This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mTnpNXtSRSshm6IHF4xPDb9VAyE.roa File: mTnpNXtSRSshm6IHF4xPDb9VAyE.roa (raw, json) Hash identifier: mWRi8SVlY7LD0pXjbijK7E8xwH1QgR+28+JZDNM84HA= Subject key identifier: 99:39:E9:35:7B:52:45:2B:21:9B:A2:07:17:8C:4F:0D:BF:55:03:21 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C4EB9ED87CC272418C77B34B1FB71FAEC Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mTnpNXtSRSshm6IHF4xPDb9VAyE.roa Signing time: Wed 11 Feb 2026 22:02:13 +0000 ROA not before: Wed 11 Feb 2026 22:02:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 66.9.96.0/20 maxlen: 24 66.117.8.0/22 maxlen: 24 74.124.204.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 88.135.100.0/22 maxlen: 24 88.135.104.0/21 maxlen: 24 89.34.171.0/24 maxlen: 24 93.119.184.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 121.127.56.0/21 maxlen: 24 176.222.48.0/22 maxlen: 24 178.216.184.0/21 maxlen: 24 195.133.202.0/23 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4e:b9:ed:87:cc:27:24:18:c7:7b:34:b1:fb:71:fa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Feb 11 22:02:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9939e9357b52452b219ba207178c4f0dbf550321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:7b:e5:bd:96:16:84:33:63:48:3a:0c:e8: 0b:cd:fb:e9:b1:ed:14:24:c7:6f:dd:5f:20:e0:ee: ba:75:26:01:12:fc:97:a3:70:d8:4f:bd:d5:0c:fd: ee:05:c5:88:2d:cd:5e:e8:c6:fa:a5:ef:00:4c:46: 93:47:74:1c:9c:9e:0b:a7:08:72:65:67:f0:e8:73: 0e:4b:c4:f5:01:16:82:37:8c:8d:b3:d3:cd:22:d2: 9b:a7:10:9d:fd:9a:fd:39:5e:a0:e2:82:23:00:a1: cc:8a:2c:9e:10:7f:25:77:38:9a:c0:17:ac:04:f5: 64:05:a2:f1:cc:ca:95:39:7b:76:9e:78:e2:7c:92: ae:21:c2:ec:e0:f6:71:a7:de:86:86:9e:2d:cf:47: e4:16:5f:e6:ca:a6:72:4f:80:09:bc:60:b1:13:2c: bc:d8:c3:41:fc:7a:e8:f0:2a:ef:fb:be:45:87:08: f7:5b:5e:60:42:6a:8c:99:bf:fd:e9:ae:27:23:e0: 31:83:4d:b4:bd:cf:d3:b6:b7:51:05:dc:2f:ae:79: f3:75:83:5d:96:4b:30:aa:7f:17:76:25:b1:14:41: 8e:28:99:4b:47:29:4b:fe:38:7b:79:15:6b:6d:be: c5:06:52:20:be:d8:e7:47:0e:4f:37:dd:91:e9:bb: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:E9:35:7B:52:45:2B:21:9B:A2:07:17:8C:4F:0D:BF:55:03:21 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mTnpNXtSRSshm6IHF4xPDb9VAyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.9.96.0/20 66.117.8.0/22 74.124.204.0/22 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 88.135.100.0-88.135.111.255 89.34.171.0/24 93.119.184.0/21 94.26.110.0/23 94.101.103.0/24 121.127.56.0/21 176.222.48.0/22 178.216.184.0/21 195.133.202.0/23 198.145.112.0/22 205.