This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/MIF8N-KpLT760HK_96OqYdm8Sr8.roa File: MIF8N-KpLT760HK_96OqYdm8Sr8.roa (raw, json) Hash identifier: i6ivYqrYWRkrcljfnaVnu2kE1lYrM4nCwRHvHmb1hvA= Subject key identifier: 30:81:7C:37:E2:A9:2D:3E:FA:D0:72:BF:F7:A3:AA:61:D9:BC:4A:BF Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Certificate serial: 019B7EA4DA074A479839B7134123821DEBA0 Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/MIF8N-KpLT760HK_96OqYdm8Sr8.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44152 IP address blocks: 185.19.172.0/22 maxlen: 32 185.59.248.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:da:07:4a:47:98:39:b7:13:41:23:82:1d:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30817c37e2a92d3efad072bff7a3aa61d9bc4abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:68:af:40:66:39:b7:85:e5:fb:0c:ce:85: cd:33:a9:54:e6:e7:96:c2:db:85:87:ad:a6:63:4f: b4:fa:f3:49:d7:19:91:58:3f:0d:6b:8a:11:06:d9: 19:f4:26:9f:66:5c:7f:e6:0d:ae:4f:3b:65:24:fd: ca:c6:87:d8:61:94:1f:d7:fd:22:0f:17:c0:f3:68: 85:ef:8d:b1:79:94:dc:8c:d9:47:17:45:37:a8:40: 97:6c:49:99:e7:74:de:63:72:ec:5a:79:5b:d5:e5: 95:00:38:31:f4:e0:be:1e:7a:b5:c3:e2:bb:35:80: 96:72:99:5e:f1:4f:89:10:c3:6a:78:8d:f8:89:00: 50:01:5e:23:54:c3:70:74:2f:26:b0:50:f0:10:63: 8a:23:15:55:cb:68:d2:df:82:70:5c:57:14:69:91: f1:56:59:e1:6a:89:6e:c6:01:7d:41:ac:bc:42:3e: e1:db:a6:75:f8:9a:13:b0:6f:1c:3d:f7:9c:91:7b: 82:e3:76:3b:f9:47:ce:d8:08:be:31:25:83:27:67: 95:b2:3e:ec:6f:0e:bf:42:4d:3b:bb:43:4d:97:cd: b0:3d:f3:4c:9e:8c:02:c7:e3:bc:28:0d:78:97:98: 1a:ff:5c:fe:7f:a8:7d:9f:5b:77:94:4c:1c:02:8a: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:7C:37:E2:A9:2D:3E:FA:D0:72:BF:F7:A3:AA:61:D9:BC:4A:BF X509v3 Authority Key Identifier: keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/MIF8N-KpLT760HK_96OqYdm8Sr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.172.0/22 185.59.248.0/22 Signature Algorithm: sha256WithRSAEncryption 25:5b:56:c8:b5:fc:69:34:ad:ea:a2:58:e9:e1:4f:97:1f:05: 85:bf:4d:ce:4c:0f:53:79:38:d8:d6:1d:e6:b6:83:88:6a:3a: 79:54:05:80:64:39:3e:dc:b6:07:11:16:79:3c:75:43:27:ab: 84:e7:13:5e:cc:43:b0:7c:2a:35:fa:54:59:aa:73:fb:a7:1c: d1:a2:2b:63:e3:2e:3b:76:6e:0c:e4:5a:73:dd:d0:b5:9f:2f: cb:1d:7d:20:82:3e:00:56:8b:ad:12:de:4e:0b:5e:5f:90:6f: ca:45:bb:ae:5d:95:dc:8f:de:56:bf:f0:ad:7f:2e:3c:2b:39: 9f:31:a4:d5:d7:b1:74:72:2c:4c:59:6b:2a:7a:84:be:9b:bc: 7f:bc:79:81:24:7d:1f:ec:4a:8c:34:2c:4b:c5:85:4f:47:bb: 08:7a:cd:0d:be:7d:67:38:9b:9e:d4:bf:1a:40:61:09:ab:29: cc:b2:b6:32:8b:22:30:80:a7:a8:ba:55:99:91:bb:09:1f:cb: fe:74:31:2e:17:1c:8d:06:7b:0c:ca:59:4d:af:4a:09:ae:43: 51:51:af:5a:2b:da:b1:0f:f2:7f:04:ca:f3:e7:a0:31:43:db: 6a:af:e2:fd:54:44:3a:e4:99:bf:6c:15:40:69:ba:d5:e0:01: 09:6d:a0:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pNoHSkeYObcTQSOCHeugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw YzA5YWMwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDgxN2MzN2UyYTkyZDNlZmFkMDcyYmZmN2EzYWE2MWQ5YmM0YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZor0BmObeF5fsMzoXNM6lU5ueW wtuFh62mY0+0+vNJ1xmRWD8Na4oRBtkZ9CafZlx/5g2uTztlJP3KxofYYZQf1/0i DxfA82iF742xeZTcjNlHF0U3qECXbEmZ53TeY3LsWnlb1eWVADgx9OC+Hnq1w+K7 NYCWcple8U+JEMNqeI34iQBQAV4jVMNwdC8msFDwEGOKIxVVy2jS34JwXFcUaZHx VlnhaoluxgF9Qay8Qj7h26Z1+JoTsG8cPfeckXuC43Y7+UfO2Ai+MSWDJ2eVsj7s bw6/Qk07u0NNl82wPfNMnowCx+O8KA14l5ga/1z+f6h9n1t3lEwcAorPJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDCBfDfiqS0++tByv/ejqmHZvEq/MB8GA1UdIwQY MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt YzBkMDYyYTc1MzU0LzEvTUlGOE4tS3BMVDc2MEhLXzk2T3FZZG04U3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0 LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuROsAwQC uTv4MA0GCSqGSIb3DQEBCwUAA4IBAQAlW1bItfxpNK3qoljp4U+XHwWFv03OTA9T eTjY1h3mtoOIajp5VAWAZDk+3LYHERZ5PHVDJ6uE5xNezEOwfCo1+lRZqnP7pxzR oitj4y47dm4M5Fpz3dC1ny/LHX0ggj4AVoutEt5OC15fkG/KRbuuXZXcj95Wv/Ct fy48KzmfMaTV17F0cixMWWsqeoS+m7x/vHmBJH0f7EqMNCxLxYVPR7sIes0Nvn1n OJue1L8aQGEJqynMsrYyiyIwgKeoulWZkbsJH8v+dDEuFxyNBnsMyllNr0oJrkNR Ua9aK9qxD/J/BMrz56AxQ9tqr+L9VEQ65Jm/bBVAabrV4AEJbaDD -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:55 2026 by rpki-client