This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/muToDVYHSFG7Iu6PcKczO1n_uA8.roa File: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (raw, json) Hash identifier: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk= Subject key identifier: 9A:E4:E8:0D:56:07:48:51:BB:22:EE:8F:70:A7:33:3B:59:FF:B8:0F Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019C3267DAC27E7443105A5D2B90EBCDCAFB Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/muToDVYHSFG7Iu6PcKczO1n_uA8.roa Signing time: Fri 06 Feb 2026 10:03:12 +0000 ROA not before: Fri 06 Feb 2026 10:03:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56501 IP address blocks: 128.127.181.0/24 maxlen: 24 2a05:8a44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:67:da:c2:7e:74:43:10:5a:5d:2b:90:eb:cd:ca:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Feb 6 10:03:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ae4e80d56074851bb22ee8f70a7333b59ffb80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:0b:49:e1:cd:d2:b6:5d:35:0e:1b:a2:0c: 59:7b:f8:30:f8:09:39:a0:43:c6:62:4d:d2:02:1d: 5d:72:2c:88:25:d0:42:e2:36:a2:c8:f9:48:2d:f4: 5a:e4:9a:34:35:ac:88:6e:c5:30:63:43:11:9c:bc: 54:5f:f0:7d:fd:1c:aa:5b:94:45:c2:0a:3b:12:2f: 16:b7:a2:38:90:bc:3f:ab:cb:08:5f:05:dc:5c:d4: b1:54:87:2a:5f:6c:83:00:66:3a:61:9a:c0:76:c3: d0:ae:e5:53:06:00:ef:1c:46:f8:0d:67:c3:62:dc: a3:4c:08:78:0a:87:04:fb:92:34:f2:cc:27:1f:71: b5:35:3a:29:30:36:3b:61:83:35:01:d5:eb:03:63: 3e:8d:5d:23:74:af:19:73:e6:96:03:bb:c4:30:0b: 44:41:9b:5e:3f:f6:fc:69:99:80:c5:9f:8a:f6:ee: f7:e0:10:e4:51:20:3d:20:84:4d:83:e2:53:41:00: 1b:b0:68:cc:f6:46:3e:73:07:4b:b1:94:79:73:88: 3b:9c:ce:b8:3a:ab:17:26:de:47:5d:2a:88:39:ec: 8f:85:72:98:86:f3:5c:7b:4b:d7:0e:49:2c:fb:89: b7:39:23:60:bb:84:94:01:59:ac:c7:de:9a:b2:4d: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E4:E8:0D:56:07:48:51:BB:22:EE:8F:70:A7:33:3B:59:FF:B8:0F X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/muToDVYHSFG7Iu6PcKczO1n_uA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.181.0/24 IPv6: 2a05:8a44::/32 Signature Algorithm: sha256WithRSAEncryption 64:65:93:f2:9c:24:d7:42:c3:c0:a7:2a:f5:80:e6:33:52:64: 38:f0:6f:8a:5f:38:24:02:71:52:16:1c:af:f1:2a:4b:29:e1: cd:18:ef:c5:4d:02:9d:70:35:ae:82:de:65:d4:c7:50:02:bd: 38:5c:4b:bb:fb:99:df:b8:87:31:33:5e:33:a3:d4:08:f4:a8: e2:5f:d3:80:c6:19:cb:18:4d:93:08:b7:2e:5e:0b:da:b0:89: 7d:c6:c2:45:2f:ca:b2:59:33:b6:54:3d:7d:f6:c2:bc:97:5f: 5c:5d:f0:e1:50:a0:d0:ec:90:d8:15:23:e3:19:09:5c:95:7f: e8:81:3b:22:d0:24:0c:84:d2:8e:29:df:c8:a9:c1:54:de:a1: 24:f8:a7:8d:a8:1f:08:cc:5e:8f:e4:c4:04:de:69:ee:50:25: 97:7c:25:5b:ea:61:16:db:03:55:02:f5:92:91:e5:e7:58:b1: c5:f7:3c:83:c1:f0:d7:ff:2c:8d:f9:da:c8:2b:c4:4e:b7:58: 12:1f:9b:ef:5d:ee:ca:31:46:62:9e:00:e9:2b:43:10:a6:8e: 3b:61:c4:3e:c0:9d:da:c7:85:56:ea:34:ff:84:b9:58:f9:17: ad:0f:48:4f:24:19:77:0f:f4:7a:82:cd:a8:23:3d:7a:e5:33: 3f:21:79:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwyZ9rCfnRDEFpdK5Drzcr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjYwMjA2MTAwMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWU0ZTgwZDU2MDc0ODUxYmIyMmVlOGY3MGE3MzMzYjU5ZmZiODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNYLSeHN0rZdNQ4bogxZe/gw+Ak5 oEPGYk3SAh1dciyIJdBC4jaiyPlILfRa5Jo0NayIbsUwY0MRnLxUX/B9/RyqW5RF wgo7Ei8Wt6I4kLw/q8sIXwXcXNSxVIcqX2yDAGY6YZrAdsPQruVTBgDvHEb4DWfD YtyjTAh4CocE+5I08swnH3G1NTopMDY7YYM1AdXrA2M+jV0jdK8Zc+aWA7vEMAtE QZteP/b8aZmAxZ+K9u734BDkUSA9IIRNg+JTQQAbsGjM9kY+cwdLsZR5c4g7nM64 OqsXJt5HXSqIOeyPhXKYhvNce0vXDkks+4m3OSNgu4SUAVmsx96ask13FwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJrk6A1WB0hRuyLuj3CnMztZ/7gPMB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvbXVUb0RWWUhTRkc3SXU2UGNLY3pPMW5fdUE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAgH+1MA0E AgACMAcDBQAqBYpEMA0GCSqGSIb3DQEBCwUAA4IBAQBkZZPynCTXQsPApyr1gOYz UmQ48G+KXzgkAnFSFhyv8SpLKeHNGO/FTQKdcDWugt5l1MdQAr04XEu7+5nfuIcx M14zo9QI9KjiX9OAxhnLGE2TCLcuXgvasIl9xsJFL8qyWTO2VD199sK8l19cXfDh UKDQ7JDYFSPjGQlclX/ogTsi0CQMhNKOKd/IqcFU3qEk+KeNqB8IzF6P5MQE3mnu UCWXfCVb6mEW2wNVAvWSkeXnWLHF9zyDwfDX/yyN+drIK8ROt1gSH5vvXe7KMUZi ngDpK0MQpo47YcQ+wJ3ax4VW6jT/hLlY+RetD0hPJBl3D/R6gs2oIz165TM/IXlf -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:46 2026 by rpki-client