This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/mAjzWoi04qK6NnjPrTZ48XaGykQ.roa File: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (raw, json) Hash identifier: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw= Subject key identifier: 98:08:F3:5A:88:B4:E2:A2:BA:36:78:CF:AD:36:78:F1:76:86:CA:44 Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b Certificate serial: 019B7D5CFF1BFFD6AE6D936D1E82C1A7971A Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/mAjzWoi04qK6NnjPrTZ48XaGykQ.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56544 IP address blocks: 91.225.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:1b:ff:d6:ae:6d:93:6d:1e:82:c1:a7:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9808f35a88b4e2a2ba3678cfad3678f17686ca44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:21:5b:2e:f8:ef:03:5a:28:c1:73:17:19: 59:a2:cf:42:84:5b:ab:95:a2:59:7a:b0:9c:a8:f3: 0d:87:e1:a1:7b:14:f9:6e:77:4d:7a:30:10:c0:18: b4:f4:f4:96:9b:5a:05:2c:01:b8:a5:09:27:75:dc: fb:bd:a6:eb:c8:4e:0e:92:4b:f3:b8:1f:6f:c5:3f: 8f:e7:34:d5:41:32:7b:11:2a:b6:04:d1:08:f7:25: 3f:3d:2e:ac:b8:6e:d2:b9:8c:29:2c:5a:c5:d7:e5: 98:b5:6f:cd:04:0a:a1:4d:97:00:df:77:b0:15:eb: 68:74:ec:50:a4:4b:f3:24:33:83:e1:c4:4b:eb:d0: 9e:de:db:ae:ee:bf:3b:b9:74:a3:a9:7c:0f:78:e6: 71:0a:d8:fd:78:d3:5e:7c:38:fa:d7:5a:49:6e:40: 70:8d:02:3a:ec:c5:a5:ee:b2:84:58:7d:4b:a7:99: 6e:dc:b9:1a:85:28:b3:50:d7:9c:8f:5e:9c:aa:b8: 0a:7b:f4:c5:d5:64:1b:8c:31:9e:18:82:a9:8b:80: e4:18:ad:be:7e:bb:70:00:76:9c:d8:51:e9:40:3c: 76:1b:b9:e0:9e:0c:24:29:69:e8:6a:99:f1:1d:ea: 44:9c:21:d1:a8:e4:3d:e4:f2:29:85:b4:3f:d7:2f: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:08:F3:5A:88:B4:E2:A2:BA:36:78:CF:AD:36:78:F1:76:86:CA:44 X509v3 Authority Key Identifier: keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/mAjzWoi04qK6NnjPrTZ48XaGykQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.176.0/22 Signature Algorithm: sha256WithRSAEncryption c3:bf:8a:9b:7a:95:59:be:aa:cc:63:9e:ea:cd:f2:02:38:b2: 1a:db:3c:cd:4f:e1:ae:71:3b:8b:d6:bf:20:cd:26:db:53:76: 73:82:22:6c:00:64:f1:4f:4e:f3:29:62:ff:4f:71:cc:79:ff: bd:9c:b5:eb:9c:0c:59:58:03:00:e9:61:59:b1:63:1a:e0:c9: 72:c7:64:0e:a3:3c:d9:0b:9f:b1:54:e4:87:d9:bb:d8:58:cf: ef:fa:33:af:36:00:7d:a9:c5:40:c7:3e:5b:17:a9:27:00:a7: 28:bc:16:35:85:26:77:4f:a0:e6:05:1a:c0:10:d8:04:b5:0f: 01:46:80:87:df:0c:36:60:03:8c:f1:e9:ea:25:3d:0e:d6:b4: 81:6b:76:a4:75:55:db:86:6e:de:93:8d:c6:02:16:71:e2:f5: 98:89:62:7c:e2:e4:be:91:d9:03:30:ca:bb:c8:53:d6:c6:26: b6:19:87:5c:2f:40:49:83:60:7b:45:43:68:89:69:ee:80:2f: b1:f9:3a:a2:88:78:5b:e6:ce:a1:65:cb:27:79:57:7f:f7:45: 0a:c8:bf:21:25:4f:75:15:f8:d8:f4:df:16:57:49:02:1a:70: a2:76:7e:c6:c0:70:f0:58:8f:98:c1:b5:49:b9:3c:a4:e0:b9: 31:0a:ec:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP8b/9aubZNtHoLBp5caMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTE0NzI0ODA2ODNjNjE5NzBmNjA1ZmIxOTllZWI2ZWFl MTIxOGIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODA4ZjM1YTg4YjRlMmEyYmEzNjc4Y2ZhZDM2NzhmMTc2ODZjYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNQhWy747wNaKMFzFxlZos9ChFur laJZerCcqPMNh+GhexT5bndNejAQwBi09PSWm1oFLAG4pQknddz7vabryE4Okkvz uB9vxT+P5zTVQTJ7ESq2BNEI9yU/PS6suG7SuYwpLFrF1+WYtW/NBAqhTZcA33ew FetodOxQpEvzJDOD4cRL69Ce3tuu7r87uXSjqXwPeOZxCtj9eNNefDj611pJbkBw jQI67MWl7rKEWH1Lp5lu3LkahSizUNecj16cqrgKe/TF1WQbjDGeGIKpi4DkGK2+ frtwAHac2FHpQDx2G7ngngwkKWnoapnxHepEnCHRqOQ95PIphbQ/1y/nEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgI81qItOKiujZ4z602ePF2hspEMB8GA1UdIwQY MBaAFMVRRySAaDxhlw9gX7GZ7rbq4SGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzIt NTdlYjVlZjg5NmUxLzEvbUFqeldvaTA0cUs2Tm5qUHJUWjQ4WGFHeWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzItNTdlYjVlZjg5NmUx LzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+GwMA0G CSqGSIb3DQEBCwUAA4IBAQDDv4qbepVZvqrMY57qzfICOLIa2zzNT+GucTuL1r8g zSbbU3ZzgiJsAGTxT07zKWL/T3HMef+9nLXrnAxZWAMA6WFZsWMa4Mlyx2QOozzZ C5+xVOSH2bvYWM/v+jOvNgB9qcVAxz5bF6knAKcovBY1hSZ3T6DmBRrAENgEtQ8B RoCH3ww2YAOM8enqJT0O1rSBa3akdVXbhm7ek43GAhZx4vWYiWJ84uS+kdkDMMq7 yFPWxia2GYdcL0BJg2B7RUNoiWnugC+x+TqiiHhb5s6hZcsneVd/90UKyL8hJU91 FfjY9N8WV0kCGnCidn7GwHDwWI+YwbVJuTyk4LkxCuwl -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client