This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/kMUpaCiTkh2kJr0mhaoFnVyiC30.roa File: kMUpaCiTkh2kJr0mhaoFnVyiC30.roa (raw, json) Hash identifier: SYX4r9LuobOamN0k+QFcLKBI8j/NR9w+wByXAqgbr74= Subject key identifier: 90:C5:29:68:28:93:92:1D:A4:26:BD:26:85:AA:05:9D:5C:A2:0B:7D Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4 Certificate serial: 019B79ED2F2F343C66E50CFD4E4C4F6BD8A7 Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/kMUpaCiTkh2kJr0mhaoFnVyiC30.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196865 IP address blocks: 109.232.136.0/21 maxlen: 24 178.19.160.0/21 maxlen: 24 178.19.168.0/22 maxlen: 24 185.75.108.0/22 maxlen: 24 185.142.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2f:2f:34:3c:66:e5:0c:fd:4e:4c:4f:6b:d8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c529682893921da426bd2685aa059d5ca20b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:0e:7c:1e:34:2c:ad:ff:39:95:7a:63:34: c2:ae:04:99:ee:e9:40:76:06:04:f8:06:dd:9d:49: ff:13:0f:0e:34:a3:13:8c:3f:dc:12:6c:33:db:c6: c9:1b:e2:18:2c:3e:8b:28:89:19:67:38:0d:05:58: d8:35:c3:17:13:4b:65:0e:a4:fd:64:74:eb:fa:18: 85:2e:cc:94:9a:5a:ca:7c:2d:52:cc:67:de:15:80: a3:83:7f:13:43:aa:cd:77:de:b7:85:20:cd:04:19: 39:ca:42:40:d8:70:c0:62:68:d2:35:82:5c:12:e2: 49:3e:35:ba:b7:0c:13:41:b5:e9:d2:6f:33:73:02: 39:cf:3a:59:cb:51:60:4b:0a:03:f0:5d:0f:9c:e5: 3d:b5:db:18:dd:4f:26:47:fb:e4:db:ad:63:c2:f8: aa:67:2f:4f:ed:e0:d7:0e:df:d8:2d:6e:19:cf:0b: 9d:f3:c3:59:b6:3b:a3:5f:f0:76:6f:f1:8d:29:92: f1:0c:c1:fd:55:1d:01:f4:1d:6b:a6:b7:c6:09:07: af:34:d8:b7:f8:11:61:e6:ac:b9:a9:6b:60:d6:f8: fe:c8:c6:cc:67:93:10:09:e8:17:a1:2b:af:28:d7: 1b:5e:f7:ee:41:b7:2b:3a:27:69:fb:72:89:a5:ba: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C5:29:68:28:93:92:1D:A4:26:BD:26:85:AA:05:9D:5C:A2:0B:7D X509v3 Authority Key Identifier: keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/kMUpaCiTkh2kJr0mhaoFnVyiC30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.136.0/21 178.19.160.0-178.19.171.255 185.75.108.0/22 185.142.168.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:23:3b:db:f4:00:1b:b7:ce:37:d9:75:e1:24:19:3a:22:a8: 45:13:0a:15:fa:f7:ff:73:ff:4e:2a:2f:47:be:52:01:ba:10: f4:bf:c2:8f:bd:d6:d3:ec:d0:c9:fc:1f:ad:37:68:49:0f:25: ae:f1:0b:3c:bf:c4:ba:86:a2:4d:05:cf:18:3c:23:0a:db:3f: a7:8c:c2:14:20:45:7d:59:be:20:17:98:b3:cb:a0:d1:d9:8a: d4:9e:65:72:a1:1d:f5:0b:44:7a:0d:d3:f9:b8:d5:ae:2a:77: ce:be:c4:c6:86:22:da:64:cb:74:f5:60:47:f8:71:94:7c:cc: c9:e6:60:04:41:90:b3:3a:81:4d:d1:89:49:6c:2a:8a:74:36: 91:de:3e:9b:63:97:de:60:3f:c8:50:3c:9b:c0:a4:bc:9d:28: c0:04:26:a8:51:08:f1:a4:cf:75:64:d3:da:80:1a:9d:19:64: 87:86:99:8f:a8:7b:4d:58:22:93:cd:ec:45:53:6f:55:3b:ad: c7:01:75:15:e3:01:84:fd:1f:3b:0f:65:e0:84:cd:92:10:05: a5:94:dc:3d:3d:6b:01:b3:76:37:cd:a4:fe:fb:8e:a6:e9:eb: d8:bc:28:2d:52:d1:e7:b3:fd:1b:5d:a2:90:89:8d:56:55:aa: e7:73:65:74 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt57S8vNDxm5Qz9TkxPa9inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2 MmU3YTQwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGM1Mjk2ODI4OTM5MjFkYTQyNmJkMjY4NWFhMDU5ZDVjYTIwYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UoOfB40LK3/OZV6YzTCrgSZ7ulA dgYE+AbdnUn/Ew8ONKMTjD/cEmwz28bJG+IYLD6LKIkZZzgNBVjYNcMXE0tlDqT9 ZHTr+hiFLsyUmlrKfC1SzGfeFYCjg38TQ6rNd963hSDNBBk5ykJA2HDAYmjSNYJc EuJJPjW6twwTQbXp0m8zcwI5zzpZy1FgSwoD8F0PnOU9tdsY3U8mR/vk261jwviq Zy9P7eDXDt/YLW4Zzwud88NZtjujX/B2b/GNKZLxDMH9VR0B9B1rprfGCQevNNi3 +BFh5qy5qWtg1vj+yMbMZ5MQCegXoSuvKNcbXvfuQbcrOidp+3KJpbrKbQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJDFKWgok5IdpCa9JoWqBZ1cogt9MB8GA1UdIwQY MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt NjViODZhMDM1YTA4LzEva01VcGFDaVRraDJrSnIwbWhhb0ZuVnlpQzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4 LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDbeiIMAwD BAWyE6ADBAKyE6gDBAK5S2wDBAK5jqgwDQYJKoZIhvcNAQELBQADggEBAH0jO9v0 ABu3zjfZdeEkGToiqEUTChX69/9z/04qL0e+UgG6EPS/wo+91tPs0Mn8H603aEkP Ja7xCzy/xLqGok0Fzxg8IwrbP6eMwhQgRX1ZviAXmLPLoNHZitSeZXKhHfULRHoN 0/m41a4qd86+xMaGItpky3T1YEf4cZR8zMnmYARBkLM6gU3RiUlsKop0NpHePptj l95gP8hQPJvApLydKMAEJqhRCPGkz3Vk09qAGp0ZZIeGmY+oe01YIpPN7EVTb1U7 rccBdRXjAYT9HzsPZeCEzZIQBaWU3D09awGzdjfNpP77jqbp69i8KC1S0eez/Rtd opCJjVZVqudzZXQ= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:10 2026 by rpki-client