This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/mTu4D2NDzTOT8K2goxWO28e3uHs.roa File: mTu4D2NDzTOT8K2goxWO28e3uHs.roa (raw, json) Hash identifier: GvYWUuN8wULXb3KaEycrU3j4EUGrHZPXFPqLCC21It8= Subject key identifier: 99:3B:B8:0F:63:43:CD:33:93:F0:AD:A0:A3:15:8E:DB:C7:B7:B8:7B Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Certificate serial: 019B7BA4F42ED30166B0F78528F51B62AA87 Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/mTu4D2NDzTOT8K2goxWO28e3uHs.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41589 IP address blocks: 81.25.128.0/20 maxlen: 20 91.142.48.0/20 maxlen: 24 185.118.100.0/22 maxlen: 24 195.34.86.0/23 maxlen: 23 217.171.176.0/20 maxlen: 20 2a02:4d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f4:2e:d3:01:66:b0:f7:85:28:f5:1b:62:aa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993bb80f6343cd3393f0ada0a3158edbc7b7b87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d8:d5:cb:6b:df:23:aa:cc:fe:8f:05:23:94: 03:2f:3b:e5:7e:e5:96:77:a5:53:e7:71:03:37:e8: d1:5e:e0:96:cc:37:4b:0b:38:7b:79:46:42:c3:99: 33:fa:e5:63:d6:16:db:1b:45:99:d3:aa:d8:7f:97: 25:cb:14:03:15:e9:5e:4a:b2:17:98:45:c4:88:b4: 7a:76:29:e1:ec:47:b8:14:7d:b6:cb:f8:2a:6f:04: 13:18:85:1c:5f:a8:86:41:fe:a2:83:cf:25:27:86: 31:a3:33:e0:f8:60:d0:2f:36:56:7d:eb:8c:4d:3d: 2f:d6:84:2b:41:5d:05:b3:fc:5c:27:3c:eb:5e:19: b2:ce:3a:24:db:9e:27:dd:53:33:50:76:f6:22:a5: d2:ca:69:d5:c9:16:db:d4:6e:6f:a4:14:cf:f3:fb: 3a:17:dc:23:7a:31:24:d6:41:a5:8e:36:0b:65:c0: 40:3c:e9:e1:5f:2b:f7:19:ca:c8:7d:9a:2d:a4:90: 0e:54:59:8d:d1:56:9b:d0:c3:75:07:a7:44:47:97: 9d:ed:f2:3a:aa:a1:1b:6a:6c:94:88:4f:c0:03:aa: 4b:08:20:69:af:0c:9c:76:d5:07:6b:e6:1e:f7:9f: bc:9e:d3:e3:f8:6d:00:25:77:19:44:31:46:6f:27: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:B8:0F:63:43:CD:33:93:F0:AD:A0:A3:15:8E:DB:C7:B7:B8:7B X509v3 Authority Key Identifier: keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/mTu4D2NDzTOT8K2goxWO28e3uHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.128.0/20 91.142.48.0/20 185.118.100.0/22 195.34.86.0/23 217.171.176.0/20 IPv6: 2a02:4d8::/32 Signature Algorithm: sha256WithRSAEncryption 56:c0:6e:0b:94:cb:0d:6f:80:c2:fd:56:8f:b8:a7:15:60:32: f2:10:43:cf:14:94:cd:72:e4:04:a6:03:15:f0:e2:b5:03:c1: 74:3a:13:9d:e9:7b:a3:5f:af:ce:6a:b1:4a:cd:dc:36:5a:e5: 59:73:3a:b3:01:ef:db:b1:74:b6:b0:f5:3e:ee:5e:75:5d:f8: d1:6e:21:b7:93:7d:36:c9:97:89:f1:07:d7:eb:e4:fb:59:41: 0d:b5:84:eb:40:c4:33:07:e2:09:f5:ec:77:aa:84:96:7b:15: f4:e6:55:92:61:df:40:7b:a9:ef:4a:42:ae:c1:c6:b5:3b:96: 82:8f:c4:32:89:ba:cd:b6:e2:80:3f:6c:7e:41:13:36:ae:7a: 71:52:10:89:1d:17:4f:08:d3:98:87:4e:cd:00:0c:cd:ca:49: 40:6b:8d:45:6c:ff:c2:06:82:77:15:e3:b9:ed:0c:9e:5a:26: 33:69:77:6f:f2:6c:94:0d:78:0d:ba:8b:6c:f7:88:58:a7:5f: 40:7f:8b:a9:09:0b:79:b4:57:f9:2a:0c:0b:43:b2:ea:47:02: 32:62:96:18:08:55:82:ad:ab:5d:ae:c3:dc:01:2c:7d:a7:e5: 0c:3e:72:d9:df:12:db:90:2d:00:0a:71:c2:58:7c:48:e8:cf: 89:52:6b:19 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7pPQu0wFmsPeFKPUbYqqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk OGM2MGYwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNiYjgwZjYzNDNjZDMzOTNmMGFkYTBhMzE1OGVkYmM3YjdiODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NjVy2vfI6rM/o8FI5QDLzvlfuWW d6VT53EDN+jRXuCWzDdLCzh7eUZCw5kz+uVj1hbbG0WZ06rYf5clyxQDFeleSrIX mEXEiLR6dinh7Ee4FH22y/gqbwQTGIUcX6iGQf6ig88lJ4YxozPg+GDQLzZWfeuM TT0v1oQrQV0Fs/xcJzzrXhmyzjok254n3VMzUHb2IqXSymnVyRbb1G5vpBTP8/s6 F9wjejEk1kGljjYLZcBAPOnhXyv3GcrIfZotpJAOVFmN0Vab0MN1B6dER5ed7fI6 qqEbamyUiE/AA6pLCCBprwycdtUHa+Ye95+8ntPj+G0AJXcZRDFGbydrgwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJk7uA9jQ80zk/CtoKMVjtvHt7h7MB8GA1UdIwQY MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct MDczNjM5OTM4NDM3LzEvbVR1NEQyTkR6VE9UOEsyZ294V08yOGUzdUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3 LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEURmAAwQE W44wAwQCuXZkAwQBwyJWAwQE2auwMA0EAgACMAcDBQAqAgTYMA0GCSqGSIb3DQEB CwUAA4IBAQBWwG4LlMsNb4DC/VaPuKcVYDLyEEPPFJTNcuQEpgMV8OK1A8F0OhOd 6XujX6/OarFKzdw2WuVZczqzAe/bsXS2sPU+7l51XfjRbiG3k302yZeJ8QfX6+T7 WUENtYTrQMQzB+IJ9ex3qoSWexX05lWSYd9Ae6nvSkKuwca1O5aCj8QyibrNtuKA P2x+QRM2rnpxUhCJHRdPCNOYh07NAAzNyklAa41FbP/CBoJ3FeO57QyeWiYzaXdv 8myUDXgNuots94hYp19Af4upCQt5tFf5KgwLQ7LqRwIyYpYYCFWCratdrsPcASx9 p+UMPnLZ3xLbkC0ACnHCWHxI6M+JUmsZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:58 2026 by rpki-client