This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/mcYH2WbtharfS1cKE4nDVc9cSUQ.roa File: mcYH2WbtharfS1cKE4nDVc9cSUQ.roa (raw, json) Hash identifier: 6NNnIl4fnOkglhpxTOXbgmIwZY5zvuF1yTHWpVT47EM= Subject key identifier: 99:C6:07:D9:66:ED:85:AA:DF:4B:57:0A:13:89:C3:55:CF:5C:49:44 Certificate issuer: /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4 Certificate serial: 019B7C809A90A1DD949B4A0C02C853132F1B Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/mcYH2WbtharfS1cKE4nDVc9cSUQ.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41514 IP address blocks: 194.156.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9a:90:a1:dd:94:9b:4a:0c:02:c8:53:13:2f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c607d966ed85aadf4b570a1389c355cf5c4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:8a:7e:8b:42:25:ac:10:37:18:b5:f0:c8: 44:fe:78:f9:21:61:04:a9:d2:15:96:4c:cf:d7:a5: 26:92:da:b0:7d:78:44:a4:7d:d7:28:ca:af:d3:0a: 07:30:06:45:6f:da:9d:34:4c:12:44:21:64:73:6a: 8d:65:cc:fc:9f:6c:89:37:38:dd:d3:43:e1:77:31: 4e:87:00:42:fe:f3:b6:f3:59:c2:7d:b1:fb:24:ff: 00:64:3e:a4:3e:a2:e9:8a:61:07:05:54:a0:0b:3c: 4a:2f:2d:0a:80:c9:ca:f7:7d:e6:7b:c7:4f:4a:de: 01:49:07:f9:e4:2a:01:02:c7:15:df:5c:67:2c:a5: 53:fb:57:7a:71:33:5f:5f:32:13:43:5a:a7:ad:c5: a2:fe:f1:44:4a:e1:2f:dd:6d:24:c7:3f:11:b8:51: 02:c2:8a:0e:02:d3:0f:57:97:dc:c2:a6:5c:57:f7: 75:ad:09:f5:fa:f4:37:be:e1:33:df:4b:91:c8:69: bc:f3:42:3a:ae:52:cd:3d:61:af:1b:55:e0:93:9d: a1:99:ba:1d:1a:42:b4:ef:2a:32:d3:c4:25:f1:5d: 42:21:97:68:d7:1b:0d:37:b7:df:6f:00:3e:9b:76: 51:19:8f:0d:62:35:1a:e7:a9:66:24:f1:8c:34:63: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:07:D9:66:ED:85:AA:DF:4B:57:0A:13:89:C3:55:CF:5C:49:44 X509v3 Authority Key Identifier: keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/mcYH2WbtharfS1cKE4nDVc9cSUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.152.0/23 Signature Algorithm: sha256WithRSAEncryption bf:d5:24:c3:6e:a2:76:e0:7a:df:ce:9e:b1:e0:85:11:10:98: f2:85:e4:56:a5:5a:f2:39:13:b9:ab:79:29:de:5e:34:5c:fa: a9:52:91:13:5a:12:2b:dd:7c:1e:17:b2:66:38:84:fc:99:3b: 59:ad:dc:c9:bb:0e:25:9a:85:b8:da:26:e4:e7:f6:41:1a:af: 0d:a1:15:06:4a:ab:20:1e:db:40:41:52:0e:a7:af:08:62:1e: b9:8d:11:3b:00:71:26:92:c6:7f:5e:ea:56:dc:ca:88:59:b6: e8:21:4e:93:b9:24:e1:9d:b6:86:13:91:de:d1:22:b1:3b:d9: c1:a8:28:d4:d1:d0:e9:56:b6:19:bf:c6:2f:9a:39:39:a5:46: d7:2a:bb:f1:36:43:61:df:24:0e:f2:78:f7:a5:40:73:db:41: 22:42:82:21:77:86:c8:65:e0:66:e1:5d:b1:68:69:27:e5:b5: d1:42:c6:d7:e4:f3:61:5e:6e:a9:d6:a5:06:7a:c3:98:37:35: 76:c9:c5:dc:94:62:04:9d:90:2b:e0:40:5a:04:6c:10:f1:d3: 59:c9:f9:5b:04:87:05:cf:7d:30:4a:73:36:9c:72:ea:c0:87: bc:ea:75:38:ce:de:09:a5:75:cd:dd:ee:91:93:c7:fb:77:6b: 3f:2c:b1:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJqQod2Um0oMAshTEy8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlkODRjNmQxNmMwODMwOTNjMzM3MWI0NTc1ZDM2ZWY0 NDhmZTQwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM2MDdkOTY2ZWQ4NWFhZGY0YjU3MGExMzg5YzM1NWNmNWM0OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8aKfotCJawQNxi18MhE/nj5IWEE qdIVlkzP16UmktqwfXhEpH3XKMqv0woHMAZFb9qdNEwSRCFkc2qNZcz8n2yJNzjd 00PhdzFOhwBC/vO281nCfbH7JP8AZD6kPqLpimEHBVSgCzxKLy0KgMnK933me8dP St4BSQf55CoBAscV31xnLKVT+1d6cTNfXzITQ1qnrcWi/vFESuEv3W0kxz8RuFEC wooOAtMPV5fcwqZcV/d1rQn1+vQ3vuEz30uRyGm880I6rlLNPWGvG1Xgk52hmbod GkK07yoy08Ql8V1CIZdo1xsNN7ffbwA+m3ZRGY8NYjUa56lmJPGMNGMcIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnGB9lm7YWq30tXChOJw1XPXElEMB8GA1UdIwQY MBaAFCSp2ExtFsCDCTwzcbRXXTbvRI/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktuWVRHMFd3SU1KUEROeHRGZGROdTlFai1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wNWNhMWQtYzM1Ny00OGJjLTk2MDkt NDVhNTM0ZjIyMmY0LzEvbWNZSDJXYnRoYXJmUzFjS0U0bkRWYzljU1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wNWNhMWQtYzM1Ny00OGJjLTk2MDktNDVhNTM0ZjIyMmY0 LzEvSktuWVRHMFd3SU1KUEROeHRGZGROdTlFai1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpyYMA0G CSqGSIb3DQEBCwUAA4IBAQC/1STDbqJ24Hrfzp6x4IUREJjyheRWpVryORO5q3kp 3l40XPqpUpETWhIr3XweF7JmOIT8mTtZrdzJuw4lmoW42ibk5/ZBGq8NoRUGSqsg HttAQVIOp68IYh65jRE7AHEmksZ/XupW3MqIWbboIU6TuSThnbaGE5He0SKxO9nB qCjU0dDpVrYZv8Yvmjk5pUbXKrvxNkNh3yQO8nj3pUBz20EiQoIhd4bIZeBm4V2x aGkn5bXRQsbX5PNhXm6p1qUGesOYNzV2ycXclGIEnZAr4EBaBGwQ8dNZyflbBIcF z30wSnM2nHLqwIe86nU4zt4JpXXN3e6Rk8f7d2s/LLGR -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:54 2026 by rpki-client