This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa File: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (raw, json) Hash identifier: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w= Subject key identifier: 9A:36:2B:39:9B:84:EC:D1:11:81:9D:14:33:86:01:AA:07:2B:27:49 Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4 Certificate serial: 019B7F15B701B122F731A35C7D3A61924873 Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.145.0.0/19 maxlen: 24 185.74.156.0/22 maxlen: 24 2a00:d520::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b7:01:b1:22:f7:31:a3:5c:7d:3a:61:92:48:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a362b399b84ecd111819d14338601aa072b2749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:12:da:a5:1d:2f:07:6a:78:78:49:bb:5a: 2d:cd:83:2f:58:08:c2:ae:bc:7a:72:bd:b0:a9:1b: 18:a2:f3:82:e7:53:2e:ef:99:57:08:02:b2:b3:3b: d1:56:92:80:09:b1:4b:85:23:57:a2:da:78:09:e5: a4:12:2e:41:55:a0:ea:8f:cd:75:ae:07:fd:7c:61: 20:c3:be:22:09:b7:61:8f:60:b7:00:9b:ad:d1:73: fd:66:ae:c4:fe:1f:af:b7:58:4d:9d:c1:16:3e:d7: 75:bb:ee:be:04:1b:47:d2:65:91:6e:8b:0f:6f:53: 5c:a1:45:bd:92:b7:04:a0:d1:ed:c5:01:ed:21:dc: ec:b1:ed:91:fd:63:f8:48:8a:99:51:79:60:e4:36: f7:3d:40:2d:7f:5e:ed:6a:87:92:17:2d:40:36:23: 48:60:d3:6a:ae:cf:39:c2:9e:bb:b1:b2:3e:6c:77: fe:af:bc:01:12:45:de:28:ec:43:ac:71:e4:35:be: 1f:1c:3b:90:e9:86:cd:02:87:ad:7d:73:1d:79:78: af:b9:c1:55:c0:98:70:97:92:40:6c:1c:92:fe:49: e1:da:90:da:5e:52:1c:99:c6:39:6c:ad:68:bc:a4: 22:63:13:59:83:f3:aa:72:a8:75:ed:88:37:d4:8e: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:36:2B:39:9B:84:EC:D1:11:81:9D:14:33:86:01:AA:07:2B:27:49 X509v3 Authority Key Identifier: keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.0.0/19 185.74.156.0/22 IPv6: 2a00:d520::/29 Signature Algorithm: sha256WithRSAEncryption 40:ac:a3:66:6e:28:52:90:66:38:a1:68:51:bb:27:57:19:8f: 21:b7:fa:ff:c3:ec:5e:bb:0c:03:d2:2d:c8:68:1e:3a:af:0c: a7:19:11:3c:b5:d1:9d:5a:26:06:73:4f:79:55:1f:fd:f8:6b: f2:39:a2:24:61:3a:e3:09:64:f2:e6:9b:01:60:f5:82:e1:13: 6a:e3:b2:6f:21:07:51:ad:87:5b:8e:92:2e:90:13:5a:fb:68: 61:f6:14:b4:0c:ef:94:fd:27:f0:dd:22:84:d3:a5:d0:bd:5b: ce:b5:b4:2b:a8:87:32:72:bb:4b:1d:80:5a:c8:72:80:d6:a3: 20:02:3e:93:08:36:90:b1:5d:d9:24:44:e2:62:eb:a4:49:06: d6:6e:8f:b1:14:6d:16:d1:b7:d7:18:6f:fa:7b:76:09:71:4b: 89:09:d9:8a:11:92:4e:ae:f9:3f:25:81:62:5a:9d:14:7a:99: 9e:42:98:70:89:68:26:ed:cb:26:d7:e7:c7:e1:35:b0:3b:fd: 7b:3e:23:eb:59:b6:1b:b9:17:fc:3a:35:54:16:d3:e5:28:36: a1:a0:57:7a:5f:c1:98:e8:19:2c:db:3c:a7:38:f9:61:58:74: 73:5c:4d:48:4f:17:af:b7:88:1e:c1:34:b0:ee:5b:d9:81:a4: 72:66:8e:be -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FbcBsSL3MaNcfTphkkhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDE2NzgxYmNhNjRjMmIyMzY0MzRlZGVmZmU2ZTQ1MmU3 MTYyZDQwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM2MmIzOTliODRlY2QxMTE4MTlkMTQzMzg2MDFhYTA3MmIyNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMAS2qUdLwdqeHhJu1otzYMvWAjC rrx6cr2wqRsYovOC51Mu75lXCAKyszvRVpKACbFLhSNXotp4CeWkEi5BVaDqj811 rgf9fGEgw74iCbdhj2C3AJut0XP9Zq7E/h+vt1hNncEWPtd1u+6+BBtH0mWRbosP b1NcoUW9krcEoNHtxQHtIdzsse2R/WP4SIqZUXlg5Db3PUAtf17taoeSFy1ANiNI YNNqrs85wp67sbI+bHf+r7wBEkXeKOxDrHHkNb4fHDuQ6YbNAoetfXMdeXivucFV wJhwl5JAbByS/knh2pDaXlIcmcY5bK1ovKQiYxNZg/Oqcqh17Yg31I5CxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJo2KzmbhOzREYGdFDOGAaoHKydJMB8GA1UdIwQY MBaAFGfRZ4G8pkwrI2Q07e/+bkUucWLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEt YWQ1OTU1N2UyOGMyLzEvbWpZck9adUU3TkVSZ1owVU00WUJxZ2NySjBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEtYWQ1OTU1N2UyOGMy LzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFBZEAAwQC uUqcMA0EAgACMAcDBQMqANUgMA0GCSqGSIb3DQEBCwUAA4IBAQBArKNmbihSkGY4 oWhRuydXGY8ht/r/w+xeuwwD0i3IaB46rwynGRE8tdGdWiYGc095VR/9+GvyOaIk YTrjCWTy5psBYPWC4RNq47JvIQdRrYdbjpIukBNa+2hh9hS0DO+U/Sfw3SKE06XQ vVvOtbQrqIcycrtLHYBayHKA1qMgAj6TCDaQsV3ZJETiYuukSQbWbo+xFG0W0bfX GG/6e3YJcUuJCdmKEZJOrvk/JYFiWp0UepmeQphwiWgm7csm1+fH4TWwO/17PiPr WbYbuRf8OjVUFtPlKDahoFd6X8GY6Bks2zynOPlhWHRzXE1ITxevt4gewTSw7lvZ gaRyZo6+ -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:36 2026 by rpki-client