This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa File: mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa (raw, json) Hash identifier: UVnquJ+GGNXvnJEV311l0LcTpr92LD6i72Q9lhofEe4= Subject key identifier: 99:51:E1:54:12:F7:6F:6A:E0:11:36:5B:F7:FD:61:98:82:6D:62:84 Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Certificate serial: 019B7BA4FC3E7746E2B71EA70233249D2CE8 Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199188 IP address blocks: 176.124.191.0/24 maxlen: 24 185.97.160.0/22 maxlen: 22 185.97.160.0/23 maxlen: 23 185.97.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fc:3e:77:46:e2:b7:1e:a7:02:33:24:9d:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9951e15412f76f6ae011365bf7fd6198826d6284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:27:4d:97:d9:09:59:e3:31:a4:05:8e:67: bf:93:25:1e:dc:fd:6a:aa:38:2d:30:48:b8:21:6c: cc:7e:f2:3a:e3:1a:24:e4:5d:bd:56:25:36:fb:90: 1c:2d:08:7c:03:95:c0:1e:5f:e5:52:13:eb:a2:ca: 92:df:da:2a:4a:88:46:d8:07:2f:58:21:f3:92:cb: 69:35:76:38:58:a5:f6:ad:2e:3e:67:e4:4f:cc:26: c8:99:2d:b6:56:cf:c6:ce:b0:f1:e5:ed:12:ea:db: ab:3f:a5:1e:4d:af:35:cb:15:db:8b:ee:af:ca:25: 78:b1:8a:b6:1f:ea:48:10:8e:a0:4e:9a:4a:43:31: b3:dd:bf:4e:a4:f9:0c:c0:80:38:85:12:1d:03:2c: a8:4f:76:3e:e9:a5:cb:25:81:c0:ba:ac:0b:f2:d8: 97:01:bd:b8:66:ed:0e:28:7c:56:bb:45:e7:a2:82: c2:f6:92:e3:49:38:51:c4:f8:bf:3d:d5:fb:4a:64: f7:29:9d:dd:39:ae:5f:49:f0:ff:5a:0c:0f:b8:ae: c6:f3:14:cf:e4:ac:01:30:d4:cf:6a:0f:b1:7b:c3: 24:0a:e4:0f:be:41:e4:64:ed:03:d9:5d:69:f8:dd: ee:83:1f:bb:1e:3e:a3:42:a4:77:a8:11:ec:12:26: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:E1:54:12:F7:6F:6A:E0:11:36:5B:F7:FD:61:98:82:6D:62:84 X509v3 Authority Key Identifier: keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.191.0/24 185.97.160.0/22 Signature Algorithm: sha256WithRSAEncryption 24:bc:10:bf:8c:ff:7e:f6:f4:c2:f5:d0:43:1e:f2:64:23:2b: 32:0e:40:04:05:62:30:87:49:3b:f1:c2:2a:cf:26:10:e1:4b: 5f:04:f8:8c:27:e2:7b:b6:c0:a6:0c:6d:b1:39:a2:4c:e1:79: 6a:55:35:90:57:19:75:6f:0b:fb:ec:41:a3:3b:2a:33:cb:b9: 27:ee:9b:54:cb:e0:fd:6f:60:0b:11:e3:51:46:77:9d:07:14: ec:23:ae:db:e2:f3:60:10:58:c2:d8:13:61:c6:76:47:40:cc: da:c2:06:29:e4:29:a2:c0:9d:07:ad:82:3a:e8:db:34:34:d8: 25:0a:45:e3:d3:0e:16:a7:a8:85:1c:85:53:7e:41:34:e4:db: a9:3d:3e:56:e9:83:66:3a:ce:8a:93:09:87:03:6d:a1:1d:08: e4:64:ae:30:d3:f0:65:26:e3:ea:55:e1:09:80:92:c0:66:c6: 1b:51:44:f6:ea:c1:47:9b:06:01:78:c6:0d:46:6c:48:4d:2f: 4e:3f:ad:e8:37:21:be:c5:e1:78:e5:4b:5f:cc:47:6a:45:72: b6:73:40:73:4a:e6:f9:7a:f9:db:3d:81:c6:7f:ac:70:4b:a1: 95:bc:ea:2a:e6:e4:e4:38:73:59:a5:39:c4:45:40:7d:04:c6: 24:4f:cb:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pPw+d0bitx6nAjMknSzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZGIxMzJiNDdjOGVkZDgzZmVkMDJkNTYxZTc1MDYwNGMy MGIxZjgwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTUxZTE1NDEyZjc2ZjZhZTAxMTM2NWJmN2ZkNjE5ODgyNmQ2Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrMnTZfZCVnjMaQFjme/kyUe3P1q qjgtMEi4IWzMfvI64xok5F29ViU2+5AcLQh8A5XAHl/lUhProsqS39oqSohG2Acv WCHzkstpNXY4WKX2rS4+Z+RPzCbImS22Vs/GzrDx5e0S6turP6UeTa81yxXbi+6v yiV4sYq2H+pIEI6gTppKQzGz3b9OpPkMwIA4hRIdAyyoT3Y+6aXLJYHAuqwL8tiX Ab24Zu0OKHxWu0XnooLC9pLjSThRxPi/PdX7SmT3KZ3dOa5fSfD/WgwPuK7G8xTP 5KwBMNTPag+xe8MkCuQPvkHkZO0D2V1p+N3ugx+7Hj6jQqR3qBHsEiYrWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJlR4VQS929q4BE2W/f9YZiCbWKEMB8GA1UdIwQY MBaAFNfbEytHyO3YP+0C1WHnUGBMILH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTkt YTA0NjAzNzA5NTE5LzEvbVZIaFZCTDNiMnJnRVRaYjlfMWhtSUp0WW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTktYTA0NjAzNzA5NTE5 LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHy/AwQC uWGgMA0GCSqGSIb3DQEBCwUAA4IBAQAkvBC/jP9+9vTC9dBDHvJkIysyDkAEBWIw h0k78cIqzyYQ4UtfBPiMJ+J7tsCmDG2xOaJM4XlqVTWQVxl1bwv77EGjOyozy7kn 7ptUy+D9b2ALEeNRRnedBxTsI67b4vNgEFjC2BNhxnZHQMzawgYp5CmiwJ0HrYI6 6Ns0NNglCkXj0w4Wp6iFHIVTfkE05NupPT5W6YNmOs6KkwmHA22hHQjkZK4w0/Bl JuPqVeEJgJLAZsYbUUT26sFHmwYBeMYNRmxITS9OP63oNyG+xeF45UtfzEdqRXK2 c0BzSub5evnbPYHGf6xwS6GVvOoq5uTkOHNZpTnERUB9BMYkT8td -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:45 2026 by rpki-client