This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Mw9HiEEZk3waBmzFCokJoCJYeHU.roa File: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (raw, json) Hash identifier: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE= Subject key identifier: 33:0F:47:88:41:19:93:7C:1A:06:6C:C5:0A:89:09:A0:22:58:78:75 Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Certificate serial: 019C1F1846AF72D8D75698B8E81FA4E27E9D Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Mw9HiEEZk3waBmzFCokJoCJYeHU.roa Signing time: Mon 02 Feb 2026 16:03:30 +0000 ROA not before: Mon 02 Feb 2026 16:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203153 IP address blocks: 212.73.154.0/24 maxlen: 24 2a10:a7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:18:46:af:72:d8:d7:56:98:b8:e8:1f:a4:e2:7e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Validity Not Before: Feb 2 16:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=330f47884119937c1a066cc50a8909a022587875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:f9:df:d2:c2:08:a6:b1:33:79:ae:35:73: 3c:1d:73:08:c5:04:14:15:71:27:3e:c9:78:ce:0d: 37:9c:36:88:05:3b:6d:6f:d3:e0:cf:08:d3:52:2c: 80:f3:a2:30:b0:90:34:b7:f1:06:e3:96:42:6e:20: 58:72:55:a9:64:ff:28:8a:43:c6:3c:f1:32:78:f1: 49:b3:3f:81:af:93:5a:75:84:04:84:9b:05:33:04: 88:99:f1:07:ee:6b:17:c0:ed:c9:42:22:e1:7f:4e: dd:5e:05:5d:f3:a7:16:c6:01:d5:c6:0a:10:b4:78: 1a:24:cc:f8:29:22:36:37:a4:0c:02:82:f6:ff:fa: fc:87:1f:6c:7d:f4:23:b3:1d:5a:59:65:b4:d2:56: c0:8b:ca:be:60:60:2b:64:14:7d:cb:2b:ac:eb:d2: 77:93:f7:6a:7c:c4:d1:67:52:f5:4a:2b:dc:74:8a: 0b:3e:b0:a3:d2:c0:c2:5c:8c:d0:ed:c1:27:2d:6d: f6:91:45:5c:61:33:4f:b5:ab:1e:a0:89:fb:65:c0: 25:d8:a6:9e:ac:d8:28:97:14:72:8c:cb:fe:de:46: 14:eb:b9:c4:19:14:53:66:51:2c:98:cb:e0:f5:98: da:2e:cb:46:5f:0b:f4:a1:5c:8c:8c:a1:2e:57:51: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:47:88:41:19:93:7C:1A:06:6C:C5:0A:89:09:A0:22:58:78:75 X509v3 Authority Key Identifier: keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Mw9HiEEZk3waBmzFCokJoCJYeHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.73.154.0/24 IPv6: 2a10:a7c0::/29 Signature Algorithm: sha256WithRSAEncryption 60:23:f8:4b:9e:c1:0b:0e:ce:1f:18:a9:dd:a2:ab:d2:4a:5e: 84:cb:5c:2a:8f:72:a1:57:13:36:0f:08:cc:91:b9:14:3c:47: d9:a8:69:46:0f:ee:7c:f3:07:2d:b2:b4:9c:8e:01:c8:a0:00: 62:15:27:77:4c:39:6a:97:5f:9f:36:89:c7:f8:8e:32:26:17: 01:64:4b:81:41:46:12:df:58:22:1a:6e:74:9e:94:3a:33:03: 53:15:cf:db:13:76:d7:f9:ce:86:f6:e6:92:eb:61:e0:84:db: e2:7e:b6:ad:59:f4:c6:2a:3e:1f:ac:0f:03:77:fe:fc:12:8d: a9:27:27:40:6a:11:3c:ad:fd:27:6c:50:99:3e:cf:c8:10:85: 94:0d:29:d9:81:3f:f3:d9:ff:fb:a6:e7:1a:c9:1a:40:11:28: 01:3d:ba:d3:6e:dd:75:77:7a:4f:3d:64:e3:56:aa:da:d9:ad: 0b:43:5c:6e:23:20:f6:95:c4:30:32:e2:78:b9:1a:61:76:a1: b1:4a:ff:f0:04:14:3d:e5:05:73:36:b1:59:17:2e:a6:48:b8: 6a:2c:74:85:4f:ca:cc:eb:0c:cb:29:75:28:45:ce:00:98:78: c7:73:0d:ff:b2:91:90:a3:94:d7:56:80:fa:73:11:04:c9:1a: 40:e0:5c:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwfGEavctjXVpi46B+k4n6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1 OTUxMmMwHhcNMjYwMjAyMTYwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzBmNDc4ODQxMTk5MzdjMWEwNjZjYzUwYTg5MDlhMDIyNTg3ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxv539LCCKaxM3muNXM8HXMIxQQU FXEnPsl4zg03nDaIBTttb9PgzwjTUiyA86IwsJA0t/EG45ZCbiBYclWpZP8oikPG PPEyePFJsz+Br5NadYQEhJsFMwSImfEH7msXwO3JQiLhf07dXgVd86cWxgHVxgoQ tHgaJMz4KSI2N6QMAoL2//r8hx9sffQjsx1aWWW00lbAi8q+YGArZBR9yyus69J3 k/dqfMTRZ1L1SivcdIoLPrCj0sDCXIzQ7cEnLW32kUVcYTNPtaseoIn7ZcAl2Kae rNgolxRyjMv+3kYU67nEGRRTZlEsmMvg9ZjaLstGXwv0oVyMjKEuV1HUoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDMPR4hBGZN8GgZsxQqJCaAiWHh1MB8GA1UdIwQY MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct NTIxMmRiOTc1NGY0LzEvTXc5SGlFRVprM3dhQm16RkNva0pvQ0pZZUhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0 LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1EmaMA0E AgACMAcDBQMqEKfAMA0GCSqGSIb3DQEBCwUAA4IBAQBgI/hLnsELDs4fGKndoqvS Sl6Ey1wqj3KhVxM2DwjMkbkUPEfZqGlGD+588wctsrScjgHIoABiFSd3TDlql1+f NonH+I4yJhcBZEuBQUYS31giGm50npQ6MwNTFc/bE3bX+c6G9uaS62HghNvifrat WfTGKj4frA8Dd/78Eo2pJydAahE8rf0nbFCZPs/IEIWUDSnZgT/z2f/7pucayRpA ESgBPbrTbt11d3pPPWTjVqra2a0LQ1xuIyD2lcQwMuJ4uRphdqGxSv/wBBQ95QVz NrFZFy6mSLhqLHSFT8rM6wzLKXUoRc4AmHjHcw3/spGQo5TXVoD6cxEEyRpA4FzI -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:18 2026 by rpki-client