This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/mWE6kT69cqu-PW8JgJR1gCAZ64s.roa File: mWE6kT69cqu-PW8JgJR1gCAZ64s.roa (raw, json) Hash identifier: FJjpE6dQyURSUrQm7mC2IcezcL6cJcvz4TAfaMMJ8lE= Subject key identifier: 99:61:3A:91:3E:BD:72:AB:BE:3D:6F:09:80:94:75:80:20:19:EB:8B Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f Certificate serial: 019B797E75A0A117086167A1CFFA4A8BB2F5 Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/mWE6kT69cqu-PW8JgJR1gCAZ64s.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60111 IP address blocks: 185.182.204.0/22 maxlen: 22 2a0a:f880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:75:a0:a1:17:08:61:67:a1:cf:fa:4a:8b:b2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99613a913ebd72abbe3d6f09809475802019eb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:96:1d:47:98:2b:3c:ee:37:67:a0:60:3c: 97:59:f4:36:69:98:72:36:cd:2a:0f:e3:4c:23:e7: 7d:a8:49:d8:60:e3:82:8d:a2:10:c8:bc:ef:68:a7: a9:cf:f6:b1:76:c9:c6:02:de:1b:8a:f8:f8:91:fb: 35:d7:67:00:95:f6:2a:14:88:22:b2:05:06:30:06: 86:22:e1:64:df:34:59:c2:95:12:8f:f5:78:76:9c: e5:5b:95:90:92:81:6a:9b:13:fd:41:b3:30:06:ff: 02:4d:4a:03:7d:56:1b:0e:be:bc:14:2d:d2:c2:2c: 28:b3:7f:f9:51:c5:cd:4a:d4:de:73:1f:55:ff:94: 07:86:62:3a:5f:b8:6d:6d:7e:7e:ca:20:d3:98:c1: 66:4c:09:b4:79:88:dc:f5:04:83:38:b0:3d:ec:f4: e7:a6:ce:cf:94:a2:9c:77:28:29:38:0c:4c:82:e7: 95:65:1b:23:62:b1:03:d9:05:f9:15:df:9b:4c:82: 9d:1a:91:ea:33:dd:4f:95:61:56:2a:27:ca:22:93: ee:2e:60:88:57:67:fe:c9:c9:21:e3:65:6d:8c:b8: 43:82:6a:28:4b:d3:ce:b5:51:4b:06:b7:6f:ce:35: 87:1e:fe:5d:bd:85:77:b7:af:18:41:71:4e:be:b0: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:61:3A:91:3E:BD:72:AB:BE:3D:6F:09:80:94:75:80:20:19:EB:8B X509v3 Authority Key Identifier: keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/mWE6kT69cqu-PW8JgJR1gCAZ64s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.204.0/22 IPv6: 2a0a:f880::/29 Signature Algorithm: sha256WithRSAEncryption 92:16:77:6c:de:40:51:98:21:37:f3:14:86:19:ef:a1:eb:9d: 00:f7:f9:01:24:d6:ec:eb:40:33:2a:c1:a9:99:e7:3a:55:7c: 89:b5:f5:86:56:5f:cf:e3:00:b6:03:0a:90:e2:04:d9:e3:7e: 59:0e:76:a0:8e:fc:90:a2:b9:f8:3e:15:de:6f:5a:65:fd:b3: 52:76:84:17:1c:a9:f5:b2:90:df:a7:24:05:02:30:db:95:7b: 87:10:4c:65:14:08:1e:1f:ee:bc:1f:db:e1:2c:72:f4:b2:d9: 72:8a:b3:34:bb:90:70:7b:aa:38:da:4b:cb:0d:69:ea:2d:f0: 99:9a:6e:08:2d:2e:a0:93:64:4a:3c:89:73:3b:9e:c9:6b:bf: b5:0c:6d:65:f1:7a:9e:27:6f:0e:8b:d3:76:c4:c4:33:34:11: a6:60:95:b1:87:ea:61:36:11:c0:ed:ac:04:10:14:4c:73:d2: 25:0e:82:df:c1:e3:9e:76:ca:5f:dd:99:94:49:bd:8e:0a:ca: f7:82:a0:68:ea:4c:f6:ba:4e:7a:97:d4:63:43:4f:0d:7e:a8: 22:be:a1:8d:ce:ce:d2:29:29:33:d7:a8:df:80:03:b0:25:f5: bc:79:ef:a9:89:28:17:dd:a5:e0:b8:88:e5:1e:03:25:b9:cf: 8c:97:95:c6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fnWgoRcIYWehz/pKi7L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNTM4ODUxMTY3YjRlM2Q2ZjY0ZDUzNzk3YjA4Y2I0MTM3 MTg3MGYwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTYxM2E5MTNlYmQ3MmFiYmUzZDZmMDk4MDk0NzU4MDIwMTllYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxmWHUeYKzzuN2egYDyXWfQ2aZhy Ns0qD+NMI+d9qEnYYOOCjaIQyLzvaKepz/axdsnGAt4bivj4kfs112cAlfYqFIgi sgUGMAaGIuFk3zRZwpUSj/V4dpzlW5WQkoFqmxP9QbMwBv8CTUoDfVYbDr68FC3S wiwos3/5UcXNStTecx9V/5QHhmI6X7htbX5+yiDTmMFmTAm0eYjc9QSDOLA97PTn ps7PlKKcdygpOAxMgueVZRsjYrED2QX5Fd+bTIKdGpHqM91PlWFWKifKIpPuLmCI V2f+yckh42VtjLhDgmooS9POtVFLBrdvzjWHHv5dvYV3t68YQXFOvrDyWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJlhOpE+vXKrvj1vCYCUdYAgGeuLMB8GA1UdIwQY MBaAFAFTiFEWe049b2TVN5ewjLQTcYcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYt NjI5NWI4NTRkZjg2LzEvbVdFNmtUNjljcXUtUFc4SmdKUjFnQ0FaNjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYtNjI5NWI4NTRkZjg2 LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubbMMA0E AgACMAcDBQMqCviAMA0GCSqGSIb3DQEBCwUAA4IBAQCSFnds3kBRmCE38xSGGe+h 650A9/kBJNbs60AzKsGpmec6VXyJtfWGVl/P4wC2AwqQ4gTZ435ZDnagjvyQorn4 PhXeb1pl/bNSdoQXHKn1spDfpyQFAjDblXuHEExlFAgeH+68H9vhLHL0stlyirM0 u5Bwe6o42kvLDWnqLfCZmm4ILS6gk2RKPIlzO57Ja7+1DG1l8XqeJ28Oi9N2xMQz NBGmYJWxh+phNhHA7awEEBRMc9IlDoLfweOedspf3ZmUSb2OCsr3gqBo6kz2uk56 l9RjQ08NfqgivqGNzs7SKSkz16jfgAOwJfW8ee+piSgX3aXguIjlHgMluc+Ml5XG -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:27 2026 by rpki-client