This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa File: MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa (raw, json) Hash identifier: Xy1rAGnYMcCxQ06ADYspJII1dddHSOxsylQH095rx5c= Subject key identifier: 32:2B:D3:38:0F:90:E0:A3:1C:5D:6E:27:86:05:A5:1C:E4:31:60:5C Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Certificate serial: 019B76EB9CE27163B88C96EE0FFAD75F2450 Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58127 IP address blocks: 185.185.112.0/22 maxlen: 22 185.185.112.0/24 maxlen: 24 185.185.113.0/24 maxlen: 24 185.185.114.0/24 maxlen: 24 185.185.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9c:e2:71:63:b8:8c:96:ee:0f:fa:d7:5f:24:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=322bd3380f90e0a31c5d6e278605a51ce431605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:a0:f3:48:9e:5f:07:53:86:eb:a0:9d:21: c7:6f:ef:44:40:63:5e:57:27:24:4c:7b:50:d5:d1: 44:24:4b:d9:42:01:3d:75:36:07:10:df:33:d8:d9: b8:fe:a1:54:88:f0:75:12:f9:ab:cd:7b:ec:34:80: 43:1a:17:09:eb:20:86:0d:13:ca:04:91:36:72:3a: 93:f7:0c:78:66:14:39:a4:a1:b4:1b:57:6d:4a:33: 30:e4:c7:50:9e:30:09:8c:9d:72:fd:4e:82:ac:ff: ef:b7:27:91:7f:41:10:4a:05:74:80:31:b4:d4:89: a7:fe:29:ae:1a:d9:53:63:2b:49:d8:10:d7:40:21: 7c:50:46:cd:03:2a:21:3b:d7:17:f6:70:04:f7:b0: b7:cd:e1:e9:89:65:dd:59:9c:fa:7f:e5:cb:d4:f8: 57:c3:e8:78:a4:70:8e:e2:0e:ae:cb:ae:71:65:f4: bd:ca:1a:63:9e:d3:2d:e6:42:16:fa:67:44:6e:9d: 17:6c:7c:8f:61:4c:bf:7f:f2:d4:4f:ff:a4:b0:01: 6b:e8:a5:95:5e:bd:c4:4c:c8:12:78:77:15:0a:06: c9:7e:97:b6:87:d7:3f:30:ae:b0:e7:fd:fd:ae:3b: 35:1d:1a:c6:8b:6b:d1:01:e0:2a:33:c4:05:6a:57: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:D3:38:0F:90:E0:A3:1C:5D:6E:27:86:05:A5:1C:E4:31:60:5C X509v3 Authority Key Identifier: keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.112.0/22 Signature Algorithm: sha256WithRSAEncryption ab:22:d4:ac:4b:f4:19:23:bf:7c:c8:e2:36:84:49:5f:49:a9: b2:ac:eb:f9:b1:38:a8:36:a6:3f:07:c2:b3:f3:b2:9a:c1:29: b2:9f:d6:a0:ae:ce:a3:f5:e6:03:58:b5:fe:4d:0a:3e:8d:2f: 8f:3d:a4:82:5d:b9:1a:f3:9a:15:d9:4c:9d:05:a4:5e:16:c1: 1d:81:d2:ac:bb:ab:39:3c:7e:89:eb:3e:59:0b:0f:43:13:55: 55:01:75:3f:2c:fa:b4:2f:56:80:09:76:c2:02:26:de:79:02: 23:d8:29:11:a7:21:de:5e:1a:b3:e0:f0:b4:27:54:05:69:8d: bc:a1:6c:52:67:de:e0:f9:7d:cd:4a:0e:f8:68:70:41:34:1d: 68:93:ce:24:a6:f5:1a:ec:49:92:0d:9e:f9:3b:2c:cc:7d:bc: 77:15:ab:e0:28:97:94:69:dd:38:f2:a4:34:6f:b2:96:37:80: 2a:f0:44:8d:45:23:0a:96:aa:79:96:d8:20:9a:d2:22:9b:d5: c7:71:88:33:59:f0:9e:62:dc:9c:bb:f6:d8:04:b2:cb:9c:57: a4:1c:d4:1b:f8:5d:0a:f1:e2:5b:3d:ed:4a:25:c4:f5:47:0d: c1:ae:a4:de:3d:44:93:f3:35:00:e0:35:bb:e2:4e:24:c7:69: c1:38:71:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265zicWO4jJbuD/rXXyRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDJhMzNmNWVjNjY4MDU5MWMwOTdmZGI0YWJhMGUwMjhm NDA4NDUwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjJiZDMzODBmOTBlMGEzMWM1ZDZlMjc4NjA1YTUxY2U0MzE2MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHyg80ieXwdThuugnSHHb+9EQGNe VyckTHtQ1dFEJEvZQgE9dTYHEN8z2Nm4/qFUiPB1EvmrzXvsNIBDGhcJ6yCGDRPK BJE2cjqT9wx4ZhQ5pKG0G1dtSjMw5MdQnjAJjJ1y/U6CrP/vtyeRf0EQSgV0gDG0 1Imn/imuGtlTYytJ2BDXQCF8UEbNAyohO9cX9nAE97C3zeHpiWXdWZz6f+XL1PhX w+h4pHCO4g6uy65xZfS9yhpjntMt5kIW+mdEbp0XbHyPYUy/f/LUT/+ksAFr6KWV Xr3ETMgSeHcVCgbJfpe2h9c/MK6w5/39rjs1HRrGi2vRAeAqM8QFaldrqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDIr0zgPkOCjHF1uJ4YFpRzkMWBcMB8GA1UdIwQY MBaAFFACoz9exmgFkcCX/bSroOAo9AhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMt ZWRlMWU0YmI2MTFlLzEvTWl2VE9BLVE0S01jWFc0bmhnV2xIT1F4WUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMtZWRlMWU0YmI2MTFl LzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCublwMA0G CSqGSIb3DQEBCwUAA4IBAQCrItSsS/QZI798yOI2hElfSamyrOv5sTioNqY/B8Kz 87KawSmyn9agrs6j9eYDWLX+TQo+jS+PPaSCXbka85oV2UydBaReFsEdgdKsu6s5 PH6J6z5ZCw9DE1VVAXU/LPq0L1aACXbCAibeeQIj2CkRpyHeXhqz4PC0J1QFaY28 oWxSZ97g+X3NSg74aHBBNB1ok84kpvUa7EmSDZ75OyzMfbx3FavgKJeUad048qQ0 b7KWN4Aq8ESNRSMKlqp5ltggmtIim9XHcYgzWfCeYtycu/bYBLLLnFekHNQb+F0K 8eJbPe1KJcT1Rw3BrqTePUST8zUA4DW74k4kx2nBOHF0 -----END CERTIFICATE-----Generated at Thu Jan 1 17:29:44 2026 by rpki-client