This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/MFlCR2JXbFM0gvBh_dWTVgoL37E.roa File: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (raw, json) Hash identifier: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE= Subject key identifier: 30:59:42:47:62:57:6C:53:34:82:F0:61:FD:D5:93:56:0A:0B:DF:B1 Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977 Certificate serial: 019B7CED69958CB9CE0E7AF5E8CCBBE69BFC Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/MFlCR2JXbFM0gvBh_dWTVgoL37E.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 185.54.172.0/22 maxlen: 22 2a02:4620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:69:95:8c:b9:ce:0e:7a:f5:e8:cc:bb:e6:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3059424762576c533482f061fdd593560a0bdfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:ec:fa:72:61:6a:c1:95:12:9e:5d:22:c5: 89:6f:bc:6d:f8:a0:06:7b:d6:52:23:2a:af:80:f0: 81:73:ec:89:41:41:8c:68:16:e6:d5:35:aa:91:92: 9b:c9:73:40:65:2e:51:41:c2:96:50:f3:c5:24:71: c6:5a:b1:70:e8:9a:96:4c:bd:f9:98:88:a8:e6:a1: 28:f0:60:72:7a:0a:f2:68:6d:8e:17:f6:6d:40:18: 5d:bd:7e:ca:9e:96:2a:ae:c1:21:a2:ba:79:f7:43: 8b:ad:f5:ba:b7:18:5e:7b:cd:f1:ea:67:0c:15:ae: cf:6c:91:47:e8:bb:8f:fb:d0:e2:39:74:1b:5c:62: 0a:f7:b9:93:81:c4:a6:0b:3a:f7:cb:eb:ca:4f:e5: 63:12:2f:1d:bf:7d:df:35:4e:07:9c:a9:7a:57:c9: 53:64:81:ed:07:fd:c0:13:59:59:c4:f5:31:11:e9: ef:53:56:ed:8b:3d:ca:ee:b9:e7:d2:a9:a1:18:de: 3e:9c:6a:ef:e0:e6:b1:c0:06:58:38:13:9b:77:34: 1c:46:f4:8e:d1:d1:14:f2:af:43:c4:1d:9b:5a:f7: b3:58:41:f4:72:c1:e6:80:b1:91:c4:d9:38:1b:7d: 41:fa:0a:76:91:dd:36:11:f6:b8:f4:2c:f5:84:f7: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:59:42:47:62:57:6C:53:34:82:F0:61:FD:D5:93:56:0A:0B:DF:B1 X509v3 Authority Key Identifier: keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/MFlCR2JXbFM0gvBh_dWTVgoL37E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.172.0/22 IPv6: 2a02:4620::/32 Signature Algorithm: sha256WithRSAEncryption 7e:8b:49:c2:84:11:e3:b4:d0:80:17:a8:74:cc:ac:d7:4b:2f: 7b:7f:a1:5c:a2:f0:fd:99:28:99:73:43:51:2d:1a:84:2b:3d: a2:38:f5:19:65:76:f5:30:33:13:4e:5c:1b:3b:ac:ec:43:f1: cf:22:fd:5c:58:34:e0:03:a9:3d:89:48:8b:41:93:8b:b4:f8: d9:1d:03:1a:63:bb:12:f7:e5:e9:7b:93:78:05:b1:ef:93:f7: 96:77:fc:ad:40:89:c0:2e:b6:63:20:3a:11:a3:5a:93:4d:d4: eb:17:44:ef:5c:c7:de:b5:f4:45:90:c5:ca:1b:05:83:31:d3: 12:cb:c7:75:cd:64:68:f4:8f:f7:09:10:80:30:1e:06:0a:94: 48:4d:6f:55:06:c6:74:ee:00:fb:25:c3:67:db:46:7a:55:8d: 14:6d:48:59:eb:fd:60:fe:e4:fe:ec:f1:be:d2:d9:f5:bb:d9: 64:29:79:aa:f5:79:5d:ef:56:bc:28:87:6a:aa:d2:cb:15:7c: 73:77:45:63:5e:ce:0b:da:03:8f:89:4c:72:40:d5:61:b5:b9: 80:44:e1:1c:26:64:38:21:f2:95:70:eb:93:ba:b6:c1:57:0a: 6f:ff:f3:b1:0c:0f:ba:c3:63:16:81:1c:22:55:d5:d7:66:c1: 1f:4b:ed:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87WmVjLnODnr16My75pv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3 NzE5NzcwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDU5NDI0NzYyNTc2YzUzMzQ4MmYwNjFmZGQ1OTM1NjBhMGJkZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNLs+nJhasGVEp5dIsWJb7xt+KAG e9ZSIyqvgPCBc+yJQUGMaBbm1TWqkZKbyXNAZS5RQcKWUPPFJHHGWrFw6JqWTL35 mIio5qEo8GByegryaG2OF/ZtQBhdvX7KnpYqrsEhorp590OLrfW6txhee83x6mcM Fa7PbJFH6LuP+9DiOXQbXGIK97mTgcSmCzr3y+vKT+VjEi8dv33fNU4HnKl6V8lT ZIHtB/3AE1lZxPUxEenvU1btiz3K7rnn0qmhGN4+nGrv4OaxwAZYOBObdzQcRvSO 0dEU8q9DxB2bWvezWEH0csHmgLGRxNk4G31B+gp2kd02Efa49Cz1hPfeWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDBZQkdiV2xTNILwYf3Vk1YKC9+xMB8GA1UdIwQY MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt MzIxYzlkNjZjODQ3LzEvTUZsQ1IySlhiRk0wZ3ZCaF9kV1RWZ29MMzdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3 LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTasMA0E AgACMAcDBQAqAkYgMA0GCSqGSIb3DQEBCwUAA4IBAQB+i0nChBHjtNCAF6h0zKzX Sy97f6FcovD9mSiZc0NRLRqEKz2iOPUZZXb1MDMTTlwbO6zsQ/HPIv1cWDTgA6k9 iUiLQZOLtPjZHQMaY7sS9+Xpe5N4BbHvk/eWd/ytQInALrZjIDoRo1qTTdTrF0Tv XMfetfRFkMXKGwWDMdMSy8d1zWRo9I/3CRCAMB4GCpRITW9VBsZ07gD7JcNn20Z6 VY0UbUhZ6/1g/uT+7PG+0tn1u9lkKXmq9Xld71a8KIdqqtLLFXxzd0VjXs4L2gOP iUxyQNVhtbmAROEcJmQ4IfKVcOuTurbBVwpv//OxDA+6w2MWgRwiVdXXZsEfS+1x -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client