This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/mj008ZBThqouoibk7dGm4Ll0iRc.roa File: mj008ZBThqouoibk7dGm4Ll0iRc.roa (raw, json) Hash identifier: eaUut3ld4CKzlD3QYCYu9OoqJfcd+Rj1aPxNKdwJaAw= Subject key identifier: 9A:3D:34:F1:90:53:86:AA:2E:A2:26:E4:ED:D1:A6:E0:B9:74:89:17 Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Certificate serial: 019B7834B1B15876641C583A8B5528253111 Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/mj008ZBThqouoibk7dGm4Ll0iRc.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6712 IP address blocks: 91.204.196.0/22 maxlen: 22 91.204.196.0/23 maxlen: 23 91.204.196.0/24 maxlen: 24 91.204.197.0/24 maxlen: 24 91.204.198.0/23 maxlen: 23 91.204.198.0/24 maxlen: 24 91.204.199.0/24 maxlen: 24 91.246.128.0/19 maxlen: 19 91.246.128.0/21 maxlen: 21 91.246.128.0/23 maxlen: 23 91.246.128.0/24 maxlen: 24 91.246.129.0/24 maxlen: 24 91.246.130.0/23 maxlen: 23 91.246.130.0/24 maxlen: 24 91.246.131.0/24 maxlen: 24 91.246.132.0/23 maxlen: 23 91.246.132.0/24 maxlen: 24 91.246.133.0/24 maxlen: 24 91.246.134.0/23 maxlen: 23 91.246.134.0/24 maxlen: 24 91.246.135.0/24 maxlen: 24 91.246.136.0/21 maxlen: 21 91.246.136.0/23 maxlen: 23 91.246.136.0/24 maxlen: 24 91.246.137.0/24 maxlen: 24 91.246.138.0/23 maxlen: 23 91.246.138.0/24 maxlen: 24 91.246.139.0/24 maxlen: 24 91.246.140.0/23 maxlen: 23 91.246.140.0/24 maxlen: 24 91.246.141.0/24 maxlen: 24 91.246.142.0/23 maxlen: 23 91.246.142.0/24 maxlen: 24 91.246.143.0/24 maxlen: 24 91.246.144.0/21 maxlen: 21 91.246.144.0/23 maxlen: 23 91.246.144.0/24 maxlen: 24 91.246.145.0/24 maxlen: 24 91.246.146.0/23 maxlen: 23 91.246.146.0/24 maxlen: 24 91.246.147.0/24 maxlen: 24 91.246.148.0/23 maxlen: 23 91.246.148.0/24 maxlen: 24 91.246.149.0/24 maxlen: 24 91.246.150.0/23 maxlen: 23 91.246.150.0/24 maxlen: 24 91.246.151.0/24 maxlen: 24 91.246.152.0/21 maxlen: 21 91.246.152.0/23 maxlen: 23 91.246.152.0/24 maxlen: 24 91.246.153.0/24 maxlen: 24 91.246.154.0/23 maxlen: 23 91.246.154.0/24 maxlen: 24 91.246.155.0/24 maxlen: 24 91.246.156.0/23 maxlen: 23 91.246.156.0/24 maxlen: 24 91.246.157.0/24 maxlen: 24 91.246.158.0/23 maxlen: 23 91.246.158.0/24 maxlen: 24 91.246.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b1:b1:58:76:64:1c:58:3a:8b:55:28:25:31:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a3d34f1905386aa2ea226e4edd1a6e0b9748917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:97:66:eb:5f:d5:e8:b1:2e:1c:74:35:ef: 5a:f6:b0:dc:19:72:b9:35:69:0b:df:fc:55:c3:c0: 0b:24:54:52:7e:1a:48:5b:d2:79:f8:68:23:b9:78: f3:34:32:3b:24:9c:be:20:4f:80:d9:75:a3:4e:2b: 02:94:99:e3:16:7a:51:2d:fd:c2:8d:60:93:b5:2d: ad:32:fc:a3:03:f9:7f:3a:d4:0a:28:9f:c9:c4:48: cb:f1:02:82:8e:82:4a:ab:43:dc:d9:b9:b6:d3:b1: 27:0a:2c:99:87:22:72:cb:8b:c2:31:14:64:45:51: da:a5:fb:62:27:36:6c:78:1a:12:b2:f4:6d:66:f4: 90:4b:78:e4:b1:7f:74:31:53:4b:96:db:c1:0a:3f: 