This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mb6iigpCUCEMNuj_xBL1Hj0s21c.roa File: mb6iigpCUCEMNuj_xBL1Hj0s21c.roa (raw, json) Hash identifier: elw4lADkkbiEpIGyl8mtANu5Rp2FRQYZ1K2bf2etqXQ= Subject key identifier: 99:BE:A2:8A:0A:42:50:21:0C:36:E8:FF:C4:12:F5:1E:3D:2C:DB:57 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B8DBE4E1BC601B59576949CD2C4C8ACC6 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mb6iigpCUCEMNuj_xBL1Hj0s21c.roa Signing time: Mon 05 Jan 2026 10:40:17 +0000 ROA not before: Mon 05 Jan 2026 10:40:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59550 IP address blocks: 104.222.181.0/24 maxlen: 24 104.249.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:be:4e:1b:c6:01:b5:95:76:94:9c:d2:c4:c8:ac:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 5 10:40:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99bea28a0a4250210c36e8ffc412f51e3d2cdb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:b1:62:15:1a:64:b5:78:8e:05:0c:3b:c9: ee:30:b7:a6:80:e1:d2:17:52:ca:c4:b0:fb:c9:9d: 10:4e:a9:84:86:0f:2f:25:5c:00:db:ca:4d:34:72: 90:8d:ee:b9:62:89:0e:11:45:4b:cb:f1:a9:18:fe: 58:52:3f:fb:42:24:4d:0c:87:d1:fe:bb:2d:d7:80: 29:3d:70:68:7b:7a:e5:7e:a3:c0:b3:b4:09:79:83: ae:5d:8d:4d:33:b1:9d:98:16:cf:75:41:b4:b5:e0: 96:37:5e:0e:11:41:59:2b:e3:20:36:b8:3b:1f:93: 6d:bb:f8:ad:56:6d:93:01:e2:eb:2d:58:83:c3:a4: 3f:3c:d7:29:0e:71:57:2c:8c:ee:b4:79:67:b8:7d: 0a:e4:f9:7b:5a:5a:b2:ea:97:6a:07:08:dc:36:5f: 40:e2:ec:2f:6c:d6:d3:c3:ed:5b:83:d8:42:3d:00: 82:2f:37:ee:e9:2b:d1:0a:89:bb:d4:02:11:8f:06: 64:5d:1d:46:c9:dd:89:2c:ab:3f:79:10:6a:3e:5d: 37:22:c6:b4:2b:5e:06:47:12:de:23:40:49:e6:66: 4f:59:15:55:1d:59:a6:f8:9b:29:52:da:75:a7:0b: 48:13:50:2b:e4:aa:99:fe:0e:40:f0:00:21:bf:fe: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:A2:8A:0A:42:50:21:0C:36:E8:FF:C4:12:F5:1E:3D:2C:DB:57 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mb6iigpCUCEMNuj_xBL1Hj0s21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.181.0/24 104.249.16.0/24 Signature Algorithm: sha256WithRSAEncryption 65:28:3f:30:6d:ed:14:8c:f5:fb:b7:84:f3:ab:cd:ce:33:7b: 85:d8:95:4b:44:46:ed:40:31:01:42:ad:df:5e:2f:81:77:e9: d2:0a:8c:66:71:94:0e:d1:3d:c8:9e:25:ef:ca:c0:df:b9:1b: af:5d:91:81:f5:e5:af:b1:cf:7f:6e:55:35:4c:5f:c5:29:95: 41:c1:3c:6a:d3:b9:05:b6:5f:70:17:d7:9e:cf:c1:65:ae:01: 7d:44:03:1f:52:c6:cf:79:bb:ae:5e:3a:e2:71:86:53:2a:b5: 76:aa:45:b3:08:61:09:61:18:3c:40:79:89:d0:55:46:b8:b7: b5:11:b9:80:4e:94:f2:de:6a:ca:e2:f8:2a:b5:b8:6b:54:f9: 77:f1:06:48:46:57:cb:a2:1b:96:f1:47:48:4d:3e:61:d4:46: de:4b:1f:1e:60:58:40:4d:d8:6d:ef:25:bf:22:4b:6b:2e:2e: e6:d5:df:73:68:26:e6:b1:b3:c9:76:a0:0d:53:ff:a7:eb:0c: 5e:d7:aa:a7:f1:06:43:5c:22:09:af:ee:ae:0a:9a:9c:e0:02: 72:2f:74:e8:e3:60:28:99:7f:00:39:af:e7:73:6b:ab:f2:5a: f7:cb:1e:f2:69:bb:19:d5:75:ea:03:8e:fd:27:5f:63:23:ff: c5:f6:29:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuNvk4bxgG1lXaUnNLEyKzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTA1MTA0MDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWJlYTI4YTBhNDI1MDIxMGMzNmU4ZmZjNDEyZjUxZTNkMmNkYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleCxYhUaZLV4jgUMO8nuMLemgOHS F1LKxLD7yZ0QTqmEhg8vJVwA28pNNHKQje65YokOEUVLy/GpGP5YUj/7QiRNDIfR /rst14ApPXBoe3rlfqPAs7QJeYOuXY1NM7GdmBbPdUG0teCWN14OEUFZK+MgNrg7 H5Ntu/itVm2TAeLrLViDw6Q/PNcpDnFXLIzutHlnuH0K5Pl7Wlqy6pdqBwjcNl9A 4uwvbNbTw+1bg9hCPQCCLzfu6SvRCom71AIRjwZkXR1Gyd2JLKs/eRBqPl03Isa0 K14GRxLeI0BJ5mZPWRVVHVmm+JspUtp1pwtIE1Ar5KqZ/g5A8AAhv/6usQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJm+oooKQlAhDDbo/8QS9R49LNtXMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvbWI2aWlncENVQ0VNTnVqX3hCTDFIajBzMjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaN61AwQA aPkQMA0GCSqGSIb3DQEBCwUAA4IBAQBlKD8wbe0UjPX7t4Tzq83OM3uF2JVLREbt QDEBQq3fXi+Bd+nSCoxmcZQO0T3IniXvysDfuRuvXZGB9eWvsc9/blU1TF/FKZVB wTxq07kFtl9wF9eez8FlrgF9RAMfUsbPebuuXjricYZTKrV2qkWzCGEJYRg8QHmJ 0FVGuLe1EbmATpTy3mrK4vgqtbhrVPl38QZIRlfLohuW8UdITT5h1EbeSx8eYFhA Tdht7yW/IktrLi7m1d9zaCbmsbPJdqANU/+n6wxe16qn8QZDXCIJr+6uCpqc4AJy L3To42AomX8AOa/nc2ur8lr3yx7yabsZ1XXqA479J19jI//F9ilW -----END CERTIFICATE-----Generated at Thu Jan 8 16:04:39 2026 by rpki-client