This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/MycC6cpBwlmq-QLWRoXC6hSAHaI.roa File: MycC6cpBwlmq-QLWRoXC6hSAHaI.roa (raw, json) Hash identifier: oIy9nAo2WVlaqIu3/tXcMxRwn57Al2ytethhmvjWIjM= Subject key identifier: 33:27:02:E9:CA:41:C2:59:AA:F9:02:D6:46:85:C2:EA:14:80:1D:A2 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EC3AB8C3195AF3BEDB1AF856404C Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/MycC6cpBwlmq-QLWRoXC6hSAHaI.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 109.122.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ec:3a:b8:c3:19:5a:f3:be:db:1a:f8:56:40:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=332702e9ca41c259aaf902d64685c2ea14801da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:04:fe:e8:ea:ba:a7:28:70:d7:dd:52:0f: 90:ce:ce:b0:a9:dc:ae:ca:19:51:bf:7f:a5:cd:85: 00:e1:cd:8b:47:ba:2d:be:b9:c6:71:cb:93:3f:f9: a6:c8:23:a9:6e:13:8b:d6:51:4f:bb:0d:93:a2:2f: a0:2f:66:c0:19:f0:5c:af:81:1f:0b:cd:f0:d4:20: 3d:51:a2:8e:95:99:44:c7:c9:07:f2:37:bd:7b:c2: 36:01:e1:ed:d8:d6:f6:0a:22:ec:e6:3e:e2:4e:75: c7:9c:31:83:f3:88:cf:3d:88:99:f3:05:ea:9b:a8: 4d:8e:b5:5c:1b:57:25:c6:3c:96:94:54:6c:3d:80: eb:ba:a0:18:1c:13:ae:a5:c0:9c:64:d8:a2:c4:97: 24:65:27:e5:e3:a9:7c:54:a2:d0:23:f8:94:f3:f2: 6e:27:6a:99:39:d8:b1:e3:62:dd:73:87:e0:7b:1c: cd:e2:80:1e:7f:10:7c:db:f1:a3:2d:38:fe:cc:ed: 8e:af:af:57:55:39:64:24:15:7e:5b:0e:d9:7d:57: 99:03:d9:37:9c:c4:0c:c3:71:c6:db:ab:46:f3:89: 35:46:39:f7:f9:fd:49:85:31:6b:5e:ca:0a:f6:74: 38:49:9a:52:9d:83:36:f8:cd:60:1f:01:34:67:e0: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:02:E9:CA:41:C2:59:AA:F9:02:D6:46:85:C2:EA:14:80:1D:A2 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/MycC6cpBwlmq-QLWRoXC6hSAHaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.26.0/24 Signature Algorithm: sha256WithRSAEncryption 42:b6:a8:eb:a6:3c:6f:57:69:81:48:14:ee:6d:f9:bb:3d:af: 47:3b:86:66:e1:d9:bd:f3:41:e4:15:b2:8c:f7:f7:25:65:cc: 99:25:1e:5f:ea:9d:15:52:ca:c5:94:75:56:15:7e:5a:97:7f: 13:29:d7:f9:54:db:1b:13:3e:96:27:e5:c3:74:74:4e:d0:b0: ca:55:99:35:dd:01:ca:af:db:ba:01:00:59:38:6d:91:97:55: e5:78:ac:57:4f:da:c9:08:8c:9d:1c:d8:1b:fc:ed:dc:eb:6e: b0:90:00:6e:d2:5c:3f:92:03:35:07:62:d0:50:b6:c6:d3:13: 0b:91:cc:ec:1b:02:88:4b:05:bc:d4:73:c1:8f:c0:1e:35:f2: 37:e9:87:4a:f1:de:70:5d:62:a7:ba:93:ff:00:6e:b0:f1:0a: 4e:ef:5f:43:3e:88:91:2e:87:43:a1:76:6f:77:69:8d:ac:44: 34:24:6f:21:a1:e6:68:1b:af:0e:1e:f7:61:9b:dd:f3:27:56: 50:8b:3b:93:0a:d3:c0:9b:89:1b:15:14:8c:85:14:04:73:b4: f0:50:d9:31:87:56:7b:db:56:ef:0b:8d:11:aa:38:7a:6b:69: 10:01:07:db:b9:fa:95:db:31:f6:81:97:bc:b0:97:6c:e3:9a: e5:a1:69:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOw6uMMZWvO+2xr4VkBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzI3MDJlOWNhNDFjMjU5YWFmOTAyZDY0Njg1YzJlYTE0ODAxZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvoE/ujquqcocNfdUg+Qzs6wqdyu yhlRv3+lzYUA4c2LR7otvrnGccuTP/mmyCOpbhOL1lFPuw2Toi+gL2bAGfBcr4Ef C83w1CA9UaKOlZlEx8kH8je9e8I2AeHt2Nb2CiLs5j7iTnXHnDGD84jPPYiZ8wXq m6hNjrVcG1clxjyWlFRsPYDruqAYHBOupcCcZNiixJckZSfl46l8VKLQI/iU8/Ju J2qZOdix42Ldc4fgexzN4oAefxB82/GjLTj+zO2Or69XVTlkJBV+Ww7ZfVeZA9k3 nMQMw3HG26tG84k1Rjn3+f1JhTFrXsoK9nQ4SZpSnYM2+M1gHwE0Z+CBlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMnAunKQcJZqvkC1kaFwuoUgB2iMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvTXljQzZjcEJ3bG1xLVFMV1JvWEM2aFNBSGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoaMA0G CSqGSIb3DQEBCwUAA4IBAQBCtqjrpjxvV2mBSBTubfm7Pa9HO4Zm4dm980HkFbKM 9/clZcyZJR5f6p0VUsrFlHVWFX5al38TKdf5VNsbEz6WJ+XDdHRO0LDKVZk13QHK r9u6AQBZOG2Rl1XleKxXT9rJCIydHNgb/O3c626wkABu0lw/kgM1B2LQULbG0xML kczsGwKISwW81HPBj8AeNfI36YdK8d5wXWKnupP/AG6w8QpO719DPoiRLodDoXZv d2mNrEQ0JG8hoeZoG68OHvdhm93zJ1ZQizuTCtPAm4kbFRSMhRQEc7TwUNkxh1Z7 21bvC40Rqjh6a2kQAQfbufqV2zH2gZe8sJds45rloWki -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:05 2026 by rpki-client