This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/mu2CJ0Zlr3MfL8dwR8wx3fnAme0.roa File: mu2CJ0Zlr3MfL8dwR8wx3fnAme0.roa (raw, json) Hash identifier: frTik5l8lZHJ8XsfoMviHNSEHcQWjgokDQCwqUVOzhg= Subject key identifier: 9A:ED:82:27:46:65:AF:73:1F:2F:C7:70:47:CC:31:DD:F9:C0:99:ED Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F812979B58045092B69AE3D53665207 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/mu2CJ0Zlr3MfL8dwR8wx3fnAme0.roa Signing time: Fri 02 Jan 2026 16:18:49 +0000 ROA not before: Fri 02 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17025 IP address blocks: 79.141.45.0/24 maxlen: 24 94.31.10.0/23 maxlen: 24 94.31.12.0/24 maxlen: 24 213.152.239.0/24 maxlen: 24 2a00:16f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:29:79:b5:80:45:09:2b:69:ae:3d:53:66:52:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aed82274665af731f2fc77047cc31ddf9c099ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:f3:3b:4b:b0:98:46:07:0b:64:d2:fc:92: 64:b6:71:ab:77:da:79:7d:7c:4d:67:d3:35:1f:a4: 61:24:c2:26:ae:d3:0c:9a:2c:8b:85:b4:ac:d6:c8: 5e:a8:a4:cc:e7:e9:ff:48:f5:dd:a7:2f:d4:ee:7c: a7:a9:e8:48:c1:b5:71:d3:64:3a:39:ce:8e:b6:79: ea:30:0f:1c:d3:14:86:45:35:57:1d:58:08:46:87: c3:45:fd:02:eb:ce:05:a7:f8:df:a0:17:fb:4a:02: e0:40:f5:df:8e:d0:6e:3d:ad:b8:2e:0b:8c:1d:4c: 01:89:bd:ee:e3:48:78:59:fe:af:68:4c:58:c9:8f: 32:e4:80:7c:26:42:c8:ea:e3:9b:1f:f3:21:d7:f5: 1d:fe:68:7d:51:e6:fd:df:b9:c2:2c:08:af:74:06: 15:bf:ec:36:ed:a8:2d:6e:2c:de:72:ec:78:e0:3d: c4:d1:39:c8:97:f3:a0:1a:14:33:62:e2:25:52:ba: 6f:5b:e0:1f:46:d1:df:93:f4:30:64:0b:4c:b6:17: a6:3b:27:20:ed:60:e1:15:c4:f9:af:fe:63:40:81: a2:a6:da:1f:ee:e6:da:5f:17:df:51:f5:98:d0:8f: cb:5f:80:d8:47:37:1b:5b:48:93:be:6a:2f:5c:f3: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:82:27:46:65:AF:73:1F:2F:C7:70:47:CC:31:DD:F9:C0:99:ED X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/mu2CJ0Zlr3MfL8dwR8wx3fnAme0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.45.0/24 94.31.10.0-94.31.12.255 213.152.239.0/24 IPv6: 2a00:16f8::/48 Signature Algorithm: sha256WithRSAEncryption 19:6d:a1:26:ef:5e:f0:ad:68:22:a9:13:49:36:63:7f:25:58: 1f:c1:46:ee:ed:b8:ff:a8:3d:ec:12:d0:30:ce:15:88:ed:ad: de:4d:96:0f:cb:15:2c:20:7f:9c:f5:83:3f:ec:d1:39:12:bf: a6:7b:5e:98:22:05:60:60:f9:e8:57:1e:cb:13:75:10:27:0c: 80:22:6f:c0:7c:9d:39:4e:ba:e5:38:c5:4c:e1:8f:99:5d:d6: 0b:04:32:b5:21:44:e2:5f:af:e0:c0:bc:ec:9a:f8:a9:33:25: e9:62:a9:da:93:c7:45:e0:2f:5f:2d:96:c7:6b:a3:16:d8:62: b7:a7:33:41:5d:01:c7:2c:17:00:51:27:e0:a3:b6:78:a9:50: 8f:bc:6c:56:42:b0:00:66:8d:54:65:1c:8b:1f:df:6a:3b:d1: 10:0b:67:b6:b7:90:ff:7f:b2:fe:4b:66:10:cb:d4:7f:be:2e: 45:f3:49:38:fd:be:6b:4b:99:3e:a7:6d:ae:03:72:c6:63:0b: 46:aa:2c:48:9a:94:18:9b:45:04:bc:05:a3:b8:1a:9e:f1:08: a8:81:f4:f5:79:e6:15:28:8d:c7:5b:ad:2e:d1:34:9e:3f:bd: 92:ff:65:2e:85:ee:b0:7a:e7:2d:ea:f7:89:67:7c:93:f0:9a: 29:e8:b8:dc -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt/gSl5tYBFCStprj1TZlIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVkODIyNzQ2NjVhZjczMWYyZmM3NzA0N2NjMzFkZGY5YzA5OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJnzO0uwmEYHC2TS/JJktnGrd9p5 fXxNZ9M1H6RhJMImrtMMmiyLhbSs1sheqKTM5+n/SPXdpy/U7nynqehIwbVx02Q6 Oc6OtnnqMA8c0xSGRTVXHVgIRofDRf0C684Fp/jfoBf7SgLgQPXfjtBuPa24LguM HUwBib3u40h4Wf6vaExYyY8y5IB8JkLI6uObH/Mh1/Ud/mh9Ueb937nCLAivdAYV v+w27agtbizecux44D3E0TnIl/OgGhQzYuIlUrpvW+AfRtHfk/QwZAtMthemOycg 7WDhFcT5r/5jQIGiptof7ubaXxffUfWY0I/LX4DYRzcbW0iTvmovXPPNeQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFJrtgidGZa9zHy/HcEfMMd35wJntMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvbXUyQ0owWmxyM01mTDhkd1I4d3gzZm5BbWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQAT40tMAwD BAFeHwoDBABeHwwDBADVmO8wDwQCAAIwCQMHACoAFvgAADANBgkqhkiG9w0BAQsF AAOCAQEAGW2hJu9e8K1oIqkTSTZjfyVYH8FG7u24/6g97BLQMM4ViO2t3k2WD8sV LCB/nPWDP+zRORK/pntemCIFYGD56FceyxN1ECcMgCJvwHydOU665TjFTOGPmV3W CwQytSFE4l+v4MC87Jr4qTMl6WKp2pPHReAvXy2Wx2ujFthit6czQV0BxywXAFEn 4KO2eKlQj7xsVkKwAGaNVGUcix/fajvREAtntreQ/3+y/ktmEMvUf74uRfNJOP2+ a0uZPqdtrgNyxmMLRqosSJqUGJtFBLwFo7ganvEIqIH09XnmFSiNx1utLtE0nj+9 kv9lLoXusHrnLer3iWd8k/CaKei43A== -----END CERTIFICATE-----Generated at Wed Jan 21 03:49:01 2026 by rpki-client