This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mhrLi15R-WUTR0CgXzSfpNd-Vf8.roa File: mhrLi15R-WUTR0CgXzSfpNd-Vf8.roa (raw, json) Hash identifier: g1B1arXNdpVT6ZMHIyE5VDS8dKb2UpeG2JXlUhr+okw= Subject key identifier: 9A:1A:CB:8B:5E:51:F9:65:13:47:40:A0:5F:34:9F:A4:D7:7E:55:FF Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82E55E8F477E4741913FEFBFA8F09D Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mhrLi15R-WUTR0CgXzSfpNd-Vf8.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400175 IP address blocks: 193.221.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e5:5e:8f:47:7e:47:41:91:3f:ef:bf:a8:f0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a1acb8b5e51f965134740a05f349fa4d77e55ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:05:96:93:48:e0:e2:9e:10:68:9f:f2:9e:e4: 5b:96:e3:ab:a0:c8:bf:19:15:c4:76:fe:57:d4:dd: f3:77:fd:9c:eb:9b:5d:e1:99:36:fe:58:d4:67:30: bd:a7:92:b0:9b:23:86:fe:6f:4e:31:19:7e:83:99: 16:01:2f:25:c9:fe:c2:61:e9:ac:28:8e:54:cc:fd: cd:63:e5:ef:5f:75:57:8e:fc:ea:35:3d:9c:e7:6d: b2:ea:90:49:1b:33:22:d2:b1:ba:e3:aa:0c:1a:b4: d2:a8:55:a9:cf:b4:10:a6:42:ba:93:45:18:69:b7: 45:fe:92:a5:e6:3f:4d:a5:4e:22:21:a5:3d:82:6c: 84:b1:56:3f:35:41:0f:4a:56:4c:29:db:de:3c:7e: 86:28:26:93:97:ad:71:09:8b:97:90:fb:96:6e:f8: e6:aa:e7:bc:ea:35:bd:64:7b:74:e0:45:4d:bb:0e: a5:d7:07:45:46:23:25:c5:6d:c6:ff:fa:04:79:e2: 60:da:a2:2d:8a:d4:fd:ae:96:fc:16:74:8a:c1:05: 2a:67:19:fa:8e:0e:cc:5e:bd:62:c4:d1:cb:c2:74: c3:7c:f4:31:da:5e:b2:7a:35:ea:9b:7e:ec:fd:57: 18:74:f4:4a:66:04:36:cc:02:08:7a:dd:48:bc:a5: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:CB:8B:5E:51:F9:65:13:47:40:A0:5F:34:9F:A4:D7:7E:55:FF X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mhrLi15R-WUTR0CgXzSfpNd-Vf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.195.0/24 Signature Algorithm: sha256WithRSAEncryption a2:1f:0d:51:08:43:d6:42:fb:6c:17:05:90:ee:98:98:b0:85: f1:6e:2b:0e:fc:13:15:25:99:67:43:17:8e:21:8d:e7:aa:cc: 1e:66:f2:79:b4:d2:97:e3:c6:a0:60:f1:51:40:c2:2a:1b:e0: ec:b1:cb:26:43:17:8b:7a:73:07:a8:57:3f:20:73:f3:49:2f: 0f:cb:b9:4b:e7:1c:6b:93:f0:54:61:bb:6b:1e:3c:db:24:f4: cf:eb:25:af:0d:cf:db:3e:7a:a3:47:8a:78:89:f6:42:0a:f3: ed:85:b8:74:fd:15:7e:4e:0d:70:98:dd:b6:0f:dd:c2:b4:b2: d4:a6:bc:5b:b9:75:d9:37:15:f6:30:05:da:e4:19:87:bb:ce: fa:68:24:73:ae:aa:a9:6b:7c:5d:19:05:b7:cb:3a:3b:a3:1f: 56:07:ce:14:93:0b:bd:3a:48:18:85:64:d4:26:c7:dd:ef:10: 59:a5:99:eb:74:c2:aa:e1:05:59:50:af:14:36:af:a2:01:bf: 0c:42:c5:f7:d1:c5:ce:a9:53:c0:b3:3b:24:2c:20:41:1a:50: 2f:c2:91:d5:00:0b:e7:64:18:60:e7:56:06:3f:fe:a9:ab:6a: d2:ef:98:24:a2:d4:bf:4e:98:06:9d:82:16:40:63:67:2e:95: e4:ee:5e:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/guVej0d+R0GRP++/qPCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTFhY2I4YjVlNTFmOTY1MTM0NzQwYTA1ZjM0OWZhNGQ3N2U1NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQWWk0jg4p4QaJ/ynuRbluOroMi/ GRXEdv5X1N3zd/2c65td4Zk2/ljUZzC9p5KwmyOG/m9OMRl+g5kWAS8lyf7CYems KI5UzP3NY+XvX3VXjvzqNT2c522y6pBJGzMi0rG646oMGrTSqFWpz7QQpkK6k0UY abdF/pKl5j9NpU4iIaU9gmyEsVY/NUEPSlZMKdvePH6GKCaTl61xCYuXkPuWbvjm que86jW9ZHt04EVNuw6l1wdFRiMlxW3G//oEeeJg2qItitT9rpb8FnSKwQUqZxn6 jg7MXr1ixNHLwnTDfPQx2l6yejXqm37s/VcYdPRKZgQ2zAIIet1IvKXKYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJoay4teUfllE0dAoF80n6TXflX/MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvbWhyTGkxNVItV1VUUjBDZ1h6U2ZwTmQtVmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd3DMA0G CSqGSIb3DQEBCwUAA4IBAQCiHw1RCEPWQvtsFwWQ7piYsIXxbisO/BMVJZlnQxeO IY3nqsweZvJ5tNKX48agYPFRQMIqG+DsscsmQxeLenMHqFc/IHPzSS8Py7lL5xxr k/BUYbtrHjzbJPTP6yWvDc/bPnqjR4p4ifZCCvPthbh0/RV+Tg1wmN22D93CtLLU prxbuXXZNxX2MAXa5BmHu876aCRzrqqpa3xdGQW3yzo7ox9WB84Ukwu9OkgYhWTU Jsfd7xBZpZnrdMKq4QVZUK8UNq+iAb8MQsX30cXOqVPAszskLCBBGlAvwpHVAAvn ZBhg51YGP/6pq2rS75gkotS/TpgGnYIWQGNnLpXk7l6+ -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:57 2026 by rpki-client