This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mjXOYZNBzzcn_0Du9ZiUjHBVKRQ.roa File: mjXOYZNBzzcn_0Du9ZiUjHBVKRQ.roa (raw, json) Hash identifier: BH/XleT2CpoB96eDBIfKbzHvezc8KOCZZurZ1xfteec= Subject key identifier: 9A:35:CE:61:93:41:CF:37:27:FF:40:EE:F5:98:94:8C:70:55:29:14 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D547ADECB77A1F3E1E07246DA921D Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mjXOYZNBzzcn_0Du9ZiUjHBVKRQ.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203458 IP address blocks: 91.188.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:54:7a:de:cb:77:a1:f3:e1:e0:72:46:da:92:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a35ce619341cf3727ff40eef598948c70552914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:3f:04:ab:64:e7:c9:6c:e1:68:b3:ee:49: cc:f4:d9:b2:5b:ea:97:2d:f2:28:70:10:d3:9b:e2: 88:a3:69:5f:c7:8d:22:ab:a7:67:2a:39:a4:88:07: 2c:9c:6c:76:01:7a:53:08:cf:6d:a8:b0:89:6b:2a: 34:8d:8e:b8:52:8c:36:70:7c:3e:8a:ca:c3:ad:74: 75:9a:e4:d8:80:18:46:4f:84:84:db:f9:49:d0:7f: 8a:81:b1:bb:c8:76:4e:bf:c3:13:de:0d:4d:53:b0: 9e:04:6b:05:75:d2:2a:41:0c:27:09:95:ec:87:46: 7b:66:d0:45:05:e3:40:49:4a:51:f0:6d:95:fb:4e: b7:66:f8:dc:4a:f3:15:f8:35:c7:19:cf:7f:89:82: 21:72:ee:a8:bb:1a:4d:27:2b:88:3a:f3:df:c7:17: a0:c2:0f:a0:87:fb:54:46:84:1f:95:12:9f:6c:39: 9c:de:6d:44:a2:41:a7:bd:29:b8:c2:be:97:29:fc: 70:fe:90:40:54:0c:b5:6f:a4:10:90:79:d9:35:31: 28:d0:c0:c3:55:64:5c:b4:83:6f:31:7e:82:64:99: 1d:c6:97:c7:20:07:50:dd:53:04:90:52:24:e3:19: 07:51:b5:d2:dd:cf:6f:2a:ba:d8:cc:06:8a:c7:f4: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:CE:61:93:41:CF:37:27:FF:40:EE:F5:98:94:8C:70:55:29:14 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mjXOYZNBzzcn_0Du9ZiUjHBVKRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.206.0/24 Signature Algorithm: sha256WithRSAEncryption 21:4a:2c:92:87:92:c6:4b:44:a9:27:83:fa:f7:3e:12:a1:69: c6:25:08:ac:08:fd:e8:6a:8c:f7:61:5a:3a:a9:89:57:a9:b4: b6:89:3c:81:31:3f:d8:a6:4c:10:26:ab:a3:c5:46:0f:18:75: b0:5b:6b:f0:70:f4:ed:45:56:ff:6c:43:65:c9:04:8e:b7:f7: eb:a6:ce:9e:ef:5d:05:e4:d7:11:3c:9e:8b:a8:9e:0c:9f:22: 0b:bb:25:f7:1d:d8:0a:5f:22:27:2c:50:e7:24:1b:f9:7e:b5: 7b:c0:31:0c:4c:1f:bd:ef:9f:97:5d:c1:98:62:58:47:bc:8c: ee:47:f6:e6:c8:ed:cf:81:02:d4:61:26:a5:df:f2:aa:2e:64: 4a:45:81:c9:b2:66:c4:d4:16:b3:d4:51:ef:08:17:74:ad:6b: 01:8f:c4:7b:2a:29:10:db:96:cb:dc:3b:e6:62:f3:48:f6:df: fa:64:1e:f8:cc:ac:cc:4e:a5:70:b9:0f:63:ff:e4:5e:0f:c3: b7:3e:6e:f6:37:47:16:5b:29:9e:ee:91:42:18:97:65:04:92: 24:75:a1:46:a0:32:11:c6:7d:a2:80:f7:56:13:b9:ac:4c:ef: 50:a5:4c:56:e2:b5:cc:de:76:f7:78:d8:d7:2f:50:7c:d0:b7: 5e:e7:09:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVR63st3ofPh4HJG2pIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM1Y2U2MTkzNDFjZjM3MjdmZjQwZWVmNTk4OTQ4YzcwNTUyOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNc/BKtk58ls4Wiz7knM9NmyW+qX LfIocBDTm+KIo2lfx40iq6dnKjmkiAcsnGx2AXpTCM9tqLCJayo0jY64Uow2cHw+ isrDrXR1muTYgBhGT4SE2/lJ0H+KgbG7yHZOv8MT3g1NU7CeBGsFddIqQQwnCZXs h0Z7ZtBFBeNASUpR8G2V+063ZvjcSvMV+DXHGc9/iYIhcu6ouxpNJyuIOvPfxxeg wg+gh/tURoQflRKfbDmc3m1EokGnvSm4wr6XKfxw/pBAVAy1b6QQkHnZNTEo0MDD VWRctINvMX6CZJkdxpfHIAdQ3VMEkFIk4xkHUbXS3c9vKrrYzAaKx/S6eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJo1zmGTQc83J/9A7vWYlIxwVSkUMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbWpYT1laTkJ6emNuXzBEdTlaaVVqSEJWS1JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7zOMA0G CSqGSIb3DQEBCwUAA4IBAQAhSiySh5LGS0SpJ4P69z4SoWnGJQisCP3oaoz3YVo6 qYlXqbS2iTyBMT/YpkwQJqujxUYPGHWwW2vwcPTtRVb/bENlyQSOt/frps6e710F 5NcRPJ6LqJ4MnyILuyX3HdgKXyInLFDnJBv5frV7wDEMTB+975+XXcGYYlhHvIzu R/bmyO3PgQLUYSal3/KqLmRKRYHJsmbE1Baz1FHvCBd0rWsBj8R7KikQ25bL3Dvm YvNI9t/6ZB74zKzMTqVwuQ9j/+ReD8O3Pm72N0cWWyme7pFCGJdlBJIkdaFGoDIR xn2igPdWE7msTO9QpUxW4rXM3nb3eNjXL1B80Lde5wmZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:26 2026 by rpki-client