This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa File: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (raw, json) Hash identifier: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk= Subject key identifier: 31:63:BA:33:A3:09:E1:B3:E9:AD:80:B5:1B:14:FB:7F:04:C2:30:1E Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Certificate serial: 019B7D5CD977E1D361B8FD7C84A55AC2405A Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61239 IP address blocks: 185.12.100.0/22 maxlen: 22 185.12.100.0/24 maxlen: 24 185.12.101.0/24 maxlen: 24 185.12.102.0/24 maxlen: 24 185.12.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d9:77:e1:d3:61:b8:fd:7c:84:a5:5a:c2:40:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3163ba33a309e1b3e9ad80b51b14fb7f04c2301e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:ca:f4:33:33:ed:5f:6c:44:5a:64:60:03: ae:c6:e5:55:56:40:11:90:2b:fb:31:48:c2:d0:5a: 37:f0:ce:3a:1d:5d:14:13:6a:5f:b2:cc:52:9e:7a: 9b:3e:aa:3c:15:9b:29:25:90:12:b3:ce:04:b2:b8: 8f:09:b3:fb:af:88:99:18:dc:2a:f5:6e:b6:72:c1: 68:4c:fb:3e:0a:7b:7b:fe:db:0c:71:53:f6:cf:e6: b6:f3:da:12:3c:e4:36:1e:74:8f:8d:12:47:dd:1b: 8e:a5:18:b5:7f:76:98:18:0b:15:be:27:d6:97:ce: 37:13:20:90:6f:df:f2:a2:81:56:9d:34:b4:8c:01: 44:ad:36:17:28:d5:fd:15:a4:45:8e:ef:c9:8c:b8: 9b:26:b9:96:17:72:7a:06:15:66:cf:87:52:a1:be: ce:29:ed:ee:d4:03:fd:84:4a:18:07:4c:c0:f9:8d: 10:99:b4:5f:bc:62:ee:8c:bd:db:cd:2b:cf:bc:98: d2:9c:94:d9:bb:e5:66:60:4f:f2:99:ff:fa:60:4f: 2c:2c:14:7b:d2:60:58:08:dc:43:80:e2:ae:f8:0f: d9:dd:0a:7c:2b:3a:73:c9:de:d0:c8:f6:05:65:a1: 1a:6d:4d:77:6c:9e:79:8d:0b:6d:00:d7:58:4b:ff: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:63:BA:33:A3:09:E1:B3:E9:AD:80:B5:1B:14:FB:7F:04:C2:30:1E X509v3 Authority Key Identifier: keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.100.0/22 Signature Algorithm: sha256WithRSAEncryption 74:9f:33:ed:34:59:94:71:71:db:93:f2:33:3e:34:6b:44:b2: 37:8b:32:91:34:3f:15:35:7f:98:94:b4:c9:31:5d:96:46:0d: 24:f2:e1:03:7d:db:d7:77:7a:cb:d8:25:c4:a0:16:b8:c4:de: 4c:79:88:40:dd:89:4d:b0:c0:99:ff:48:cb:8e:fc:a0:7a:f3: c9:0f:4f:81:1a:a7:35:71:0f:2c:22:1c:f6:df:96:e9:c9:6e: e5:94:2d:2f:94:9e:89:78:43:c8:9e:b2:7b:04:b0:39:32:40: ac:c4:91:56:57:6e:0b:3e:ac:26:69:7f:f6:ab:d2:da:c4:3b: ad:05:bc:c2:2c:be:48:d7:33:e8:d9:6a:3c:15:4a:10:51:10: 0a:b4:5c:85:53:21:c7:37:59:bf:35:b4:32:1e:33:1d:3d:29: ed:07:0e:72:70:b2:f8:32:be:93:b4:d9:20:d5:7b:33:1d:00: 68:df:5c:d6:42:dd:88:01:b2:d5:0b:24:ee:58:d0:94:bb:a6: 98:94:9b:1f:2c:a2:36:1e:3b:cd:ea:90:e2:6f:ec:76:44:71: ed:9a:4b:8e:c5:f1:fa:cb:e0:d7:f7:0e:7c:8a:35:a1:98:c8: 29:00:9b:8c:93:ad:40:5a:8e:51:f6:c9:c5:cd:f1:30:9d:8a: ac:8b:42:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNl34dNhuP18hKVawkBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4 ZjhmMzgwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTYzYmEzM2EzMDllMWIzZTlhZDgwYjUxYjE0ZmI3ZjA0YzIzMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVnK9DMz7V9sRFpkYAOuxuVVVkAR kCv7MUjC0Fo38M46HV0UE2pfssxSnnqbPqo8FZspJZASs84EsriPCbP7r4iZGNwq 9W62csFoTPs+Cnt7/tsMcVP2z+a289oSPOQ2HnSPjRJH3RuOpRi1f3aYGAsVvifW l843EyCQb9/yooFWnTS0jAFErTYXKNX9FaRFju/JjLibJrmWF3J6BhVmz4dSob7O Ke3u1AP9hEoYB0zA+Y0QmbRfvGLujL3bzSvPvJjSnJTZu+VmYE/ymf/6YE8sLBR7 0mBYCNxDgOKu+A/Z3Qp8Kzpzyd7QyPYFZaEabU13bJ55jQttANdYS//p5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFjujOjCeGz6a2AtRsU+38EwjAeMB8GA1UdIwQY MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt NDcyZDg4MmU5ZDcyLzEvTVdPNk02TUo0YlBwcllDMUd4VDdmd1RDTUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQxkMA0G CSqGSIb3DQEBCwUAA4IBAQB0nzPtNFmUcXHbk/IzPjRrRLI3izKRND8VNX+YlLTJ MV2WRg0k8uEDfdvXd3rL2CXEoBa4xN5MeYhA3YlNsMCZ/0jLjvygevPJD0+BGqc1 cQ8sIhz235bpyW7llC0vlJ6JeEPInrJ7BLA5MkCsxJFWV24LPqwmaX/2q9LaxDut BbzCLL5I1zPo2Wo8FUoQURAKtFyFUyHHN1m/NbQyHjMdPSntBw5ycLL4Mr6TtNkg 1XszHQBo31zWQt2IAbLVCyTuWNCUu6aYlJsfLKI2HjvN6pDib+x2RHHtmkuOxfH6 y+DX9w58ijWhmMgpAJuMk61AWo5R9snFzfEwnYqsi0Ku -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:42 2026 by rpki-client