This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/mIHKTw-XLrmmWG8YqweQVC7V0bI.roa File: mIHKTw-XLrmmWG8YqweQVC7V0bI.roa (raw, json) Hash identifier: jyb24Oi7s06EeSQHlaZE/EE7bOHrHv2+206uhSP0nsw= Subject key identifier: 98:81:CA:4F:0F:97:2E:B9:A6:58:6F:18:AB:07:90:54:2E:D5:D1:B2 Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5 Certificate serial: 019B7F15BFC38A7F34C4EEF89685CB07F3C8 Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/mIHKTw-XLrmmWG8YqweQVC7V0bI.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34687 IP address blocks: 89.248.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bf:c3:8a:7f:34:c4:ee:f8:96:85:cb:07:f3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9881ca4f0f972eb9a6586f18ab0790542ed5d1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:43:09:42:90:2e:6a:31:55:95:c3:5e:e1: 26:c0:ce:92:18:e9:70:ce:8a:08:db:96:36:b2:41: 29:2c:8b:1e:48:b7:01:bd:fa:2c:fc:1f:46:4e:3a: 0e:b6:ea:12:95:95:37:0f:5f:0b:b3:4f:64:ca:41: a8:c1:2f:a7:12:05:43:98:fe:86:27:43:5c:ae:c8: 65:8a:23:54:71:50:21:8d:98:8b:1e:fb:97:26:c8: dc:25:9f:d2:c7:fc:71:11:ed:0e:e2:38:26:44:00: 4b:85:fd:06:aa:c2:38:30:81:56:f6:ea:15:1a:36: 95:9b:d3:a8:f7:f4:59:9b:16:fd:09:12:8d:c2:bb: 85:42:b4:d9:ac:b2:0e:ee:08:f7:50:98:77:33:2e: a7:9e:67:7c:82:2d:b6:06:0e:7f:75:69:ce:28:b2: be:ba:3f:50:ea:69:a8:54:b6:81:18:05:8c:ac:ab: 45:94:a4:9e:e3:5a:da:37:9f:fc:1b:88:5c:ea:bc: 52:0a:36:f6:be:f3:72:06:32:d6:25:9f:0c:01:75: eb:1b:74:6a:91:18:78:32:6f:24:a8:51:16:7a:48: 9c:74:d3:bb:5a:29:d5:e7:90:29:15:9a:06:ff:fc: 97:74:0b:b6:2e:51:95:b9:7b:45:76:56:40:2b:e3: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:CA:4F:0F:97:2E:B9:A6:58:6F:18:AB:07:90:54:2E:D5:D1:B2 X509v3 Authority Key Identifier: keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/mIHKTw-XLrmmWG8YqweQVC7V0bI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.248.176.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:0e:8c:78:2c:c0:95:4d:e3:ca:db:83:f0:43:e2:7d:5a:85: 54:cf:2a:5f:03:5d:a3:48:9a:15:20:8e:be:25:61:08:6f:51: 13:70:5d:84:33:b3:0a:c2:6d:44:b1:42:9f:cf:43:8a:3f:22: 04:8d:ee:88:71:cb:32:29:39:ca:35:f4:2d:ba:93:4f:bb:f4: d8:56:e2:5c:a1:25:b0:0d:b2:20:ba:28:37:dc:ed:11:04:80: 8f:6f:b3:c2:21:e0:fb:83:09:d6:cf:c9:83:ed:2a:e5:71:c2: 72:87:14:d2:3e:4d:44:dc:a5:4f:e9:01:52:cc:2e:3d:ed:45: 34:a3:c2:95:15:48:ab:34:cf:c2:58:0a:3d:da:3b:29:89:1c: e2:9e:23:47:ca:69:1d:be:2e:76:b5:55:e3:0f:e0:b1:15:78: 0c:5c:d5:b3:09:01:73:76:db:ed:48:43:37:fa:a4:45:fa:a8: bd:62:f6:ff:01:52:d5:7c:bb:59:ba:bf:0d:4f:15:73:77:89: cb:56:b2:5f:83:ee:91:c3:f7:ac:55:d3:92:c5:15:3b:2c:6c: 8b:40:e4:12:fd:67:ea:34:00:83:24:54:2d:c9:9e:8e:10:d1: 04:0a:98:13:6f:d0:d4:6a:00:e3:d5:26:40:22:76:5f:70:3f: f7:11:60:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fb/Din80xO74loXLB/PIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj N2M2ZDUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgxY2E0ZjBmOTcyZWI5YTY1ODZmMThhYjA3OTA1NDJlZDVkMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYpDCUKQLmoxVZXDXuEmwM6SGOlw zooI25Y2skEpLIseSLcBvfos/B9GTjoOtuoSlZU3D18Ls09kykGowS+nEgVDmP6G J0NcrshliiNUcVAhjZiLHvuXJsjcJZ/Sx/xxEe0O4jgmRABLhf0GqsI4MIFW9uoV GjaVm9Oo9/RZmxb9CRKNwruFQrTZrLIO7gj3UJh3My6nnmd8gi22Bg5/dWnOKLK+ uj9Q6mmoVLaBGAWMrKtFlKSe41raN5/8G4hc6rxSCjb2vvNyBjLWJZ8MAXXrG3Rq kRh4Mm8kqFEWekicdNO7WinV55ApFZoG//yXdAu2LlGVuXtFdlZAK+NqawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJiByk8Ply65plhvGKsHkFQu1dGyMB8GA1UdIwQY MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt Njk5OWE5OWRjZjFlLzEvbUlIS1R3LVhMcm1tV0c4WXF3ZVFWQzdWMGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWfiwMA0G CSqGSIb3DQEBCwUAA4IBAQBNDox4LMCVTePK24PwQ+J9WoVUzypfA12jSJoVII6+ JWEIb1ETcF2EM7MKwm1EsUKfz0OKPyIEje6IccsyKTnKNfQtupNPu/TYVuJcoSWw DbIguig33O0RBICPb7PCIeD7gwnWz8mD7SrlccJyhxTSPk1E3KVP6QFSzC497UU0 o8KVFUirNM/CWAo92jspiRziniNHymkdvi52tVXjD+CxFXgMXNWzCQFzdtvtSEM3 +qRF+qi9Yvb/AVLVfLtZur8NTxVzd4nLVrJfg+6Rw/esVdOSxRU7LGyLQOQS/Wfq NACDJFQtyZ6OENEECpgTb9DUagDj1SZAInZfcD/3EWCv -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:47 2026 by rpki-client