This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/mJI9sTFN4UGhJtiQDPusSm1Vr68.roa File: mJI9sTFN4UGhJtiQDPusSm1Vr68.roa (raw, json) Hash identifier: wLOIgdPRaxsc7dyazG8dcE1RzCgvcxysuqvRPBkd3XQ= Subject key identifier: 98:92:3D:B1:31:4D:E1:41:A1:26:D8:90:0C:FB:AC:4A:6D:55:AF:AF Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Certificate serial: 019B7910F85F981F724310AAA232B5B59AB6 Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/mJI9sTFN4UGhJtiQDPusSm1Vr68.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43608 IP address blocks: 62.77.132.0/22 maxlen: 24 62.77.132.0/24 maxlen: 24 78.24.104.0/21 maxlen: 21 78.24.108.0/24 maxlen: 24 185.61.56.0/22 maxlen: 24 185.61.57.0/24 maxlen: 24 2a00:9500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f8:5f:98:1f:72:43:10:aa:a2:32:b5:b5:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98923db1314de141a126d8900cfbac4a6d55afaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:40:30:04:dc:ce:1b:0e:1c:e8:91:7d:a3: f4:5e:11:46:5e:7f:f3:b3:0a:d0:ae:99:6a:a4:36: dd:cc:30:3d:60:8f:36:2c:50:e4:04:76:2c:c8:76: bd:f2:e4:6d:b1:46:ea:f4:99:d7:6f:39:9d:46:69: e4:55:64:61:a1:b0:45:ab:e5:76:45:50:c9:57:e5: 5c:87:83:ec:36:96:b8:0b:64:ca:34:7d:b2:d0:3a: eb:af:f6:cc:fe:60:0d:6d:75:5e:43:b8:40:1a:9b: 39:ee:c2:7d:94:3f:ef:b9:d0:51:55:0e:de:40:2d: 46:8d:6b:ef:c5:47:b8:89:44:42:bd:e2:0e:37:d0: bc:0c:cc:a2:a0:1f:df:5c:14:cf:75:91:0e:4c:8a: 31:8b:27:c2:45:b8:fb:97:e3:24:44:b3:61:42:45: cf:c1:c0:05:04:c4:6c:df:fa:6f:de:8b:57:3c:eb: 49:16:32:6d:c5:fc:41:22:82:25:30:7a:9a:42:1d: ec:37:df:90:aa:94:72:3e:dc:a0:0a:55:d7:8a:ef: 34:1c:79:73:e4:7f:36:e3:34:35:7a:1e:25:55:d2: 2c:bc:ab:14:23:f3:e8:31:00:c8:89:7f:84:74:6f: 2a:10:44:54:bc:43:bb:29:98:c2:d3:6b:32:76:b9: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:92:3D:B1:31:4D:E1:41:A1:26:D8:90:0C:FB:AC:4A:6D:55:AF:AF X509v3 Authority Key Identifier: keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/mJI9sTFN4UGhJtiQDPusSm1Vr68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.132.0/22 78.24.104.0/21 185.61.56.0/22 IPv6: 2a00:9500::/32 Signature Algorithm: sha256WithRSAEncryption 08:4e:8e:2b:76:4b:76:e9:fa:46:c6:01:7e:03:ad:1c:dd:64: cf:34:ee:5c:07:1d:b4:30:d6:f0:77:d5:8a:8a:9a:93:eb:d8: 90:12:b7:39:59:e1:72:57:2d:f5:d9:fe:09:a1:fd:fe:20:bf: 58:f0:99:ba:0d:0a:d7:06:32:20:20:61:4f:11:0a:db:ac:05: 0f:24:7c:7f:a6:2f:9b:6f:c9:41:c4:98:95:b2:0d:48:b2:fb: c8:d5:22:3c:f0:79:e5:fa:93:14:4e:4c:bf:a7:10:03:4f:cb: 41:98:11:a9:4d:a9:cc:46:bb:3f:d1:6b:e7:af:cc:69:0c:fb: df:2f:ec:35:28:e8:5b:d2:7e:07:5a:cf:82:b4:90:86:c8:e1: 40:2c:65:61:24:5d:0d:42:60:04:ad:50:c2:61:b6:da:90:aa: 38:52:43:6e:90:8d:e9:d8:92:52:dd:89:95:ec:10:0b:e5:75: 4f:eb:72:52:ae:38:25:d8:3f:f8:eb:42:d7:3a:f5:b8:47:ee: 97:0e:e9:1f:e9:ac:99:5f:74:14:e8:cb:be:3e:9d:b6:c9:8f: 57:1f:ab:ae:e2:ff:7c:cb:0a:53:4f:97:25:da:43:ad:3f:72: 67:0d:58:b2:7a:c2:f4:94:14:35:0b:4c:ee:50:62:52:bd:ca: 99:3a:40:bf -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EPhfmB9yQxCqojK1tZq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl YjliOGQwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODkyM2RiMTMxNGRlMTQxYTEyNmQ4OTAwY2ZiYWM0YTZkNTVhZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05lAMATczhsOHOiRfaP0XhFGXn/z swrQrplqpDbdzDA9YI82LFDkBHYsyHa98uRtsUbq9JnXbzmdRmnkVWRhobBFq+V2 RVDJV+Vch4PsNpa4C2TKNH2y0Drrr/bM/mANbXVeQ7hAGps57sJ9lD/vudBRVQ7e QC1GjWvvxUe4iURCveION9C8DMyioB/fXBTPdZEOTIoxiyfCRbj7l+MkRLNhQkXP wcAFBMRs3/pv3otXPOtJFjJtxfxBIoIlMHqaQh3sN9+QqpRyPtygClXXiu80HHlz 5H824zQ1eh4lVdIsvKsUI/PoMQDIiX+EdG8qEERUvEO7KZjC02sydrn0zwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJiSPbExTeFBoSbYkAz7rEptVa+vMB8GA1UdIwQY MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt OWI5Y2Q4OTY1OWUwLzEvbUpJOXNURk40VUdoSnRpUURQdXNTbTFWcjY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCPk2EAwQD ThhoAwQCuT04MA0EAgACMAcDBQAqAJUAMA0GCSqGSIb3DQEBCwUAA4IBAQAITo4r dkt26fpGxgF+A60c3WTPNO5cBx20MNbwd9WKipqT69iQErc5WeFyVy312f4Jof3+ IL9Y8Jm6DQrXBjIgIGFPEQrbrAUPJHx/pi+bb8lBxJiVsg1IsvvI1SI88Hnl+pMU Tky/pxADT8tBmBGpTanMRrs/0Wvnr8xpDPvfL+w1KOhb0n4HWs+CtJCGyOFALGVh JF0NQmAErVDCYbbakKo4UkNukI3p2JJS3YmV7BAL5XVP63JSrjgl2D/460LXOvW4 R+6XDukf6ayZX3QU6Mu+Pp22yY9XH6uu4v98ywpTT5cl2kOtP3JnDViyesL0lBQ1 C0zuUGJSvcqZOkC/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:03 2026 by rpki-client