This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mZpuN7jixViIRVwIh3l2KSKz-VQ.roa File: mZpuN7jixViIRVwIh3l2KSKz-VQ.roa (raw, json) Hash identifier: IblcSFgGEcHHrYpGJU1P8HgPj2Os77Xp82U0Zza8Jhg= Subject key identifier: 99:9A:6E:37:B8:E2:C5:58:88:45:5C:08:87:79:76:29:22:B3:F9:54 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F6EF25A96B69E63A3E011F056B0F Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mZpuN7jixViIRVwIh3l2KSKz-VQ.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47538 IP address blocks: 212.243.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f6:ef:25:a9:6b:69:e6:3a:3e:01:1f:05:6b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=999a6e37b8e2c55888455c088779762922b3f954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:c1:c6:4e:ef:eb:57:52:04:7a:83:8e:7f: 29:ff:65:0a:24:d6:c1:c8:20:10:cc:36:36:30:bc: b6:e7:f2:0a:14:3a:f2:9e:af:b1:1d:c5:2f:4d:60: 16:67:87:13:6a:52:6d:e6:8c:4a:19:d6:eb:44:99: 4e:32:88:61:bc:1b:31:bc:73:94:e9:ad:5f:2e:f5: 82:92:14:84:15:dc:5f:a6:ba:9c:79:15:a9:df:4d: a9:94:ac:3e:bc:e1:73:f4:ac:4a:df:84:dc:35:ff: 6b:b2:f0:c9:ef:9a:95:f8:31:41:76:9b:fe:47:bb: 49:94:63:5a:a1:9c:1f:02:f8:99:26:8b:91:40:9e: 24:6a:05:8c:08:b4:df:17:b0:6a:2e:73:1b:57:bc: 9b:63:28:8d:b0:d8:70:e0:cd:04:28:a7:58:dc:72: ae:d6:64:a5:4f:fa:f3:bb:8e:1a:1f:f5:58:4d:42: c6:98:01:d1:6d:93:f8:54:ae:b0:45:70:e9:47:be: c9:dc:48:54:6e:4b:cb:50:d1:29:c1:a5:34:9d:bc: 0f:c2:82:15:7e:ae:ed:13:5c:3a:6d:d1:8e:f1:e8: cc:a9:5e:0e:4b:60:c4:3f:21:17:0e:53:bb:96:57: cc:fc:85:bc:41:48:a2:83:7c:b7:6f:ba:b6:9e:59: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:6E:37:B8:E2:C5:58:88:45:5C:08:87:79:76:29:22:B3:F9:54 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mZpuN7jixViIRVwIh3l2KSKz-VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.121.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b9:78:34:70:67:65:7e:cf:2f:0c:37:c3:b9:19:3a:ed:c4: 37:b1:52:90:66:21:85:fe:76:d5:12:dc:32:5e:4e:59:0c:40: 01:e0:3e:d2:54:1d:4a:ed:18:e1:77:57:7e:7e:fd:e6:7f:a3: e2:c0:9a:40:a0:cb:9b:e6:6e:5d:7a:e2:86:df:da:0b:e6:d7: c0:cf:5d:a0:15:3a:58:82:ac:c4:81:d5:a8:5e:c2:fe:06:a4: 6c:05:cc:9b:83:b1:4b:55:7c:2a:7d:07:5e:5f:48:1e:5f:c8: 5d:1b:b6:e1:3b:6a:bd:56:50:ce:5a:5a:43:56:d3:37:d5:5b: ee:f0:f9:e3:3a:e0:7d:6e:03:8f:31:14:e0:8d:7f:07:d5:3e: 92:90:c5:6d:b3:63:64:6b:9c:ee:bd:33:13:a1:d2:b4:c7:1b: e0:a7:60:da:a3:84:c9:d7:17:5e:81:e7:48:0b:aa:f4:4d:f9: d6:5a:01:52:44:93:28:be:b5:e0:eb:c8:a4:7c:8f:21:d6:b4: 54:a1:55:f3:60:48:b8:31:a2:73:62:e6:00:b9:67:4b:91:3c: 6e:bb:7e:53:80:14:24:83:16:68:25:2b:ea:a4:78:aa:b9:45: 46:ca:43:20:a6:17:d1:db:22:5e:d8:7b:a8:29:b1:07:08:14: 09:86:2d:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvbvJalraeY6PgEfBWsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTlhNmUzN2I4ZTJjNTU4ODg0NTVjMDg4Nzc5NzYyOTIyYjNmOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYHBxk7v61dSBHqDjn8p/2UKJNbB yCAQzDY2MLy25/IKFDrynq+xHcUvTWAWZ4cTalJt5oxKGdbrRJlOMohhvBsxvHOU 6a1fLvWCkhSEFdxfprqceRWp302plKw+vOFz9KxK34TcNf9rsvDJ75qV+DFBdpv+ R7tJlGNaoZwfAviZJouRQJ4kagWMCLTfF7BqLnMbV7ybYyiNsNhw4M0EKKdY3HKu 1mSlT/rzu44aH/VYTULGmAHRbZP4VK6wRXDpR77J3EhUbkvLUNEpwaU0nbwPwoIV fq7tE1w6bdGO8ejMqV4OS2DEPyEXDlO7llfM/IW8QUiig3y3b7q2nlka5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmabje44sVYiEVcCId5dikis/lUMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvbVpwdU43aml4VmlJUlZ3SWgzbDJLU0t6LVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN5MA0G CSqGSIb3DQEBCwUAA4IBAQCouXg0cGdlfs8vDDfDuRk67cQ3sVKQZiGF/nbVEtwy Xk5ZDEAB4D7SVB1K7Rjhd1d+fv3mf6PiwJpAoMub5m5deuKG39oL5tfAz12gFTpY gqzEgdWoXsL+BqRsBcybg7FLVXwqfQdeX0geX8hdG7bhO2q9VlDOWlpDVtM31Vvu 8PnjOuB9bgOPMRTgjX8H1T6SkMVts2Nka5zuvTMTodK0xxvgp2Dao4TJ1xdegedI C6r0TfnWWgFSRJMovrXg68ikfI8h1rRUoVXzYEi4MaJzYuYAuWdLkTxuu35TgBQk gxZoJSvqpHiquUVGykMgphfR2yJe2HuoKbEHCBQJhi3V -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:30 2026 by rpki-client