This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa File: mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa (raw, json) Hash identifier: 55gorD5hIJrNCpzlN8lg/I0nrXrYfHRLnChQmmITdMI= Subject key identifier: 99:3B:5F:57:F6:02:BD:89:3A:BA:37:00:51:8E:44:C4:18:BA:E4:88 Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Certificate serial: 019B77589BEA0E26B06CF28991729255AC99 Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61024 IP address blocks: 185.124.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9b:ea:0e:26:b0:6c:f2:89:91:72:92:55:ac:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993b5f57f602bd893aba3700518e44c418bae488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:35:a9:6b:63:f9:80:5c:84:c0:3f:57:a7: 63:fe:9e:7a:a1:f6:ee:09:5d:da:b0:fa:44:55:79: aa:1e:17:19:36:f6:f6:6c:2a:32:85:c7:9e:f8:d2: 99:ed:81:3e:a6:dc:fd:e1:2d:2f:93:84:5d:dc:d0: 09:cf:ce:ec:93:ef:c6:a4:ac:5d:f1:9f:fd:40:22: c5:fe:a9:ae:d9:7f:ce:76:57:8a:c9:ef:c3:83:f6: d0:12:5f:66:1b:89:36:14:14:ba:48:ed:be:e9:d5: 6f:49:9d:5b:b4:8b:e4:81:f8:ba:0f:0e:79:e0:4e: 11:3e:d4:ab:f1:cd:24:82:ca:59:dd:bc:cc:cd:7a: 8f:42:1f:92:be:4e:72:ec:6a:2d:1a:09:11:bd:5f: f8:f4:49:28:43:cd:d2:74:ae:dc:30:7e:90:75:70: 1d:01:00:8e:d7:d6:26:70:65:2a:bf:e3:f7:a5:9b: 25:56:31:83:a3:e9:86:02:ab:95:e9:84:8b:6d:c7: f1:43:2b:d6:70:2d:88:af:72:35:42:ff:2a:4b:8c: b2:09:f9:44:03:3f:1a:9e:80:07:9e:0e:91:c7:01: c5:e3:2a:25:9c:63:6f:1f:25:e2:68:25:35:7c:48: 7e:5d:5e:08:05:a0:98:e4:1d:b9:3f:cf:fc:d0:29: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:5F:57:F6:02:BD:89:3A:BA:37:00:51:8E:44:C4:18:BA:E4:88 X509v3 Authority Key Identifier: keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.160.0/22 Signature Algorithm: sha256WithRSAEncryption 09:05:5c:b9:7c:72:0b:aa:2f:1e:67:66:19:a2:9f:00:59:d9: 39:93:ee:d9:3e:ce:be:83:f2:14:0e:98:bd:8e:25:a9:2b:58: f2:dd:64:76:92:ef:6f:f6:c3:66:fe:49:06:36:de:9b:cd:27: 3f:cf:5c:08:b7:b1:62:b0:30:31:eb:e3:b8:10:50:af:ac:6a: 91:ac:77:94:f5:95:f8:07:36:f7:f3:f2:1d:06:51:e2:fd:08: f7:f3:96:44:85:37:e7:4c:04:fe:59:9a:7e:2f:1c:b8:5a:f6: db:6d:1e:d6:44:d1:b9:56:e8:04:bc:05:48:1a:31:cc:7a:bf: 6e:14:c7:7c:6d:3e:b3:9c:ba:8e:7e:c4:bc:22:43:d7:c0:02: f5:b9:c8:eb:ec:79:8e:c0:5e:9d:42:e9:85:c9:41:86:a5:c8: 55:bc:da:2a:dd:9f:6c:9e:a3:41:d9:16:48:3d:f6:3c:e7:64: 3c:3b:4a:38:c9:ce:bd:a7:a2:e9:01:9c:be:3e:c0:6d:0b:69: a4:b9:1a:c8:a3:3b:82:6c:6d:21:18:00:b3:a2:58:6d:0f:5c: 93:d4:ce:c9:8a:89:e2:eb:ed:fc:4d:fe:c4:e4:95:80:0b:17: 5c:a3:52:ec:4a:21:14:1c:3f:a4:a9:36:8c:1b:bd:96:bd:09: 97:6b:bd:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJvqDiawbPKJkXKSVayZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0 NDFhYzAwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNiNWY1N2Y2MDJiZDg5M2FiYTM3MDA1MThlNDRjNDE4YmFlNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolg1qWtj+YBchMA/V6dj/p56ofbu CV3asPpEVXmqHhcZNvb2bCoyhcee+NKZ7YE+ptz94S0vk4Rd3NAJz87sk+/GpKxd 8Z/9QCLF/qmu2X/OdleKye/Dg/bQEl9mG4k2FBS6SO2+6dVvSZ1btIvkgfi6Dw55 4E4RPtSr8c0kgspZ3bzMzXqPQh+Svk5y7GotGgkRvV/49EkoQ83SdK7cMH6QdXAd AQCO19YmcGUqv+P3pZslVjGDo+mGAquV6YSLbcfxQyvWcC2Ir3I1Qv8qS4yyCflE Az8anoAHng6RxwHF4yolnGNvHyXiaCU1fEh+XV4IBaCY5B25P8/80CkAnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJk7X1f2Ar2JOro3AFGORMQYuuSIMB8GA1UdIwQY MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt OGFhZTQzMDYzYmNhLzEvbVR0ZlZfWUN2WWs2dWpjQVVZNUV4Qmk2NUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXygMA0G CSqGSIb3DQEBCwUAA4IBAQAJBVy5fHILqi8eZ2YZop8AWdk5k+7ZPs6+g/IUDpi9 jiWpK1jy3WR2ku9v9sNm/kkGNt6bzSc/z1wIt7FisDAx6+O4EFCvrGqRrHeU9ZX4 Bzb38/IdBlHi/Qj385ZEhTfnTAT+WZp+Lxy4WvbbbR7WRNG5VugEvAVIGjHMer9u FMd8bT6znLqOfsS8IkPXwAL1ucjr7HmOwF6dQumFyUGGpchVvNoq3Z9snqNB2RZI PfY852Q8O0o4yc69p6LpAZy+PsBtC2mkuRrIozuCbG0hGACzolhtD1yT1M7Jioni 6+38Tf7E5JWACxdco1LsSiEUHD+kqTaMG72WvQmXa73q -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:02 2026 by rpki-client