This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa File: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (raw, json) Hash identifier: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU= Subject key identifier: 32:DE:90:46:A7:69:FD:6A:D5:92:93:9A:17:D1:58:7D:A7:D4:FE:ED Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019B7FF1425B6F5C40D4F2DC9EE807261EDF Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa Signing time: Fri 02 Jan 2026 18:21:16 +0000 ROA not before: Fri 02 Jan 2026 18:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210006 IP address blocks: 86.54.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:42:5b:6f:5c:40:d4:f2:dc:9e:e8:07:26:1e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Jan 2 18:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32de9046a769fd6ad592939a17d1587da7d4feed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:ff:a5:5c:ad:33:89:2c:4d:4e:4b:4c:bc: 40:72:ae:9a:82:4c:a1:39:46:d9:84:fa:96:da:c8: 43:87:2a:08:e2:bd:17:87:22:13:30:36:d5:9f:47: 25:75:f4:22:13:70:cb:5a:72:d5:e2:76:bd:58:19: d4:eb:98:a1:97:ab:f5:dc:92:a8:18:20:0d:1f:27: 52:3c:b7:fa:65:8a:9f:6e:c2:b7:46:97:97:6a:20: ee:d6:88:8b:89:d5:62:0f:03:0b:53:90:4c:35:4a: 1c:8b:b8:d6:61:1e:68:d7:87:75:84:63:0f:3a:9d: a8:d4:76:7d:1f:cd:0b:7b:fc:e5:79:50:4f:ae:96: d9:eb:03:94:31:48:76:f8:31:98:0c:12:d3:bd:97: 01:d3:de:99:20:6b:4e:4b:58:08:bb:12:72:5c:6b: 67:03:73:6e:f0:24:ab:60:ff:02:2c:18:2b:d7:bd: f9:95:fe:06:15:a2:e9:43:b3:ed:14:80:af:58:8b: fb:db:67:01:25:ea:87:5a:4d:1d:9b:b9:88:61:f2: 2e:20:d4:57:22:e1:2a:53:13:a5:0a:f2:d3:33:ab: e0:b3:22:c3:6c:07:3a:7e:ac:27:10:8d:d1:8b:22: 3e:ae:a8:9a:7b:3b:d4:17:c0:dc:70:96:c3:1e:6b: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:90:46:A7:69:FD:6A:D5:92:93:9A:17:D1:58:7D:A7:D4:FE:ED X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.25.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:50:53:dd:7e:4d:55:65:3e:3f:48:43:ff:14:00:e5:21:98: c7:57:a3:30:1f:a0:e5:fe:5d:46:6c:d8:ef:92:5d:e8:a3:00: 3e:f9:d9:90:8b:37:05:33:29:d9:69:7c:79:c5:61:8f:eb:25: 01:41:48:0c:4c:cd:5c:2f:1b:96:17:70:f3:c0:6b:8e:0f:35: bf:af:ea:f8:72:66:ec:b9:6a:83:66:20:3d:9c:50:56:29:77: 48:bb:3e:94:71:d0:f5:d7:be:70:d4:29:90:6b:e0:e0:c0:93: 74:17:6a:91:c2:85:c3:13:b2:11:f2:e6:1b:3a:a1:2d:e6:78: 9a:20:4b:b3:8f:e6:05:5a:88:b8:ce:57:89:b7:48:76:e9:5a: 6e:4b:fb:f2:5f:f4:4e:c5:54:5b:d9:79:05:36:be:07:b5:8f: d0:a0:e6:8f:bf:9e:c3:8d:56:60:f6:d6:bb:be:39:70:28:2a: e8:37:5f:07:a6:0f:d3:30:d6:4b:4b:2e:5f:4c:b5:26:bd:4b: 60:91:c8:38:b8:8a:3f:b1:d4:90:f2:aa:55:1d:a2:31:e6:d3: 2d:a8:47:1d:8f:06:f0:89:5c:76:16:92:ec:b9:20:9e:b6:72: f0:c8:a6:1b:bc:3f:6f:97:d1:a3:c5:d1:d2:e4:bc:36:fe:a8: 2f:db:60:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UJbb1xA1PLcnugHJh7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjYwMTAyMTgyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmRlOTA0NmE3NjlmZDZhZDU5MjkzOWExN2QxNTg3ZGE3ZDRmZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX7/pVytM4ksTU5LTLxAcq6agkyh OUbZhPqW2shDhyoI4r0XhyITMDbVn0cldfQiE3DLWnLV4na9WBnU65ihl6v13JKo GCANHydSPLf6ZYqfbsK3RpeXaiDu1oiLidViDwMLU5BMNUoci7jWYR5o14d1hGMP Op2o1HZ9H80Le/zleVBPrpbZ6wOUMUh2+DGYDBLTvZcB096ZIGtOS1gIuxJyXGtn A3Nu8CSrYP8CLBgr1735lf4GFaLpQ7PtFICvWIv722cBJeqHWk0dm7mIYfIuINRX IuEqUxOlCvLTM6vgsyLDbAc6fqwnEI3RiyI+rqiaezvUF8DccJbDHmuAlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLekEanaf1q1ZKTmhfRWH2n1P7tMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvTXQ2UVJxZHBfV3JWa3BPYUY5RllmYWZVX3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjYZMA0G CSqGSIb3DQEBCwUAA4IBAQBsUFPdfk1VZT4/SEP/FADlIZjHV6MwH6Dl/l1GbNjv kl3oowA++dmQizcFMynZaXx5xWGP6yUBQUgMTM1cLxuWF3DzwGuODzW/r+r4cmbs uWqDZiA9nFBWKXdIuz6UcdD1175w1CmQa+DgwJN0F2qRwoXDE7IR8uYbOqEt5nia IEuzj+YFWoi4zleJt0h26VpuS/vyX/ROxVRb2XkFNr4HtY/QoOaPv57DjVZg9ta7 vjlwKCroN18Hpg/TMNZLSy5fTLUmvUtgkcg4uIo/sdSQ8qpVHaIx5tMtqEcdjwbw iVx2FpLsuSCetnLwyKYbvD9vl9GjxdHS5Lw2/qgv22DP -----END CERTIFICATE-----Generated at Fri Jan 23 12:54:07 2026 by rpki-client