This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mWqs4QNXh6610ruxQ2ppXANfjoo.roa File: mWqs4QNXh6610ruxQ2ppXANfjoo.roa (raw, json) Hash identifier: c9S7uJptrgnvdOOUcI4M3p/wjqrgP4qUVfHAdRHl5uM= Subject key identifier: 99:6A:AC:E1:03:57:87:AE:B5:D2:BB:B1:43:6A:69:5C:03:5F:8E:8A Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB5FD5A196D916F3568869C3043242 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mWqs4QNXh6610ruxQ2ppXANfjoo.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43278 IP address blocks: 5.42.211.0/24 maxlen: 24 212.46.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:d5:a1:96:d9:16:f3:56:88:69:c3:04:32:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=996aace1035787aeb5d2bbb1436a695c035f8e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:04:7e:5e:85:5e:a4:62:40:d0:a1:b0:ca:58: f0:59:c8:c0:44:f4:5a:cc:0c:04:d1:34:ee:2a:14: 17:b9:d4:2c:8c:17:30:6f:ee:f1:32:65:de:a2:23: 43:86:c9:2b:35:e6:fc:fe:0f:6e:83:34:6d:c6:8e: 22:04:75:48:ef:4b:49:3c:12:ca:f7:61:7a:63:fc: 52:9b:b7:22:e7:1a:f0:ea:71:4d:39:7a:25:37:2d: 6d:11:3e:b0:00:92:52:4d:d2:44:10:87:38:d4:b9: 07:c6:c4:80:f9:da:00:a5:42:76:8d:b8:17:fc:0a: 69:e3:e1:d2:e7:82:56:63:2d:ec:20:7c:0c:f8:a0: 23:e8:61:65:f7:8b:cd:d7:f0:74:bb:56:37:df:c5: 81:db:f0:8b:d8:e0:43:03:f5:5d:78:4f:4d:0e:51: 2a:5a:9f:bc:d0:fd:b4:5b:dd:84:cd:26:3f:fa:39: 54:b1:58:34:84:41:c6:c9:95:69:76:be:2e:db:ad: b8:36:fb:84:4c:8f:1e:4d:e3:38:a6:71:72:b9:9d: e7:b1:a5:cd:a9:5e:df:02:24:ca:9c:13:aa:f5:be: bc:04:9e:a1:2e:c6:54:cf:f3:86:54:eb:f4:4b:8e: fe:dd:f3:ab:5b:12:78:43:33:0e:64:80:7a:09:24: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:AC:E1:03:57:87:AE:B5:D2:BB:B1:43:6A:69:5C:03:5F:8E:8A X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mWqs4QNXh6610ruxQ2ppXANfjoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.211.0/24 212.46.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:4f:41:f9:53:29:fb:e5:7b:35:a2:c9:62:0a:3c:af:4c:04: eb:f9:b9:96:b2:2c:e0:04:2c:8e:b3:8d:31:01:8d:d7:e9:c1: 07:95:e3:6b:d3:9f:a0:a0:6d:c6:b9:27:e3:03:1e:46:26:7c: 92:d5:0c:57:3b:b9:65:ff:16:45:41:41:57:c4:99:be:52:e4: c3:2d:24:b6:a1:f2:3e:c7:a5:16:45:7c:2e:ae:c6:73:45:37: 07:fd:5c:6b:8a:c8:71:25:89:6d:0c:06:45:a7:99:9e:62:d1: 2f:c5:03:3b:f1:28:97:a8:bd:95:8b:b3:17:ce:2c:5c:8d:a2: 0b:58:e9:db:1d:2b:28:30:16:e2:a3:f1:8c:75:ee:48:4a:aa: 9d:74:49:5d:80:b3:6a:e1:10:66:eb:a7:f5:d9:4d:85:e3:e9: 38:6c:33:35:6e:6f:d4:5c:11:5a:70:73:a3:72:be:4e:e3:2f: 68:82:79:90:cc:e8:93:7d:4a:35:00:fd:70:b3:5b:87:b1:bb: 76:6f:9e:e5:8e:6b:69:46:6f:0c:7b:41:2a:f8:97:81:c6:ed: 80:8b:6c:f3:6c:9e:ed:09:3b:59:98:ec:2a:28:4a:b2:5f:ba: 41:96:ff:ff:97:86:92:fe:5d:ad:0e:df:82:50:60:07:6e:19: 9f:4a:e1:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1/VoZbZFvNWiGnDBDJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTZhYWNlMTAzNTc4N2FlYjVkMmJiYjE0MzZhNjk1YzAzNWY4ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQR+XoVepGJA0KGwyljwWcjARPRa zAwE0TTuKhQXudQsjBcwb+7xMmXeoiNDhskrNeb8/g9ugzRtxo4iBHVI70tJPBLK 92F6Y/xSm7ci5xrw6nFNOXolNy1tET6wAJJSTdJEEIc41LkHxsSA+doApUJ2jbgX /App4+HS54JWYy3sIHwM+KAj6GFl94vN1/B0u1Y338WB2/CL2OBDA/VdeE9NDlEq Wp+80P20W92EzSY/+jlUsVg0hEHGyZVpdr4u2624NvuETI8eTeM4pnFyuZ3nsaXN qV7fAiTKnBOq9b68BJ6hLsZUz/OGVOv0S47+3fOrWxJ4QzMOZIB6CSTL6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJlqrOEDV4eutdK7sUNqaVwDX46KMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvbVdxczRRTlhoNjYxMHJ1eFEycHBYQU5mam9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrTAwQA 1C4kMA0GCSqGSIb3DQEBCwUAA4IBAQA8T0H5Uyn75Xs1osliCjyvTATr+bmWsizg BCyOs40xAY3X6cEHleNr05+goG3GuSfjAx5GJnyS1QxXO7ll/xZFQUFXxJm+UuTD LSS2ofI+x6UWRXwursZzRTcH/VxrishxJYltDAZFp5meYtEvxQM78SiXqL2Vi7MX zixcjaILWOnbHSsoMBbio/GMde5ISqqddEldgLNq4RBm66f12U2F4+k4bDM1bm/U XBFacHOjcr5O4y9ognmQzOiTfUo1AP1ws1uHsbt2b57ljmtpRm8Me0Eq+JeBxu2A i2zzbJ7tCTtZmOwqKEqyX7pBlv//l4aS/l2tDt+CUGAHbhmfSuG0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client