This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/mmG4pJmj7z2Az5Ui4s_hphr63S0.roa File: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (raw, json) Hash identifier: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8= Subject key identifier: 9A:61:B8:A4:99:A3:EF:3D:80:CF:95:22:E2:CF:E1:A6:1A:FA:DD:2D Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE5394CAF6EDB79242473A201CAB4 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/mmG4pJmj7z2Az5Ui4s_hphr63S0.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205903 IP address blocks: 213.33.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e5:39:4c:af:6e:db:79:24:24:73:a2:01:ca:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a61b8a499a3ef3d80cf9522e2cfe1a61afadd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:cb:d0:08:3e:47:bf:b9:de:55:d4:1c:1d: 7c:e0:7b:8b:25:9a:76:3c:59:1f:13:b2:d5:96:d7: c5:f2:dd:7e:cc:13:44:f7:c1:25:fe:5f:bc:c7:be: 8c:3c:84:f4:21:ad:58:52:c4:c2:ce:3c:37:ea:9f: 7c:d9:e9:1c:dc:db:83:ff:e3:b1:eb:2f:92:77:7e: 5e:58:64:cd:10:a0:d0:57:a7:ba:08:33:b7:cf:1a: 75:bc:bf:62:53:8d:2c:01:e0:0c:2c:5a:b1:37:30: ce:05:03:b4:7c:3d:18:9a:0c:47:38:9f:53:5c:db: 29:f7:75:38:dc:3c:a0:32:f9:5e:c0:06:f8:17:e7: 03:e8:04:c6:3a:71:6a:9a:e5:b9:54:7d:78:93:1e: 27:2d:64:0d:6f:a8:b7:8f:8f:a0:4d:6a:ac:16:71: e3:68:73:39:3f:26:df:ef:0e:b3:e7:fa:e8:91:8a: 62:c1:14:5f:3f:36:4a:80:5a:42:58:df:d6:ad:ad: 23:17:68:22:19:95:73:bd:ee:78:13:46:4c:34:9a: 92:e8:7a:ad:57:ec:db:f5:fa:bb:be:eb:22:be:f0: 22:6f:c8:ef:4d:c5:14:03:59:1d:d8:21:0a:be:fa: 01:24:60:de:15:91:67:9a:00:74:ab:7a:2c:1c:e4: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:61:B8:A4:99:A3:EF:3D:80:CF:95:22:E2:CF:E1:A6:1A:FA:DD:2D X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/mmG4pJmj7z2Az5Ui4s_hphr63S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.49.0/24 Signature Algorithm: sha256WithRSAEncryption 51:f0:a0:34:d0:19:5c:31:61:75:6f:5c:c2:9e:67:00:1f:90: 20:9e:99:d0:f3:60:ed:fc:df:dc:82:87:bd:ae:81:53:45:db: 4a:49:6f:5e:7a:22:37:ad:7b:62:71:99:74:a3:e7:7c:cb:20: 09:e8:b8:d4:5f:44:e6:0e:4b:a6:15:fd:99:ad:53:05:4c:16: cf:3a:9e:8f:03:9a:ec:3d:67:4b:5d:b6:07:6d:f5:82:20:e5: cc:e1:86:8c:9f:ec:96:48:df:32:2d:b3:a0:dc:98:25:8c:94: b8:e0:98:6a:18:d4:f5:d9:28:48:0f:9c:46:2c:f6:78:fd:a2: d5:00:9c:80:8a:03:ec:ab:1b:f1:76:da:2f:ba:8b:c0:76:67: d3:5c:46:29:d5:a0:c0:5f:a3:82:83:c3:30:86:09:e6:7b:89: dd:f8:80:38:f7:13:3a:e1:9f:0c:ce:79:55:69:59:fc:87:95: 2c:57:70:dd:32:fc:1e:69:7b:8e:8f:16:ba:25:e2:9f:90:bd: 31:06:5d:1c:fa:95:2b:32:c7:36:72:5e:d0:da:03:88:69:52: 6f:16:d6:1f:2a:23:50:a9:2a:b0:f3:8e:12:58:aa:b6:59:b2: 71:fc:72:83:b4:c1:d9:cc:d4:fd:ae:da:95:df:0e:90:c3:11: 92:db:85:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+U5TK9u23kkJHOiAcq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTYxYjhhNDk5YTNlZjNkODBjZjk1MjJlMmNmZTFhNjFhZmFkZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgTL0Ag+R7+53lXUHB184HuLJZp2 PFkfE7LVltfF8t1+zBNE98El/l+8x76MPIT0Ia1YUsTCzjw36p982ekc3NuD/+Ox 6y+Sd35eWGTNEKDQV6e6CDO3zxp1vL9iU40sAeAMLFqxNzDOBQO0fD0YmgxHOJ9T XNsp93U43DygMvlewAb4F+cD6ATGOnFqmuW5VH14kx4nLWQNb6i3j4+gTWqsFnHj aHM5Pybf7w6z5/rokYpiwRRfPzZKgFpCWN/Wra0jF2giGZVzve54E0ZMNJqS6Hqt V+zb9fq7vusivvAib8jvTcUUA1kd2CEKvvoBJGDeFZFnmgB0q3osHORW+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJphuKSZo+89gM+VIuLP4aYa+t0tMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvbW1HNHBKbWo3ejJBejVVaTRzX2hwaHI2M1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SExMA0G CSqGSIb3DQEBCwUAA4IBAQBR8KA00BlcMWF1b1zCnmcAH5AgnpnQ82Dt/N/cgoe9 roFTRdtKSW9eeiI3rXticZl0o+d8yyAJ6LjUX0TmDkumFf2ZrVMFTBbPOp6PA5rs PWdLXbYHbfWCIOXM4YaMn+yWSN8yLbOg3JgljJS44JhqGNT12ShID5xGLPZ4/aLV AJyAigPsqxvxdtovuovAdmfTXEYp1aDAX6OCg8Mwhgnme4nd+IA49xM64Z8MznlV aVn8h5UsV3DdMvweaXuOjxa6JeKfkL0xBl0c+pUrMsc2cl7Q2gOIaVJvFtYfKiNQ qSqw844SWKq2WbJx/HKDtMHZzNT9rtqV3w6QwxGS24X/ -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:32 2026 by rpki-client