17:7d:b3:35:36:d0:ba:5e:57:34:2b:ca:d5:7b:52: 1e:23:4f:f3:c5:d9:c0:48:e3:c6:d8:d4:5b:16:b5: f7:bc:e5:9c:ae:cb:d7:49:9d:b4:dc:d3:c1:23:e7: b6:fe:c0:3e:dc:a4:be:91:e2:60:bd:a3:a1:ff:9a: b6:69:f8:52:57:64:92:4c:8a:c6:39:3c:07:4a:55: 81:5d:98:68:30:7f:88:f4:1c:38:0f:f7:8d:fd:4f: 3a:a3:99:41:22:6e:27:b9:0f:d0:4a:a5:94:06:ff: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:34:F1:90:53:86:AA:2E:A2:26:E4:ED:D1:A6:E0:B9:74:89:17 X509v3 Authority Key Identifier: keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/mj008ZBThqouoibk7dGm4Ll0iRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.196.0/22 91.246.128.0/19 Signature Algorithm: sha256WithRSAEncryption 34:74:27:69:7c:9d:b7:2a:66:ec:be:fb:ef:06:31:ae:ef:81: 74:cb:16:1e:b6:62:a4:53:7f:80:a9:44:9a:48:e2:f4:ed:18: e2:5b:f0:14:53:66:87:ee:f4:c1:24:2c:8e:52:21:91:9e:eb: 52:46:76:47:da:63:1a:1b:9f:c8:9a:24:58:10:7d:93:98:1c: 5e:77:58:09:3b:87:9f:b1:74:86:5d:d6:81:6b:1d:d0:00:59: 9f:1e:be:95:66:a7:64:74:12:98:20:40:61:d1:3e:0e:4f:c2: 5e:83:1d:56:fa:2e:31:f8:d0:6c:18:49:bc:62:f9:9a:d7:94: f6:19:cb:48:cd:60:6f:46:c9:1f:3c:f4:27:b2:40:61:36:fe: 02:00:5d:97:a8:7f:f5:4e:0b:34:8a:08:06:71:1e:e1:6e:70: e3:99:c0:c8:1b:86:35:3a:0c:38:07:8e:78:17:7a:bb:5f:7c: d9:b2:b9:42:8d:ae:57:c2:d2:7e:e6:53:78:75:0c:aa:9c:36: 47:47:50:37:28:c5:d7:fa:77:f3:58:7b:a4:2c:99:a8:30:68: 00:4c:be:63:a0:e0:a7:ac:2e:f5:99:97:b0:97:e0:90:9a:23: d2:87:67:82:41:78:1d:55:ae:62:7b:74:ac:d3:23:6f:2b:3f: 23:d9:2a:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NLGxWHZkHFg6i1UoJTERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy M2IyY2YwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTNkMzRmMTkwNTM4NmFhMmVhMjI2ZTRlZGQxYTZlMGI5NzQ4OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuKXZutf1eixLhx0Ne9a9rDcGXK5 NWkL3/xVw8ALJFRSfhpIW9J5+GgjuXjzNDI7JJy+IE+A2XWjTisClJnjFnpRLf3C jWCTtS2tMvyjA/l/OtQKKJ/JxEjL8QKCjoJKq0Pc2bm207EnCiyZhyJyy4vCMRRk RVHapftiJzZseBoSsvRtZvSQS3jksX90MVNLltvBCj8XfbM1NtC6Xlc0K8rVe1Ie I0/zxdnASOPG2NRbFrX3vOWcrsvXSZ203NPBI+e2/sA+3KS+keJgvaOh/5q2afhS V2SSTIrGOTwHSlWBXZhoMH+I9Bw4D/eN/U86o5lBIm4nuQ/QSqWUBv9sWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJo9NPGQU4aqLqIm5O3RpuC5dIkXMB8GA1UdIwQY MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct ZjIzYjA3N2VkYjk2LzEvbWowMDhaQlRocW91b2liazdkR200TGwwaVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2 LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8zEAwQF W/aAMA0GCSqGSIb3DQEBCwUAA4IBAQA0dCdpfJ23KmbsvvvvBjGu74F0yxYetmKk U3+AqUSaSOL07RjiW/AUU2aH7vTBJCyOUiGRnutSRnZH2mMaG5/ImiRYEH2TmBxe d1gJO4efsXSGXdaBax3QAFmfHr6VZqdkdBKYIEBh0T4OT8Jegx1W+i4x+NBsGEm8 Yvma15T2GctIzWBvRskfPPQnskBhNv4CAF2XqH/1Tgs0iggGcR7hbnDjmcDIG4Y1 Ogw4B454F3q7X3zZsrlCja5XwtJ+5lN4dQyqnDZHR1A3KMXX+nfzWHukLJmoMGgA TL5joOCnrC71mZewl+CQmiPSh2eCQXgdVa5ie3Ss0yNvKz8j2Sp5 -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:48 2026 by rpki-client