This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/mmjMofrrbKgoCjPRlZXSZw-GT9g.roa File: mmjMofrrbKgoCjPRlZXSZw-GT9g.roa (raw, json) Hash identifier: WPU4HxsKpJGTw0PZwb4XnnI8k0102pp1cmkJ3VryINw= Subject key identifier: 9A:68:CC:A1:FA:EB:6C:A8:28:0A:33:D1:95:95:D2:67:0F:86:4F:D8 Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82 Certificate serial: 019B7F85890FB26C70C552A5F47879A8010E Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/mmjMofrrbKgoCjPRlZXSZw-GT9g.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208496 IP address blocks: 81.25.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:89:0f:b2:6c:70:c5:52:a5:f4:78:79:a8:01:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82 Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a68cca1faeb6ca8280a33d19595d2670f864fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:f2:09:1d:df:56:e3:a4:2a:0c:f7:85:90: c7:35:65:d8:7e:07:d5:e6:08:9a:2a:53:c3:99:21: 7f:e5:df:38:1c:af:1b:36:89:ac:6d:81:bb:c5:94: ad:e3:1c:ae:1b:9c:5a:20:41:e1:02:68:7f:26:9d: 0b:1a:bc:c8:a8:b9:38:14:9c:3e:9d:63:ad:d8:93: d8:b3:d0:de:b4:67:22:27:44:75:73:8a:9d:e2:bf: b7:35:b1:ef:df:d6:5e:68:a1:91:47:6f:f7:59:57: 70:8a:26:e5:35:e1:b2:38:76:eb:32:dc:7f:01:53: 13:e4:28:d7:98:a8:e1:75:33:18:87:5f:74:bc:c6: db:0b:65:8d:dd:fb:16:cf:dd:ce:20:52:30:e2:54: f2:54:5b:d0:63:56:fc:12:e9:33:e4:2f:31:05:20: 49:88:50:f1:8a:24:8d:34:b7:d9:fd:c2:6f:5a:28: e7:64:ff:6a:51:d0:5a:e1:26:e0:ae:5b:02:2f:d9: db:3f:22:e4:fb:ba:82:02:5f:20:b8:39:08:91:52: 92:5f:b0:40:e4:3c:ee:c1:9a:9b:3b:7e:8f:bc:65: 2e:15:25:92:e6:3a:81:c7:b2:e0:48:37:02:c7:09: b1:05:7b:94:ed:58:e5:c7:8d:45:60:e2:e9:9d:62: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:CC:A1:FA:EB:6C:A8:28:0A:33:D1:95:95:D2:67:0F:86:4F:D8 X509v3 Authority Key Identifier: keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/mmjMofrrbKgoCjPRlZXSZw-GT9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.72.0/22 Signature Algorithm: sha256WithRSAEncryption 45:e5:5e:9d:91:08:65:d9:ae:31:8c:4b:ea:6d:ed:e5:bb:96: ec:5a:35:75:7b:b0:4a:b1:19:d7:62:49:2b:28:fe:31:55:44: 8a:7e:2b:0d:5a:df:7a:4e:b4:f2:d9:53:2c:4f:af:ac:91:94: e5:d1:38:37:61:a4:0f:8c:4d:5b:f1:aa:74:25:49:48:01:3c: f1:eb:87:b1:d5:da:3b:34:8b:13:61:8a:06:37:6d:43:7c:6b: 5f:2f:d8:99:fb:02:87:99:01:0b:80:75:7c:02:15:77:20:d5: 90:63:a3:48:2e:b2:54:1c:7d:16:c6:16:89:25:62:6c:5d:6a: 95:ed:bf:29:cd:d4:a7:0c:ef:fa:ac:83:e7:d3:2b:bb:c6:43: b6:b4:58:45:3f:72:5b:3f:1a:dc:27:d1:b1:5e:fb:30:be:15: 2a:b9:c9:7c:56:ea:be:b9:ec:6d:51:b0:70:cd:49:b8:6f:da: e4:f2:7a:b9:83:21:ca:54:6f:d3:67:b3:14:2d:9d:93:89:ed: 0e:fe:ed:70:c8:a5:57:5c:89:17:56:55:a3:94:66:36:79:08: f0:4c:21:22:9f:7f:59:b6:2e:fa:2c:0f:f6:10:ae:af:0f:9d: 84:a0:f6:f5:92:7c:b9:03:30:3e:10:4f:0a:d3:99:a7:75:bb: 3d:75:f4:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hYkPsmxwxVKl9Hh5qAEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MmNhNzE4MzhhZTMzY2NlY2M1ZjEwYWI1NGVjM2ZjNzFi ZmJiODIwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTY4Y2NhMWZhZWI2Y2E4MjgwYTMzZDE5NTk1ZDI2NzBmODY0ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p/yCR3fVuOkKgz3hZDHNWXYfgfV 5giaKlPDmSF/5d84HK8bNomsbYG7xZSt4xyuG5xaIEHhAmh/Jp0LGrzIqLk4FJw+ nWOt2JPYs9DetGciJ0R1c4qd4r+3NbHv39ZeaKGRR2/3WVdwiiblNeGyOHbrMtx/ AVMT5CjXmKjhdTMYh190vMbbC2WN3fsWz93OIFIw4lTyVFvQY1b8Eukz5C8xBSBJ iFDxiiSNNLfZ/cJvWijnZP9qUdBa4SbgrlsCL9nbPyLk+7qCAl8guDkIkVKSX7BA 5DzuwZqbO36PvGUuFSWS5jqBx7LgSDcCxwmxBXuU7Vjlx41FYOLpnWItTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpozKH662yoKAoz0ZWV0mcPhk/YMB8GA1UdIwQY MBaAFMkspxg4rjPM7MXxCrVOw/xxv7uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEt OWQyNGI0MGY4ZjcyLzEvbW1qTW9mcnJiS2dvQ2pQUmxaWFNady1HVDlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEtOWQyNGI0MGY4Zjcy LzEveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURlIMA0G CSqGSIb3DQEBCwUAA4IBAQBF5V6dkQhl2a4xjEvqbe3lu5bsWjV1e7BKsRnXYkkr KP4xVUSKfisNWt96TrTy2VMsT6+skZTl0Tg3YaQPjE1b8ap0JUlIATzx64ex1do7 NIsTYYoGN21DfGtfL9iZ+wKHmQELgHV8AhV3INWQY6NILrJUHH0WxhaJJWJsXWqV 7b8pzdSnDO/6rIPn0yu7xkO2tFhFP3JbPxrcJ9GxXvswvhUqucl8Vuq+uextUbBw zUm4b9rk8nq5gyHKVG/TZ7MULZ2Tie0O/u1wyKVXXIkXVlWjlGY2eQjwTCEin39Z ti76LA/2EK6vD52EoPb1kny5AzA+EE8K05mndbs9dfTq -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:12 2026 by rpki-client