This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mKKnHtLvKpudYel2HJPdBYi6VYc.roa File: mKKnHtLvKpudYel2HJPdBYi6VYc.roa (raw, json) Hash identifier: dZP7DWRDnL2V5bJjczvbnU66Av8H3v9xhP4Qt0WfpIE= Subject key identifier: 98:A2:A7:1E:D2:EF:2A:9B:9D:61:E9:76:1C:93:DD:05:88:BA:55:87 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ECD6D83105EA96B359685D3931F9A Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mKKnHtLvKpudYel2HJPdBYi6VYc.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198938 IP address blocks: 213.222.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cd:6d:83:10:5e:a9:6b:35:96:85:d3:93:1f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98a2a71ed2ef2a9b9d61e9761c93dd0588ba5587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:48:c6:c7:01:7f:a2:38:2f:fa:ad:fc:eb: ab:89:43:43:d7:d0:bc:2d:0e:1e:93:1c:b2:33:41: 62:53:14:e1:d1:92:35:0a:16:64:40:a6:cf:c2:9a: 32:dd:01:13:ff:1d:10:72:c8:cc:ae:02:69:7d:eb: ab:4f:31:8f:0f:5e:ff:ee:0d:ed:8e:4d:c5:df:8c: 76:91:ba:52:31:58:9d:04:38:c9:68:7f:b2:e1:ec: 5b:69:6e:10:9a:b1:20:aa:69:5a:2f:61:c0:df:37: 13:b3:2b:9d:75:32:3b:9e:c1:20:36:a6:b2:db:8e: c8:84:fd:04:97:b1:f9:6c:c3:be:13:f7:e0:c1:4b: 14:fe:26:a0:92:6b:69:54:cd:81:3d:91:af:95:72: f9:10:87:b1:84:ce:75:28:97:30:4c:b2:30:98:63: c9:0c:31:ac:ab:9f:5f:8b:c2:c2:18:07:65:c7:97: 29:b6:22:69:94:c0:0f:47:87:e3:6d:1d:72:62:16: 4e:ef:29:e3:21:3f:6a:81:ac:b6:2f:17:c4:5b:68: 16:7b:bb:70:4d:72:75:50:56:f3:68:6e:0b:e3:57: 7e:5e:37:99:07:dc:59:b2:a7:91:44:55:dc:5a:43: 80:0b:13:c6:ae:cb:91:10:93:60:00:d0:39:e3:f9: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:A7:1E:D2:EF:2A:9B:9D:61:E9:76:1C:93:DD:05:88:BA:55:87 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mKKnHtLvKpudYel2HJPdBYi6VYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.222.50.0/24 Signature Algorithm: sha256WithRSAEncryption 92:c4:c5:74:45:9a:76:27:11:59:fe:73:7a:67:b6:a4:97:ca: f7:73:4b:c1:7f:6e:f3:0a:0b:db:af:98:08:b6:07:2a:06:95: 17:22:22:49:51:50:65:56:05:3d:78:3e:ec:e6:48:e9:5d:94: fc:2c:ca:02:9e:37:c2:1d:03:5d:09:51:16:a9:ae:3e:1a:9f: 72:b9:07:cd:a4:f9:f3:a7:a5:ab:e9:d2:55:96:0b:63:fd:ee: 2a:bb:c7:e2:a2:94:1d:87:7c:62:e3:4f:74:e7:0b:33:5f:ec: 8f:a4:72:32:7e:5d:5b:ae:2b:b2:18:42:10:4e:d3:1c:4c:0e: cd:5f:14:ce:0a:33:96:54:53:e8:77:05:d2:29:35:0b:20:6a: 78:25:a5:56:87:0b:75:ab:0c:de:cb:6f:dd:f5:22:4d:56:3d: 1e:0a:c9:37:89:e5:e5:dc:48:ac:16:46:cf:04:cf:03:e9:12: 4f:4b:2e:7f:d0:86:db:69:1b:7e:ad:61:c3:03:7d:6b:2b:de: 66:78:fc:90:a2:19:5b:3e:2a:5b:49:15:f2:ed:2d:50:1a:1d: b1:a3:41:c8:9a:a7:cd:b4:bc:f3:92:00:59:d5:78:8e:16:a4: ae:ef:31:f8:f0:f5:57:f1:b1:a5:32:73:38:0a:ab:b8:10:46: 53:56:c4:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fs1tgxBeqWs1loXTkx+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGEyYTcxZWQyZWYyYTliOWQ2MWU5NzYxYzkzZGQwNTg4YmE1NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFRIxscBf6I4L/qt/OuriUND19C8 LQ4ekxyyM0FiUxTh0ZI1ChZkQKbPwpoy3QET/x0QcsjMrgJpfeurTzGPD17/7g3t jk3F34x2kbpSMVidBDjJaH+y4exbaW4QmrEgqmlaL2HA3zcTsyuddTI7nsEgNqay 247IhP0El7H5bMO+E/fgwUsU/iagkmtpVM2BPZGvlXL5EIexhM51KJcwTLIwmGPJ DDGsq59fi8LCGAdlx5cptiJplMAPR4fjbR1yYhZO7ynjIT9qgay2LxfEW2gWe7tw TXJ1UFbzaG4L41d+XjeZB9xZsqeRRFXcWkOACxPGrsuREJNgANA54/my/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJiipx7S7yqbnWHpdhyT3QWIulWHMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbUtLbkh0THZLcHVkWWVsMkhKUGRCWWk2VlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1d4yMA0G CSqGSIb3DQEBCwUAA4IBAQCSxMV0RZp2JxFZ/nN6Z7akl8r3c0vBf27zCgvbr5gI tgcqBpUXIiJJUVBlVgU9eD7s5kjpXZT8LMoCnjfCHQNdCVEWqa4+Gp9yuQfNpPnz p6Wr6dJVlgtj/e4qu8fiopQdh3xi40905wszX+yPpHIyfl1briuyGEIQTtMcTA7N XxTOCjOWVFPodwXSKTULIGp4JaVWhwt1qwzey2/d9SJNVj0eCsk3ieXl3EisFkbP BM8D6RJPSy5/0IbbaRt+rWHDA31rK95mePyQohlbPipbSRXy7S1QGh2xo0HImqfN tLzzkgBZ1XiOFqSu7zH48PVX8bGlMnM4Cqu4EEZTVsRN -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:28 2026 by rpki-client