This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa File: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (raw, json) Hash identifier: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y= Subject key identifier: 31:C3:00:11:78:4B:42:22:7C:CC:63:5E:18:CC:37:51:33:EB:D2:00 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B79101A610C7AEF1273F145925D31A845 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58331 IP address blocks: 185.141.104.0/24 maxlen: 24 185.141.106.0/24 maxlen: 24 185.141.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:61:0c:7a:ef:12:73:f1:45:92:5d:31:a8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31c30011784b42227ccc635e18cc375133ebd200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:b4:bc:08:b1:f3:1f:f8:8c:b9:19:9b:60: a3:53:50:10:5a:9d:8d:a4:c8:2c:a8:4c:85:a2:12: 5a:4f:36:76:7e:0c:e9:3b:47:65:96:6c:8d:28:6e: 79:24:9a:a6:83:26:54:66:ff:42:9f:48:99:0f:52: 97:d7:14:5a:d3:6b:04:af:89:7d:26:2d:4f:18:1f: 73:9c:9d:c7:a2:bb:a4:27:10:a9:80:43:03:ac:01: 4d:39:85:86:69:ef:63:54:17:00:de:eb:50:ce:c0: 88:7a:42:2e:a6:ab:06:db:e9:88:ce:07:f4:31:97: c2:31:56:6f:cb:97:80:8f:56:bc:a1:e3:12:a3:2a: e5:8e:b2:25:85:b4:1b:9e:47:92:da:fd:fb:02:76: 1b:7b:4d:64:8e:06:85:45:78:c0:12:5a:39:f8:59: 60:70:68:99:08:93:6a:67:12:ea:87:80:6e:88:1f: a1:c9:b8:b0:7c:bb:b0:43:d9:83:dd:d7:64:df:9d: dd:53:1a:07:89:42:99:3a:cc:9c:14:5d:33:9a:85: 09:9c:aa:fa:5e:df:d8:b8:1b:27:d3:e5:25:33:a1: e4:13:e1:ac:71:54:d0:23:eb:59:d4:42:f0:15:b5: 67:2f:8b:02:f2:34:ed:62:c7:79:54:ab:e2:c9:ac: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:00:11:78:4B:42:22:7C:CC:63:5E:18:CC:37:51:33:EB:D2:00 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.104.0/24 185.141.106.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:9d:8a:4b:19:d3:29:55:77:89:9a:6b:97:67:4d:bc:45:99: 7f:f6:3e:4d:da:37:fd:8d:77:46:26:04:4d:10:24:a0:da:85: b9:e1:c0:4a:aa:bc:49:4e:97:f6:20:98:8a:98:11:42:01:31: 3e:a5:8a:fd:b8:28:7b:30:e4:65:b1:51:03:27:fe:ce:c1:5c: 7b:0d:b5:a0:71:63:32:18:5e:6f:57:8d:b5:c1:21:19:90:c5: 05:99:94:65:23:04:29:e0:54:80:9b:53:d5:1b:2b:89:79:3f: 88:4a:25:d3:17:68:b4:6f:65:85:c9:d5:f0:ba:eb:a3:e9:b9: 4a:08:47:85:05:f6:3e:55:e5:4e:c0:3d:97:e2:84:c0:9e:47: 01:6c:5b:e1:18:88:e9:c2:a3:4e:7b:d0:ca:7f:b9:57:78:ae: bb:bf:fd:a9:fc:14:32:b3:9c:8e:09:df:f8:f4:e9:ab:22:59: 0f:fb:c3:16:71:8b:30:18:c7:88:bb:1d:ad:7e:be:50:0f:2a: 36:2f:14:c5:fd:16:55:34:47:9a:7b:a2:07:1b:b2:79:5f:7a: 31:57:42:05:a8:98:1c:65:fa:e0:41:b4:2b:25:86:cd:79:05: f2:5b:0b:60:55:e0:14:92:05:2f:4b:eb:68:f1:0d:be:55:c9: 08:18:2f:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EBphDHrvEnPxRZJdMahFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWMzMDAxMTc4NGI0MjIyN2NjYzYzNWUxOGNjMzc1MTMzZWJkMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1O0vAix8x/4jLkZm2CjU1AQWp2N pMgsqEyFohJaTzZ2fgzpO0dllmyNKG55JJqmgyZUZv9Cn0iZD1KX1xRa02sEr4l9 Ji1PGB9znJ3HorukJxCpgEMDrAFNOYWGae9jVBcA3utQzsCIekIupqsG2+mIzgf0 MZfCMVZvy5eAj1a8oeMSoyrljrIlhbQbnkeS2v37AnYbe01kjgaFRXjAElo5+Flg cGiZCJNqZxLqh4BuiB+hybiwfLuwQ9mD3ddk353dUxoHiUKZOsycFF0zmoUJnKr6 Xt/YuBsn0+UlM6HkE+GscVTQI+tZ1ELwFbVnL4sC8jTtYsd5VKviyayi4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDHDABF4S0IifMxjXhjMN1Ez69IAMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvTWNNQUVYaExRaUo4ekdOZUdNdzNVVFByMGdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY1oAwQB uY1qMA0GCSqGSIb3DQEBCwUAA4IBAQAunYpLGdMpVXeJmmuXZ028RZl/9j5N2jf9 jXdGJgRNECSg2oW54cBKqrxJTpf2IJiKmBFCATE+pYr9uCh7MORlsVEDJ/7OwVx7 DbWgcWMyGF5vV421wSEZkMUFmZRlIwQp4FSAm1PVGyuJeT+ISiXTF2i0b2WFydXw uuuj6blKCEeFBfY+VeVOwD2X4oTAnkcBbFvhGIjpwqNOe9DKf7lXeK67v/2p/BQy s5yOCd/49OmrIlkP+8MWcYswGMeIux2tfr5QDyo2LxTF/RZVNEeae6IHG7J5X3ox V0IFqJgcZfrgQbQrJYbNeQXyWwtgVeAUkgUvS+to8Q2+VckIGC+O -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:12 2026 by rpki-client