMJ+tiUpdjAVevRDMJrGMN1SLjFACfo4w9JxaEPfVX6I3iDy+ iBspYFQJTRWljmZppaPh3hwjB7+V3rDpHcPDPcanvHeFwH4+Nlgoy4BTv+LSwWqO OpkCeLyo03W3EzxWezLRi0MBLg1mLuZIqFv3h6NkDvwAnheyVmZ8E0TbOIiUwQaU yiw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:54 2026 by rpki-client