This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/mWpfuNKr59RM8vs6VkBzUlnVMDw.roa File: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (raw, json) Hash identifier: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ= Subject key identifier: 99:6A:5F:B8:D2:AB:E7:D4:4C:F2:FB:3A:56:40:73:52:59:D5:30:3C Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019B7FF06B42BAD7F9DC1D7AF7A609771E72 Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/mWpfuNKr59RM8vs6VkBzUlnVMDw.roa Signing time: Fri 02 Jan 2026 18:20:21 +0000 ROA not before: Fri 02 Jan 2026 18:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 159.100.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6b:42:ba:d7:f9:dc:1d:7a:f7:a6:09:77:1e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Jan 2 18:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=996a5fb8d2abe7d44cf2fb3a5640735259d5303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:52:d8:ad:84:d0:1a:19:b0:ab:b9:b2:85: c4:eb:36:c7:56:70:ad:93:0f:32:20:79:f8:02:86: ef:60:23:2f:db:81:c5:f1:ed:eb:90:2c:19:2a:de: 7e:31:dc:2b:43:f5:f3:21:ec:7f:6f:65:46:c4:c7: e2:52:d0:88:f0:df:f5:1d:cd:56:e8:7a:15:72:48: 29:3e:98:cc:8b:7c:ef:a7:4a:5f:ab:76:51:ff:ed: 07:a9:5f:eb:35:16:23:30:3a:3d:54:bd:51:02:0f: 5b:83:90:4d:b0:5f:d1:a0:31:41:ac:83:b1:0f:df: 25:38:cd:de:87:f6:2c:6b:c6:3a:5f:e1:bf:63:43: 22:ff:04:22:84:46:94:f0:8e:98:de:64:47:b9:1c: 06:ba:27:7d:46:df:b1:36:bd:6f:80:bf:10:47:8f: 5a:3b:bf:67:ed:fb:b3:03:31:5c:af:96:fb:d7:79: b5:95:4b:69:49:03:df:fe:52:3c:b5:d8:e2:e9:82: 93:bc:40:e5:80:1a:ef:08:9d:f3:41:87:2e:50:a7: d6:14:fb:81:96:d6:a3:16:3c:19:37:be:f1:8e:a0: d4:88:4f:d4:24:bf:3b:e8:b3:9b:1f:9e:e4:f0:84: ba:9c:d0:7f:fe:14:86:9a:43:91:04:f5:6b:da:5b: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:5F:B8:D2:AB:E7:D4:4C:F2:FB:3A:56:40:73:52:59:D5:30:3C X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/mWpfuNKr59RM8vs6VkBzUlnVMDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.100.60.0/22 Signature Algorithm: sha256WithRSAEncryption 71:c0:3d:57:3c:c6:6f:4a:39:93:8d:6d:5a:87:b5:93:9f:1c: 92:80:ff:c0:e2:97:04:21:d5:f9:3a:46:86:75:6a:82:2d:43: a3:fa:13:05:ae:a7:ab:8d:67:60:48:9e:5e:fa:1c:35:0c:22: 2f:22:bf:86:77:ab:01:cb:5f:e5:3a:5e:08:be:ba:10:e9:24: 12:7b:c8:e4:58:60:be:17:08:1d:3e:09:5b:30:bf:3f:f1:44: 57:7d:a4:72:d9:8e:d0:3f:07:64:d9:9d:f6:0f:62:1f:7c:1a: a7:b5:c7:eb:7a:8a:f9:0c:cc:e5:93:6e:d2:c2:f4:52:05:d9: a4:3d:13:3b:45:86:05:68:1a:e7:2e:94:b3:3e:56:94:c9:6a: 68:ac:37:1b:30:05:e1:df:42:34:b8:f1:9f:99:bf:1e:32:f4: 9f:00:92:58:d6:c3:6a:a7:64:21:9d:9d:a3:4f:5f:e9:c6:a1: 62:39:7e:b1:e3:e4:6b:20:f0:51:fa:2b:7e:8e:22:ff:e4:4f: ac:b2:12:90:2d:b9:f7:ca:93:b3:21:99:39:39:e0:09:cc:4c: f5:e3:d8:b1:84:2f:49:2c:2a:63:f4:24:f0:2f:b7:d9:2d:01: 11:77:b9:eb:26:de:35:69:01:25:ad:75:e8:8e:ad:b8:8e:79: eb:8c:17:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8GtCutf53B1696YJdx5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjYwMTAyMTgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTZhNWZiOGQyYWJlN2Q0NGNmMmZiM2E1NjQwNzM1MjU5ZDUzMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJVS2K2E0BoZsKu5soXE6zbHVnCt kw8yIHn4AobvYCMv24HF8e3rkCwZKt5+MdwrQ/XzIex/b2VGxMfiUtCI8N/1Hc1W 6HoVckgpPpjMi3zvp0pfq3ZR/+0HqV/rNRYjMDo9VL1RAg9bg5BNsF/RoDFBrIOx D98lOM3eh/Ysa8Y6X+G/Y0Mi/wQihEaU8I6Y3mRHuRwGuid9Rt+xNr1vgL8QR49a O79n7fuzAzFcr5b713m1lUtpSQPf/lI8tdji6YKTvEDlgBrvCJ3zQYcuUKfWFPuB ltajFjwZN77xjqDUiE/UJL876LObH57k8IS6nNB//hSGmkORBPVr2lt6vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlqX7jSq+fUTPL7OlZAc1JZ1TA8MB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvbVdwZnVOS3I1OVJNOHZzNlZrQnpVbG5WTUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2Q8MA0G CSqGSIb3DQEBCwUAA4IBAQBxwD1XPMZvSjmTjW1ah7WTnxySgP/A4pcEIdX5OkaG dWqCLUOj+hMFrqerjWdgSJ5e+hw1DCIvIr+Gd6sBy1/lOl4IvroQ6SQSe8jkWGC+ FwgdPglbML8/8URXfaRy2Y7QPwdk2Z32D2IffBqntcfreor5DMzlk27SwvRSBdmk PRM7RYYFaBrnLpSzPlaUyWporDcbMAXh30I0uPGfmb8eMvSfAJJY1sNqp2QhnZ2j T1/pxqFiOX6x4+RrIPBR+it+jiL/5E+sshKQLbn3ypOzIZk5OeAJzEz149ixhC9J LCpj9CTwL7fZLQERd7nrJt41aQElrXXojq24jnnrjBd/ -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client