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:f2:8e:fb:ee:16:24:d2:e7:85:a3:a2:f5:ea:c5:e3:71:e6: 17:41:35:4b:51:f4:c9:1a:a0:2a:9f:ad:28:2e:88:18:f2:01: 43:d1:84:64:26:b8:47:f6:96:95:c7:19:20:d5:24:c4:0c:c3: d9:59:27:ab:51:99:03:0c:99:97:9b:f4:cf:34:5a:a1:6e:20: 56:c7:c7:4d:ce:ba:2e:36:f5:c4:89:de:c8:49:4c:04:e4:81: 46:ce:eb:c3:b5:49:b8:62:97:e4:1e:8b:92:0f:7c:ae:73:de: ab:de:7a:e5:98:95:9d:14:8a:29:88:92:61:c2:d2:c8:e2:80: 2f:5c:6b:4e:45:d5:37:b4:3d:93:66:96:0a:09:d1:9b:63:c5: b0:dd:92:cf:93:4f:e5:83:12:0f:ef:4c:07:f3:f3:62:a0:02: 64:29:ba:75:d5:d1:21:f2:d2:0a:10:01:f1:77:54:2b:46:89: d4:08:c0:6a:50:b3:e2:a0:03:b3:2f:46:f6:5c:d4:60:6f:71: 75:4c:5d:f0:d0:de:c6:b3:58:59:89:9b:35:e8:e3:c1:97:f7: 39:3c:8d:5e:e7:6b:17:4d:1d:6a:80:ba:8a:f6:55:2a:69:d2: e2:32:7f:24:4c:30:0b:fa:3f:1d:7b:9b:c8:6f:2d:10:b2:26: 60:e9:02:1f -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZxOue2HzCckGMd7NLH7cfrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMjExMjIwMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTM5ZTkzNTdiNTI0NTJiMjE5YmEyMDcxNzhjNGYwZGJmNTUwMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppF75b2WFoQzY0g6DOgLzfvpse0U JMdv3V8g4O66dSYBEvyXo3DYT73VDP3uBcWILc1e6Mb6pe8ATEaTR3QcnJ4Lpwhy ZWfw6HMOS8T1ARaCN4yNs9PNItKbpxCd/Zr9OV6g4oIjAKHMiiyeEH8ldziawBes BPVkBaLxzMqVOXt2nnjifJKuIcLs4PZxp96Ghp4tz0fkFl/myqZyT4AJvGCxEyy8 2MNB/Hro8Crv+75Fhwj3W15gQmqMmb/96a4nI+Axg020vc/TtrdRBdwvrnnzdYNd lkswqn8XdiWxFEGOKJlLRylL/jh7eRVrbb7FBlIgvtjnRw5PN92R6bvr1QIDAQAB o4ICezCCAncwHQYDVR0OBBYEFJk56TV7UkUrIZuiBxeMTw2/VQMhMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvbVRucE5YdFNSU3NobTZJSEY0eFBEYjlWQXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBARCCWAD BAJCdQgDBAJKfMwwDAMEBk3fwAMEAU3fyAMEAU+LQAMEA1OOyDAMAwQCWIdkAwQE WIdgAwQAWSKrAwQDXXe4AwQBXhpuAwQAXmVnAwQDeX84AwQCsN4wAwQDsti4AwQB w4XKAwQCxpFwAwQCzYb0MA0GCSqGSIb3DQEBCwUAA4IBAQBa8o777hYk0ueFo6L1 6sXjceYXQTVLUfTJGqAqn60oLogY8gFD0YRkJrhH9paVxxkg1STEDMPZWSerUZkD DJmXm/TPNFqhbiBWx8dNzrouNvXEid7ISUwE5IFGzuvDtUm4YpfkHouSD3yuc96r 3nrlmJWdFIopiJJhwtLI4oAvXGtORdU3tD2TZpYKCdGbY8Ww3ZLPk0/lgxIP70wH 8/NioAJkKbp11dEh8tIKEAHxd1QrRonUCMBqULPioAOzL0b2XNRgb3F1TF3w0N7G s1hZiZs16OPBl/c5PI1e52sXTR1qgLqK9lUqadLiMn8kTDAL+j8de5vIby0QsiZg 6QIf -----END CERTIFICATE-----Generated at Thu Feb 12 17:23:09 2026 by rpki-client