This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa File: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (raw, json) Hash identifier: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ= Subject key identifier: 99:BB:84:D0:6E:2D:5D:CB:F1:60:8D:26:EA:8D:4C:9C:2B:88:C8:1A Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Certificate serial: 019B7F1553B57906EE838E9376CF91A27322 Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42567 IP address blocks: 185.7.96.0/22 maxlen: 24 185.94.236.0/22 maxlen: 24 217.22.16.0/21 maxlen: 24 217.22.24.0/22 maxlen: 24 2a05:22c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:53:b5:79:06:ee:83:8e:93:76:cf:91:a2:73:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99bb84d06e2d5dcbf1608d26ea8d4c9c2b88c81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:61:eb:5e:2c:4f:b7:f3:bc:16:46:ba:fb: 2f:11:da:fb:e2:3b:3d:43:6f:52:62:a8:c9:7d:48: 2e:a1:1c:d7:d1:b1:3b:a2:82:db:ff:7a:a2:a7:a9: c7:37:10:2a:89:e0:4a:0a:f8:f2:a1:2f:6c:b5:df: fd:34:ad:c8:2a:d2:29:de:90:01:2a:8c:be:32:e3: 7b:97:ed:be:47:a5:d5:11:59:97:c6:07:89:73:d0: 77:7f:33:2a:de:f6:86:4a:5b:e9:4a:e7:f9:ff:5d: e3:65:2f:09:bd:fe:90:26:4b:c8:4a:a1:2f:d8:f3: ee:f1:aa:6d:a1:67:2d:b7:c2:eb:86:93:25:25:1d: 8d:ed:f4:d9:cf:55:95:65:a5:25:2d:b1:68:a9:cb: 32:c0:8c:9a:7d:b8:cf:17:7a:f8:52:13:56:dc:28: 81:7a:59:db:16:b2:5d:e6:43:e6:a2:ef:74:2c:fe: df:ab:60:0a:2d:92:f7:25:9f:a1:00:56:4f:1e:d3: 36:58:fd:53:be:ca:37:2f:13:f6:b7:90:93:0e:6f: c5:95:77:31:40:6b:c5:5c:b7:ca:4c:bd:0e:6d:e0: 1f:a7:5d:c7:e7:c8:fb:43:4e:f7:cf:4a:aa:e0:11: 10:32:d3:06:4e:53:6b:db:87:90:7f:b5:63:23:d8: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:84:D0:6E:2D:5D:CB:F1:60:8D:26:EA:8D:4C:9C:2B:88:C8:1A X509v3 Authority Key Identifier: keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.96.0/22 185.94.236.0/22 217.22.16.0-217.22.27.255 IPv6: 2a05:22c0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:46:70:4d:d8:ba:be:7c:c3:c6:f2:b0:93:cf:a8:0f:54:d1: e0:bb:59:10:94:5e:07:26:84:95:1e:ed:dd:60:48:17:6b:a1: 5d:54:d0:90:0e:8b:dc:f4:1e:2f:30:95:70:31:30:d9:a7:c1: 8f:11:ea:2f:25:eb:c4:5b:d4:a7:38:7e:bd:c5:1b:9a:01:06: d2:d0:a7:49:a2:b4:a3:36:0f:87:a8:1c:5f:55:64:79:93:9f: 90:12:87:73:99:62:74:45:75:27:7d:8a:bb:64:a9:0c:02:e3: 85:bd:51:86:1b:56:3f:31:c4:09:bc:02:98:89:bc:51:76:41: c3:21:d0:70:09:70:c0:8f:da:31:e2:0d:ec:c7:a9:39:ea:04: 7e:0d:8e:77:24:f6:50:5e:03:ca:bc:d0:a7:56:75:b5:6a:b0: ef:44:3e:dc:0c:c8:07:d1:7b:f9:24:81:6a:49:08:0e:04:ee: 2c:6b:73:a3:b2:e7:04:a9:70:85:92:72:15:4b:2a:78:b0:be: 52:7f:b2:36:fa:b7:24:46:7c:d4:db:70:4b:b9:31:7d:bf:cf: a7:75:23:ed:fe:21:16:30:ee:2b:c4:7c:80:cc:c2:d6:89:ef: 87:ef:da:b2:ec:c1:c1:86:15:a3:de:24:71:71:1e:6e:fc:c3: 7c:6b:e8:00 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/FVO1eQbug46Tds+RonMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3 NzNmYWUwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWJiODRkMDZlMmQ1ZGNiZjE2MDhkMjZlYThkNGM5YzJiODhjODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EVh614sT7fzvBZGuvsvEdr74js9 Q29SYqjJfUguoRzX0bE7ooLb/3qip6nHNxAqieBKCvjyoS9std/9NK3IKtIp3pAB Koy+MuN7l+2+R6XVEVmXxgeJc9B3fzMq3vaGSlvpSuf5/13jZS8Jvf6QJkvISqEv 2PPu8aptoWctt8LrhpMlJR2N7fTZz1WVZaUlLbFoqcsywIyafbjPF3r4UhNW3CiB elnbFrJd5kPmou90LP7fq2AKLZL3JZ+hAFZPHtM2WP1Tvso3LxP2t5CTDm/FlXcx QGvFXLfKTL0ObeAfp13H58j7Q073z0qq4BEQMtMGTlNr24eQf7VjI9jAmwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJm7hNBuLV3L8WCNJuqNTJwriMgaMB8GA1UdIwQY MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt NTNhMDczNjhiOWVhLzEvbWJ1RTBHNHRYY3Z4WUkwbTZvMU1uQ3VJeUJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCuQdgAwQC uV7sMAwDBATZFhADBALZFhgwDQQCAAIwBwMFAyoFIsAwDQYJKoZIhvcNAQELBQAD ggEBAH1GcE3Yur58w8bysJPPqA9U0eC7WRCUXgcmhJUe7d1gSBdroV1U0JAOi9z0 Hi8wlXAxMNmnwY8R6i8l68Rb1Kc4fr3FG5oBBtLQp0mitKM2D4eoHF9VZHmTn5AS h3OZYnRFdSd9irtkqQwC44W9UYYbVj8xxAm8ApiJvFF2QcMh0HAJcMCP2jHiDezH qTnqBH4Njnck9lBeA8q80KdWdbVqsO9EPtwMyAfRe/kkgWpJCA4E7ixrc6Oy5wSp cIWSchVLKniwvlJ/sjb6tyRGfNTbcEu5MX2/z6d1I+3+IRYw7ivEfIDMwtaJ74fv 2rLswcGGFaPeJHFxHm78w3xr6AA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:16 2026 by rpki-client