This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mm4PkY1uMwQV_GyoZPhcOq8XgQo.roa File: mm4PkY1uMwQV_GyoZPhcOq8XgQo.roa (raw, json) Hash identifier: 52L815RAbv7Yr0TXPbKc4R5KhP7nuM/F04hyAzcBOXM= Subject key identifier: 9A:6E:0F:91:8D:6E:33:04:15:FC:6C:A8:64:F8:5C:3A:AF:17:81:0A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C681BEE7F0ABB60141D5AB2ED65B88 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mm4PkY1uMwQV_GyoZPhcOq8XgQo.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 84.232.39.0/24 maxlen: 24 84.236.132.0/24 maxlen: 24 85.204.142.0/24 maxlen: 24 86.105.159.0/24 maxlen: 24 88.148.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:be:e7:f0:ab:b6:01:41:d5:ab:2e:d6:5b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a6e0f918d6e330415fc6ca864f85c3aaf17810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:76:b2:99:63:20:31:9b:4d:eb:0a:fc:71: a6:15:5d:bb:fb:af:d1:62:35:7d:0a:eb:83:f5:6d: cc:02:35:76:95:26:d5:fb:9b:1c:6c:6d:1d:91:a0: 75:a0:b9:9b:2e:45:49:b8:48:c9:9d:af:1c:d7:5b: 0c:02:06:5b:ff:db:0c:b3:0a:0f:12:59:e1:ba:44: e4:8b:79:7e:1e:f2:31:a1:37:86:0f:68:1d:7b:b0: 27:5d:16:98:a7:1c:9b:08:b5:72:df:37:ac:54:91: 2b:af:88:f1:b1:b0:b5:b6:69:15:61:f0:a8:7d:20: 76:3e:30:11:c1:d0:f5:ff:38:34:eb:40:84:51:64: 39:e6:20:30:1c:fb:a6:8a:13:31:61:22:a3:d0:64: f6:05:04:e5:a8:22:77:42:55:0d:6f:74:b0:50:2c: b8:19:b3:83:0d:be:83:d2:f2:e8:2d:0c:77:de:8c: 35:30:fc:f1:0f:f0:c1:7d:9f:36:7d:85:6b:59:f4: b8:38:19:71:29:23:a2:bb:80:cf:e2:76:e8:82:2d: cf:cd:3e:ca:a3:e5:f0:77:bd:b6:c8:04:ea:43:16: f3:4d:9b:b5:7c:93:fa:39:ab:61:d0:db:c2:c0:0f: 4d:a5:3d:f7:5a:11:d0:78:23:e4:14:5a:f9:31:31: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:0F:91:8D:6E:33:04:15:FC:6C:A8:64:F8:5C:3A:AF:17:81:0A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mm4PkY1uMwQV_GyoZPhcOq8XgQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.39.0/24 84.236.132.0/24 85.204.142.0/24 86.105.159.0/24 88.148.7.0/24 Signature Algorithm: sha256WithRSAEncryption 32:b7:00:7b:64:1e:e2:1d:a7:b9:85:2d:e7:7a:3a:72:ce:5c: 45:fa:42:1d:e5:dd:5c:32:c5:3d:47:1c:85:05:3a:21:25:f8: 3a:57:71:d8:dd:5c:01:4d:e4:eb:39:56:04:11:1e:03:3e:36: 3d:45:b4:0a:95:11:78:3e:91:0e:85:1e:e8:ae:86:b4:dd:0d: fd:10:35:48:3a:32:33:ff:0f:f0:08:f2:fe:35:81:71:f2:81: 83:ce:92:c3:46:4f:74:7c:85:94:c0:13:9f:c2:59:c5:95:b9: 16:52:bc:43:1e:ea:6c:35:ab:7c:87:18:75:0a:93:57:b7:e2: 45:72:63:35:53:b0:54:f1:c3:04:70:a3:84:f3:72:07:e0:2e: 4b:2f:2e:5e:c0:84:a2:79:68:3a:4c:7b:fe:92:04:88:49:1f: ca:2e:94:ea:7b:67:a7:e2:5a:ee:54:08:1f:9b:5a:10:a0:45: 2f:45:45:20:da:72:0e:9b:31:77:27:fc:cc:a3:a6:c1:82:96: 2b:6b:5b:e4:26:e8:19:c1:07:49:49:a5:32:e7:e2:f4:08:70: 44:6f:71:99:b6:63:19:84:11:91:aa:a9:bd:be:3e:e1:1f:8f: dd:be:80:23:48:11:2f:17:1c:8a:80:dc:56:95:b6:76:6f:34: 53:1c:72:7d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xoG+5/CrtgFB1asu1luIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTZlMGY5MThkNmUzMzA0MTVmYzZjYTg2NGY4NWMzYWFmMTc4MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX12spljIDGbTesK/HGmFV27+6/R YjV9CuuD9W3MAjV2lSbV+5scbG0dkaB1oLmbLkVJuEjJna8c11sMAgZb/9sMswoP ElnhukTki3l+HvIxoTeGD2gde7AnXRaYpxybCLVy3zesVJErr4jxsbC1tmkVYfCo fSB2PjARwdD1/zg060CEUWQ55iAwHPumihMxYSKj0GT2BQTlqCJ3QlUNb3SwUCy4 GbODDb6D0vLoLQx33ow1MPzxD/DBfZ82fYVrWfS4OBlxKSOiu4DP4nbogi3PzT7K o+Xwd722yATqQxbzTZu1fJP6Oath0NvCwA9NpT33WhHQeCPkFFr5MTF8xQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJpuD5GNbjMEFfxsqGT4XDqvF4EKMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvbW00UGtZMXVNd1FWX0d5b1pQaGNPcThYZ1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVOgnAwQA VOyEAwQAVcyOAwQAVmmfAwQAWJQHMA0GCSqGSIb3DQEBCwUAA4IBAQAytwB7ZB7i Hae5hS3nejpyzlxF+kId5d1cMsU9RxyFBTohJfg6V3HY3VwBTeTrOVYEER4DPjY9 RbQKlRF4PpEOhR7oroa03Q39EDVIOjIz/w/wCPL+NYFx8oGDzpLDRk90fIWUwBOf wlnFlbkWUrxDHupsNat8hxh1CpNXt+JFcmM1U7BU8cMEcKOE83IH4C5LLy5ewISi eWg6THv+kgSISR/KLpTqe2en4lruVAgfm1oQoEUvRUUg2nIOmzF3J/zMo6bBgpYr a1vkJugZwQdJSaUy5+L0CHBEb3GZtmMZhBGRqqm9vj7hH4/dvoAjSBEvFxyKgNxW lbZ2bzRTHHJ9 -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:53 2026 by rpki-client