This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/mRCqN1M6zUsiNdzC0FKi7W1095Q.roa File: mRCqN1M6zUsiNdzC0FKi7W1095Q.roa (raw, json) Hash identifier: MFKjZuWKgw51+lXZPFhhgh9r5v1dJJly89TlVNy1H/s= Subject key identifier: 99:10:AA:37:53:3A:CD:4B:22:35:DC:C2:D0:52:A2:ED:6D:74:F7:94 Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Certificate serial: 019B7BA42C0EFF35718358D8C29FB9F78186 Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/mRCqN1M6zUsiNdzC0FKi7W1095Q.roa Signing time: Thu 01 Jan 2026 22:18:35 +0000 ROA not before: Thu 01 Jan 2026 22:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201602 IP address blocks: 185.241.144.0/24 maxlen: 24 185.241.145.0/24 maxlen: 24 185.241.146.0/24 maxlen: 24 185.241.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2c:0e:ff:35:71:83:58:d8:c2:9f:b9:f7:81:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Validity Not Before: Jan 1 22:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9910aa37533acd4b2235dcc2d052a2ed6d74f794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:78:16:d7:a5:aa:d6:eb:5a:e0:61:74:95: 32:55:f4:37:f5:0b:6b:89:fe:cb:de:2e:ba:2b:9c: ae:f1:52:54:34:1a:d5:31:b7:c9:5d:56:47:3b:5d: 5e:f8:51:5d:ff:e2:53:84:f3:4c:13:8d:7c:71:24: 26:76:d5:3b:e7:3c:1b:57:db:a3:e1:46:8c:49:95: c7:56:22:c2:c7:51:42:fe:97:3a:5a:a7:d2:8c:d9: 52:53:9e:a4:c0:5d:80:b7:d1:02:60:50:4d:7b:f8: 86:a7:49:4f:61:d9:83:16:c0:18:5b:68:27:c9:d1: 52:ae:aa:a1:20:2a:1c:00:cf:4b:fb:46:34:8e:ea: ab:67:1b:8b:7a:60:3a:01:b7:54:5d:09:87:76:80: 77:1b:a2:54:26:01:a6:1f:c9:5c:df:f6:a3:28:20: 26:24:58:05:95:2d:0a:c2:6f:85:c7:ff:b2:25:61: c9:1e:29:07:e4:76:6d:f1:50:04:ea:a3:c6:87:d0: 65:d3:0a:81:9f:74:9d:8b:2b:e4:86:1f:02:f3:8d: 6b:62:27:fd:08:08:1a:41:7f:e0:91:e2:83:90:aa: 28:52:be:11:40:dc:6c:6c:38:42:1d:aa:24:89:c4: cb:d8:b8:82:c3:a3:ec:40:0f:12:f3:a4:4f:6c:6c: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:10:AA:37:53:3A:CD:4B:22:35:DC:C2:D0:52:A2:ED:6D:74:F7:94 X509v3 Authority Key Identifier: keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/mRCqN1M6zUsiNdzC0FKi7W1095Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.144.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:9a:ed:08:86:1f:51:fe:44:40:f4:12:77:12:9d:f9:c6:26: 72:e8:d7:22:3c:61:8b:66:e5:a6:81:55:a1:28:2b:c0:2f:28: 00:84:49:3c:74:fe:73:85:cc:e2:3a:ec:73:7b:44:d2:fe:bc: 6b:a1:05:96:44:45:c0:fa:85:34:44:a4:3e:3d:bc:ae:18:b4: 62:11:9d:2e:98:ca:8e:82:f1:91:7a:4b:5a:40:67:15:cf:d7: bc:b3:79:a7:8b:ed:8a:df:be:7f:6f:ba:ab:10:35:57:d1:50: 6d:de:02:b0:4c:c5:73:ca:e8:2a:f1:6d:df:6d:93:b3:23:af: 93:86:2a:ef:91:f9:8f:96:70:36:2a:8c:89:fb:8d:a6:e7:a6: f7:81:9d:55:c9:52:24:64:55:55:96:8a:5d:94:a4:6b:cb:72: 7f:2b:d3:c5:5e:ce:56:e5:52:07:b5:2e:eb:a4:40:fa:a0:40: 38:c7:bd:45:f2:c0:34:09:5f:3d:e2:7f:d4:72:72:28:65:a6: 55:8b:8d:54:09:57:2a:b2:40:20:93:81:4a:10:06:63:14:4d: 5b:d7:e3:48:1d:3d:59:c7:4b:19:17:d1:0c:08:a4:f9:4e:c4: bc:e4:23:ee:d9:2c:c8:5e:d8:58:02:7f:40:3e:12:3e:d7:5f: b2:73:72:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCwO/zVxg1jYwp+594GGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4 NTRmOWMwHhcNMjYwMTAxMjIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTEwYWEzNzUzM2FjZDRiMjIzNWRjYzJkMDUyYTJlZDZkNzRmNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPV4FtelqtbrWuBhdJUyVfQ39Qtr if7L3i66K5yu8VJUNBrVMbfJXVZHO11e+FFd/+JThPNME418cSQmdtU75zwbV9uj 4UaMSZXHViLCx1FC/pc6WqfSjNlSU56kwF2At9ECYFBNe/iGp0lPYdmDFsAYW2gn ydFSrqqhICocAM9L+0Y0juqrZxuLemA6AbdUXQmHdoB3G6JUJgGmH8lc3/ajKCAm JFgFlS0Kwm+Fx/+yJWHJHikH5HZt8VAE6qPGh9Bl0wqBn3Sdiyvkhh8C841rYif9 CAgaQX/gkeKDkKooUr4RQNxsbDhCHaokicTL2LiCw6PsQA8S86RPbGx+PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkQqjdTOs1LIjXcwtBSou1tdPeUMB8GA1UdIwQY MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt MzU2NTA1MzAzYzQ5LzEvbVJDcU4xTTZ6VXNpTmR6QzBGS2k3VzEwOTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5 LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufGQMA0G CSqGSIb3DQEBCwUAA4IBAQA6mu0Ihh9R/kRA9BJ3Ep35xiZy6NciPGGLZuWmgVWh KCvALygAhEk8dP5zhcziOuxze0TS/rxroQWWREXA+oU0RKQ+PbyuGLRiEZ0umMqO gvGRektaQGcVz9e8s3mni+2K375/b7qrEDVX0VBt3gKwTMVzyugq8W3fbZOzI6+T hirvkfmPlnA2KoyJ+42m56b3gZ1VyVIkZFVVlopdlKRry3J/K9PFXs5W5VIHtS7r pED6oEA4x71F8sA0CV894n/UcnIoZaZVi41UCVcqskAgk4FKEAZjFE1b1+NIHT1Z x0sZF9EMCKT5TsS85CPu2SzIXthYAn9APhI+11+yc3L6 -----END CERTIFICATE-----Generated at Mon Jan 12 22:43:57 2026 by rpki-client