This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/MyfIZj1W2obkPAZygzM9dP9m28U.roa File: MyfIZj1W2obkPAZygzM9dP9m28U.roa (raw, json) Hash identifier: aXvgs0DUulnqjwtB1M6qdRCY8cRgdrm+A6xw7bBtVwA= Subject key identifier: 33:27:C8:66:3D:56:DA:86:E4:3C:06:72:83:33:3D:74:FF:66:DB:C5 Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311 Certificate serial: 019B79ECEF97357D54C845EDD5FAA3DDDB54 Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/MyfIZj1W2obkPAZygzM9dP9m28U.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ef:97:35:7d:54:c8:45:ed:d5:fa:a3:dd:db:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311 Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3327c8663d56da86e43c067283333d74ff66dbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:65:85:73:3b:ed:17:36:59:a5:fd:9a:9b: 48:6d:99:76:44:55:29:d7:5b:61:63:06:85:4d:f4: f4:e5:c6:88:94:50:d7:a8:1e:0d:90:27:21:70:2c: 3b:b2:44:36:72:85:62:10:ee:4d:e9:05:5a:a7:c4: e0:59:f4:84:cf:ff:86:ba:63:40:ec:6b:45:39:ab: 53:8f:0e:f8:59:75:ff:f1:37:71:d6:81:02:46:b4: 3c:ec:1f:49:46:8d:8b:33:87:9b:d9:8e:c5:0e:00: 38:38:1e:ee:d2:05:08:1f:7c:a7:df:e8:70:4d:f6: 03:03:a3:be:81:31:3d:cd:99:13:47:ee:4a:4c:e4: ea:4c:39:c5:35:b6:cd:93:01:0b:b6:f7:84:b6:cc: 64:b8:ad:87:4a:2c:cc:44:06:6b:8c:0f:03:0a:55: 4b:ab:e8:ed:c8:80:cd:98:f2:27:40:b4:68:c2:3e: 6c:43:b1:d1:6c:1c:38:3d:45:d6:76:72:11:9f:a8: a5:c4:df:99:3b:9e:d8:8e:66:ca:fb:3b:25:df:28: cc:7f:dd:f9:59:17:7e:7e:be:69:96:dc:e4:34:be: 0e:ff:f3:a0:0a:ea:b1:db:fc:60:8e:f0:8a:d2:9f: a4:20:6b:af:de:04:e6:34:63:35:8a:e2:76:f4:47: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:C8:66:3D:56:DA:86:E4:3C:06:72:83:33:3D:74:FF:66:DB:C5 X509v3 Authority Key Identifier: keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/MyfIZj1W2obkPAZygzM9dP9m28U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.110.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:df:4e:d9:85:79:06:79:a1:2f:21:f3:04:99:ab:56:e6:d0: aa:25:8e:45:aa:49:ef:76:8e:5b:52:4c:2a:03:52:f9:6e:c5: c0:46:95:86:51:6a:35:37:53:f0:64:2d:5b:ab:7c:f4:15:4a: 86:8e:93:1c:6d:81:fc:10:a7:20:45:81:34:67:a5:03:a1:83: 50:4b:13:32:64:52:5c:77:a4:0a:73:0b:3e:13:61:c6:ee:1c: 31:f1:1d:4a:78:77:7f:ca:bd:d7:38:31:91:64:a9:6b:11:e0: 05:9e:cb:93:be:f5:65:cc:95:d5:1c:a1:58:2b:93:a4:12:f9: d6:47:9e:9f:c7:90:e6:e8:2a:30:ab:2b:9e:21:dc:f1:f1:b3: 84:07:a2:ea:ca:c2:4e:ea:41:77:af:3a:94:f3:e2:a1:c7:de: bd:00:cb:f2:cf:dd:04:29:28:f9:dd:62:38:fd:a6:bf:a6:39: a2:d4:77:f4:75:35:18:e7:27:1e:72:56:7d:21:0b:24:8d:0e: b9:29:39:e4:c6:4e:e5:f0:dd:bd:e9:1d:a2:0a:6b:99:16:86: 6c:21:d4:9e:f2:49:c0:3b:09:ba:23:a5:0c:f8:67:a4:35:58: 58:4e:56:02:69:ed:9f:59:fc:9a:64:61:0c:d5:99:c5:c9:b7: 67:f3:e6:f3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt57O+XNX1UyEXt1fqj3dtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzA2Y2YyYzllOTU3NTM3NDM5NzM0ZjA1ODRhODIwNGE3 YjgzMTEwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzI3Yzg2NjNkNTZkYTg2ZTQzYzA2NzI4MzMzM2Q3NGZmNjZkYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSBlhXM77Rc2WaX9mptIbZl2RFUp 11thYwaFTfT05caIlFDXqB4NkCchcCw7skQ2coViEO5N6QVap8TgWfSEz/+GumNA 7GtFOatTjw74WXX/8Tdx1oECRrQ87B9JRo2LM4eb2Y7FDgA4OB7u0gUIH3yn3+hw TfYDA6O+gTE9zZkTR+5KTOTqTDnFNbbNkwELtveEtsxkuK2HSizMRAZrjA8DClVL q+jtyIDNmPInQLRowj5sQ7HRbBw4PUXWdnIRn6ilxN+ZO57YjmbK+zsl3yjMf935 WRd+fr5pltzkNL4O//OgCuqx2/xgjvCK0p+kIGuv3gTmNGM1iuJ29Eca4QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDMnyGY9VtqG5DwGcoMzPXT/ZtvFMB8GA1UdIwQY MBaAFBrAbPLJ6VdTdDlzTwWEqCBKe4MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NCczhzbnBWMU4wT1hOUEJZU29JRXA3Z3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2U2ZTktYzEyMS00MDY0LThhZDUt MDdjMTdmZTM3NGE2LzEvTXlmSVpqMVcyb2JrUEFaeWd6TTlkUDltMjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mN2U2ZTktYzEyMS00MDY0LThhZDUtMDdjMTdmZTM3NGE2 LzEvR3NCczhzbnBWMU4wT1hOUEJZU29JRXA3Z3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhm4wDQYJ KoZIhvcNAQELBQADggEBAK7fTtmFeQZ5oS8h8wSZq1bm0KoljkWqSe92jltSTCoD UvluxcBGlYZRajU3U/BkLVurfPQVSoaOkxxtgfwQpyBFgTRnpQOhg1BLEzJkUlx3 pApzCz4TYcbuHDHxHUp4d3/Kvdc4MZFkqWsR4AWey5O+9WXMldUcoVgrk6QS+dZH np/HkOboKjCrK54h3PHxs4QHourKwk7qQXevOpTz4qHH3r0Ay/LP3QQpKPndYjj9 pr+mOaLUd/R1NRjnJx5yVn0hCySNDrkpOeTGTuXw3b3pHaIKa5kWhmwh1J7yScA7 CbojpQz4Z6Q1WFhOVgJp7Z9Z/JpkYQzVmcXJt2fz5vM= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:00 2026 by rpki-client