This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa File: mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa (raw, json) Hash identifier: N937OZCdBilb1OADuX8QhLksdpQ9AoFfCxgf7tzf5mc= Subject key identifier: 9A:4A:11:FF:64:23:D4:FE:EE:70:C6:B4:C5:30:36:5B:2B:98:15:3D Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945 Certificate serial: 019B7DCA24C737105434597B20649464EB07 Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210855 IP address blocks: 5.181.53.0/24 maxlen: 24 2a05:5f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:24:c7:37:10:54:34:59:7b:20:64:94:64:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945 Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4a11ff6423d4feee70c6b4c530365b2b98153d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:e1:e0:66:25:b5:f0:f4:93:88:69:10:61: b5:86:34:e8:c5:e1:84:12:2e:90:17:21:ce:5d:84: 60:83:5b:c8:38:b6:6e:84:9d:32:cb:c5:55:98:a3: ac:b4:f6:55:77:bd:fe:dc:80:b1:fb:96:64:6c:63: 2d:69:39:bb:1c:39:68:f5:a7:bb:93:01:5b:ee:38: 9b:43:42:89:b6:b4:ad:3d:62:b5:76:6f:04:1a:55: 6f:7b:85:23:95:09:71:df:df:18:a2:50:c3:33:08: 33:03:4f:25:40:10:ed:4b:e5:92:ad:59:c7:ff:bc: 26:fb:1b:50:f0:22:49:32:2d:17:90:61:6f:1e:2d: ed:0b:26:01:f7:16:44:92:ed:18:08:48:73:79:0b: 2f:d4:b6:ae:31:00:1d:d5:c6:89:7d:3d:e5:7b:24: 46:4b:ed:78:84:f5:12:88:06:f6:59:c0:4b:6f:94: 83:13:8e:bf:31:f6:2a:c1:ea:db:78:93:20:7c:f5: 55:8a:ef:97:05:03:ff:9c:9e:1c:2d:20:67:7a:4e: 7c:4b:96:17:9d:c6:4f:93:c3:bd:d5:2e:08:01:9c: b6:26:16:ee:c0:ac:6f:86:dc:a7:40:cb:dd:8a:3c: 10:a8:14:aa:84:01:0b:4f:d5:f0:2b:30:35:be:54: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4A:11:FF:64:23:D4:FE:EE:70:C6:B4:C5:30:36:5B:2B:98:15:3D X509v3 Authority Key Identifier: keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.53.0/24 IPv6: 2a05:5f80::/29 Signature Algorithm: sha256WithRSAEncryption 20:5d:03:17:3a:ef:59:02:3f:ba:e4:d7:fd:46:3b:4e:73:8f: 0c:af:29:ec:3a:d0:1b:b5:2d:d9:f4:55:b6:5b:ae:20:c0:9a: 3e:2e:bb:13:de:76:a6:46:08:ce:68:37:45:52:be:96:43:6b: 45:b7:6f:9e:eb:35:08:68:7a:d8:d6:4e:cd:f0:ad:db:62:9e: c2:2f:d2:65:8c:d5:31:3e:4e:6c:9e:e7:5d:d1:50:92:1a:19: a4:59:b0:71:57:f2:95:9b:ee:b1:76:49:cf:8e:ec:e5:84:02: 57:8f:42:8d:22:be:3c:c2:b4:9b:f9:e2:84:74:05:70:4d:d1: b4:ef:b0:f5:f2:90:2f:ed:85:70:b3:b3:af:33:c2:ee:1a:3f: 8f:e9:b4:00:47:16:11:a9:0c:31:38:c3:ab:39:3b:22:a2:cc: 5e:4a:44:6e:ad:1d:17:46:72:b3:34:5d:ff:25:3a:48:0b:8e: ae:e5:41:05:11:93:76:54:05:7b:9b:59:d8:c9:60:4f:09:88: 77:1f:24:1a:72:f7:55:0a:29:22:fa:ab:3e:0d:59:84:08:72: 6b:b2:22:50:73:6b:28:98:f6:4e:3b:7a:85:72:e0:46:23:96: e3:2f:df:62:82:8a:94:99:68:27:8c:76:ad:e6:c7:76:63:5b: 4d:de:65:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yiTHNxBUNFl7IGSUZOsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk NTU5NDUwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTRhMTFmZjY0MjNkNGZlZWU3MGM2YjRjNTMwMzY1YjJiOTgxNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I/h4GYltfD0k4hpEGG1hjToxeGE Ei6QFyHOXYRgg1vIOLZuhJ0yy8VVmKOstPZVd73+3ICx+5ZkbGMtaTm7HDlo9ae7 kwFb7jibQ0KJtrStPWK1dm8EGlVve4UjlQlx398YolDDMwgzA08lQBDtS+WSrVnH /7wm+xtQ8CJJMi0XkGFvHi3tCyYB9xZEku0YCEhzeQsv1LauMQAd1caJfT3leyRG S+14hPUSiAb2WcBLb5SDE46/MfYqwerbeJMgfPVViu+XBQP/nJ4cLSBnek58S5YX ncZPk8O91S4IAZy2JhbuwKxvhtynQMvdijwQqBSqhAELT9XwKzA1vlRu0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJpKEf9kI9T+7nDGtMUwNlsrmBU9MB8GA1UdIwQY MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct Y2ViMjdiZmNiOTQ3LzEvbWtvUl8yUWoxUDd1Y01hMHhUQTJXeXVZRlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3 LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABbU1MA0E AgACMAcDBQMqBV+AMA0GCSqGSIb3DQEBCwUAA4IBAQAgXQMXOu9ZAj+65Nf9RjtO c48MrynsOtAbtS3Z9FW2W64gwJo+LrsT3namRgjOaDdFUr6WQ2tFt2+e6zUIaHrY 1k7N8K3bYp7CL9JljNUxPk5snudd0VCSGhmkWbBxV/KVm+6xdknPjuzlhAJXj0KN Ir48wrSb+eKEdAVwTdG077D18pAv7YVws7OvM8LuGj+P6bQARxYRqQwxOMOrOTsi osxeSkRurR0XRnKzNF3/JTpIC46u5UEFEZN2VAV7m1nYyWBPCYh3HyQacvdVCiki +qs+DVmECHJrsiJQc2somPZOO3qFcuBGI5bjL99igoqUmWgnjHat5sd2Y1tN3mWI -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:39 2026 by rpki-client