This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/j7653T51F6EUoDPqs_2ecZYygWM.roa File: j7653T51F6EUoDPqs_2ecZYygWM.roa (raw, json) Hash identifier: iqkpEFsJy76DXov6xlk9ejYQADnbYUIfX+Z+h7UJP2I= Subject key identifier: 8F:BE:B9:DD:3E:75:17:A1:14:A0:33:EA:B3:FD:9E:71:96:32:81:63 Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0 Certificate serial: 019B797F05391AB3BF117A93A5F9F95B64FE Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/j7653T51F6EUoDPqs_2ecZYygWM.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47506 IP address blocks: 93.174.184.0/21 maxlen: 24 185.39.32.0/22 maxlen: 24 2a02:e60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:39:1a:b3:bf:11:7a:93:a5:f9:f9:5b:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fbeb9dd3e7517a114a033eab3fd9e7196328163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:a2:e6:cf:a1:c2:ab:31:6e:de:31:4a:0d: 8e:6f:f4:cd:f3:80:6f:9d:5b:40:d8:ed:13:39:9d: 2d:bd:87:36:f1:cd:00:0c:ef:86:9c:9d:ba:b0:a5: 11:d2:d4:bc:29:c1:8a:49:38:cb:08:f4:f9:72:8a: 02:ae:19:32:17:9f:29:bb:f0:0a:ca:3a:c9:bf:ee: 61:33:bc:15:e9:07:31:6c:aa:03:ed:1b:18:17:2d: 46:76:29:89:cf:b5:d5:0e:bf:f5:63:54:4b:74:8e: 02:12:e6:f9:d0:e9:8e:cd:d5:f3:2b:43:5e:c6:b9: b3:e5:89:6e:9e:8d:d5:74:da:de:cc:53:d2:fc:78: c9:ab:54:27:26:f2:dd:e8:9e:d2:84:c7:d8:ec:ac: 66:d0:dc:8e:2b:09:fe:7c:29:14:30:35:d0:e2:55: 5d:86:62:81:4b:47:a3:3b:b8:a9:7d:70:de:ec:66: e9:39:e9:70:bb:c4:58:64:b8:2a:e7:cf:4d:21:93: 2d:b4:1d:38:f2:97:7e:b3:e7:ea:d9:87:a2:3b:e7: d9:f7:54:59:88:cd:c7:81:7b:d7:b4:aa:a9:36:88: 96:95:d7:81:45:8c:5e:71:7d:55:9d:9b:b3:36:24: aa:57:df:7b:6d:78:fc:85:84:0d:5c:86:7d:dd:c0: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:B9:DD:3E:75:17:A1:14:A0:33:EA:B3:FD:9E:71:96:32:81:63 X509v3 Authority Key Identifier: keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/j7653T51F6EUoDPqs_2ecZYygWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.184.0/21 185.39.32.0/22 IPv6: 2a02:e60::/32 Signature Algorithm: sha256WithRSAEncryption c2:1f:c4:80:d8:a9:39:f5:77:e3:80:41:6a:fa:01:68:57:56: f8:65:ec:0d:cc:a0:99:f2:5f:ca:40:45:5f:9f:a5:68:89:34: 1b:5e:47:97:84:32:dc:92:af:36:99:11:f0:6b:a2:fb:0d:ca: 81:13:c1:20:7f:69:b2:58:06:64:c9:e4:f2:a2:37:57:a5:71: 15:e7:d2:9b:41:f2:e3:7a:4e:88:fa:de:69:56:1a:46:25:5c: d4:5a:c6:8f:a5:ee:ea:1a:8f:38:b0:bf:f1:f7:8b:83:8c:9e: 17:a9:25:14:1b:47:5e:a4:79:eb:26:4d:a9:18:2e:e0:63:c8: 71:b6:b1:34:4f:b6:17:71:b0:04:32:87:59:0c:9d:bb:79:0c: 11:f7:03:cd:e7:f6:2d:7f:5c:fe:39:7e:5d:94:df:a1:56:c8: 10:54:10:9b:fc:f7:b8:b9:fa:2c:3f:23:79:b5:30:f4:4e:09: 8c:fa:79:40:92:ce:6e:51:19:04:55:fe:4f:09:52:54:b7:12: d0:cc:12:e5:55:fe:b6:8c:71:60:71:9f:d1:44:b2:01:4d:20: 1e:45:9b:49:43:85:16:22:71:a6:1d:6e:d5:0c:b6:f7:1b:7d: 5f:62:32:8f:9e:a1:26:af:8c:c4:3d:6d:4a:7e:82:20:1c:b6: 19:ac:55:cd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fwU5GrO/EXqTpfn5W2T+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4 MWFjZjAwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmJlYjlkZDNlNzUxN2ExMTRhMDMzZWFiM2ZkOWU3MTk2MzI4MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGSi5s+hwqsxbt4xSg2Ob/TN84Bv nVtA2O0TOZ0tvYc28c0ADO+GnJ26sKUR0tS8KcGKSTjLCPT5cooCrhkyF58pu/AK yjrJv+5hM7wV6QcxbKoD7RsYFy1GdimJz7XVDr/1Y1RLdI4CEub50OmOzdXzK0Ne xrmz5Yluno3VdNrezFPS/HjJq1QnJvLd6J7ShMfY7Kxm0NyOKwn+fCkUMDXQ4lVd hmKBS0ejO7ipfXDe7GbpOelwu8RYZLgq589NIZMttB048pd+s+fq2YeiO+fZ91RZ iM3HgXvXtKqpNoiWldeBRYxecX1VnZuzNiSqV997bXj8hYQNXIZ93cCNMQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI++ud0+dRehFKAz6rP9nnGWMoFjMB8GA1UdIwQY MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt ZTQzNjIwODgwY2I2LzEvajc2NTNUNTFGNkVVb0RQcXNfMmVjWll5Z1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2 LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXa64AwQC uScgMA0EAgACMAcDBQAqAg5gMA0GCSqGSIb3DQEBCwUAA4IBAQDCH8SA2Kk59Xfj gEFq+gFoV1b4ZewNzKCZ8l/KQEVfn6VoiTQbXkeXhDLckq82mRHwa6L7DcqBE8Eg f2myWAZkyeTyojdXpXEV59KbQfLjek6I+t5pVhpGJVzUWsaPpe7qGo84sL/x94uD jJ4XqSUUG0depHnrJk2pGC7gY8hxtrE0T7YXcbAEModZDJ27eQwR9wPN5/Ytf1z+ OX5dlN+hVsgQVBCb/Pe4ufosPyN5tTD0TgmM+nlAks5uURkEVf5PCVJUtxLQzBLl Vf62jHFgcZ/RRLIBTSAeRZtJQ4UWInGmHW7VDLb3G31fYjKPnqEmr4zEPW1KfoIg HLYZrFXN -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:39 2026 by rpki-client