This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/_MjZeflusMJHZIBBhksr7jcA7vw.roa File: _MjZeflusMJHZIBBhksr7jcA7vw.roa (raw, json) Hash identifier: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM= Subject key identifier: FC:C8:D9:79:F9:6E:B0:C2:47:64:80:41:86:4B:2B:EE:37:00:EE:FC Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Certificate serial: 019B7F815FB43FA48721A2CDCB668A4BD4AC Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/_MjZeflusMJHZIBBhksr7jcA7vw.roa Signing time: Fri 02 Jan 2026 16:19:03 +0000 ROA not before: Fri 02 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62412 IP address blocks: 139.28.228.0/22 maxlen: 24 185.36.210.0/23 maxlen: 24 185.184.88.0/22 maxlen: 24 188.214.242.0/23 maxlen: 24 2a0f:5900::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:5f:b4:3f:a4:87:21:a2:cd:cb:66:8a:4b:d4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Validity Not Before: Jan 2 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcc8d979f96eb0c247648041864b2bee3700eefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:f0:c2:60:d6:69:85:e4:db:dd:14:6b:af: 8a:26:81:fb:bf:bb:a7:60:8a:23:c7:ad:ad:48:08: 79:5d:a3:cc:15:2f:83:c1:26:fd:25:72:26:4a:5d: b1:61:1a:2a:d4:29:91:54:83:0b:46:10:36:6f:9a: 7f:aa:c2:9e:f9:f1:e5:07:fb:b8:e3:12:0a:72:e2: e0:3f:c8:45:a2:79:1e:d5:30:f5:9e:b6:f0:0b:12: 83:4d:af:15:4e:1d:b5:30:5b:a2:e3:0a:65:65:7e: 21:1f:b3:d5:01:b8:a5:b0:10:5d:f1:3e:76:33:7a: 01:dd:fa:19:b7:22:5c:d5:ee:b6:6a:7d:bc:a0:76: 8e:32:ff:ab:58:98:58:5e:55:63:5d:ff:42:6e:9f: 78:95:52:aa:2a:53:60:75:1b:a6:16:3e:a0:61:62: 7f:aa:6b:a9:73:f9:01:bf:f6:4a:68:00:49:91:02: f0:01:30:95:ff:50:2d:5a:29:4e:27:c6:fe:e1:b1: e2:ae:6f:34:cc:23:d8:4a:c0:92:a8:55:55:cb:36: 63:f2:a7:b7:cb:7a:0f:0d:89:ef:7f:7c:dd:b6:6b: bc:66:5f:d5:14:63:18:da:89:cc:14:f8:2c:ef:4e: 45:35:d7:49:1f:a8:49:f8:3b:fe:a3:94:a8:eb:d9: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C8:D9:79:F9:6E:B0:C2:47:64:80:41:86:4B:2B:EE:37:00:EE:FC X509v3 Authority Key Identifier: keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/_MjZeflusMJHZIBBhksr7jcA7vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.228.0/22 185.36.210.0/23 185.184.88.0/22 188.214.242.0/23 IPv6: 2a0f:5900::/29 Signature Algorithm: sha256WithRSAEncryption a9:77:96:cf:b2:3a:f4:af:54:17:2d:ae:29:d1:3c:2f:54:cf: ca:69:b0:eb:90:af:7b:52:96:bb:37:9b:e3:6a:af:51:09:ee: 94:55:f9:79:de:1a:2c:36:bb:f0:76:d1:54:f1:8b:f8:00:c5: 7f:2c:d7:c6:e5:c6:ff:cf:27:72:01:1d:2b:fa:bf:87:df:da: dc:9d:b9:8a:34:b4:c0:02:db:36:93:be:c5:45:d0:03:48:b6: 75:71:81:f7:c5:de:5c:cb:3b:71:8c:08:f5:cd:84:1a:b1:37: f3:74:5e:80:20:e3:83:1a:25:06:fd:bd:f5:77:95:51:dc:63: 4f:94:d4:d9:13:cb:16:4b:db:90:a6:2b:93:53:3d:5c:12:5c: 1f:f9:33:e4:88:64:0b:d5:79:cf:5a:b2:de:34:10:b2:bc:4a: 21:5e:06:7f:6c:1a:03:8f:be:8c:76:22:2e:d1:31:77:87:ec: ae:a6:f9:78:d1:bd:9d:f8:85:2c:84:7e:4f:d5:0c:33:72:e3: 08:e9:ec:89:2c:64:e2:15:46:85:6a:c9:ba:76:5f:85:c7:9d: fb:01:ef:82:a6:4a:ac:59:a3:e5:9f:e3:2f:15:74:d3:10:13: 53:ba:7a:1a:ed:94:12:6d:bd:02:a5:ca:f0:7b:27:72:3e:a5: 90:c3:e4:f5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/gV+0P6SHIaLNy2aKS9SsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi MWJiOWUwHhcNMjYwMTAyMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2M4ZDk3OWY5NmViMGMyNDc2NDgwNDE4NjRiMmJlZTM3MDBlZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbvwwmDWaYXk290Ua6+KJoH7v7un YIojx62tSAh5XaPMFS+DwSb9JXImSl2xYRoq1CmRVIMLRhA2b5p/qsKe+fHlB/u4 4xIKcuLgP8hFonke1TD1nrbwCxKDTa8VTh21MFui4wplZX4hH7PVAbilsBBd8T52 M3oB3foZtyJc1e62an28oHaOMv+rWJhYXlVjXf9Cbp94lVKqKlNgdRumFj6gYWJ/ qmupc/kBv/ZKaABJkQLwATCV/1AtWilOJ8b+4bHirm80zCPYSsCSqFVVyzZj8qe3 y3oPDYnvf3zdtmu8Zl/VFGMY2onMFPgs705FNddJH6hJ+Dv+o5So69m6/QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPzI2Xn5brDCR2SAQYZLK+43AO78MB8GA1UdIwQY MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt MmY1ZjRjNTUyNjJmLzEvX01qWmVmbHVzTUpIWklCQmhrc3I3amNBN3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCixzkAwQB uSTSAwQCubhYAwQBvNbyMA0EAgACMAcDBQMqD1kAMA0GCSqGSIb3DQEBCwUAA4IB AQCpd5bPsjr0r1QXLa4p0TwvVM/KabDrkK97Upa7N5vjaq9RCe6UVfl53hosNrvw dtFU8Yv4AMV/LNfG5cb/zydyAR0r+r+H39rcnbmKNLTAAts2k77FRdADSLZ1cYH3 xd5cyztxjAj1zYQasTfzdF6AIOODGiUG/b31d5VR3GNPlNTZE8sWS9uQpiuTUz1c Elwf+TPkiGQL1XnPWrLeNBCyvEohXgZ/bBoDj76MdiIu0TF3h+yupvl40b2d+IUs hH5P1QwzcuMI6eyJLGTiFUaFasm6dl+Fx537Ae+CpkqsWaPln+MvFXTTEBNTunoa 7ZQSbb0CpcrweydyPqWQw+T1 -----END CERTIFICATE-----Generated at Wed Jan 7 10:42:06 2026 by rpki-client