This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Mt1skFWcWKz8vOgiig4w0Mi-M48.roa
File: Mt1skFWcWKz8vOgiig4w0Mi-M48.roa (raw, json)
Hash identifier: hRwnjk+rD9eBJBMsuX5eOFh0auZEQfukDtfefVWTRGQ=
Subject key identifier: 32:DD:6C:90:55:9C:58:AC:FC:BC:E8:22:8A:0E:30:D0:C8:BE:33:8F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019B7C1318C69C4E231C1921D4A298452F07
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Mt1skFWcWKz8vOgiig4w0Mi-M48.roa
Signing time: Fri 02 Jan 2026 00:19:44 +0000
ROA not before: Fri 02 Jan 2026 00:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138968
IP address blocks: 93.90.72.0/23 maxlen: 24
93.187.128.0/22 maxlen: 24
212.115.52.0/22 maxlen: 24
212.115.52.0/24 maxlen: 24
212.115.53.0/24 maxlen: 24
212.115.54.0/24 maxlen: 24
212.115.55.0/24 maxlen: 24
2a0c:640::/29 maxlen: 29
2a0c:9380::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:18:c6:9c:4e:23:1c:19:21:d4:a2:98:45:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 2 00:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32dd6c90559c58acfcbce8228a0e30d0c8be338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:0b:9d:ec:00:33:80:51:fb:e3:27:e4:6b:
dd:e6:52:4e:7d:3a:15:d0:8c:77:63:c8:a8:aa:05:
4d:fa:c9:56:9e:b8:2e:dd:d8:91:b3:65:e9:87:d9:
bb:24:90:b4:9b:a9:3a:39:49:99:1d:a9:75:f9:d9:
46:32:e0:1d:b3:3b:b2:2e:b3:00:82:be:39:83:33:
bf:56:91:4d:6b:b3:fb:68:77:54:d2:ea:c8:97:8a:
9d:2d:ba:8c:bf:d4:28:2d:d6:f5:ff:3e:d2:e9:7e:
83:e8:e1:e3:13:6b:d6:f5:13:0f:fc:7a:28:35:b0:
6f:bb:ba:c7:e2:3d:ec:95:d0:55:34:18:1a:46:9d:
f6:ea:1d:93:ad:8a:b1:33:1b:e4:4a:83:a7:d3:16:
36:d5:f7:3c:fa:c6:4f:b7:86:1d:70:08:e2:57:f5:
95:68:54:d5:d1:82:48:be:ac:8e:a5:84:fb:01:42:
ab:78:7d:55:00:4a:ac:95:eb:d8:a1:eb:6a:27:bd:
37:12:4e:94:a2:be:a3:64:c3:46:3b:53:c0:36:70:
5a:3b:ff:ce:8b:d3:95:32:52:f6:6a:53:bd:47:89:
03:5f:1a:bb:58:d8:98:52:52:d0:6c:05:ae:13:17:
c6:16:34:84:91:00:ed:57:96:8f:99:89:85:26:15:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:6C:90:55:9C:58:AC:FC:BC:E8:22:8A:0E:30:D0:C8:BE:33:8F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Mt1skFWcWKz8vOgiig4w0Mi-M48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.72.0/23
93.187.128.0/22
212.115.52.0/22
IPv6:
2a0c:640::/29
2a0c:9380::/29
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
b3:7d:12:4d:08:f5:21:6d:5b:01:14:75:72:af:cc:77:84:7a:
7b:74:1b:05:30:d8:b6:8b:71:b8:06:20:dd:61:88:47:ba:38:
cf:f9:4f:8b:df:99:e9:ce:f7:ff:4d:18:9c:7e:f6:c0:38:22:
ab:78:80:f4:d7:19:27:51:55:b7:b3:51:a0:24:06:2f:78:2f:
fe:f6:26:55:c3:88:c5:bf:d2:ee:74:b6:23:cc:ab:60:10:25:
2a:81:a2:f8:6b:01:88:06:dd:60:de:b1:b7:e6:3a:a7:93:7e:
95:2b:8d:1e:1b:9f:e0:a8:74:41:7a:f1:c2:45:af:2b:82:0a:
86:70:0b:d3:66:97:95:32:ed:c5:7d:ff:e2:a1:d4:c6:7b:cd:
9e:75:fb:c6:37:4f:e1:a4:26:59:65:cf:2e:d4:10:9a:f7:db:
9c:b4:35:f6:e2:96:7b:8f:86:c9:78:38:d8:71:34:c6:6a:51:
bd:7d:6a:be:f4:2f:a4:38:a4:4d:f3:91:e8:87:60:00:3b:24:
c6:dd:9b:7d:36:83:7e:f1:a0:da:3e:18:45:c4:1f:77:99:c7:
e4:72:73:1b:63:6c:5e:28:ab:28:61:68:d8:7e:e7:31:90:46:
5b:c9:7f:f4:80:4d:dc:5d:bc:9a:02:b9:86:46:ae:f6:78:03:
30:95:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:15:16 2026 by rpki-client