This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/mp7eBUGX1B69vxK-CwJzFulzqZk.roa File: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (raw, json) Hash identifier: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44= Subject key identifier: 9A:9E:DE:05:41:97:D4:1E:BD:BF:12:BE:0B:02:73:16:E9:73:A9:99 Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0 Certificate serial: 019B7C8086739CE4A4EE1818FB31A0B45553 Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/mp7eBUGX1B69vxK-CwJzFulzqZk.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 213.255.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:86:73:9c:e4:a4:ee:18:18:fb:31:a0:b4:55:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a9ede054197d41ebdbf12be0b027316e973a999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:2f:07:3f:af:22:f3:13:95:d0:bf:5a:12: b4:ec:92:0b:9a:d3:55:fa:4c:09:00:ea:d5:e1:b3: 1a:ab:62:2f:ec:5e:fc:8e:15:98:13:30:04:6a:da: ed:36:5a:01:14:d1:32:21:1d:28:40:06:26:96:10: 70:c2:27:3e:82:b2:d8:92:a2:99:09:f0:c5:0b:6d: 23:ab:b2:d9:a1:d4:ee:3c:c0:51:f0:ca:d4:71:fc: a8:40:56:a2:7c:ff:73:a8:3a:6f:41:83:79:28:17: b7:4e:44:0f:3b:25:84:a7:d5:34:77:f4:a6:72:45: 5b:08:87:6f:31:5b:a4:0e:86:41:e6:ec:74:f5:4d: d9:cb:84:a1:c1:6b:7d:bf:5f:17:73:fd:3a:9c:ac: 59:59:9a:bc:2e:cd:87:d2:52:20:8f:e0:e0:a8:61: 69:dd:1c:ba:3c:b0:8c:d4:8e:a4:7b:81:7b:09:72: 06:3c:12:75:60:96:fd:49:b8:a4:8f:4f:a4:f5:4b: a5:01:40:60:ff:40:1a:6d:b0:4a:2e:9a:5d:e7:c2: 79:53:72:f7:73:5e:38:dd:16:b0:13:8c:6f:a9:16: 57:f1:e7:39:36:13:3b:9a:ae:00:12:71:d4:a9:d6: af:e6:01:0b:f5:b2:39:4f:ae:7f:b8:2b:ff:45:bf: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:DE:05:41:97:D4:1E:BD:BF:12:BE:0B:02:73:16:E9:73:A9:99 X509v3 Authority Key Identifier: keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/mp7eBUGX1B69vxK-CwJzFulzqZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.255.206.0/24 Signature Algorithm: sha256WithRSAEncryption 49:d9:a9:d4:af:cb:62:ce:b6:e5:87:4f:f7:ee:54:c4:a7:89: 5c:d6:9d:06:6d:bd:8f:c3:a0:ad:de:c4:9b:61:d9:02:49:dd: 59:88:d3:35:ca:1a:d8:d3:dc:5e:aa:07:52:d9:a5:61:5a:56: 5b:15:9d:f3:9e:f1:dd:12:60:3a:c9:7d:0c:5e:0a:4c:de:a4: d6:a2:c9:26:d8:0b:39:f1:73:25:68:56:be:0e:f7:22:67:aa: d9:51:72:73:bd:54:49:cf:1b:47:79:d3:aa:6d:23:9c:da:78: 34:cb:07:3f:bc:55:d8:81:36:5d:71:b9:78:26:46:94:42:02: 40:38:a6:7e:57:80:50:c2:f2:d0:88:48:78:f0:d6:69:83:c8: e2:89:82:6c:78:af:91:47:4c:49:9a:57:ee:ea:8f:be:f3:aa: 2a:dd:bd:a0:63:9c:e9:50:df:3f:51:66:40:41:bb:d1:51:29: 25:41:cd:b9:bb:56:71:87:67:75:f2:90:de:15:00:66:e0:0b: 21:cc:04:2f:a6:cc:5b:88:31:08:28:8f:e6:2d:27:f1:19:e9: a1:dd:f1:33:f2:85:10:9a:24:64:9f:dd:d2:eb:4a:5c:7a:d7: 09:ac:02:27:fa:e4:fd:7e:36:a5:b3:86:bf:eb:86:d5:94:ca: 75:9f:41:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIZznOSk7hgY+zGgtFVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2 YWNkZjAwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTllZGUwNTQxOTdkNDFlYmRiZjEyYmUwYjAyNzMxNmU5NzNhOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls0vBz+vIvMTldC/WhK07JILmtNV +kwJAOrV4bMaq2Iv7F78jhWYEzAEatrtNloBFNEyIR0oQAYmlhBwwic+grLYkqKZ CfDFC20jq7LZodTuPMBR8MrUcfyoQFaifP9zqDpvQYN5KBe3TkQPOyWEp9U0d/Sm ckVbCIdvMVukDoZB5ux09U3Zy4ShwWt9v18Xc/06nKxZWZq8Ls2H0lIgj+DgqGFp 3Ry6PLCM1I6ke4F7CXIGPBJ1YJb9Sbikj0+k9UulAUBg/0AabbBKLppd58J5U3L3 c1443RawE4xvqRZX8ec5NhM7mq4AEnHUqdav5gEL9bI5T65/uCv/Rb+elwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqe3gVBl9Qevb8SvgsCcxbpc6mZMB8GA1UdIwQY MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt ZTI4Mjk1ZTU0YzNjLzEvbXA3ZUJVR1gxQjY5dnhLLUN3SnpGdWx6cVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f/OMA0G CSqGSIb3DQEBCwUAA4IBAQBJ2anUr8tizrblh0/37lTEp4lc1p0Gbb2Pw6Ct3sSb YdkCSd1ZiNM1yhrY09xeqgdS2aVhWlZbFZ3znvHdEmA6yX0MXgpM3qTWoskm2As5 8XMlaFa+DvciZ6rZUXJzvVRJzxtHedOqbSOc2ng0ywc/vFXYgTZdcbl4JkaUQgJA OKZ+V4BQwvLQiEh48NZpg8jiiYJseK+RR0xJmlfu6o++86oq3b2gY5zpUN8/UWZA QbvRUSklQc25u1Zxh2d18pDeFQBm4AshzAQvpsxbiDEIKI/mLSfxGemh3fEz8oUQ miRkn93S60pcetcJrAIn+uT9fjals4a/64bVlMp1n0G/ -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client