This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa File: mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa (raw, json) Hash identifier: gyYJydWjo49Ti2U/k5vphqLtIT2Tqis569ex6zcT+xk= Subject key identifier: 9B:13:76:4C:AA:90:E1:70:F2:B7:B8:39:F7:FD:71:5C:9D:98:88:6C Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Certificate serial: 019B78354DD3D664508743C8FDFB09FEDBB5 Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15525 IP address blocks: 158.162.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4d:d3:d6:64:50:87:43:c8:fd:fb:09:fe:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b13764caa90e170f2b7b839f7fd715c9d98886c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:1a:fe:af:75:91:1a:36:ec:e8:ef:49:ce: bd:f1:f9:ac:d0:0f:85:e1:a0:fa:68:b6:9e:a5:cf: 4b:29:49:29:e5:92:e4:e4:97:e0:62:57:4f:cb:5c: 8f:39:d4:0b:f0:54:03:8c:58:10:34:ce:ee:57:c1: 3d:39:f8:d5:2a:ca:a1:08:1f:42:7f:ab:e3:8c:13: b2:07:58:6e:e8:ed:a7:01:e1:7c:32:a6:c7:86:ff: da:a2:61:fe:c2:fa:a1:48:07:04:14:b9:1f:86:18: 42:61:08:dc:83:06:a5:b8:35:1f:95:44:37:aa:c0: d5:ae:33:d5:52:68:22:ca:22:9d:89:d3:4c:84:6a: 08:bc:7b:a2:fd:4e:77:da:fe:e5:4c:06:05:74:74: bf:ad:a2:d7:8e:de:04:8b:6a:d6:26:34:e6:d4:e1: 9b:06:9f:92:7a:9a:94:35:5e:09:85:63:a4:c9:65: af:44:e1:20:01:7e:98:71:d3:8c:1e:48:a3:3d:c4: db:9f:26:d2:ad:4c:74:68:c2:4c:81:1e:f3:f0:7a: d7:ad:71:ca:be:f9:ce:5d:8d:12:ab:42:ef:1e:17: b5:4d:e9:8f:0c:2e:65:8a:58:23:c2:94:1f:b6:75: 41:0d:a7:4b:15:20:61:47:14:70:6d:b9:56:7f:39: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:76:4C:AA:90:E1:70:F2:B7:B8:39:F7:FD:71:5C:9D:98:88:6C X509v3 Authority Key Identifier: keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.162.120.0/22 Signature Algorithm: sha256WithRSAEncryption 55:c5:19:43:62:63:b0:8e:12:c2:20:58:d0:12:0c:9b:54:aa: 96:08:61:60:e4:a3:07:27:b1:f1:38:c6:8d:eb:8e:14:ed:62: 33:56:0c:59:79:bb:50:50:f1:2e:9e:f5:1e:2a:4f:dc:6c:af: 6a:d7:57:7f:16:fe:f8:0f:6b:0c:83:ee:7c:79:82:5a:04:8c: 8c:27:2a:15:27:43:c0:59:fe:bb:e1:9a:32:44:77:1d:24:d4: ed:c0:a8:9f:07:fc:4e:34:6e:1a:76:6c:7b:e3:5f:34:65:2a: 62:69:f2:ae:fa:e1:4c:ea:0d:d3:0b:0b:0f:91:d8:fe:52:dd: 94:3d:a9:3b:34:b6:b5:f8:8f:92:2b:9f:45:96:52:13:50:9a: bd:76:8b:88:53:3f:8c:85:68:f6:8f:2e:7a:7a:9f:06:22:8c: 13:ca:35:2b:bc:65:a2:84:41:41:36:b6:aa:a9:64:99:90:8e: e4:ee:b9:a3:6c:f3:3f:ee:fe:78:32:db:6d:0b:6e:2d:b0:1b: 3f:65:1a:2c:0d:b2:2e:cb:80:18:4c:91:53:95:bd:d4:a6:0b: 8b:42:cf:e0:5d:b5:2f:35:44:93:5c:29:80:01:07:15:03:a2: 2d:a8:91:eb:e2:62:69:9c:dd:fb:28:46:1a:fd:ee:c1:24:d3: 38:6b:39:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU3T1mRQh0PI/fsJ/tu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjRjYzQxMmNjMzBmYjJmOWY3YzM3YzNlMzkwYmVjNWU2 MjU2YjAwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjEzNzY0Y2FhOTBlMTcwZjJiN2I4MzlmN2ZkNzE1YzlkOTg4ODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuMa/q91kRo27OjvSc698fms0A+F 4aD6aLaepc9LKUkp5ZLk5JfgYldPy1yPOdQL8FQDjFgQNM7uV8E9OfjVKsqhCB9C f6vjjBOyB1hu6O2nAeF8MqbHhv/aomH+wvqhSAcEFLkfhhhCYQjcgwaluDUflUQ3 qsDVrjPVUmgiyiKdidNMhGoIvHui/U532v7lTAYFdHS/raLXjt4Ei2rWJjTm1OGb Bp+SepqUNV4JhWOkyWWvROEgAX6YcdOMHkijPcTbnybSrUx0aMJMgR7z8HrXrXHK vvnOXY0Sq0LvHhe1TemPDC5lilgjwpQftnVBDadLFSBhRxRwbblWfzn2zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsTdkyqkOFw8re4Off9cVydmIhsMB8GA1UdIwQY MBaAFAD0zEEsww+y+ffDfD45C+xeYlawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEt NWYxNDVjZmQyMDcwLzEvbXhOMlRLcVE0WER5dDdnNTlfMXhYSjJZaUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEtNWYxNDVjZmQyMDcw LzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnqJ4MA0G CSqGSIb3DQEBCwUAA4IBAQBVxRlDYmOwjhLCIFjQEgybVKqWCGFg5KMHJ7HxOMaN 644U7WIzVgxZebtQUPEunvUeKk/cbK9q11d/Fv74D2sMg+58eYJaBIyMJyoVJ0PA Wf674ZoyRHcdJNTtwKifB/xONG4admx74180ZSpiafKu+uFM6g3TCwsPkdj+Ut2U Pak7NLa1+I+SK59FllITUJq9douIUz+MhWj2jy56ep8GIowTyjUrvGWihEFBNraq qWSZkI7k7rmjbPM/7v54MtttC24tsBs/ZRosDbIuy4AYTJFTlb3UpguLQs/gXbUv NUSTXCmAAQcVA6ItqJHr4mJpnN37KEYa/e7BJNM4azns -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:13 2026 by rpki-client