This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa File: mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa (raw, json) Hash identifier: d2Arbpcg/AGTRi9adeSZYOX/MBudha1YOQCfUnmj+l8= Subject key identifier: 99:1C:10:E0:56:78:AA:CD:FE:2A:43:FB:E9:B1:5A:5E:D2:EC:D7:55 Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435 Certificate serial: 019C2D0F244649945B4977F73D42FB65FC2E Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa Signing time: Thu 05 Feb 2026 09:08:12 +0000 ROA not before: Thu 05 Feb 2026 09:08:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 86.106.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:0f:24:46:49:94:5b:49:77:f7:3d:42:fb:65:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435 Validity Not Before: Feb 5 09:08:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=991c10e05678aacdfe2a43fbe9b15a5ed2ecd755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:18:cf:9d:aa:d1:bf:b9:1a:b6:89:68:65: 4c:38:3c:ba:37:94:f6:11:2d:10:ae:62:0d:93:bb: 83:47:be:f5:4c:3c:f1:51:43:55:46:a9:a5:68:7b: a6:34:50:15:22:ed:b0:4e:3a:a6:fd:1a:7d:5d:0d: 22:23:ce:06:41:65:2b:0f:84:a7:d8:65:d1:c4:3e: 8f:ca:8e:d5:d9:da:8a:a4:17:68:b6:b3:2a:4e:6f: c6:74:d8:b1:79:1c:2d:b6:2d:f1:bf:b4:9e:85:6c: ba:0c:98:a7:44:35:86:60:db:18:65:d3:4c:ba:8e: 51:77:14:4e:d7:54:84:3e:fe:1c:a5:01:d2:4c:15: aa:66:04:9b:32:8a:18:f6:95:6f:b8:b2:79:91:d1: c9:ee:59:5b:b0:48:b9:c5:c0:cf:9a:38:bc:8e:48: f9:b2:32:07:d3:0e:93:9a:94:7e:6f:31:3b:05:3e: da:86:a1:12:de:92:dd:fb:7d:93:9b:6b:6d:5a:cc: fa:6c:45:42:b2:62:86:cc:7d:24:5f:1c:09:47:4d: 9c:6a:01:7f:02:05:66:a0:62:66:02:c1:b9:91:65: e9:b5:8d:2c:5f:92:cf:c4:cd:b9:ea:eb:1e:b9:b8: 7b:d5:f3:5d:53:83:d3:5e:be:15:9b:52:a0:ca:75: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1C:10:E0:56:78:AA:CD:FE:2A:43:FB:E9:B1:5A:5E:D2:EC:D7:55 X509v3 Authority Key Identifier: keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.77.0/24 Signature Algorithm: sha256WithRSAEncryption 59:61:12:51:92:3b:65:1f:48:44:e9:40:ef:bd:58:84:06:b7: eb:e1:81:1a:be:1f:71:0c:db:f2:3f:88:83:79:12:62:50:0e: 78:99:33:82:8c:eb:e1:7b:64:00:bb:77:1f:22:f7:68:7b:79: 4f:51:95:f0:a6:4c:7f:be:c0:64:ad:7b:ad:d4:e9:68:67:06: 05:5b:4d:b8:31:b4:a3:b6:cc:2b:d2:50:8d:f0:29:be:3e:76: 7b:27:19:a7:33:2a:94:89:58:2e:ed:cb:93:35:21:99:68:3c: 34:44:dd:8e:8d:ca:99:d0:b7:ae:61:22:f8:60:7c:68:d8:cc: d2:f5:5a:5b:48:8e:88:b0:73:08:ed:7d:97:fc:fc:5c:87:a1: 1d:0b:ba:fc:84:b1:5a:d9:29:cc:40:a7:7f:66:85:12:0c:ff: a5:63:20:4c:1d:0b:95:ba:ea:10:63:64:93:82:db:46:f6:8f: e3:00:8c:72:40:82:8c:73:78:ac:a5:af:29:a3:46:22:89:d1: df:b3:a4:4a:e2:3e:b9:30:4f:30:d9:d2:da:46:ce:f6:f7:d0: a7:64:3c:9f:a6:21:87:af:c5:94:05:72:c8:5c:04:20:58:13: 32:e5:5d:55:ec:1b:ab:e0:14:6f:be:49:1c:5f:3d:09:6e:5d: 52:05:af:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwtDyRGSZRbSXf3PUL7ZfwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1 Yjg0MzUwHhcNMjYwMjA1MDkwODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTFjMTBlMDU2NzhhYWNkZmUyYTQzZmJlOWIxNWE1ZWQyZWNkNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HIYz52q0b+5GraJaGVMODy6N5T2 ES0QrmINk7uDR771TDzxUUNVRqmlaHumNFAVIu2wTjqm/Rp9XQ0iI84GQWUrD4Sn 2GXRxD6Pyo7V2dqKpBdotrMqTm/GdNixeRwtti3xv7SehWy6DJinRDWGYNsYZdNM uo5RdxRO11SEPv4cpQHSTBWqZgSbMooY9pVvuLJ5kdHJ7llbsEi5xcDPmji8jkj5 sjIH0w6TmpR+bzE7BT7ahqES3pLd+32Tm2ttWsz6bEVCsmKGzH0kXxwJR02cagF/ AgVmoGJmAsG5kWXptY0sX5LPxM256useubh71fNdU4PTXr4Vm1KgynWBNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkcEOBWeKrN/ipD++mxWl7S7NdVMB8GA1UdIwQY MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt MWRjYWQ4ZTY4ZWQ5LzEvbVJ3UTRGWjRxczMtS2tQNzZiRmFYdExzMTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5 LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpNMA0G CSqGSIb3DQEBCwUAA4IBAQBZYRJRkjtlH0hE6UDvvViEBrfr4YEavh9xDNvyP4iD eRJiUA54mTOCjOvhe2QAu3cfIvdoe3lPUZXwpkx/vsBkrXut1OloZwYFW024MbSj tswr0lCN8Cm+PnZ7JxmnMyqUiVgu7cuTNSGZaDw0RN2OjcqZ0LeuYSL4YHxo2MzS 9VpbSI6IsHMI7X2X/Pxch6EdC7r8hLFa2SnMQKd/ZoUSDP+lYyBMHQuVuuoQY2ST gttG9o/jAIxyQIKMc3ispa8po0YiidHfs6RK4j65ME8w2dLaRs7299CnZDyfpiGH r8WUBXLIXAQgWBMy5V1V7Bur4BRvvkkcXz0Jbl1SBa9B -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:51 2026 by rpki-client