This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Mit0TyDv_7aSa3RO5TACIOG4fX0.roa File: Mit0TyDv_7aSa3RO5TACIOG4fX0.roa (raw, json) Hash identifier: SCLVOmN3y8TfiaLgMwMH0QIQIdYtwaqNdko+WXs6CMg= Subject key identifier: 32:2B:74:4F:20:EF:FF:B6:92:6B:74:4E:E5:30:02:20:E1:B8:7D:7D Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F1595CA57FDEB26FB1FA2D4566369C3 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Mit0TyDv_7aSa3RO5TACIOG4fX0.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8551 IP address blocks: 95.100.204.0/22 maxlen: 22 2a02:26f0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:ca:57:fd:eb:26:fb:1f:a2:d4:56:63:69:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=322b744f20efffb6926b744ee5300220e1b87d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6a:42:f8:dd:e1:51:3c:c8:11:9a:75:4e:eb: cc:32:1b:09:14:26:0e:34:89:a7:77:1a:59:48:98: 37:cf:1a:0f:67:bd:19:40:07:9d:29:0c:f1:47:e0: 2c:27:fd:b7:b6:0f:b7:17:bf:ad:10:66:1a:0f:57: af:30:19:f4:94:e8:8b:52:6a:7b:96:b1:a9:5a:38: 4d:3f:c9:0c:7a:96:b0:6c:32:54:61:e1:ff:8a:16: de:83:90:28:7d:f9:a9:ac:c5:a4:96:29:fa:b9:e2: 0f:42:6a:5e:ec:e2:e3:f4:11:62:84:5e:91:1e:7e: 0e:fb:2e:11:51:9e:3d:d5:1e:21:11:88:51:44:59: 69:64:ca:76:a9:98:f8:6a:28:1c:34:5b:c2:23:24: 56:5e:fc:f0:00:04:ea:e1:92:1f:c5:d4:c1:b1:7e: d6:3d:2a:dd:2a:10:ec:cc:77:ff:f4:73:f3:8d:3b: 1b:49:b9:0f:fe:60:d0:26:67:8d:a6:db:8c:ca:48: f6:40:69:98:52:41:61:a7:63:09:af:b3:cc:56:a6: ff:7d:75:27:7d:d2:13:98:f7:b8:38:11:4d:1c:32: ee:3c:8d:41:b8:48:cc:29:72:b7:e9:2f:1a:60:4e: ae:12:e8:f8:37:78:fb:33:4a:ad:04:e5:c0:c8:ad: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:74:4F:20:EF:FF:B6:92:6B:74:4E:E5:30:02:20:E1:B8:7D:7D X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Mit0TyDv_7aSa3RO5TACIOG4fX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.100.204.0/22 IPv6: 2a02:26f0:8000::/48 Signature Algorithm: sha256WithRSAEncryption 46:3d:b0:98:c7:50:09:43:b9:6a:19:db:c6:36:e6:7a:33:8b: 1b:80:0f:88:ba:07:4f:5b:0b:93:bc:7e:67:b5:51:b6:4b:8d: 73:23:21:c7:22:26:cf:ef:e2:a8:22:d3:b4:d5:90:81:f2:aa: 00:ec:9b:1a:6e:cf:94:57:6b:b4:74:23:70:c2:f8:eb:77:be: 0e:0a:0a:ef:67:2d:c7:2f:38:b8:59:92:dd:e4:b0:48:e8:45: 81:b3:f5:ce:92:22:9a:20:1a:19:9c:08:dc:6f:cb:04:ae:4f: a8:14:c1:95:b3:33:c6:44:68:39:16:f1:41:78:16:aa:02:4f: a6:f5:2b:63:da:9e:d5:48:a9:7a:76:8a:c4:e4:7f:85:27:03: 79:21:37:87:67:13:48:f2:4d:bb:52:f4:96:be:52:58:12:17: 4c:04:cd:17:34:cc:fb:28:48:6d:04:3a:df:17:70:81:11:ca: 04:bc:40:1e:4c:ff:44:67:25:54:d6:15:b3:f5:38:21:7b:14: 3c:b6:ec:2e:52:bb:0c:fb:ec:13:cd:ed:e2:36:01:b6:4b:12: 4d:a6:f1:f7:9c:d9:87:b0:77:6c:d2:1a:7a:9a:cf:a3:14:78: 75:f4:26:13:43:e5:10:fe:7f:1f:df:56:1c:d5:f6:ac:e6:74: 30:fe:92:ad -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FZXKV/3rJvsfotRWY2nDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjJiNzQ0ZjIwZWZmZmI2OTI2Yjc0NGVlNTMwMDIyMGUxYjg3ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GpC+N3hUTzIEZp1TuvMMhsJFCYO NImndxpZSJg3zxoPZ70ZQAedKQzxR+AsJ/23tg+3F7+tEGYaD1evMBn0lOiLUmp7 lrGpWjhNP8kMepawbDJUYeH/ihbeg5AoffmprMWklin6ueIPQmpe7OLj9BFihF6R Hn4O+y4RUZ491R4hEYhRRFlpZMp2qZj4aigcNFvCIyRWXvzwAATq4ZIfxdTBsX7W PSrdKhDszHf/9HPzjTsbSbkP/mDQJmeNptuMykj2QGmYUkFhp2MJr7PMVqb/fXUn fdITmPe4OBFNHDLuPI1BuEjMKXK36S8aYE6uEuj4N3j7M0qtBOXAyK3QCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDIrdE8g7/+2kmt0TuUwAiDhuH19MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvTWl0MFR5RHZfN2FTYTNSTzVUQUNJT0c0ZlgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCX2TMMA8E AgACMAkDBwAqAibwgAAwDQYJKoZIhvcNAQELBQADggEBAEY9sJjHUAlDuWoZ28Y2 5nozixuAD4i6B09bC5O8fme1UbZLjXMjIcciJs/v4qgi07TVkIHyqgDsmxpuz5RX a7R0I3DC+Ot3vg4KCu9nLccvOLhZkt3ksEjoRYGz9c6SIpogGhmcCNxvywSuT6gU wZWzM8ZEaDkW8UF4FqoCT6b1K2PantVIqXp2isTkf4UnA3khN4dnE0jyTbtS9Ja+ UlgSF0wEzRc0zPsoSG0EOt8XcIERygS8QB5M/0RnJVTWFbP1OCF7FDy27C5Suwz7 7BPN7eI2AbZLEk2m8fec2Yewd2zSGnqaz6MUeHX0JhND5RD+fx/fVhzV9qzmdDD+ kq0= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:39 2026 by rpki-client