This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/mrh0y_ObvDXVw_6YS_au-VzRPaA.roa File: mrh0y_ObvDXVw_6YS_au-VzRPaA.roa (raw, json) Hash identifier: doqouYnXlAtVY/2YlaJMN33MBRnapyWoXbfp5rb59mU= Subject key identifier: 9A:B8:74:CB:F3:9B:BC:35:D5:C3:FE:98:4B:F6:AE:F9:5C:D1:3D:A0 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D2808601BE0F938064BDA593B1894 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/mrh0y_ObvDXVw_6YS_au-VzRPaA.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 2.59.162.0/24 maxlen: 24 2.59.163.0/24 maxlen: 24 62.133.60.0/24 maxlen: 24 62.133.61.0/24 maxlen: 24 62.133.62.0/24 maxlen: 24 62.133.63.0/24 maxlen: 24 81.177.214.0/24 maxlen: 24 81.177.215.0/24 maxlen: 24 194.156.102.0/24 maxlen: 24 194.156.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:08:60:1b:e0:f9:38:06:4b:da:59:3b:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ab874cbf39bbc35d5c3fe984bf6aef95cd13da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:30:44:c4:9a:bd:28:e9:4d:64:0d:31:43: 6f:3f:6c:29:41:9a:bf:2f:83:9e:42:40:83:7e:45: 74:d1:0e:8d:9f:64:67:87:99:c6:f8:99:83:fb:f8: e6:7c:a6:e2:8d:13:57:c8:4d:48:da:26:95:30:c6: 7c:7d:60:86:6d:39:5f:e7:3a:ab:6b:03:40:fe:76: 15:8f:78:58:72:1b:54:91:02:53:2d:4f:06:eb:49: f3:f5:8b:a9:dc:c1:c2:77:eb:b7:f6:87:91:0a:dc: 7e:01:9c:f7:c7:e0:9a:e3:d3:40:84:3f:b8:74:38: 16:2b:c3:11:ca:35:93:84:87:6c:54:3b:88:33:fa: bb:f1:42:8a:6e:2f:94:36:18:9e:65:19:2f:6c:1c: c1:fe:e8:3c:3c:95:5e:97:6c:42:c7:46:3c:66:53: 50:20:30:03:b6:b0:cc:5c:39:74:44:62:08:f0:82: 95:98:77:1b:e9:6e:86:80:cb:3e:46:5f:1e:a1:7b: ff:0a:c9:44:2b:27:be:ce:e8:30:b8:08:f2:41:4e: 37:9e:0b:1b:1c:83:74:ba:b4:72:d3:cb:43:2e:a1: 95:75:8a:03:6a:cb:41:52:17:9e:dd:f9:af:af:9b: a4:ee:dd:2c:a3:ca:52:d1:7a:8b:7b:f2:45:ac:37: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B8:74:CB:F3:9B:BC:35:D5:C3:FE:98:4B:F6:AE:F9:5C:D1:3D:A0 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/mrh0y_ObvDXVw_6YS_au-VzRPaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.162.0/23 62.133.60.0/22 81.177.214.0/23 194.156.102.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:06:a0:58:4f:72:0c:75:e9:52:36:72:2a:13:de:45:f8:ab: 68:1c:4b:b6:ef:cc:3a:fd:be:93:ca:91:c9:6d:fe:61:8c:11: 36:d1:cb:ca:cf:06:5c:b1:70:8d:fa:22:4f:59:a5:f9:d0:8f: 7e:f6:a3:13:08:89:b0:48:13:57:35:28:ab:fa:81:7b:91:8c: d9:7f:c9:fa:56:28:fc:29:a0:44:c5:eb:be:47:a8:66:1f:84: 64:f9:6f:43:6a:14:70:62:e2:ba:58:d8:48:10:70:e1:0b:82: 54:36:8f:fe:5e:1b:ab:61:4a:08:f9:c0:3b:cc:87:d3:44:35: 5a:3e:a7:2b:d2:8f:a2:10:e7:04:8f:0a:07:4d:a5:9d:ff:6f: 14:e0:1f:2c:fa:61:a6:ef:09:68:a2:a5:47:92:88:9f:d1:da: 74:a7:07:86:94:c4:44:de:a3:af:ab:fa:17:e9:55:16:cc:37: 42:71:8c:eb:8c:bf:76:f9:b0:0f:d3:e5:49:30:2c:5f:04:ce: 68:1c:37:e3:69:ac:25:5d:78:a0:3c:3d:51:9d:c5:6a:7b:04: 22:b0:d4:2c:e9:8b:9d:26:2e:6f:0c:ae:de:e7:bf:c8:c9:b1: 10:e1:09:36:e9:69:7f:a7:b8:c3:28:6a:10:2e:4e:9e:17:19: 51:c6:a0:88 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XSgIYBvg+TgGS9pZOxiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWI4NzRjYmYzOWJiYzM1ZDVjM2ZlOTg0YmY2YWVmOTVjZDEzZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1MwRMSavSjpTWQNMUNvP2wpQZq/ L4OeQkCDfkV00Q6Nn2Rnh5nG+JmD+/jmfKbijRNXyE1I2iaVMMZ8fWCGbTlf5zqr awNA/nYVj3hYchtUkQJTLU8G60nz9Yup3MHCd+u39oeRCtx+AZz3x+Ca49NAhD+4 dDgWK8MRyjWThIdsVDuIM/q78UKKbi+UNhieZRkvbBzB/ug8PJVel2xCx0Y8ZlNQ IDADtrDMXDl0RGII8IKVmHcb6W6GgMs+Rl8eoXv/CslEKye+zugwuAjyQU43ngsb HIN0urRy08tDLqGVdYoDastBUhee3fmvr5uk7t0so8pS0XqLe/JFrDfkiwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJq4dMvzm7w11cP+mEv2rvlc0T2gMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvbXJoMHlfT2J2RFhWd182WVNfYXUtVnpSUGFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBAjuiAwQC PoU8AwQBUbHWAwQBwpxmMA0GCSqGSIb3DQEBCwUAA4IBAQBtBqBYT3IMdelSNnIq E95F+KtoHEu278w6/b6TypHJbf5hjBE20cvKzwZcsXCN+iJPWaX50I9+9qMTCImw SBNXNSir+oF7kYzZf8n6Vij8KaBExeu+R6hmH4Rk+W9DahRwYuK6WNhIEHDhC4JU No/+XhurYUoI+cA7zIfTRDVaPqcr0o+iEOcEjwoHTaWd/28U4B8s+mGm7wlooqVH koif0dp0pweGlMRE3qOvq/oX6VUWzDdCcYzrjL92+bAP0+VJMCxfBM5oHDfjaawl XXigPD1RncVqewQisNQs6YudJi5vDK7e57/IybEQ4Qk26Wl/p7jDKGoQLk6eFxlR xqCI -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:27 2026 by rpki-client