This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/mkJVv52KXzS0LGki_sJR1Wvh3lE.roa File: mkJVv52KXzS0LGki_sJR1Wvh3lE.roa (raw, json) Hash identifier: wCY7SDIJn73GbW1ubNf3mR9Y3+r8QLN2wbBS3yUgUpQ= Subject key identifier: 9A:42:55:BF:9D:8A:5F:34:B4:2C:69:22:FE:C2:51:D5:6B:E1:DE:51 Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41 Certificate serial: 019B7DCA20B6CD70E1AFE821682D7D768392 Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/mkJVv52KXzS0LGki_sJR1Wvh3lE.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57440 IP address blocks: 83.172.172.0/22 maxlen: 24 83.172.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:20:b6:cd:70:e1:af:e8:21:68:2d:7d:76:83:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41 Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4255bf9d8a5f34b42c6922fec251d56be1de51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:92:e2:a2:5e:9d:36:e0:b9:95:fc:30:21: 49:d5:6d:48:49:31:79:44:1c:f4:55:19:00:ce:06: d6:98:19:ee:4f:e2:f7:24:f7:fb:f4:d7:9a:a6:93: d1:fd:e6:87:28:5a:4c:5b:18:09:2a:6a:61:fc:81: 89:a4:e7:4a:20:7a:40:a0:7f:32:01:48:6f:53:a5: c0:c0:f1:1d:62:ec:79:95:6b:b5:88:e2:6c:59:db: ab:fd:54:a5:e4:a5:ca:ed:8f:90:63:83:09:b7:dc: ec:0a:90:7d:7a:32:60:4e:03:56:43:fd:0d:b0:c8: dd:7d:5d:b9:0d:00:61:8e:a7:1a:7d:a6:65:d9:8a: 72:44:d7:0c:1e:ea:ac:89:5d:26:36:00:cc:50:b5: b3:7a:a0:65:db:6a:eb:84:83:ca:65:f1:96:43:71: ac:85:68:c7:57:3b:a7:32:f5:17:29:c0:4c:9a:15: 98:f7:ee:ad:8b:53:b5:88:25:93:df:82:78:2a:f1: b1:fe:e8:be:53:e5:b7:86:82:4a:5e:ac:27:cf:3b: 52:56:cc:49:72:be:44:f9:88:cc:be:c8:2b:70:e0: c8:44:5b:80:e9:ec:ab:9f:73:80:ea:61:f8:bf:9d: 36:29:74:6c:85:fc:6b:77:ec:50:57:17:22:8d:b9: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:55:BF:9D:8A:5F:34:B4:2C:69:22:FE:C2:51:D5:6B:E1:DE:51 X509v3 Authority Key Identifier: keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/mkJVv52KXzS0LGki_sJR1Wvh3lE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.172.172.0-83.172.179.255 Signature Algorithm: sha256WithRSAEncryption 12:0c:4d:5c:b4:50:25:f4:58:06:97:64:d4:71:56:9f:fb:7c: 22:60:39:8e:b2:76:21:0d:b4:c8:0c:ab:a8:51:94:d0:82:f0: 03:7c:e8:d1:62:78:2f:79:08:59:fc:ca:a3:a7:e7:fe:1a:94: 20:1e:c9:c2:c0:0f:5b:dd:7a:f9:5a:58:a3:50:6b:79:1c:f0: 30:bf:4c:97:a4:9e:a2:77:96:40:4c:31:86:3a:17:51:53:61: 4e:f1:74:d7:e9:78:65:ce:94:4a:15:bb:26:2c:b3:d2:66:b2: 4a:3f:f3:1e:1a:39:9d:66:26:fa:92:c1:79:49:70:be:9a:0c: 8a:c0:d2:46:8c:78:e3:9f:8f:18:9a:3e:cc:e2:2e:78:30:0c: be:9b:c9:a7:f3:8a:5b:d3:45:bf:9e:6c:93:fa:62:34:46:74: 26:68:71:8a:0d:c0:e0:07:6e:ea:a9:9b:54:89:28:8e:23:e0: a3:79:81:b0:2e:83:fb:31:65:26:2e:c4:b8:53:28:75:01:e2: f4:65:c3:2a:7f:38:47:fc:a6:4d:4e:f5:74:09:af:c2:7b:b1: a8:58:74:05:e7:35:2c:fe:df:00:a9:78:c6:5d:c8:b0:f4:6f: 75:51:99:4c:ed:99:fe:59:6d:16:b6:ba:56:8a:f8:78:2e:1c: 74:64:ca:e6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yiC2zXDhr+ghaC19doOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODI5YjQ0OGFkOGY5NjNhMGVjZmY4YjIyMTZjYTljZTlj ZTZmNDEwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQyNTViZjlkOGE1ZjM0YjQyYzY5MjJmZWMyNTFkNTZiZTFkZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdSS4qJenTbguZX8MCFJ1W1ISTF5 RBz0VRkAzgbWmBnuT+L3JPf79NeappPR/eaHKFpMWxgJKmph/IGJpOdKIHpAoH8y AUhvU6XAwPEdYux5lWu1iOJsWdur/VSl5KXK7Y+QY4MJt9zsCpB9ejJgTgNWQ/0N sMjdfV25DQBhjqcafaZl2YpyRNcMHuqsiV0mNgDMULWzeqBl22rrhIPKZfGWQ3Gs hWjHVzunMvUXKcBMmhWY9+6ti1O1iCWT34J4KvGx/ui+U+W3hoJKXqwnzztSVsxJ cr5E+YjMvsgrcODIRFuA6eyrn3OA6mH4v502KXRshfxrd+xQVxcijbm3AwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJpCVb+dil80tCxpIv7CUdVr4d5RMB8GA1UdIwQY MBaAFGmCm0SK2PljoOz/iyIWypzpzm9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlLYlJJclktV09nN1AtTEloYktuT25PYjBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTBlMmYtZGVjYy00ODg3LThlMDMt ZTc2YjU0NDY2NjU0LzEvbWtKVnY1MktYelMwTEdraV9zSlIxV3ZoM2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTBlMmYtZGVjYy00ODg3LThlMDMtZTc2YjU0NDY2NjU0 LzEvYVlLYlJJclktV09nN1AtTEloYktuT25PYjBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJTrKwD BAJTrLAwDQYJKoZIhvcNAQELBQADggEBABIMTVy0UCX0WAaXZNRxVp/7fCJgOY6y diENtMgMq6hRlNCC8AN86NFieC95CFn8yqOn5/4alCAeycLAD1vdevlaWKNQa3kc 8DC/TJeknqJ3lkBMMYY6F1FTYU7xdNfpeGXOlEoVuyYss9Jmsko/8x4aOZ1mJvqS wXlJcL6aDIrA0kaMeOOfjxiaPsziLngwDL6byafzilvTRb+ebJP6YjRGdCZocYoN wOAHbuqpm1SJKI4j4KN5gbAug/sxZSYuxLhTKHUB4vRlwyp/OEf8pk1O9XQJr8J7 sahYdAXnNSz+3wCpeMZdyLD0b3VRmUztmf5ZbRa2ulaK+HguHHRkyuY= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:16 2026 by rpki-client