This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/MvAQn98nXI-pzUTu-tvnQV3730A.roa File: MvAQn98nXI-pzUTu-tvnQV3730A.roa (raw, json) Hash identifier: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8= Subject key identifier: 32:F0:10:9F:DF:27:5C:8F:A9:CD:44:EE:FA:DB:E7:41:5D:FB:DF:40 Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52 Certificate serial: 019B775878265163B79C212449C9AF0EEB66 Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/MvAQn98nXI-pzUTu-tvnQV3730A.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206441 IP address blocks: 185.184.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:78:26:51:63:b7:9c:21:24:49:c9:af:0e:eb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f0109fdf275c8fa9cd44eefadbe7415dfbdf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:fa:59:2c:90:61:7b:d6:10:09:b6:19:02: 41:1c:62:dc:f2:ba:65:5f:b3:76:6f:58:73:60:36: a5:f2:15:bc:38:67:9f:3a:b6:ee:17:30:3a:57:fa: e0:a7:ad:b5:ed:ad:81:cf:2a:b5:54:ee:0f:18:5a: 4b:25:c7:9d:61:b7:76:9d:69:f1:e0:c3:bf:8e:14: df:85:f0:a9:9f:c1:3d:42:5e:e0:9c:15:85:1e:d0: f7:ed:3a:f9:bb:6f:94:ee:79:69:e8:44:36:09:48: fe:6f:6f:e8:fa:ed:13:26:15:51:8c:73:2c:14:7b: 7c:7a:fe:db:d8:83:86:5d:2b:9c:41:bf:67:81:e3: 21:a7:f0:09:6e:96:09:d4:11:23:c0:d3:d2:af:5b: 72:41:de:f0:1c:e0:fd:f2:b1:82:7a:1c:7c:b3:db: 49:d0:b3:e3:d9:e7:0d:5a:31:32:2f:bc:7a:cb:7c: 44:d1:6b:86:1e:76:b8:02:13:3b:36:75:15:93:b7: 7c:20:1d:c5:d4:ab:c9:2b:e1:69:8c:3d:8e:6a:85: 6e:10:df:cb:41:92:c1:e4:c5:1d:8d:da:b0:05:2d: 40:28:12:e4:2a:c0:cc:75:55:3f:9b:7a:23:46:08: 84:90:11:49:5e:d3:22:00:bd:23:f0:78:f2:f0:de: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:10:9F:DF:27:5C:8F:A9:CD:44:EE:FA:DB:E7:41:5D:FB:DF:40 X509v3 Authority Key Identifier: keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/MvAQn98nXI-pzUTu-tvnQV3730A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.224.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:63:32:4e:65:f6:95:9f:d4:8f:4e:e1:9f:a2:69:d4:ad:a8: fb:5f:2b:4e:3d:0e:95:47:2c:33:f4:64:2b:f6:ec:ac:15:72: 56:dd:c3:2d:22:c7:ff:79:cd:8d:f3:01:d8:aa:8e:84:f6:b8: eb:3d:c1:96:5f:d0:31:a1:f1:a4:08:ed:25:89:7b:79:bf:ce: b9:5b:74:5d:b5:2a:84:6d:5b:a3:75:30:84:41:0d:37:51:85: 3f:14:85:c1:33:17:97:21:10:51:75:0e:00:6c:cf:c1:9b:95: 68:c1:97:ee:ab:13:b5:88:e2:f8:31:ad:b4:4e:24:7b:db:06: ce:40:65:13:9c:be:6d:17:3a:86:7f:2b:08:ee:79:b2:9b:38: de:5a:ea:d7:46:c8:12:38:53:e9:f2:00:91:34:bb:96:34:86: 35:27:36:68:17:2c:f1:9d:b3:30:75:27:af:15:19:17:c8:29: b5:52:62:b7:ca:3d:5a:b9:59:ae:5e:3a:a3:aa:35:c2:e9:36: aa:d7:af:44:fa:ab:83:50:83:d0:8e:04:c2:ac:e3:58:be:ed: 5f:f6:b6:c9:a7:e3:db:83:95:b0:81:3b:b3:ec:cf:f8:cb:c4: 60:0a:96:7c:32:e1:dd:73:9f:a8:72:64:c6:56:15:9f:c7:35: 69:49:3f:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHgmUWO3nCEkScmvDutmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky MDBkNTIwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmYwMTA5ZmRmMjc1YzhmYTljZDQ0ZWVmYWRiZTc0MTVkZmJkZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8X6WSyQYXvWEAm2GQJBHGLc8rpl X7N2b1hzYDal8hW8OGefOrbuFzA6V/rgp6217a2Bzyq1VO4PGFpLJcedYbd2nWnx 4MO/jhTfhfCpn8E9Ql7gnBWFHtD37Tr5u2+U7nlp6EQ2CUj+b2/o+u0TJhVRjHMs FHt8ev7b2IOGXSucQb9ngeMhp/AJbpYJ1BEjwNPSr1tyQd7wHOD98rGCehx8s9tJ 0LPj2ecNWjEyL7x6y3xE0WuGHna4AhM7NnUVk7d8IB3F1KvJK+FpjD2OaoVuEN/L QZLB5MUdjdqwBS1AKBLkKsDMdVU/m3ojRgiEkBFJXtMiAL0j8Hjy8N6BcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLwEJ/fJ1yPqc1E7vrb50Fd+99AMB8GA1UdIwQY MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt MWI1MTFjNjYzOTc4LzEvTXZBUW45OG5YSS1welVUdS10dm5RVjM3MzBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4 LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubjgMA0G CSqGSIb3DQEBCwUAA4IBAQBOYzJOZfaVn9SPTuGfomnUraj7XytOPQ6VRywz9GQr 9uysFXJW3cMtIsf/ec2N8wHYqo6E9rjrPcGWX9AxofGkCO0liXt5v865W3RdtSqE bVujdTCEQQ03UYU/FIXBMxeXIRBRdQ4AbM/Bm5VowZfuqxO1iOL4Ma20TiR72wbO QGUTnL5tFzqGfysI7nmymzjeWurXRsgSOFPp8gCRNLuWNIY1JzZoFyzxnbMwdSev FRkXyCm1UmK3yj1auVmuXjqjqjXC6Taq169E+quDUIPQjgTCrONYvu1f9rbJp+Pb g5WwgTuz7M/4y8RgCpZ8MuHdc5+ocmTGVhWfxzVpST9s -----END CERTIFICATE-----Generated at Sat Jan 3 12:40:55 2026 by rpki-client