This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa File: mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa (raw, json) Hash identifier: H4OpUXUAmBNRCiaGjnMjhLUg7opBHRPBi0K/iMdDRh4= Subject key identifier: 9A:3A:31:60:D1:21:1B:75:58:2C:AB:51:0F:2C:4F:D3:0F:32:56:17 Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb Certificate serial: 019B7C132B227A03D45712845EBAA669B48F Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208060 IP address blocks: 193.43.30.0/23 maxlen: 24 193.43.32.0/23 maxlen: 24 2a0f:b880::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2b:22:7a:03:d4:57:12:84:5e:ba:a6:69:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a3a3160d1211b75582cab510f2c4fd30f325617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:45:8d:7d:68:82:6d:27:6e:c5:4e:3e:8d: 96:fc:90:af:65:f1:9b:b9:63:85:c3:52:21:fd:dd: 0a:71:56:4c:57:2c:5b:38:76:34:17:16:30:bc:0f: 2a:39:bb:79:cf:27:50:d9:57:fb:e5:7f:c0:eb:7c: c1:e5:4c:89:e7:1e:f1:91:6b:b0:f5:9a:ba:d5:e5: 81:f6:e7:85:75:52:d8:18:ab:e9:f9:a6:06:a3:ef: 4c:33:71:cd:d9:82:25:c6:b0:91:59:12:02:96:4d: f2:6d:db:7b:0d:cc:a6:6e:e7:2c:ad:1b:33:f8:b5: 9c:aa:9d:47:71:5e:e9:0a:18:80:39:08:17:8b:21: 77:bd:46:52:a4:88:91:7a:fe:19:3c:58:0a:9d:59: c5:19:6e:4f:89:9c:ff:2f:d1:d7:e0:ed:45:d9:84: 66:79:ae:66:f6:bf:17:f9:fd:86:fc:a5:99:7e:ba: de:68:a3:ff:82:99:78:96:f1:fb:e0:f0:61:8a:3a: 5e:50:cc:5e:8b:41:01:3b:24:c7:70:71:41:5b:61: 06:98:0e:e6:0b:12:6c:c3:c7:b6:5d:73:74:9c:f9: 00:b8:2a:94:67:58:ab:50:f5:55:1f:31:47:14:12: a5:44:7d:7d:c8:20:7f:a9:03:46:0f:8c:35:f1:e5: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3A:31:60:D1:21:1B:75:58:2C:AB:51:0F:2C:4F:D3:0F:32:56:17 X509v3 Authority Key Identifier: keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.30.0-193.43.33.255 IPv6: 2a0f:b880::/29 Signature Algorithm: sha256WithRSAEncryption 5a:50:83:01:29:26:e0:29:8d:0e:59:96:a2:be:34:24:dc:21: 16:57:f7:6c:9f:a5:c6:08:8f:1f:55:8b:0a:ac:42:ad:61:a0: f1:bf:93:df:a3:47:19:b8:86:4e:bf:a3:4e:bb:9d:8f:ad:57: a2:ad:31:c0:6e:ac:27:31:d2:a5:ca:d9:fc:d7:50:f0:4c:2b: 73:9f:cf:bc:29:ec:47:bd:19:52:00:6a:83:5c:75:db:73:f2: 5c:b7:39:28:6f:eb:9b:20:f1:03:ab:a9:22:1d:85:33:51:41: 99:01:0c:93:48:70:bb:1d:39:96:50:92:de:6b:e0:26:42:22: 81:ad:80:1d:ad:0e:d5:cf:14:f2:46:fd:00:be:71:ff:b1:b0: 4f:64:77:4d:c3:cd:44:aa:d1:6c:2a:78:0e:1a:f6:97:37:0b: 8f:7f:98:ac:02:80:bb:40:91:e4:3f:f1:73:1f:e8:84:83:75: 01:d2:c6:99:ba:1e:a2:c7:59:bb:db:15:4c:b3:ba:f5:cd:7d: 4e:c3:7b:74:3d:3f:75:b3:b5:4d:ee:54:08:2d:b7:c0:d9:7d: 1a:37:f2:5a:1f:db:f2:3f:9a:62:f2:2d:26:e4:8d:3e:6d:8c: 24:1f:7f:ec:00:67:67:33:41:17:09:7b:75:bf:0d:13:16:db: 54:cb:a0:a9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8EysiegPUVxKEXrqmabSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTFhNjU4M2RjNzlhNDE1NTFiMTdhZWI0MzE0ZGIyOTMx MWNiZWIwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTNhMzE2MGQxMjExYjc1NTgyY2FiNTEwZjJjNGZkMzBmMzI1NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y9FjX1ogm0nbsVOPo2W/JCvZfGb uWOFw1Ih/d0KcVZMVyxbOHY0FxYwvA8qObt5zydQ2Vf75X/A63zB5UyJ5x7xkWuw 9Zq61eWB9ueFdVLYGKvp+aYGo+9MM3HN2YIlxrCRWRIClk3ybdt7DcymbucsrRsz +LWcqp1HcV7pChiAOQgXiyF3vUZSpIiRev4ZPFgKnVnFGW5PiZz/L9HX4O1F2YRm ea5m9r8X+f2G/KWZfrreaKP/gpl4lvH74PBhijpeUMxei0EBOyTHcHFBW2EGmA7m CxJsw8e2XXN0nPkAuCqUZ1irUPVVHzFHFBKlRH19yCB/qQNGD4w18eW0nQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJo6MWDRIRt1WCyrUQ8sT9MPMlYXMB8GA1UdIwQY MBaAFBkRplg9x5pBVRsXrrQxTbKTEcvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMt MWMzNGFmZDlkNTBkLzEvbWpveFlORWhHM1ZZTEt0UkR5eFAwdzh5VmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMtMWMzNGFmZDlkNTBk LzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAHBKx4D BAHBKyAwDQQCAAIwBwMFAyoPuIAwDQYJKoZIhvcNAQELBQADggEBAFpQgwEpJuAp jQ5ZlqK+NCTcIRZX92yfpcYIjx9ViwqsQq1hoPG/k9+jRxm4hk6/o067nY+tV6Kt McBurCcx0qXK2fzXUPBMK3Ofz7wp7Ee9GVIAaoNcddtz8ly3OShv65sg8QOrqSId hTNRQZkBDJNIcLsdOZZQkt5r4CZCIoGtgB2tDtXPFPJG/QC+cf+xsE9kd03DzUSq 0WwqeA4a9pc3C49/mKwCgLtAkeQ/8XMf6ISDdQHSxpm6HqLHWbvbFUyzuvXNfU7D e3Q9P3WztU3uVAgtt8DZfRo38lof2/I/mmLyLSbkjT5tjCQff+wAZ2czQRcJe3W/ DRMW21TLoKk= -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:19 2026 by rpki-client