This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mfX6n982kHfEGonK72FOllXPKLM.roa File: mfX6n982kHfEGonK72FOllXPKLM.roa (raw, json) Hash identifier: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo= Subject key identifier: 99:F5:FA:9F:DF:36:90:77:C4:1A:89:CA:EF:61:4E:96:55:CF:28:B3 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364B42FE73567C1F3CD8D7459C63D0 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mfX6n982kHfEGonK72FOllXPKLM.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:42:fe:73:56:7c:1f:3c:d8:d7:45:9c:63:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99f5fa9fdf369077c41a89caef614e9655cf28b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:74:cc:ef:f1:0a:8e:9a:65:a2:e2:3d:1c: 12:6b:84:12:9f:63:3e:b1:ff:86:ee:5f:8f:b3:7c: c6:23:72:b9:58:45:fa:10:f9:1d:32:92:e1:a8:77: 24:ab:db:56:90:6b:1e:50:ea:05:66:18:99:a9:9c: 04:97:6e:f2:e6:ca:94:ba:62:36:1f:bc:ec:1f:ac: 14:79:ad:92:70:d7:c4:ca:d1:a9:45:6d:ae:84:8a: 4f:a0:53:52:9f:c4:5a:ae:66:7d:9b:1e:e8:5f:ee: b2:62:4b:3e:38:c5:db:b1:ae:4a:91:1c:c4:e1:4a: 49:75:32:ec:93:f4:0a:8f:c1:b7:ba:d1:b4:25:f2: 1e:6c:fb:bf:7b:6d:d2:21:dd:21:0e:c2:7e:64:06: 0b:cb:e6:96:5d:e4:9c:16:39:95:4c:5b:7b:be:f4: a1:10:9b:f6:98:b5:de:2e:82:d8:97:f4:76:ac:70: de:c4:64:3e:f5:c3:48:6b:79:a2:ba:ec:dc:85:14: ba:3b:c0:3e:34:65:94:81:4f:ea:dc:f9:50:7d:09: 1b:b2:53:03:af:17:11:c3:f3:1c:b7:d1:cb:88:a0: bf:95:cf:cc:ce:73:2e:fb:f3:ac:0d:8b:f3:50:ad: 3d:44:63:3d:d4:99:9e:34:d7:6a:d7:8d:54:1c:61: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F5:FA:9F:DF:36:90:77:C4:1A:89:CA:EF:61:4E:96:55:CF:28:B3 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mfX6n982kHfEGonK72FOllXPKLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.3.0/24 Signature Algorithm: sha256WithRSAEncryption 82:fd:10:a2:84:16:41:fc:2c:80:02:6f:ac:43:29:18:b6:92: d2:7d:e4:ca:18:ca:27:2d:44:e9:69:58:c9:f0:82:e9:7d:9e: b7:c8:66:2c:aa:12:b2:c8:60:c4:9c:e7:e5:17:13:14:30:d1: d9:ea:4b:2b:80:66:52:f1:17:59:d0:c4:77:50:d5:22:b7:55: b6:71:97:4d:59:5e:08:b7:60:19:20:4f:bd:77:16:02:d7:d1: 98:69:ce:12:2f:46:f9:5a:d4:89:52:76:7f:87:27:74:a8:de: 21:67:87:ae:29:6b:ff:fb:cb:fb:71:07:d3:2c:c2:19:3c:f2: 32:ef:e4:6e:32:bf:b7:48:78:d8:16:85:0a:25:0e:82:04:82: 58:6e:89:20:70:0c:f5:a1:a5:ee:16:3b:49:40:17:32:3f:30: d6:0e:5c:4b:7e:3b:df:73:06:c1:7f:f1:de:91:43:28:23:f6: fa:cc:ab:34:c4:72:d1:34:95:9c:ab:f6:e3:97:92:36:30:a4: 64:14:1a:31:54:df:13:38:96:79:6d:fc:0e:24:90:26:b3:38: 6a:5d:07:e6:4e:42:53:fe:92:91:dd:b0:12:e3:21:ed:cd:a7: 94:07:69:07:1c:33:51:62:c1:42:0a:32:fd:51:2a:20:dc:d5: b0:0d:75:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NktC/nNWfB882NdFnGPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWY1ZmE5ZmRmMzY5MDc3YzQxYTg5Y2FlZjYxNGU5NjU1Y2YyOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS90zO/xCo6aZaLiPRwSa4QSn2M+ sf+G7l+Ps3zGI3K5WEX6EPkdMpLhqHckq9tWkGseUOoFZhiZqZwEl27y5sqUumI2 H7zsH6wUea2ScNfEytGpRW2uhIpPoFNSn8RarmZ9mx7oX+6yYks+OMXbsa5KkRzE 4UpJdTLsk/QKj8G3utG0JfIebPu/e23SId0hDsJ+ZAYLy+aWXeScFjmVTFt7vvSh EJv2mLXeLoLYl/R2rHDexGQ+9cNIa3miuuzchRS6O8A+NGWUgU/q3PlQfQkbslMD rxcRw/Mct9HLiKC/lc/MznMu+/OsDYvzUK09RGM91JmeNNdq141UHGHpCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJn1+p/fNpB3xBqJyu9hTpZVzyizMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvbWZYNm45ODJrSGZFR29uSzcyRk9sbFhQS0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYsDMA0G CSqGSIb3DQEBCwUAA4IBAQCC/RCihBZB/CyAAm+sQykYtpLSfeTKGMonLUTpaVjJ 8ILpfZ63yGYsqhKyyGDEnOflFxMUMNHZ6ksrgGZS8RdZ0MR3UNUit1W2cZdNWV4I t2AZIE+9dxYC19GYac4SL0b5WtSJUnZ/hyd0qN4hZ4euKWv/+8v7cQfTLMIZPPIy 7+RuMr+3SHjYFoUKJQ6CBIJYbokgcAz1oaXuFjtJQBcyPzDWDlxLfjvfcwbBf/He kUMoI/b6zKs0xHLRNJWcq/bjl5I2MKRkFBoxVN8TOJZ5bfwOJJAmszhqXQfmTkJT /pKR3bAS4yHtzaeUB2kHHDNRYsFCCjL9USog3NWwDXVz -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:24 2026 by rpki-client