This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa File: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (raw, json) Hash identifier: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg= Subject key identifier: 32:98:FF:DE:43:88:6F:F6:01:44:49:B8:08:31:9B:66:84:FC:47:5B Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Certificate serial: 019B797E2D7A8DC39742D7A6E4363F9D98C1 Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50935 IP address blocks: 194.15.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2d:7a:8d:c3:97:42:d7:a6:e4:36:3f:9d:98:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3298ffde43886ff6014449b808319b6684fc475b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:75:18:5c:05:8a:59:f6:d7:6b:4a:eb:13: b7:d1:d7:91:65:7d:92:4b:f4:aa:79:57:a7:49:7c: d4:0e:92:6e:0b:4b:b5:c2:cc:f5:c7:4d:c3:43:19: 97:48:af:ea:77:09:5f:df:fe:45:8e:23:cf:15:b1: 10:8d:58:29:32:55:41:1f:8a:25:7b:60:05:88:2a: 5b:bd:1a:de:8d:46:6a:fb:e2:b8:80:72:3c:aa:cb: 79:f7:e6:15:b2:db:5c:f1:f9:97:a9:c3:b3:a3:b4: c8:63:86:e5:28:4a:29:3e:d7:0a:45:a6:66:62:83: fd:b5:43:cb:f8:ac:cb:e6:61:db:a1:d2:89:58:1d: b4:88:25:f9:4e:18:a9:2a:d8:78:4c:a7:8c:7b:c6: 60:6f:da:da:6d:fc:e1:34:b2:f0:a8:d1:39:55:41: 48:f5:18:84:9d:3c:17:63:da:70:46:f1:1c:b4:3c: b0:d6:5a:e4:17:5b:99:51:da:36:8d:16:5f:a0:5c: 6a:fa:43:d7:4d:b4:05:c8:56:1d:8a:2a:b9:85:c7: 09:1c:50:70:95:1a:1f:de:c3:9c:d4:03:82:dd:9b: d0:f9:ff:ab:9c:a0:c6:dc:8d:c7:14:8c:14:39:30: b9:6f:50:50:77:10:91:5e:d2:a2:d1:28:e6:0c:b3: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:FF:DE:43:88:6F:F6:01:44:49:B8:08:31:9B:66:84:FC:47:5B X509v3 Authority Key Identifier: keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.115.0/24 Signature Algorithm: sha256WithRSAEncryption 81:27:b3:d9:91:f5:a9:63:68:27:b7:c2:03:ed:8e:83:fb:9e: d2:28:ef:28:96:c6:58:f1:d5:9c:51:3b:52:95:7e:a0:3f:00: 5f:48:71:93:c2:fd:d3:f2:30:2e:e1:c3:5d:34:dc:a5:dd:f6: 70:13:96:6d:df:03:d0:a0:4b:a6:5f:f8:a2:3b:c9:d4:69:b2: 08:b5:46:73:e2:a8:a5:42:2b:99:26:1b:39:21:23:36:16:04: 52:0f:f3:eb:4a:30:af:22:cd:e1:9f:5b:3a:b4:2a:66:89:2a: ec:f3:94:2b:86:73:62:b5:9b:c2:f1:8b:59:fc:0e:4f:93:ce: bf:69:08:82:bf:6a:ea:2c:bd:9b:66:69:ec:39:be:49:a2:4a: 01:83:c5:db:5c:5c:cb:7c:d2:ea:db:23:f8:aa:6d:ad:2f:c0: b7:63:b7:33:56:ae:36:a1:ef:83:9d:73:c4:e0:85:2b:90:c2: 52:d6:e4:18:61:8b:8d:19:d7:67:b4:00:3f:04:58:79:41:36: 3c:e7:dd:8e:79:bd:e8:cb:8d:35:d2:f0:6c:64:f4:da:6d:c5: b6:a1:90:14:23:25:a3:87:26:68:9c:af:14:91:ab:bc:c1:b6: 58:e0:6d:99:93:15:90:50:9f:5d:6b:d8:5a:8d:67:38:0f:0a: 46:29:60:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fi16jcOXQtem5DY/nZjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4 YzdiODUwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjk4ZmZkZTQzODg2ZmY2MDE0NDQ5YjgwODMxOWI2Njg0ZmM0NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm251GFwFiln212tK6xO30deRZX2S S/SqeVenSXzUDpJuC0u1wsz1x03DQxmXSK/qdwlf3/5FjiPPFbEQjVgpMlVBH4ol e2AFiCpbvRrejUZq++K4gHI8qst59+YVsttc8fmXqcOzo7TIY4blKEopPtcKRaZm YoP9tUPL+KzL5mHbodKJWB20iCX5ThipKth4TKeMe8Zgb9rabfzhNLLwqNE5VUFI 9RiEnTwXY9pwRvEctDyw1lrkF1uZUdo2jRZfoFxq+kPXTbQFyFYdiiq5hccJHFBw lRof3sOc1AOC3ZvQ+f+rnKDG3I3HFIwUOTC5b1BQdxCRXtKi0SjmDLMpPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKY/95DiG/2AURJuAgxm2aE/EdbMB8GA1UdIwQY MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt ODZlYTE5ZDI5MTYzLzEvTXBqXzNrT0liX1lCUkVtNENER2Jab1Q4UjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9zMA0G CSqGSIb3DQEBCwUAA4IBAQCBJ7PZkfWpY2gnt8ID7Y6D+57SKO8olsZY8dWcUTtS lX6gPwBfSHGTwv3T8jAu4cNdNNyl3fZwE5Zt3wPQoEumX/iiO8nUabIItUZz4qil QiuZJhs5ISM2FgRSD/PrSjCvIs3hn1s6tCpmiSrs85QrhnNitZvC8YtZ/A5Pk86/ aQiCv2rqLL2bZmnsOb5JokoBg8XbXFzLfNLq2yP4qm2tL8C3Y7czVq42oe+DnXPE 4IUrkMJS1uQYYYuNGddntAA/BFh5QTY8592Oeb3oy4010vBsZPTabcW2oZAUIyWj hyZonK8Ukau8wbZY4G2ZkxWQUJ9da9hajWc4DwpGKWAF -----END CERTIFICATE-----Generated at Sat Jan 10 08:47:14 2026 by rpki-client