This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/MkHKmr1CCJc2BcOqw-KghmADjCc.roa File: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (raw, json) Hash identifier: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0= Subject key identifier: 32:41:CA:9A:BD:42:08:97:36:05:C3:AA:C3:E2:A0:86:60:03:8C:27 Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Certificate serial: 019B783519007FBB9F85E8C1A037238EA9A8 Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/MkHKmr1CCJc2BcOqw-KghmADjCc.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31134 IP address blocks: 193.23.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:19:00:7f:bb:9f:85:e8:c1:a0:37:23:8e:a9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3241ca9abd4208973605c3aac3e2a08660038c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:e5:bc:83:1d:37:86:c7:da:72:aa:35:3e: 1f:5c:aa:97:d6:1b:af:5d:24:d3:da:07:32:1f:d3: 21:da:be:e8:5a:0a:c7:57:1d:86:12:2b:52:b0:b3: 38:e9:3a:df:37:27:8c:4c:2f:c1:39:4f:14:3e:e6: dc:87:f2:b7:11:05:21:c3:1b:e7:63:b7:dd:9b:17: 60:e0:af:e6:f1:60:2a:e8:75:bd:21:31:0a:43:ea: 23:a4:87:e8:d2:54:35:bc:89:b7:2f:6b:b3:23:e8: 06:34:1f:e4:40:b2:39:bf:2d:3e:84:0a:f7:d3:db: f3:9f:a8:58:d6:b5:81:e8:d7:34:75:6e:ca:89:74: 09:0e:10:59:65:54:ff:74:f6:c3:40:69:d9:37:77: e8:da:c0:ee:36:46:f9:94:d0:cd:43:04:02:24:61: 42:96:20:9a:c3:25:39:18:c9:71:4d:6c:ae:dd:f7: 95:5b:a5:3f:b5:1f:e8:69:39:13:ea:6a:b5:28:12: d5:1b:74:b5:12:ac:8e:da:0b:e7:e4:77:49:2f:f1: e2:d9:d5:61:41:6a:69:60:96:c8:bb:d2:d5:fa:b6: c6:47:9c:31:21:c9:c4:9a:43:bf:54:52:04:17:9d: be:0f:13:fd:0c:a8:6a:aa:d4:d7:09:91:26:36:16: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:41:CA:9A:BD:42:08:97:36:05:C3:AA:C3:E2:A0:86:60:03:8C:27 X509v3 Authority Key Identifier: keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/MkHKmr1CCJc2BcOqw-KghmADjCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.62.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:6e:39:11:9f:36:cf:58:92:69:6c:a3:6d:2c:82:82:0e:53: 3d:36:ed:d5:e6:eb:df:d8:b9:93:f3:67:da:54:05:87:77:69: b1:c5:3a:20:c7:18:4c:d8:78:a5:65:4a:7f:2f:b3:5a:de:03: b2:20:89:ff:9b:98:54:49:f8:b9:1b:0b:f7:6e:9e:94:de:90: d5:1e:d6:ac:a0:49:81:ea:8d:f9:e6:50:e1:cd:31:4f:23:7b: c9:40:2f:ee:c8:d6:5d:fb:70:af:ba:2f:ad:89:49:13:98:46: c8:9d:69:df:94:9c:90:91:85:39:3f:00:de:e1:6f:f5:82:ca: 0c:31:2d:50:3b:49:85:44:8b:fc:aa:58:dd:a8:c3:3e:00:0d: 66:6a:5a:85:43:f7:e9:2a:3d:77:39:e4:2a:96:6f:8f:f2:da: 6d:c3:bf:82:b4:15:3d:b5:8e:88:ef:de:dd:61:5a:f5:95:9b: a6:f2:1d:f8:42:25:23:9b:41:fa:30:2c:9c:81:0e:92:6a:83: 33:7a:36:d8:0f:f2:84:44:1a:e2:36:38:3f:06:1c:ec:1c:3f: c8:e1:b9:ed:f2:1c:95:8f:06:da:db:1c:aa:54:89:0c:e1:66: 5b:41:75:c2:13:e1:14:4e:e2:d7:b4:74:e5:c8:da:9d:ac:55: b5:71:fa:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRkAf7ufhejBoDcjjqmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz Yjk5MmIwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjQxY2E5YWJkNDIwODk3MzYwNWMzYWFjM2UyYTA4NjYwMDM4YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45vlvIMdN4bH2nKqNT4fXKqX1huv XSTT2gcyH9Mh2r7oWgrHVx2GEitSsLM46TrfNyeMTC/BOU8UPubch/K3EQUhwxvn Y7fdmxdg4K/m8WAq6HW9ITEKQ+ojpIfo0lQ1vIm3L2uzI+gGNB/kQLI5vy0+hAr3 09vzn6hY1rWB6Nc0dW7KiXQJDhBZZVT/dPbDQGnZN3fo2sDuNkb5lNDNQwQCJGFC liCawyU5GMlxTWyu3feVW6U/tR/oaTkT6mq1KBLVG3S1EqyO2gvn5HdJL/Hi2dVh QWppYJbIu9LV+rbGR5wxIcnEmkO/VFIEF52+DxP9DKhqqtTXCZEmNhYJKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJBypq9QgiXNgXDqsPioIZgA4wnMB8GA1UdIwQY MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt NWUzMGI4NmZkMWFiLzEvTWtIS21yMUNDSmMyQmNPcXctS2dobUFEakNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRc+MA0G CSqGSIb3DQEBCwUAA4IBAQAsbjkRnzbPWJJpbKNtLIKCDlM9Nu3V5uvf2LmT82fa VAWHd2mxxTogxxhM2HilZUp/L7Na3gOyIIn/m5hUSfi5Gwv3bp6U3pDVHtasoEmB 6o355lDhzTFPI3vJQC/uyNZd+3Cvui+tiUkTmEbInWnflJyQkYU5PwDe4W/1gsoM MS1QO0mFRIv8qljdqMM+AA1malqFQ/fpKj13OeQqlm+P8tptw7+CtBU9tY6I797d YVr1lZum8h34QiUjm0H6MCycgQ6SaoMzejbYD/KERBriNjg/BhzsHD/I4bnt8hyV jwba2xyqVIkM4WZbQXXCE+EUTuLXtHTlyNqdrFW1cfpH -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:33 2026 by rpki-client