This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/mys43V0VAvijrfHlNPE8VW-G6UM.roa File: mys43V0VAvijrfHlNPE8VW-G6UM.roa (raw, json) Hash identifier: idIELYWzCla5ElkAHHClE8kTb+gn5OROErfboRfi/sI= Subject key identifier: 9B:2B:38:DD:5D:15:02:F8:A3:AD:F1:E5:34:F1:3C:55:6F:86:E9:43 Certificate issuer: /CN=c0c9413f076a782110c14490d890f1b3e98e0785 Certificate serial: 019B7A5B8700A77040A3251CFD4B2B1F32AC Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/mys43V0VAvijrfHlNPE8VW-G6UM.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51177 IP address blocks: 45.128.116.0/22 maxlen: 22 84.234.96.0/22 maxlen: 22 91.235.116.0/24 maxlen: 24 188.214.30.0/24 maxlen: 24 188.241.58.0/24 maxlen: 24 193.29.187.0/24 maxlen: 24 193.201.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:87:00:a7:70:40:a3:25:1c:fd:4b:2b:1f:32:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b2b38dd5d1502f8a3adf1e534f13c556f86e943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:03:69:66:96:e0:f0:86:f3:6e:76:b3:06: f8:e0:91:a2:9a:b0:35:38:e8:3f:96:0c:20:c7:4e: 2d:46:fe:e3:94:b6:71:d4:96:4a:8b:46:2a:27:61: c6:d1:2d:e4:e1:ef:de:c2:79:67:9b:3c:8a:9f:3e: 5b:6d:77:74:ee:c2:0d:3d:db:12:c7:ba:23:45:11: 31:f1:b0:13:88:32:b4:34:62:ab:9e:a6:05:59:a6: bc:85:6f:e9:f1:f0:54:88:6a:ab:1a:d5:6a:b5:be: 2f:50:5e:1d:e7:aa:a9:72:0b:d2:aa:76:c2:79:fd: 9a:cf:f6:fe:ae:e0:28:0c:a4:b7:0c:69:3c:89:be: f8:ad:4d:86:f7:e4:dc:03:40:f1:58:5e:da:8b:e4: 63:c4:1b:f6:ad:ce:1d:41:71:32:cd:9f:95:a9:5a: fa:0e:66:97:2b:79:31:6b:43:ad:78:78:e6:20:56: c3:7e:c8:0e:66:d2:1d:e9:22:93:09:e8:9e:f0:6a: e6:39:48:7e:ce:61:8e:51:47:e8:51:fb:48:59:54: a6:cd:2e:a9:42:c9:48:7d:58:01:08:52:e6:71:5f: cd:2e:48:29:55:de:af:fb:8f:53:40:86:85:a8:68: 2c:be:3b:57:57:ce:30:f7:55:3c:a0:6b:b5:55:b7: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2B:38:DD:5D:15:02:F8:A3:AD:F1:E5:34:F1:3C:55:6F:86:E9:43 X509v3 Authority Key Identifier: keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/mys43V0VAvijrfHlNPE8VW-G6UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.116.0/22 84.234.96.0/22 91.235.116.0/24 188.214.30.0/24 188.241.58.0/24 193.29.187.0/24 193.201.82.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:f9:a8:3a:5d:57:14:5f:13:97:24:b4:a6:bc:1b:0b:5d:09: eb:fc:6d:f7:6d:b8:1d:4c:6d:ef:ad:68:b6:bd:3b:06:e8:0e: 2c:13:11:7d:08:14:52:98:72:63:41:6b:07:69:e8:13:7d:29: fb:32:4e:1b:08:1f:c4:bb:9c:db:79:9a:a1:19:a3:a6:56:98: 1b:bb:43:7e:ee:85:79:c5:62:fd:f1:24:9b:6d:3a:11:7c:45: 57:5b:f0:e1:61:48:56:fc:5d:e6:ae:f8:6c:5a:5f:7c:b4:45: 50:d0:a4:48:82:49:f0:b1:1d:ae:3d:23:18:17:41:2c:ba:07: 7e:8e:7d:91:b8:d2:60:22:67:8a:44:f6:7d:01:4c:7c:fb:45: 7f:7a:5b:17:1b:8b:c6:c9:82:5c:1b:d1:27:22:0c:33:f5:75: 78:6f:9b:ff:64:af:28:e5:93:ef:9c:2e:cc:84:d2:28:4d:1d: e3:db:fd:ca:18:4c:ba:fd:b8:07:17:af:68:41:b1:7e:7f:b0: 7b:3e:f1:8a:8f:47:47:ec:40:ad:0d:1c:a8:c5:48:21:96:c0: b2:9f:53:58:0f:6c:00:03:ad:ca:28:9b:a7:fb:35:f3:7c:7a: fa:43:a3:d5:c9:e0:a6:5c:a5:fd:e2:46:a1:06:4e:c5:f1:24: 8e:fa:34:87 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6W4cAp3BAoyUc/UsrHzKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzk0MTNmMDc2YTc4MjExMGMxNDQ5MGQ4OTBmMWIzZTk4 ZTA3ODUwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjJiMzhkZDVkMTUwMmY4YTNhZGYxZTUzNGYxM2M1NTZmODZlOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBMDaWaW4PCG8252swb44JGimrA1 OOg/lgwgx04tRv7jlLZx1JZKi0YqJ2HG0S3k4e/ewnlnmzyKnz5bbXd07sINPdsS x7ojRREx8bATiDK0NGKrnqYFWaa8hW/p8fBUiGqrGtVqtb4vUF4d56qpcgvSqnbC ef2az/b+ruAoDKS3DGk8ib74rU2G9+TcA0DxWF7ai+RjxBv2rc4dQXEyzZ+VqVr6 DmaXK3kxa0OteHjmIFbDfsgOZtId6SKTCeie8GrmOUh+zmGOUUfoUftIWVSmzS6p QslIfVgBCFLmcV/NLkgpVd6v+49TQIaFqGgsvjtXV84w91U8oGu1VbeTUQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJsrON1dFQL4o63x5TTxPFVvhulDMB8GA1UdIwQY MBaAFMDJQT8HanghEMFEkNiQ8bPpjgeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMt YTQ1MjE4YzU4NDE4LzEvbXlzNDNWMFZBdmlqcmZIbE5QRThWVy1HNlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMtYTQ1MjE4YzU4NDE4 LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYB0AwQC VOpgAwQAW+t0AwQAvNYeAwQAvPE6AwQAwR27AwQAwclSMA0GCSqGSIb3DQEBCwUA A4IBAQBK+ag6XVcUXxOXJLSmvBsLXQnr/G33bbgdTG3vrWi2vTsG6A4sExF9CBRS mHJjQWsHaegTfSn7Mk4bCB/Eu5zbeZqhGaOmVpgbu0N+7oV5xWL98SSbbToRfEVX W/DhYUhW/F3mrvhsWl98tEVQ0KRIgknwsR2uPSMYF0Esugd+jn2RuNJgImeKRPZ9 AUx8+0V/elsXG4vGyYJcG9EnIgwz9XV4b5v/ZK8o5ZPvnC7MhNIoTR3j2/3KGEy6 /bgHF69oQbF+f7B7PvGKj0dH7ECtDRyoxUghlsCyn1NYD2wAA63KKJun+zXzfHr6 Q6PVyeCmXKX94kahBk7F8SSO+jSH -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:07 2026 by rpki-client