This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/mfFzFr77B7li1se7tJF6OJSoedY.roa File: mfFzFr77B7li1se7tJF6OJSoedY.roa (raw, json) Hash identifier: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY= Subject key identifier: 99:F1:73:16:BE:FB:07:B9:62:D6:C7:BB:B4:91:7A:38:94:A8:79:D6 Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22 Certificate serial: 019B7758CD9F35189ED86D5434396C4E1194 Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/mfFzFr77B7li1se7tJF6OJSoedY.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39224 IP address blocks: 185.253.252.0/22 maxlen: 22 2a05:fec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cd:9f:35:18:9e:d8:6d:54:34:39:6c:4e:11:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99f17316befb07b962d6c7bbb4917a3894a879d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:2b:57:66:50:5c:45:a7:2f:fa:f2:d9:79: 99:54:f5:94:c6:5a:78:76:45:8a:cd:36:2f:83:63: 20:17:3a:a4:63:e3:80:ce:fb:68:44:a3:f7:38:61: 06:a4:20:29:1d:c1:9b:06:c6:d7:52:ce:89:9a:bf: 3d:72:23:1b:16:80:11:dc:92:23:64:cc:db:25:13: 11:fe:a0:e6:35:5c:ee:2a:d3:ca:8f:4f:47:15:46: b4:cb:11:ea:ce:92:50:f6:1b:67:f5:5e:0d:e3:17: 2c:fe:1f:96:be:71:65:9c:3e:44:67:b5:ea:f0:10: 7a:c0:69:d4:13:a2:9c:ee:bf:93:8d:a3:fc:a4:c5: 9d:73:da:7d:b2:a6:c3:92:71:02:6c:95:18:f9:d9: 3a:01:c9:34:e8:25:c5:d8:0d:14:60:12:95:a4:5e: 0a:5d:6e:68:09:71:56:ec:fe:41:3d:77:29:b4:a2: aa:03:a6:85:55:bd:50:97:79:5f:4a:71:80:a1:38: 88:d0:49:f6:c3:65:d5:ea:b9:00:45:85:f9:96:f5: 09:f5:cb:63:0c:f1:c9:a9:ae:33:13:83:d6:b5:58: 35:1d:8a:2b:45:fe:59:0d:8a:64:cd:94:eb:3c:23: a1:10:97:96:ab:b3:40:0c:93:b1:5d:e5:28:0a:bf: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:73:16:BE:FB:07:B9:62:D6:C7:BB:B4:91:7A:38:94:A8:79:D6 X509v3 Authority Key Identifier: keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/mfFzFr77B7li1se7tJF6OJSoedY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.252.0/22 IPv6: 2a05:fec0::/29 Signature Algorithm: sha256WithRSAEncryption 17:8c:4c:d8:e1:15:5b:67:f6:c1:24:33:b8:49:7e:f7:90:69: 9e:1f:d0:38:bc:dd:a4:94:17:9f:ab:7d:e3:4f:35:3f:c5:01: f1:17:c1:69:32:21:f6:98:5e:e4:a8:c6:21:98:d4:7c:52:a8: 20:2f:52:0c:5b:f0:ef:6d:bd:5f:36:4a:1d:5d:4a:64:59:ea: 23:80:97:86:93:9f:4b:e2:ad:2a:fc:40:af:58:9e:d3:b4:e5: d2:f7:b6:9a:4c:6b:7e:78:1a:95:7c:0b:2e:58:6d:e5:a0:aa: 9c:b1:6b:43:34:b0:3b:a6:96:6e:80:7e:8e:f4:af:d3:81:49: f6:86:e8:e6:2b:bc:1e:b3:8d:d8:0a:06:cd:a6:09:64:d6:3f: c9:8f:fa:f7:4c:fe:50:b2:3e:33:21:d0:05:f4:46:11:06:ca: 06:b6:e3:bc:cf:ed:3f:44:7a:e3:57:64:d6:e4:64:fc:ee:dc: 02:8f:11:df:43:49:f2:f8:3c:73:81:9a:7b:35:79:f0:b8:b5: aa:80:18:d5:30:03:61:36:14:23:ff:0e:e2:de:18:3c:0d:6a: 24:27:94:18:49:51:e9:18:67:b5:48:cc:38:5b:2a:e4:ac:09: c7:31:d2:ef:5e:ba:e4:ad:fe:8a:ab:fc:cf:a3:8e:aa:cc:26: 95:2c:84:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WM2fNRie2G1UNDlsThGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTY4NmUzNzBkNmQwNjA4MTE5ZWViMDA2YzhhYWRhYWIw NzhkMjIwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWYxNzMxNmJlZmIwN2I5NjJkNmM3YmJiNDkxN2EzODk0YTg3OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NorV2ZQXEWnL/ry2XmZVPWUxlp4 dkWKzTYvg2MgFzqkY+OAzvtoRKP3OGEGpCApHcGbBsbXUs6Jmr89ciMbFoAR3JIj ZMzbJRMR/qDmNVzuKtPKj09HFUa0yxHqzpJQ9htn9V4N4xcs/h+WvnFlnD5EZ7Xq 8BB6wGnUE6Kc7r+TjaP8pMWdc9p9sqbDknECbJUY+dk6Ack06CXF2A0UYBKVpF4K XW5oCXFW7P5BPXcptKKqA6aFVb1Ql3lfSnGAoTiI0En2w2XV6rkARYX5lvUJ9ctj DPHJqa4zE4PWtVg1HYorRf5ZDYpkzZTrPCOhEJeWq7NADJOxXeUoCr8pCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJnxcxa++we5YtbHu7SRejiUqHnWMB8GA1UdIwQY MBaAFAmmhuNw1tBggRnusAbIqtqrB40iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQt ODE3NjhjNjBlZTA4LzEvbWZGekZyNzdCN2xpMXNlN3RKRjZPSlNvZWRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQtODE3NjhjNjBlZTA4 LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf38MA0E AgACMAcDBQMqBf7AMA0GCSqGSIb3DQEBCwUAA4IBAQAXjEzY4RVbZ/bBJDO4SX73 kGmeH9A4vN2klBefq33jTzU/xQHxF8FpMiH2mF7kqMYhmNR8UqggL1IMW/Dvbb1f NkodXUpkWeojgJeGk59L4q0q/ECvWJ7TtOXS97aaTGt+eBqVfAsuWG3loKqcsWtD NLA7ppZugH6O9K/TgUn2hujmK7wes43YCgbNpglk1j/Jj/r3TP5Qsj4zIdAF9EYR BsoGtuO8z+0/RHrjV2TW5GT87twCjxHfQ0ny+DxzgZp7NXnwuLWqgBjVMANhNhQj /w7i3hg8DWokJ5QYSVHpGGe1SMw4WyrkrAnHMdLvXrrkrf6Kq/zPo46qzCaVLIQP -----END CERTIFICATE-----Generated at Sun Jan 18 10:55:41 2026 by rpki-client