This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mKtVrtUWORoLaXmFd4CD4gkuGI8.roa File: mKtVrtUWORoLaXmFd4CD4gkuGI8.roa (raw, json) Hash identifier: SvlgLsuByjiJ00jhMAe0zPC4h8T+8BYBnsVYHVQZBmM= Subject key identifier: 98:AB:55:AE:D5:16:39:1A:0B:69:79:85:77:80:83:E2:09:2E:18:8F Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C0A502A66C4F5E68995EFE4C7AE96065F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mKtVrtUWORoLaXmFd4CD4gkuGI8.roa Signing time: Thu 29 Jan 2026 15:12:31 +0000 ROA not before: Thu 29 Jan 2026 15:12:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147186 IP address blocks: 45.129.86.0/23 maxlen: 24 185.252.176.0/24 maxlen: 24 193.35.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:50:2a:66:c4:f5:e6:89:95:ef:e4:c7:ae:96:06:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 15:12:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98ab55aed516391a0b697985778083e2092e188f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:5a:dc:42:78:4a:0f:9a:7d:db:1b:5a:70: 85:97:f0:71:72:ac:80:c8:c9:90:7b:1d:ff:2a:b0: 36:b9:05:bc:a6:f7:76:0a:8e:13:be:13:41:53:91: f1:b0:9e:02:a7:c0:ac:f2:b4:d1:d3:0e:4d:2f:1b: 8f:9b:cf:83:99:3d:d6:5f:e4:62:73:78:25:71:6c: 4c:35:cf:39:f9:27:b6:3b:f4:70:0a:8e:84:2c:5a: a3:54:bc:ad:a9:2d:8e:ff:b1:72:17:e4:d8:5c:cf: 56:57:3e:ee:ed:60:93:eb:07:30:b5:ba:84:94:ce: b5:df:9b:48:66:d5:6d:fa:07:ee:95:1f:39:72:01: e6:88:3f:f5:1e:2d:4e:3a:ed:ce:c5:63:e0:e8:6c: b4:ba:1f:10:54:94:b1:37:ce:f3:c5:6a:29:d6:67: 78:75:c8:7c:32:4a:44:e3:db:12:3f:cd:3e:70:ab: 0e:7a:fc:fa:01:55:ca:07:ff:d3:56:34:7c:71:9b: b3:0a:ef:0a:26:77:19:95:79:3c:02:12:35:10:74: e6:70:84:60:81:69:6e:49:72:80:70:05:b3:67:f1: 37:8e:ee:29:ab:f0:7f:ce:3a:ec:f1:f9:36:3e:24: 9d:59:78:15:bf:54:e4:72:0c:81:58:80:40:91:8a: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:55:AE:D5:16:39:1A:0B:69:79:85:77:80:83:E2:09:2E:18:8F X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mKtVrtUWORoLaXmFd4CD4gkuGI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.86.0/23 185.252.176.0/24 193.35.19.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:48:3a:3b:af:9a:69:5b:d9:6e:05:f8:22:f8:ef:38:63:dc: b8:2f:e0:e6:04:ad:5f:3c:17:d8:65:1c:52:15:2c:da:ea:e1: 99:41:06:9a:f9:8e:93:d7:00:4b:7b:08:1c:6b:74:cf:7a:d2: 25:e5:39:0f:d6:7f:30:da:1c:17:cc:a4:64:28:7e:55:24:c7: c8:0b:29:51:45:1d:c8:ff:38:6f:70:6b:22:0b:f0:1b:8b:19: 38:1a:73:43:34:b7:ba:16:75:31:52:34:4b:d7:0b:d6:62:2e: 1c:8c:12:47:22:5e:79:f4:7d:61:5e:d0:89:16:84:24:30:65: 01:7a:b6:83:16:c4:44:e1:ba:e9:e1:db:63:21:00:50:12:73: b6:a8:8d:da:27:5d:71:40:39:5a:47:a6:d4:17:ac:9f:92:a9: 94:1d:dc:0d:a7:ab:0b:13:e2:18:37:7e:12:76:27:a6:f1:de: 4b:c9:3a:d9:76:78:03:59:e6:68:63:57:66:dc:37:40:d0:81: f9:08:ea:2e:47:5f:0e:25:24:0a:ba:75:b0:a0:82:42:0e:b0: a3:8b:47:37:98:b0:dd:b0:2b:5b:12:96:67:a9:9f:91:cd:ef: 1b:48:34:d8:b7:19:dc:a8:37:0c:54:60:92:6d:00:3e:ef:26: c0:fd:4b:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwKUCpmxPXmiZXv5MeulgZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MTUxMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGFiNTVhZWQ1MTYzOTFhMGI2OTc5ODU3NzgwODNlMjA5MmUxODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcxa3EJ4Sg+afdsbWnCFl/BxcqyA yMmQex3/KrA2uQW8pvd2Co4TvhNBU5HxsJ4Cp8Cs8rTR0w5NLxuPm8+DmT3WX+Ri c3glcWxMNc85+Se2O/RwCo6ELFqjVLytqS2O/7FyF+TYXM9WVz7u7WCT6wcwtbqE lM6135tIZtVt+gfulR85cgHmiD/1Hi1OOu3OxWPg6Gy0uh8QVJSxN87zxWop1md4 dch8MkpE49sSP80+cKsOevz6AVXKB//TVjR8cZuzCu8KJncZlXk8AhI1EHTmcIRg gWluSXKAcAWzZ/E3ju4pq/B/zjrs8fk2PiSdWXgVv1TkcgyBWIBAkYpVOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJirVa7VFjkaC2l5hXeAg+IJLhiPMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbUt0VnJ0VVdPUm9MYVhtRmQ0Q0Q0Z2t1R0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYFWAwQA ufywAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQAeSDo7r5ppW9luBfgi+O84Y9y4 L+DmBK1fPBfYZRxSFSza6uGZQQaa+Y6T1wBLewgca3TPetIl5TkP1n8w2hwXzKRk KH5VJMfICylRRR3I/zhvcGsiC/Abixk4GnNDNLe6FnUxUjRL1wvWYi4cjBJHIl55 9H1hXtCJFoQkMGUBeraDFsRE4brp4dtjIQBQEnO2qI3aJ11xQDlaR6bUF6yfkqmU HdwNp6sLE+IYN34Sdiem8d5LyTrZdngDWeZoY1dm3DdA0IH5COouR18OJSQKunWw oIJCDrCji0c3mLDdsCtbEpZnqZ+Rze8bSDTYtxncqDcMVGCSbQA+7ybA/UuN -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:11 2026 by rpki-client