This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa File: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (raw, json) Hash identifier: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk= Subject key identifier: 98:79:CB:23:30:E9:D0:AD:2E:67:7E:29:D4:9B:B9:0B:BC:95:F8:97 Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88 Certificate serial: 019B7E382051EA3D0B6BEF698BA495DB6128 Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6663 IP address blocks: 5.154.239.0/24 maxlen: 24 81.24.16.0/20 maxlen: 24 85.204.32.0/22 maxlen: 24 85.204.100.0/22 maxlen: 24 89.238.192.0/18 maxlen: 24 93.113.104.0/22 maxlen: 24 93.114.100.0/22 maxlen: 24 185.63.4.0/22 maxlen: 24 2a02:2720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:20:51:ea:3d:0b:6b:ef:69:8b:a4:95:db:61:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9879cb2330e9d0ad2e677e29d49bb90bbc95f897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:60:36:76:cf:fe:77:b1:93:67:33:19:69: 5f:7a:2f:82:04:37:24:db:c1:14:88:6c:88:14:99: cb:77:6c:7e:05:a2:0a:51:e5:85:4d:29:fd:fd:87: 06:cd:4b:82:0d:0b:85:88:02:18:2b:cd:73:5e:63: f4:16:3b:87:b5:48:5f:ac:c8:ad:cc:11:67:de:1a: 55:0f:39:a9:85:d2:91:54:e9:c3:ee:f0:43:71:11: d2:0d:89:36:2c:ca:31:03:a4:f3:ef:0b:f7:68:7c: 39:53:1a:b5:8d:b5:08:12:b9:d8:d1:ed:d0:b3:d4: d5:fa:30:c9:5d:33:81:da:b4:07:73:2b:68:49:fd: 6e:c2:fb:ee:0e:00:e0:90:63:80:70:00:aa:10:b5: 71:7f:55:be:95:02:2e:c5:3b:b2:10:ea:8e:e0:31: 75:55:11:cf:4b:4c:0d:d1:d7:79:a0:d5:25:da:54: e7:1c:0a:62:92:b2:8a:39:ca:49:cc:cf:db:20:60: 3b:97:7f:d7:ad:7d:90:2e:3c:90:b6:0b:6b:62:19: f4:0f:77:a6:83:6a:f7:58:c2:b6:14:42:c8:11:2b: 57:e8:0a:d9:66:50:0b:98:c7:39:c5:d2:81:db:fb: cf:43:6c:12:9f:ac:f3:e4:26:34:8b:fd:41:d5:bc: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:CB:23:30:E9:D0:AD:2E:67:7E:29:D4:9B:B9:0B:BC:95:F8:97 X509v3 Authority Key Identifier: keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.239.0/24 81.24.16.0/20 85.204.32.0/22 85.204.100.0/22 89.238.192.0/18 93.113.104.0/22 93.114.100.0/22 185.63.4.0/22 IPv6: 2a02:2720::/32 Signature Algorithm: sha256WithRSAEncryption 5a:ff:3d:67:42:95:fe:d5:90:7a:b9:78:34:f1:41:01:51:3f: 48:ce:31:3e:ef:2f:22:2d:f0:97:6e:8f:40:20:53:56:ec:30: 99:24:da:79:d5:7f:a6:aa:96:a3:9e:ee:70:1c:75:9d:86:28: 5c:eb:a4:99:07:7f:69:87:10:ea:d5:e7:c8:b9:31:b9:ec:94: 25:da:9d:00:9f:ce:12:4c:31:24:cc:df:41:c2:9f:af:65:76: 65:4f:7a:11:80:23:47:8c:b6:b6:ae:f0:c0:55:5b:51:b8:8c: be:07:73:8c:34:de:8e:2c:f8:fb:f2:e3:60:02:ea:93:48:a2: 7a:f8:1c:10:ba:01:2d:93:15:4b:b6:88:8d:0a:bd:c1:cc:1c: 06:4a:93:9d:e2:c9:a3:f9:95:c7:c6:3e:5c:fd:01:45:d9:8f: 28:a6:7a:b4:1c:11:66:4d:29:d3:bf:d0:02:98:bd:f7:59:00: 5e:a3:e4:36:86:cc:42:4a:d3:18:ea:36:ef:d3:80:8f:6d:29: 03:76:83:71:20:37:14:64:d3:08:3f:64:0b:fd:dc:bc:c9:76: 49:bf:99:88:fa:17:a0:c4:c6:02:de:4a:72:a6:4f:f3:b5:45: c6:73:84:c5:83:2d:ae:ee:84:2f:a7:c0:22:95:0b:d9:00:e8: e3:aa:b3:08 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt+OCBR6j0La+9pi6SV22EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx YWRmODgwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODc5Y2IyMzMwZTlkMGFkMmU2NzdlMjlkNDliYjkwYmJjOTVmODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN1gNnbP/nexk2czGWlfei+CBDck 28EUiGyIFJnLd2x+BaIKUeWFTSn9/YcGzUuCDQuFiAIYK81zXmP0FjuHtUhfrMit zBFn3hpVDzmphdKRVOnD7vBDcRHSDYk2LMoxA6Tz7wv3aHw5Uxq1jbUIErnY0e3Q s9TV+jDJXTOB2rQHcytoSf1uwvvuDgDgkGOAcACqELVxf1W+lQIuxTuyEOqO4DF1 VRHPS0wN0dd5oNUl2lTnHApikrKKOcpJzM/bIGA7l3/XrX2QLjyQtgtrYhn0D3em g2r3WMK2FELIEStX6ArZZlALmMc5xdKB2/vPQ2wSn6zz5CY0i/1B1byA8wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJh5yyMw6dCtLmd+KdSbuQu8lfiXMB8GA1UdIwQY MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt NTFjM2NjY2U3MmRmLzEvbUhuTEl6RHAwSzB1WjM0cDFKdTVDN3lWLUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQABZrvAwQE URgQAwQCVcwgAwQCVcxkAwQGWe7AAwQCXXFoAwQCXXJkAwQCuT8EMA0EAgACMAcD BQAqAicgMA0GCSqGSIb3DQEBCwUAA4IBAQBa/z1nQpX+1ZB6uXg08UEBUT9IzjE+ 7y8iLfCXbo9AIFNW7DCZJNp51X+mqpajnu5wHHWdhihc66SZB39phxDq1efIuTG5 7JQl2p0An84STDEkzN9Bwp+vZXZlT3oRgCNHjLa2rvDAVVtRuIy+B3OMNN6OLPj7 8uNgAuqTSKJ6+BwQugEtkxVLtoiNCr3BzBwGSpOd4smj+ZXHxj5c/QFF2Y8opnq0 HBFmTSnTv9ACmL33WQBeo+Q2hsxCStMY6jbv04CPbSkDdoNxIDcUZNMIP2QL/dy8 yXZJv5mI+hegxMYC3kpypk/ztUXGc4TFgy2u7oQvp8AilQvZAOjjqrMI -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:01 2026 by rpki-client