This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/MsnqFaljx-vLs6R1klCk-k4mqbE.roa File: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (raw, json) Hash identifier: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc= Subject key identifier: 32:C9:EA:15:A9:63:C7:EB:CB:B3:A4:75:92:50:A4:FA:4E:26:A9:B1 Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Certificate serial: 019B7E3860DB1ED38B8B41425E5A0B0F1445 Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/MsnqFaljx-vLs6R1klCk-k4mqbE.roa Signing time: Fri 02 Jan 2026 10:19:42 +0000 ROA not before: Fri 02 Jan 2026 10:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61162 IP address blocks: 185.133.68.0/22 maxlen: 24 193.104.32.0/24 maxlen: 24 2a05:2440::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:60:db:1e:d3:8b:8b:41:42:5e:5a:0b:0f:14:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32c9ea15a963c7ebcbb3a4759250a4fa4e26a9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:ee:ee:6a:73:25:4a:09:1d:9e:eb:f0:a9: 2d:50:fa:59:a2:dc:34:51:ea:96:d5:10:5c:f1:b6: 38:94:23:2d:a7:46:8c:da:cf:32:d8:9b:5c:98:99: 82:7f:fb:9e:96:3a:87:96:b5:a7:b0:d0:9c:07:0f: 48:95:ee:b7:dd:98:dc:8e:9b:63:01:e3:e1:00:85: d9:ef:9a:24:34:90:34:1e:07:bc:42:23:a5:5c:01: 4f:88:f1:e8:d7:e2:79:b0:e8:ba:7c:45:f1:65:d4: 6e:43:52:ed:23:50:70:14:20:51:f6:21:9c:3f:72: 03:88:ce:fc:fd:4b:be:9f:4a:d8:be:8a:ae:c2:80: 80:05:a2:d2:3d:1e:5a:91:64:81:66:69:bc:a2:7a: 27:ad:f1:3b:a2:f7:6e:97:6d:56:f8:38:c1:95:04: c0:c1:ec:10:9b:cf:45:f8:be:8b:46:23:9b:e8:e5: f4:f0:fa:c5:f4:da:cc:9f:c9:62:10:05:fe:32:61: 5c:5d:1d:f2:53:5b:f4:94:48:d0:c4:7e:96:4e:c5: ec:80:15:88:05:91:c5:e4:09:27:90:53:ba:d4:75: 09:b0:d1:f1:73:44:b1:ec:23:83:e9:b5:e6:ea:84: 69:a4:3b:45:8c:55:bd:12:cc:6f:1e:34:b4:32:48: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:EA:15:A9:63:C7:EB:CB:B3:A4:75:92:50:A4:FA:4E:26:A9:B1 X509v3 Authority Key Identifier: keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/MsnqFaljx-vLs6R1klCk-k4mqbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.68.0/22 193.104.32.0/24 IPv6: 2a05:2440::/29 Signature Algorithm: sha256WithRSAEncryption 32:26:a1:8d:11:83:ab:f2:aa:db:cd:54:e5:5c:14:b8:f1:db: cf:49:a0:17:97:ce:68:10:6e:09:61:7c:e5:c4:7d:36:66:26: 0f:28:52:4f:09:b2:0f:aa:df:4e:60:12:77:43:b4:9e:6a:d7: d9:00:2b:53:d0:86:ab:3b:65:e9:e8:6a:00:ab:c6:7f:71:f0: f2:72:ac:4c:a7:e5:20:a3:4f:06:ab:18:ea:08:0f:88:27:ed: b8:cb:cf:77:ed:37:53:aa:a3:7a:16:ef:99:a4:c4:20:76:78: 69:55:4e:50:0d:ff:d0:3a:33:05:6f:24:fc:f7:ff:98:b4:6f: a0:ad:7c:c0:1a:74:5e:cc:40:44:88:10:51:2f:29:f5:cb:fa: 88:1b:c7:d7:26:62:ad:c4:f2:09:3b:f1:61:fe:b6:36:6b:de: 03:ea:18:56:29:43:d9:e8:eb:7d:38:aa:53:0e:54:8f:97:1d: 34:4e:3b:d1:32:f6:0d:a6:5e:f7:38:5a:71:e5:7e:e5:1c:9b: b7:2c:21:0a:5d:2e:a5:e1:0b:67:ab:d7:fd:8d:f8:40:81:d1: 6a:7e:9e:d5:53:da:31:0a:06:c8:74:02:8d:45:10:61:47:a9: 20:f3:5e:48:1b:44:13:6d:a5:3b:a0:0b:4a:78:52:df:e0:b9: 8e:2a:dd:e6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OGDbHtOLi0FCXloLDxRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2 NWE2MDYwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmM5ZWExNWE5NjNjN2ViY2JiM2E0NzU5MjUwYTRmYTRlMjZhOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn47u7mpzJUoJHZ7r8KktUPpZotw0 UeqW1RBc8bY4lCMtp0aM2s8y2JtcmJmCf/ueljqHlrWnsNCcBw9Ile633Zjcjptj AePhAIXZ75okNJA0Hge8QiOlXAFPiPHo1+J5sOi6fEXxZdRuQ1LtI1BwFCBR9iGc P3IDiM78/Uu+n0rYvoquwoCABaLSPR5akWSBZmm8ononrfE7ovdul21W+DjBlQTA wewQm89F+L6LRiOb6OX08PrF9NrMn8liEAX+MmFcXR3yU1v0lEjQxH6WTsXsgBWI BZHF5AknkFO61HUJsNHxc0Sx7COD6bXm6oRppDtFjFW9EsxvHjS0MkgbxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDLJ6hWpY8fry7OkdZJQpPpOJqmxMB8GA1UdIwQY MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt N2M5OTgwNzlhNmE5LzEvTXNucUZhbGp4LXZMczZSMWtsQ2stazRtcWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5 LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYVEAwQA wWggMA0EAgACMAcDBQMqBSRAMA0GCSqGSIb3DQEBCwUAA4IBAQAyJqGNEYOr8qrb zVTlXBS48dvPSaAXl85oEG4JYXzlxH02ZiYPKFJPCbIPqt9OYBJ3Q7SeatfZACtT 0IarO2Xp6GoAq8Z/cfDycqxMp+Ugo08GqxjqCA+IJ+24y8937TdTqqN6Fu+ZpMQg dnhpVU5QDf/QOjMFbyT89/+YtG+grXzAGnRezEBEiBBRLyn1y/qIG8fXJmKtxPIJ O/Fh/rY2a94D6hhWKUPZ6Ot9OKpTDlSPlx00TjvRMvYNpl73OFpx5X7lHJu3LCEK XS6l4Qtnq9f9jfhAgdFqfp7VU9oxCgbIdAKNRRBhR6kg815IG0QTbaU7oAtKeFLf 4LmOKt3m -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:42 2026 by rpki-client