This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/MPcncw3TBLN9O1Fy19LVCE6t17w.roa File: MPcncw3TBLN9O1Fy19LVCE6t17w.roa (raw, json) Hash identifier: jJnn/mYRkvFLhH11P3nUb1E3/V7XDU260gIFAJXV/0Q= Subject key identifier: 30:F7:27:73:0D:D3:04:B3:7D:3B:51:72:D7:D2:D5:08:4E:AD:D7:BC Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Certificate serial: 019AC0A0333A735825F0EACF9CCA9BFE11DB Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/MPcncw3TBLN9O1Fy19LVCE6t17w.roa Signing time: Wed 26 Nov 2025 14:45:15 +0000 ROA not before: Wed 26 Nov 2025 14:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200186 IP address blocks: 185.144.97.0/24 maxlen: 24 194.50.183.0/24 maxlen: 24 194.164.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:a0:33:3a:73:58:25:f0:ea:cf:9c:ca:9b:fe:11:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b Validity Not Before: Nov 26 14:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30f727730dd304b37d3b5172d7d2d5084eadd7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:0c:79:1a:fe:18:96:27:f9:3c:4d:0f:f6: 9c:6b:21:a4:de:fb:61:f5:fb:d6:cc:e9:bd:df:70: fb:2a:6e:b1:f2:9e:a2:d4:0c:7d:da:3c:c6:e6:d3: 4c:89:0a:39:75:5e:57:fc:12:a5:8e:92:0d:b3:30: fd:70:fa:e8:0e:33:5f:e4:a6:29:10:3f:39:a5:6c: 10:8c:68:55:b6:c7:d3:78:60:a6:c2:f2:4a:ab:c8: dd:e9:12:9b:c2:31:f4:c1:f9:93:3e:3f:80:1a:cb: 8e:03:66:1b:2a:5d:2d:20:04:79:59:be:af:04:61: d7:0c:8c:a6:0a:30:34:da:19:c2:fe:dd:1f:b7:74: 10:18:fa:c8:12:c9:80:fd:05:77:0b:a2:fc:9e:f4: a6:99:65:34:36:a7:d4:7a:ab:fa:24:ec:15:55:e8: 6c:f9:9e:f1:7d:59:30:ec:a8:27:80:5f:cd:65:a2: db:e5:37:0d:0f:d7:98:cf:ba:b9:de:88:08:80:87: f8:50:e0:57:1f:ff:7e:87:6a:ad:10:2e:22:92:06: 61:f4:f6:76:5f:e2:8c:40:2e:68:89:00:e8:c1:bc: 9f:9d:1f:aa:2a:2c:8c:76:4f:cb:0d:38:34:c9:14: d7:08:80:38:6f:3a:ff:ce:0d:db:5d:9c:98:0e:ea: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F7:27:73:0D:D3:04:B3:7D:3B:51:72:D7:D2:D5:08:4E:AD:D7:BC X509v3 Authority Key Identifier: keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/MPcncw3TBLN9O1Fy19LVCE6t17w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.97.0/24 194.50.183.0/24 194.164.101.0/24 Signature Algorithm: sha256WithRSAEncryption a1:ef:69:2f:47:2b:7c:33:00:a2:f7:b1:bd:b2:0f:6c:5f:58: f7:dc:3f:dd:5d:9b:b4:86:c7:89:df:8f:a2:7c:66:1b:74:08: 91:37:4f:17:8c:68:e4:68:54:1a:40:53:e3:26:90:3c:45:15: 78:d1:64:f2:e5:a2:b3:e4:a8:9d:c2:d3:e5:55:71:b1:6b:24: 9f:4b:cd:01:26:20:02:b6:c1:43:b8:55:7a:e2:02:1f:81:e9: 4c:4c:8a:ab:09:df:41:7a:af:0b:e0:fc:0a:05:ee:1b:43:56: 26:53:74:9c:12:ac:95:51:20:2f:06:56:84:15:18:00:12:86: 01:5e:f1:74:e0:9e:1e:31:83:15:2b:46:c2:01:62:58:c4:2f: 00:d6:c0:ff:79:a4:00:2e:6d:51:eb:29:73:e2:af:17:9c:46: d8:4d:9d:e5:8c:7e:ca:ce:f6:fe:2b:d1:3e:ff:c7:6f:5b:77: 62:b3:1f:19:5b:7d:10:2d:86:26:2f:37:84:6d:6f:36:6a:17: 3c:e1:45:d7:2d:a9:17:d1:66:7c:0a:1d:54:71:b6:4b:4a:87: a1:86:a8:27:98:84:dc:4b:0a:ea:77:7c:00:05:d2:d3:99:d7: 67:59:fa:96:d9:18:ab:b3:65:bd:dc:99:21:76:a8:d9:d7:c2: d9:5c:cd:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrAoDM6c1gl8OrPnMqb/hHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm ODUxMGIwHhcNMjUxMTI2MTQ0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGY3Mjc3MzBkZDMwNGIzN2QzYjUxNzJkN2QyZDUwODRlYWRkN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz8MeRr+GJYn+TxND/acayGk3vth 9fvWzOm933D7Km6x8p6i1Ax92jzG5tNMiQo5dV5X/BKljpINszD9cProDjNf5KYp ED85pWwQjGhVtsfTeGCmwvJKq8jd6RKbwjH0wfmTPj+AGsuOA2YbKl0tIAR5Wb6v BGHXDIymCjA02hnC/t0ft3QQGPrIEsmA/QV3C6L8nvSmmWU0NqfUeqv6JOwVVehs +Z7xfVkw7KgngF/NZaLb5TcND9eYz7q53ogIgIf4UOBXH/9+h2qtEC4ikgZh9PZ2 X+KMQC5oiQDowbyfnR+qKiyMdk/LDTg0yRTXCIA4bzr/zg3bXZyYDuoaTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDD3J3MN0wSzfTtRctfS1QhOrde8MB8GA1UdIwQY MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt MGJkZGM4MDcxMWFlLzEvTVBjbmN3M1RCTE45TzFGeTE5TFZDRTZ0MTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuZBhAwQA wjK3AwQAwqRlMA0GCSqGSIb3DQEBCwUAA4IBAQCh72kvRyt8MwCi97G9sg9sX1j3 3D/dXZu0hseJ34+ifGYbdAiRN08XjGjkaFQaQFPjJpA8RRV40WTy5aKz5KidwtPl VXGxaySfS80BJiACtsFDuFV64gIfgelMTIqrCd9Beq8L4PwKBe4bQ1YmU3ScEqyV USAvBlaEFRgAEoYBXvF04J4eMYMVK0bCAWJYxC8A1sD/eaQALm1R6ylz4q8XnEbY TZ3ljH7Kzvb+K9E+/8dvW3disx8ZW30QLYYmLzeEbW82ahc84UXXLakX0WZ8Ch1U cbZLSoehhqgnmITcSwrqd3wABdLTmddnWfqW2Rirs2W93JkhdqjZ18LZXM3x -----END CERTIFICATE-----Generated at Thu Dec 18 20:49:40 2025 by rpki-client