This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa File: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (raw, json) Hash identifier: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks= Subject key identifier: 98:64:D7:1D:4C:E5:A3:C8:D9:38:71:54:98:17:8D:E8:54:48:EC:19 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019B76EB156264585307F1A9695602EF45AB Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51658 IP address blocks: 185.202.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:62:64:58:53:07:f1:a9:69:56:02:ef:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9864d71d4ce5a3c8d938715498178de85448ec19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:b3:fc:12:0a:07:01:27:bd:a9:60:2c:61: c7:23:d5:c7:32:e7:b8:b1:87:34:3a:3b:1a:ae:2c: cd:1a:ff:f1:9a:38:82:93:c7:07:c5:d8:6f:43:52: bf:80:fd:e9:51:7f:97:18:df:e5:74:78:e1:30:2f: 6d:63:01:58:17:f7:61:4e:27:dd:59:40:42:19:d8: 61:1a:88:c3:4e:98:ac:d1:4e:cc:0b:79:a0:b0:9e: fd:28:82:03:57:53:d2:eb:d6:da:a0:40:35:59:fd: 20:2a:e4:1c:04:72:79:bf:e5:4e:52:4b:1a:8b:d9: 79:d2:27:8f:a2:14:08:06:50:d7:02:4f:fc:86:e9: 8a:c5:d9:0d:99:0d:5f:45:1c:36:68:4a:8b:78:d0: 06:e5:16:b2:16:6b:d3:49:0e:6c:74:53:7e:7d:f1: 5b:42:83:ad:a9:c7:81:f8:47:8f:bd:29:54:b2:40: a8:1c:79:31:ea:51:af:31:c4:8a:25:9d:da:90:08: e2:e9:a8:20:c8:8e:14:97:a3:34:fb:4e:fe:ed:6c: 36:77:2d:64:b7:ff:77:0e:73:11:19:5b:ab:d8:de: 35:49:86:86:68:43:a0:4c:95:44:d4:e7:e3:ba:d7: 7e:bc:12:c0:de:d2:a6:70:8a:d8:db:24:1d:82:93: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:64:D7:1D:4C:E5:A3:C8:D9:38:71:54:98:17:8D:E8:54:48:EC:19 X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.133.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b5:37:8f:74:c8:d0:de:5b:43:3e:4f:ea:0b:1d:af:01:d1: cc:53:01:54:c8:0c:85:21:1c:97:d7:3e:c5:49:2b:a3:b3:98: 7b:48:b8:e8:47:72:b4:8d:aa:fc:80:7d:51:84:4a:c9:6e:17: b7:38:89:5a:a0:88:66:28:07:ab:c1:48:68:8b:6e:45:c9:c0: 95:c3:87:4c:a7:23:90:ea:aa:7e:88:23:86:01:e3:ec:7c:0a: 09:30:76:f2:8c:f2:eb:3e:18:59:a3:d1:f9:fe:05:5f:73:e5: ac:21:bc:c9:11:8f:79:f1:e4:8a:c9:83:05:11:f3:29:86:31: a9:23:46:55:2c:a6:28:a2:46:73:5d:f8:2c:0b:ea:fa:90:3a: a6:b3:d1:94:cb:ff:3c:33:f0:36:aa:94:92:4e:86:ac:90:05: 8e:9e:3e:15:d8:25:08:8f:89:cf:da:d6:37:6f:d5:9b:3e:31: a5:eb:d9:5a:29:93:d1:e2:de:2f:19:40:a8:a9:3a:83:c1:b6: 98:e5:bf:cb:ae:49:da:2b:76:97:f7:1b:52:59:26:89:3d:cb: 2c:12:e7:18:69:df:0f:a6:04:47:c3:1e:f5:16:14:c5:36:2e: ce:22:53:11:43:c5:0a:1f:9f:4d:76:6f:09:f7:16:47:3f:24: 0a:33:b5:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xViZFhTB/GpaVYC70WrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODY0ZDcxZDRjZTVhM2M4ZDkzODcxNTQ5ODE3OGRlODU0NDhlYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwOz/BIKBwEnvalgLGHHI9XHMue4 sYc0OjsarizNGv/xmjiCk8cHxdhvQ1K/gP3pUX+XGN/ldHjhMC9tYwFYF/dhTifd WUBCGdhhGojDTpis0U7MC3mgsJ79KIIDV1PS69baoEA1Wf0gKuQcBHJ5v+VOUksa i9l50iePohQIBlDXAk/8humKxdkNmQ1fRRw2aEqLeNAG5RayFmvTSQ5sdFN+ffFb QoOtqceB+EePvSlUskCoHHkx6lGvMcSKJZ3akAji6aggyI4Ul6M0+07+7Ww2dy1k t/93DnMRGVur2N41SYaGaEOgTJVE1Ofjutd+vBLA3tKmcIrY2yQdgpMgNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhk1x1M5aPI2ThxVJgXjehUSOwZMB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEvbUdUWEhVemxvOGpaT0hGVW1CZU42RlJJN0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucqFMA0G CSqGSIb3DQEBCwUAA4IBAQA9tTePdMjQ3ltDPk/qCx2vAdHMUwFUyAyFIRyX1z7F SSujs5h7SLjoR3K0jar8gH1RhErJbhe3OIlaoIhmKAerwUhoi25FycCVw4dMpyOQ 6qp+iCOGAePsfAoJMHbyjPLrPhhZo9H5/gVfc+WsIbzJEY958eSKyYMFEfMphjGp I0ZVLKYookZzXfgsC+r6kDqms9GUy/88M/A2qpSSToaskAWOnj4V2CUIj4nP2tY3 b9WbPjGl69laKZPR4t4vGUCoqTqDwbaY5b/LrknaK3aX9xtSWSaJPcssEucYad8P pgRHwx71FhTFNi7OIlMRQ8UKH59Ndm8J9xZHPyQKM7U1 -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:42 2026 by rpki-client