This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mM_eE_brvSVnTruvcv-ZZhEPz-4.roa File: mM_eE_brvSVnTruvcv-ZZhEPz-4.roa (raw, json) Hash identifier: lvmK7xwc5cdijRcdvG/i9Z5ftvMDlaf8lyfwvJHAoNU= Subject key identifier: 98:CF:DE:13:F6:EB:BD:25:67:4E:BB:AF:72:FF:99:66:11:0F:CF:EE Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8464C9A8A26B89B09B96D360A84974 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mM_eE_brvSVnTruvcv-ZZhEPz-4.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 217.60.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:64:c9:a8:a2:6b:89:b0:9b:96:d3:60:a8:49:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98cfde13f6ebbd25674ebbaf72ff9966110fcfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:81:9b:d7:9f:e2:cb:2d:45:5f:4e:08:15: 20:99:1d:7c:08:4c:ca:e1:23:57:9c:6c:ed:21:cf: 56:05:c7:88:56:0e:70:ee:35:95:e8:67:69:a8:d8: 9a:27:3f:d1:4a:ca:1c:59:b4:00:03:01:01:d0:35: a2:ef:a1:60:e6:de:05:56:a9:e4:d9:01:21:37:07: 47:72:d4:6c:69:59:ea:95:15:06:17:52:42:4d:36: 11:33:b6:ff:07:a8:f2:1f:4c:a9:f2:ea:8d:a9:0c: 4c:68:19:7a:cd:fd:b1:21:e1:74:bf:dc:91:41:68: 4c:c6:5d:1d:1f:f8:ed:d8:ba:09:7b:48:3a:a7:0f: 51:14:7c:a6:92:fb:e5:64:a3:9e:4e:73:7a:2c:5a: 29:8b:d1:61:96:e8:24:e6:26:49:da:16:68:4b:6c: ab:e8:e4:c6:84:81:eb:ea:ce:e7:d4:55:4f:5d:94: d8:c6:54:1d:01:76:bd:64:6b:ff:f3:58:06:70:e6: 98:3d:88:6f:34:c7:15:04:5d:08:1c:24:e4:e4:bf: 6f:c2:cf:9a:96:e7:77:41:dc:49:03:9c:35:af:d6: 2a:b5:3f:9f:0a:76:bd:6b:af:df:db:74:9e:54:35: 1f:dc:3b:11:38:3b:ec:10:a7:44:88:0c:df:b4:59: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CF:DE:13:F6:EB:BD:25:67:4E:BB:AF:72:FF:99:66:11:0F:CF:EE X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mM_eE_brvSVnTruvcv-ZZhEPz-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.236.0/24 Signature Algorithm: sha256WithRSAEncryption a6:1d:4c:24:18:45:5c:af:61:7c:ae:38:dc:31:21:bb:b7:d9: ec:d7:92:07:cf:84:71:d5:03:2e:5a:05:6c:9d:3e:f4:92:c7: 87:e7:95:ac:e7:0d:fa:b1:54:ed:35:7c:dd:c2:5d:5d:9d:b6: 36:ed:e6:05:a8:62:4b:ba:90:f0:b4:2a:14:3f:d9:8d:f1:aa: 3f:6e:8c:15:2e:a1:43:5f:30:dd:a7:10:a1:3b:18:e2:93:b1: 42:b4:2c:24:a4:c2:01:01:4a:6a:1d:f8:84:40:88:95:88:f1: fe:d4:98:68:c4:ca:d4:27:cd:73:9f:8a:6d:a1:48:e9:7c:79: 9d:7f:21:d4:d5:dd:78:26:cf:25:ea:fd:6a:38:08:6b:15:24: b4:f6:5f:55:a5:c6:11:60:a7:dd:d8:fe:6a:4d:84:c9:55:1e: 06:44:e3:cb:a5:1f:a9:19:78:15:b1:f1:ac:7a:47:c3:c4:1a: 53:0e:d8:86:12:d2:4d:50:cc:cc:a8:64:63:40:3f:3c:9a:b2: 42:d6:fa:a1:5b:74:fd:be:15:ac:62:cc:01:2f:d4:5b:ea:98: 83:37:f9:14:40:92:f3:ee:dd:bc:dd:cd:a7:e5:43:4f:e6:6c: fb:12:c6:c6:2d:c2:9b:b0:94:31:1c:80:45:6c:02:6a:20:84: 48:c0:69:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGTJqKJribCbltNgqEl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGNmZGUxM2Y2ZWJiZDI1Njc0ZWJiYWY3MmZmOTk2NjExMGZjZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QaBm9ef4sstRV9OCBUgmR18CEzK 4SNXnGztIc9WBceIVg5w7jWV6GdpqNiaJz/RSsocWbQAAwEB0DWi76Fg5t4FVqnk 2QEhNwdHctRsaVnqlRUGF1JCTTYRM7b/B6jyH0yp8uqNqQxMaBl6zf2xIeF0v9yR QWhMxl0dH/jt2LoJe0g6pw9RFHymkvvlZKOeTnN6LFopi9Fhlugk5iZJ2hZoS2yr 6OTGhIHr6s7n1FVPXZTYxlQdAXa9ZGv/81gGcOaYPYhvNMcVBF0IHCTk5L9vws+a lud3QdxJA5w1r9YqtT+fCna9a6/f23SeVDUf3DsRODvsEKdEiAzftFk1UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjP3hP2670lZ067r3L/mWYRD8/uMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbU1fZUVfYnJ2U1ZuVHJ1dmN2LVpaaEVQei00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzsMA0G CSqGSIb3DQEBCwUAA4IBAQCmHUwkGEVcr2F8rjjcMSG7t9ns15IHz4Rx1QMuWgVs nT70kseH55Ws5w36sVTtNXzdwl1dnbY27eYFqGJLupDwtCoUP9mN8ao/bowVLqFD XzDdpxChOxjik7FCtCwkpMIBAUpqHfiEQIiViPH+1JhoxMrUJ81zn4ptoUjpfHmd fyHU1d14Js8l6v1qOAhrFSS09l9VpcYRYKfd2P5qTYTJVR4GROPLpR+pGXgVsfGs ekfDxBpTDtiGEtJNUMzMqGRjQD88mrJC1vqhW3T9vhWsYswBL9Rb6piDN/kUQJLz 7t283c2n5UNP5mz7EsbGLcKbsJQxHIBFbAJqIIRIwGma -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:50 2026 by rpki-client