This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa File: Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa (raw, json) Hash identifier: QSO9mmv4K2NyhZinj8I/GzIYb/RrAcM6Y8mv7blhZ40= Subject key identifier: 32:6D:DC:19:6B:B3:83:B8:32:4E:DD:B9:32:B0:3F:09:BF:16:63:25 Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Certificate serial: 019B79ED65423662A8AD065FB096D689FCD5 Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 45.82.184.0/22 maxlen: 22 194.176.127.0/24 maxlen: 24 2a0e:7180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:42:36:62:a8:ad:06:5f:b0:96:d6:89:fc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=326ddc196bb383b8324eddb932b03f09bf166325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:af:71:e9:77:7d:70:7b:03:ed:f2:9e:c1:2c: 85:ee:a6:5c:bc:c4:be:5b:8f:e3:2b:00:07:cf:04: 89:80:af:ef:1e:a7:2d:81:a2:b0:d2:b6:ca:ba:e6: 80:8b:48:46:d9:51:89:87:0b:05:41:6d:de:7f:3d: cf:d8:67:3f:6d:be:d2:b2:ff:41:10:df:6b:dc:87: f9:50:2d:04:dd:24:d0:df:63:ce:fa:5a:d0:0f:03: 49:71:8f:f0:a9:48:48:b8:9d:7f:9b:1c:7d:b6:03: 32:17:24:d1:a7:ed:b6:70:22:90:75:0b:02:9a:3a: fd:45:a3:9a:86:70:dc:cf:eb:92:35:66:1d:c5:7d: 71:94:14:05:9e:b2:ad:e6:ad:22:3b:25:8e:81:6d: f4:11:ee:99:a0:39:de:91:84:ee:ef:ec:34:6e:ff: 2a:48:bf:9b:f0:4e:77:38:e7:bd:28:b4:36:12:f4: 8c:6b:c1:1a:85:84:cd:bb:ab:8e:c2:db:a7:9e:2d: 81:17:c2:c5:60:aa:31:f1:ab:dd:38:5b:cb:c7:20: b5:af:53:08:3b:c9:7d:b2:5a:b5:bd:24:2a:7a:9c: 96:53:a6:2c:fc:ef:52:d1:57:98:dc:02:dd:ba:45: 50:a6:ef:8e:ae:12:1c:24:9d:5c:19:b3:ec:bc:1d: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:DC:19:6B:B3:83:B8:32:4E:DD:B9:32:B0:3F:09:BF:16:63:25 X509v3 Authority Key Identifier: keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.184.0/22 194.176.127.0/24 IPv6: 2a0e:7180::/29 Signature Algorithm: sha256WithRSAEncryption 61:a0:09:93:69:d2:db:57:f6:f5:28:a4:18:07:37:cd:65:d3: 96:97:a8:12:fc:f1:d9:47:93:34:84:d2:e7:af:4e:ce:92:74: f0:d0:d0:28:c2:c7:96:d5:ed:8e:07:1e:7d:6b:f5:bd:db:0f: 98:2d:ff:77:3b:bc:74:69:80:ce:6e:fb:e0:c0:c2:a1:80:7f: 81:a6:17:cc:b1:f5:72:28:2b:88:fc:ee:53:90:24:7a:4a:93: 51:f9:d0:81:e0:d3:7f:52:b2:be:17:b2:e8:98:7a:e6:a3:0c: 3c:c1:13:91:b7:ce:7c:c4:30:42:3e:a7:41:57:76:05:0a:44: 08:d1:c2:3d:4d:72:41:52:cc:fd:9e:05:75:f7:67:f2:d6:f7: 0a:59:e3:0a:63:7d:d5:5f:46:01:ac:c9:71:11:e1:54:fc:7a: 29:6a:b3:74:28:77:55:01:86:5c:e7:39:61:2a:94:76:eb:ea: a9:f9:69:ba:2c:11:c9:45:5d:95:5f:f4:b3:6e:d2:fb:1b:ad: e4:3b:53:b8:17:ab:b6:8e:65:75:6f:3e:e6:b4:8a:ac:82:96: 9f:6b:81:77:3e:25:f4:09:c5:6f:10:a3:ef:c1:3c:84:b1:8d: 51:ab:31:f9:16:d9:9f:5d:4d:78:d0:8c:43:5b:4f:d8:0e:d1: 13:87:60:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57WVCNmKorQZfsJbWifzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2 N2MwODQwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjZkZGMxOTZiYjM4M2I4MzI0ZWRkYjkzMmIwM2YwOWJmMTY2MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA969x6Xd9cHsD7fKewSyF7qZcvMS+ W4/jKwAHzwSJgK/vHqctgaKw0rbKuuaAi0hG2VGJhwsFQW3efz3P2Gc/bb7Ssv9B EN9r3If5UC0E3STQ32PO+lrQDwNJcY/wqUhIuJ1/mxx9tgMyFyTRp+22cCKQdQsC mjr9RaOahnDcz+uSNWYdxX1xlBQFnrKt5q0iOyWOgW30Ee6ZoDnekYTu7+w0bv8q SL+b8E53OOe9KLQ2EvSMa8EahYTNu6uOwtunni2BF8LFYKox8avdOFvLxyC1r1MI O8l9slq1vSQqepyWU6Ys/O9S0VeY3ALdukVQpu+OrhIcJJ1cGbPsvB0QmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDJt3Blrs4O4Mk7duTKwPwm/FmMlMB8GA1UdIwQY MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt NDdjOTUwMzM2ZTJmLzEvTW0zY0dXdXpnN2d5VHQyNU1yQV9DYjhXWXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVK4AwQA wrB/MA0EAgACMAcDBQMqDnGAMA0GCSqGSIb3DQEBCwUAA4IBAQBhoAmTadLbV/b1 KKQYBzfNZdOWl6gS/PHZR5M0hNLnr07OknTw0NAowseW1e2OBx59a/W92w+YLf93 O7x0aYDObvvgwMKhgH+BphfMsfVyKCuI/O5TkCR6SpNR+dCB4NN/UrK+F7LomHrm oww8wRORt858xDBCPqdBV3YFCkQI0cI9TXJBUsz9ngV192fy1vcKWeMKY33VX0YB rMlxEeFU/HoparN0KHdVAYZc5zlhKpR26+qp+Wm6LBHJRV2VX/SzbtL7G63kO1O4 F6u2jmV1bz7mtIqsgpafa4F3PiX0CcVvEKPvwTyEsY1RqzH5FtmfXU140IxDW0/Y DtETh2CU -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:23 2026 by rpki-client