This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mTZ7Mqrn6eTHqwn-wrYn3s602ao.roa File: mTZ7Mqrn6eTHqwn-wrYn3s602ao.roa (raw, json) Hash identifier: VkaUeVPNYMYQfZSVbJqjKKGpWLZI24nm5Ut45saTgLE= Subject key identifier: 99:36:7B:32:AA:E7:E9:E4:C7:AB:09:FE:C2:B6:27:DE:CE:B4:D9:AA Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F959ED163880DBDE4F9E3EC0627B Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mTZ7Mqrn6eTHqwn-wrYn3s602ao.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51817 IP address blocks: 194.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f9:59:ed:16:38:80:db:de:4f:9e:3e:c0:62:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99367b32aae7e9e4c7ab09fec2b627deceb4d9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:ef:8c:5b:c7:0a:e9:df:7f:6c:b9:d6:e1: 4a:a2:63:b7:85:9f:76:e9:98:4c:c4:63:e9:18:5b: 8a:5e:8f:02:75:db:90:ef:86:1d:83:7b:c2:11:10: 47:00:12:bd:9f:5e:e0:8f:b6:5c:18:58:d0:8f:eb: cd:10:4b:cf:15:95:d4:a4:5b:02:32:b5:ae:f4:6b: af:cb:5b:76:56:a1:74:65:57:9e:76:a1:2e:e9:2d: 69:fa:c9:b2:8a:2a:ce:ea:32:e9:88:54:ed:86:c4: 34:0f:f8:bb:b3:f5:78:0d:d2:a7:d9:59:9a:99:4b: 36:b2:01:92:32:0e:ae:d5:1b:cc:9d:6d:47:bb:31: 09:88:6e:bf:da:e5:f1:57:de:8e:99:3c:8d:0f:24: 79:ff:85:52:e4:7f:89:9c:a5:59:74:ef:fa:ce:ee: a0:d3:77:55:87:4b:18:ae:a8:19:3d:5f:3b:de:f2: 32:e4:fa:d0:71:44:86:fd:25:1a:e7:97:75:c2:c8: 14:39:c4:42:1d:ee:f1:a6:89:d9:c7:ed:cd:7e:f2: 26:8d:f6:fd:e2:7c:5c:35:12:5b:6e:00:95:73:a2: be:c0:78:be:48:a0:46:e4:49:3b:7e:79:e3:c0:af: ec:0c:7f:aa:b2:99:8a:24:9e:9b:c5:8c:12:1b:0e: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:36:7B:32:AA:E7:E9:E4:C7:AB:09:FE:C2:B6:27:DE:CE:B4:D9:AA X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mTZ7Mqrn6eTHqwn-wrYn3s602ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.170.0/24 Signature Algorithm: sha256WithRSAEncryption be:35:df:65:88:e6:20:ee:ce:88:7a:bf:0a:69:c7:12:cc:e4: 12:17:70:00:74:a8:b6:cd:c2:fc:a7:7d:01:9a:69:96:d8:c2: d7:09:52:49:12:e1:a4:87:fe:80:34:f4:eb:07:03:66:14:5c: f4:dc:33:99:0c:90:3e:59:d6:e6:4e:af:a3:52:61:89:18:f2: b3:ad:bf:6c:89:63:db:53:98:01:94:88:78:c5:b6:23:eb:8f: 1e:03:89:3f:82:b9:28:9b:11:f8:03:91:c6:f8:94:d5:7f:87: 0d:0d:54:42:aa:0c:12:76:b0:cc:71:17:3b:aa:2c:3a:81:07: 32:26:f5:bf:49:20:d5:4e:37:db:8f:f9:d1:b2:54:d3:70:a6: cb:35:a9:b8:ff:d5:ff:2d:c5:a1:48:13:03:d2:8a:43:36:74: 4b:f7:48:3d:73:db:c9:10:e9:0e:96:ed:b6:c7:9f:be:a3:e5: f1:3b:7b:79:c4:13:e9:7d:2b:a1:40:d1:5d:e2:56:ca:d1:eb: 9e:24:90:6f:48:59:95:cd:cc:d5:61:9f:a4:7a:bc:ec:e4:2e: a5:ed:5e:04:a3:6e:7b:80:b0:e9:a7:06:c8:25:a7:9d:d1:5d: 12:36:79:8b:63:13:26:6f:8b:7e:44:98:76:c1:c2:d6:08:80: 7c:e7:92:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvlZ7RY4gNveT54+wGJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTM2N2IzMmFhZTdlOWU0YzdhYjA5ZmVjMmI2MjdkZWNlYjRkOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOrvjFvHCunff2y51uFKomO3hZ92 6ZhMxGPpGFuKXo8CdduQ74Ydg3vCERBHABK9n17gj7ZcGFjQj+vNEEvPFZXUpFsC MrWu9Guvy1t2VqF0ZVeedqEu6S1p+smyiirO6jLpiFTthsQ0D/i7s/V4DdKn2Vma mUs2sgGSMg6u1RvMnW1HuzEJiG6/2uXxV96OmTyNDyR5/4VS5H+JnKVZdO/6zu6g 03dVh0sYrqgZPV873vIy5PrQcUSG/SUa55d1wsgUOcRCHe7xponZx+3NfvImjfb9 4nxcNRJbbgCVc6K+wHi+SKBG5Ek7fnnjwK/sDH+qspmKJJ6bxYwSGw6e+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJk2ezKq5+nkx6sJ/sK2J97OtNmqMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvbVRaN01xcm42ZVRIcXduLXdyWW4zczYwMmFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGqMA0G CSqGSIb3DQEBCwUAA4IBAQC+Nd9liOYg7s6Ier8KaccSzOQSF3AAdKi2zcL8p30B mmmW2MLXCVJJEuGkh/6ANPTrBwNmFFz03DOZDJA+WdbmTq+jUmGJGPKzrb9siWPb U5gBlIh4xbYj648eA4k/grkomxH4A5HG+JTVf4cNDVRCqgwSdrDMcRc7qiw6gQcy JvW/SSDVTjfbj/nRslTTcKbLNam4/9X/LcWhSBMD0opDNnRL90g9c9vJEOkOlu22 x5++o+XxO3t5xBPpfSuhQNFd4lbK0eueJJBvSFmVzczVYZ+kerzs5C6l7V4Eo257 gLDppwbIJaed0V0SNnmLYxMmb4t+RJh2wcLWCIB855IC -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:29 2026 by rpki-client