This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/mhe7ueS03W2XSdgcfakYwSroXsA.roa File: mhe7ueS03W2XSdgcfakYwSroXsA.roa (raw, json) Hash identifier: ldAOnBa8GgZlBCGXaADvQnAefafOoOly2oTch4zw0Po= Subject key identifier: 9A:17:BB:B9:E4:B4:DD:6D:97:49:D8:1C:7D:A9:18:C1:2A:E8:5E:C0 Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Certificate serial: 019B7F14D1A528A97D9B58FAC80FB22BE6D8 Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/mhe7ueS03W2XSdgcfakYwSroXsA.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 31.133.92.0/22 maxlen: 22 176.103.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d1:a5:28:a9:7d:9b:58:fa:c8:0f:b2:2b:e6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a17bbb9e4b4dd6d9749d81c7da918c12ae85ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:f9:b8:0c:82:99:8f:a9:b0:07:d6:c4:5b: d5:f4:08:0f:2b:96:27:b9:0e:1b:f0:6c:23:69:e9: 27:26:a9:fc:ea:0b:2a:de:1d:c5:0d:66:0d:2d:a6: b4:1c:cf:cd:d4:df:1e:f2:44:6a:c4:94:ba:9e:35: 1c:57:5f:11:fd:77:e4:9d:31:b7:ea:a0:c4:19:f3: 8f:84:09:52:22:97:fe:ad:89:b6:58:df:5b:3d:56: 00:59:a6:f1:f0:00:d0:7b:d8:78:8b:3d:22:96:ca: 9b:6f:92:15:e4:02:a6:87:cd:12:4b:58:48:96:46: d5:26:66:86:52:3a:58:06:8d:fe:73:fa:59:3b:78: eb:0a:56:7a:17:ea:13:52:e5:45:c3:8d:c0:09:ee: 18:65:43:5b:e7:59:74:c8:09:02:b6:24:ab:db:53: d0:5e:64:75:51:53:85:cd:b5:f9:ef:25:e0:79:98: d7:dc:b8:5f:a8:d1:6a:5f:85:ed:95:3e:3f:5e:40: f6:d6:e5:ee:71:18:b2:6d:95:c8:96:d8:86:b0:38: b2:70:d9:ee:15:f8:35:3c:d2:88:31:18:a4:71:60: 99:b4:56:21:3e:d1:bf:4d:16:f3:67:b0:33:21:67: 4b:4a:8f:c6:6e:71:10:4a:a0:ad:e4:78:34:ca:ca: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:17:BB:B9:E4:B4:DD:6D:97:49:D8:1C:7D:A9:18:C1:2A:E8:5E:C0 X509v3 Authority Key Identifier: keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/mhe7ueS03W2XSdgcfakYwSroXsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.92.0/22 176.103.228.0/22 Signature Algorithm: sha256WithRSAEncryption 24:16:d7:51:ef:a1:d5:d0:f5:f8:bb:1f:5f:4b:f4:d1:ef:7b: eb:c9:3e:8b:3e:a9:f9:71:48:13:5a:b4:c9:16:5b:f5:52:47: f4:c9:f4:50:2f:29:02:94:e7:53:33:be:39:8e:a3:9a:8f:26: 8a:16:a7:de:46:35:be:9e:b9:0d:1b:d9:53:54:b4:7d:93:45: 0f:73:3c:1a:92:fe:b9:72:e7:38:df:cb:62:95:9a:73:86:79: 21:16:c6:43:7f:68:59:b5:ce:b8:8f:b6:56:c0:7b:73:f0:65: df:76:b1:a5:39:29:4c:b8:4d:ab:98:cd:55:1a:8c:a2:d7:5c: e9:b7:05:6e:21:c1:f7:36:b9:90:7e:f4:de:d2:6a:a0:b6:28: 52:d8:e2:dc:4d:08:5a:3a:8a:a8:30:9b:bd:74:d9:a3:b1:6e: 96:3c:a1:28:e3:2d:6b:ba:a1:fa:34:3d:8f:71:30:d7:80:50: 47:1e:78:9c:76:49:dd:9b:7e:cb:cd:15:1f:9b:b1:85:f1:5c: 32:a1:56:c4:5c:0a:39:0c:43:48:98:7f:67:be:80:c7:f3:ee: 45:6c:4c:48:f7:a9:f3:32:a4:94:34:d6:4b:63:fc:2f:ad:25: 27:ff:5f:6e:98:97:eb:43:af:e8:6b:c0:c4:a9:57:13:43:77: 2c:ef:2e:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FNGlKKl9m1j6yA+yK+bYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz ODllZDQwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTE3YmJiOWU0YjRkZDZkOTc0OWQ4MWM3ZGE5MThjMTJhZTg1ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjH5uAyCmY+psAfWxFvV9AgPK5Yn uQ4b8GwjaeknJqn86gsq3h3FDWYNLaa0HM/N1N8e8kRqxJS6njUcV18R/XfknTG3 6qDEGfOPhAlSIpf+rYm2WN9bPVYAWabx8ADQe9h4iz0ilsqbb5IV5AKmh80SS1hI lkbVJmaGUjpYBo3+c/pZO3jrClZ6F+oTUuVFw43ACe4YZUNb51l0yAkCtiSr21PQ XmR1UVOFzbX57yXgeZjX3LhfqNFqX4XtlT4/XkD21uXucRiybZXIltiGsDiycNnu Ffg1PNKIMRikcWCZtFYhPtG/TRbzZ7AzIWdLSo/GbnEQSqCt5Hg0ysrrdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJoXu7nktN1tl0nYHH2pGMEq6F7AMB8GA1UdIwQY MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt MDgxY2IyYjE3YWI1LzEvbWhlN3VlUzAzVzJYU2RnY2Zha1l3U3JvWHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1 LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH4VcAwQC sGfkMA0GCSqGSIb3DQEBCwUAA4IBAQAkFtdR76HV0PX4ux9fS/TR73vryT6LPqn5 cUgTWrTJFlv1Ukf0yfRQLykClOdTM745jqOajyaKFqfeRjW+nrkNG9lTVLR9k0UP czwakv65cuc438tilZpzhnkhFsZDf2hZtc64j7ZWwHtz8GXfdrGlOSlMuE2rmM1V Goyi11zptwVuIcH3NrmQfvTe0mqgtihS2OLcTQhaOoqoMJu9dNmjsW6WPKEo4y1r uqH6ND2PcTDXgFBHHnicdkndm37LzRUfm7GF8VwyoVbEXAo5DENImH9nvoDH8+5F bExI96nzMqSUNNZLY/wvrSUn/19umJfrQ6/oa8DEqVcTQ3cs7y5q -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:53 2026 by rpki-client