This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa File: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (raw, json) Hash identifier: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE= Subject key identifier: 99:6A:FC:16:56:4E:ED:F3:81:49:CA:8F:76:9F:8C:EC:9C:07:D5:79 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C1288E96B73EDA5B4660E501CA5E254 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 87.251.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:88:e9:6b:73:ed:a5:b4:66:0e:50:1c:a5:e2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=996afc16564eedf38149ca8f769f8cec9c07d579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:2a:0f:d3:17:4c:8b:b4:c6:36:32:c7:bf: 5c:9c:e4:ab:bb:c6:a0:87:ea:86:6e:5c:0a:ba:9d: 57:dc:c9:17:5d:88:33:19:6f:a2:0b:35:0d:52:75: a5:3f:8b:5e:2f:8f:7a:6e:62:3c:ba:20:82:ff:0c: 45:f8:83:4f:3c:77:09:31:e7:b6:c1:16:8a:3a:c3: 35:cb:dd:21:ab:f6:87:44:45:2d:bd:f9:20:75:9a: 78:ce:e4:42:17:13:ee:9c:f7:92:cb:d0:cf:aa:a2: f3:53:57:fd:23:9d:57:9f:36:ce:35:8c:6c:d4:b4: 95:39:a7:aa:17:ae:a7:f4:28:0e:79:e0:ad:74:00: a0:84:3a:79:5f:6c:02:91:dc:0b:b6:d1:96:de:08: 23:e1:54:44:f9:65:23:1c:4e:e6:66:03:f7:6a:f3: 14:22:d1:0d:12:f3:27:94:a1:d5:0d:40:92:68:c9: f8:50:22:ec:d7:65:d4:16:8a:f5:63:dd:12:e2:9f: 42:da:f1:96:6c:25:2e:1a:ee:40:b0:16:84:0b:4e: c4:a1:2e:f1:3f:f2:89:28:f3:6f:08:85:43:2e:52: d7:4d:fe:f6:c7:5f:3d:ba:a5:38:02:cc:29:01:ea: ad:d7:46:cc:6a:eb:7b:61:41:f4:86:59:72:48:4c: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:FC:16:56:4E:ED:F3:81:49:CA:8F:76:9F:8C:EC:9C:07:D5:79 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.66.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e5:3b:fd:61:99:f6:7d:76:cc:10:d5:12:44:f7:87:b2:b8: 04:f9:60:6e:74:1b:3b:47:17:d6:fa:a6:12:c4:f7:1f:44:7a: 7e:4d:58:91:3b:f0:81:2d:f0:89:e8:32:ea:2c:e2:62:d1:49: c6:9d:7a:ce:ee:b5:81:ec:c7:de:cf:27:57:1c:a0:ae:fc:bd: cf:ba:71:56:84:06:2e:83:8c:82:7d:b9:d6:2f:6a:bf:3c:b9: e8:df:24:45:2d:84:9d:18:32:df:ed:a6:01:67:25:ba:de:2f: e1:42:24:62:3b:63:15:8f:81:fe:57:52:7a:fb:a2:e9:be:fc: 36:ba:39:d5:31:4b:23:06:5e:dd:97:0f:02:51:97:d6:c4:2d: b4:64:a5:4a:f7:91:3d:7b:d1:04:3c:83:2f:f1:fc:8a:74:82: 94:b1:85:0b:83:14:93:ec:a7:a4:8d:05:0c:6d:42:4f:42:07: eb:b6:15:c2:ea:98:a1:8f:a5:96:e5:d8:62:b9:9f:69:b6:62: 74:48:01:86:74:86:fd:e1:04:4a:99:81:5b:b4:a8:d8:8a:3b: 91:ad:43:ff:68:de:76:d5:96:18:7c:94:1f:93:a7:81:39:98: 27:58:c7:32:c1:c5:bf:be:4b:cb:05:27:39:aa:6e:1c:e4:36: 3f:f6:1f:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eojpa3PtpbRmDlAcpeJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTZhZmMxNjU2NGVlZGYzODE0OWNhOGY3NjlmOGNlYzljMDdkNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJQqD9MXTIu0xjYyx79cnOSru8ag h+qGblwKup1X3MkXXYgzGW+iCzUNUnWlP4teL496bmI8uiCC/wxF+INPPHcJMee2 wRaKOsM1y90hq/aHREUtvfkgdZp4zuRCFxPunPeSy9DPqqLzU1f9I51XnzbONYxs 1LSVOaeqF66n9CgOeeCtdACghDp5X2wCkdwLttGW3ggj4VRE+WUjHE7mZgP3avMU ItENEvMnlKHVDUCSaMn4UCLs12XUFor1Y90S4p9C2vGWbCUuGu5AsBaEC07EoS7x P/KJKPNvCIVDLlLXTf72x189uqU4AswpAeqt10bMaut7YUH0hllySEyRFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlq/BZWTu3zgUnKj3afjOycB9V5MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvbVdyOEZsWk83Zk9CU2NxUGRwLU03SndIMVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tCMA0G CSqGSIb3DQEBCwUAA4IBAQAl5Tv9YZn2fXbMENUSRPeHsrgE+WBudBs7RxfW+qYS xPcfRHp+TViRO/CBLfCJ6DLqLOJi0UnGnXrO7rWB7MfezydXHKCu/L3PunFWhAYu g4yCfbnWL2q/PLno3yRFLYSdGDLf7aYBZyW63i/hQiRiO2MVj4H+V1J6+6Lpvvw2 ujnVMUsjBl7dlw8CUZfWxC20ZKVK95E9e9EEPIMv8fyKdIKUsYULgxST7KekjQUM bUJPQgfrthXC6pihj6WW5dhiuZ9ptmJ0SAGGdIb94QRKmYFbtKjYijuRrUP/aN52 1ZYYfJQfk6eBOZgnWMcywcW/vkvLBSc5qm4c5DY/9h+e -----END CERTIFICATE-----Generated at Sat Jan 10 03:15:27 2026 by rpki-client