This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MjYiGtMsBuGfocoXRBmgr5FkSEw.roa File: MjYiGtMsBuGfocoXRBmgr5FkSEw.roa (raw, json) Hash identifier: wytSIUlVNW7i5MI87lZHu7wGMK4JCywpG4y4KZ2bHrs= Subject key identifier: 32:36:22:1A:D3:2C:06:E1:9F:A1:CA:17:44:19:A0:AF:91:64:48:4C Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EB210F1729C9A2CD7F6F0B4138E3 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MjYiGtMsBuGfocoXRBmgr5FkSEw.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13277 IP address blocks: 194.209.13.0/24 maxlen: 24 194.209.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:eb:21:0f:17:29:c9:a2:cd:7f:6f:0b:41:38:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3236221ad32c06e19fa1ca174419a0af9164484c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:0e:70:ab:01:26:6f:02:16:0e:bf:84:7b: 81:24:53:d9:0e:93:56:56:45:e6:9d:77:44:69:39: f7:8f:86:ff:61:d6:07:05:ef:18:80:21:88:5b:e6: 83:0f:3d:0f:ed:9b:20:a8:b6:e5:01:5a:35:3b:2d: 8b:d6:a1:ff:ca:43:ed:a8:f2:81:6d:be:ec:94:1b: 8a:3d:ae:38:85:54:95:8d:71:97:ab:dc:d6:ea:80: dd:5b:3d:43:c5:5f:23:f7:af:7e:46:6a:fd:9c:3d: 4b:15:1e:6b:7c:01:f7:54:3c:bd:12:aa:e9:e0:a5: 7f:da:af:c0:a0:e9:be:fe:c0:80:79:dd:fd:44:9d: af:d1:2d:cc:7a:7c:f1:87:b7:e7:47:c8:81:22:40: fd:17:c5:d1:67:1c:6e:c6:96:cb:1e:87:2b:d4:f0: 84:83:8b:26:0e:82:77:b1:2f:56:f5:49:2f:b3:e0: 68:3d:4d:99:8d:39:bf:29:88:01:74:02:8f:0c:fc: 4f:74:c8:7e:47:ed:cc:03:93:4f:a1:57:69:80:d4: 11:48:00:0b:6b:16:b7:3d:8f:5b:7c:a3:e6:68:46: 02:9f:a1:26:0c:3c:d4:e4:7e:c2:bd:fa:40:15:84: d5:d3:18:a0:f2:f6:49:e6:ac:a4:0d:4c:5d:c0:cd: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:22:1A:D3:2C:06:E1:9F:A1:CA:17:44:19:A0:AF:91:64:48:4C X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MjYiGtMsBuGfocoXRBmgr5FkSEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.13.0/24 194.209.211.0/24 Signature Algorithm: sha256WithRSAEncryption bb:96:66:36:4f:cd:87:22:23:60:13:58:bd:8a:54:0c:6b:57: 46:99:d0:fb:db:4c:8a:da:cc:9c:b7:95:2e:fc:fe:a0:1b:d1: 3a:3a:f4:75:5f:1f:d6:84:41:09:ef:53:04:c7:be:dd:a0:09: 7f:6d:55:b8:8d:d7:87:0c:82:be:fe:68:00:8a:ea:aa:9d:22: cd:7e:6c:7a:9e:6a:d3:df:70:ad:b8:25:8b:4a:39:51:26:7c: a0:76:1c:9d:5a:fa:5d:c3:95:75:c8:b2:32:45:43:63:7e:51: 98:a9:91:9a:b5:b8:b3:b0:dd:f9:58:a1:ac:a9:27:78:1e:00: 42:8c:d3:b7:5d:ca:07:4a:90:86:ad:59:c6:ab:14:37:9c:27: e8:86:05:74:04:03:c7:03:bd:eb:22:e7:25:4e:a6:49:8b:54: c2:5f:3d:1a:99:2a:63:86:90:d5:1f:68:c1:bc:b9:31:42:95: eb:1f:a7:0d:9f:77:62:69:3d:03:79:c0:d3:c5:41:2f:e6:47: 12:21:b7:cd:73:39:ba:08:23:0d:f2:76:ab:fd:a2:00:ef:c5: 23:4e:18:24:af:9e:4c:de:fc:1d:ac:59:41:ac:ef:93:9b:d2: ff:37:c1:79:cd:9e:de:15:2c:74:fc:8b:61:ab:a7:b2:54:6c: b2:4a:67:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EushDxcpyaLNf28LQTjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjM2MjIxYWQzMmMwNmUxOWZhMWNhMTc0NDE5YTBhZjkxNjQ0ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUEOcKsBJm8CFg6/hHuBJFPZDpNW VkXmnXdEaTn3j4b/YdYHBe8YgCGIW+aDDz0P7ZsgqLblAVo1Oy2L1qH/ykPtqPKB bb7slBuKPa44hVSVjXGXq9zW6oDdWz1DxV8j969+Rmr9nD1LFR5rfAH3VDy9Eqrp 4KV/2q/AoOm+/sCAed39RJ2v0S3Menzxh7fnR8iBIkD9F8XRZxxuxpbLHocr1PCE g4smDoJ3sS9W9Ukvs+BoPU2ZjTm/KYgBdAKPDPxPdMh+R+3MA5NPoVdpgNQRSAAL axa3PY9bfKPmaEYCn6EmDDzU5H7CvfpAFYTV0xig8vZJ5qykDUxdwM1vJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDI2IhrTLAbhn6HKF0QZoK+RZEhMMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvTWpZaUd0TXNCdUdmb2NvWFJCbWdyNUZrU0V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtENAwQA wtHTMA0GCSqGSIb3DQEBCwUAA4IBAQC7lmY2T82HIiNgE1i9ilQMa1dGmdD720yK 2syct5Uu/P6gG9E6OvR1Xx/WhEEJ71MEx77doAl/bVW4jdeHDIK+/mgAiuqqnSLN fmx6nmrT33CtuCWLSjlRJnygdhydWvpdw5V1yLIyRUNjflGYqZGatbizsN35WKGs qSd4HgBCjNO3XcoHSpCGrVnGqxQ3nCfohgV0BAPHA73rIuclTqZJi1TCXz0amSpj hpDVH2jBvLkxQpXrH6cNn3diaT0DecDTxUEv5kcSIbfNczm6CCMN8nar/aIA78Uj Thgkr55M3vwdrFlBrO+Tm9L/N8F5zZ7eFSx0/Ithq6eyVGyySmfY -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:42 2026 by rpki-client