This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa File: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (raw, json) Hash identifier: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc= Subject key identifier: 98:D7:C9:6D:3F:CB:02:44:3B:A0:78:CF:CE:2E:60:39:49:89:7F:69 Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019B7B356D37DA3370E8D356BF8F4314D2E8 Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 45.155.125.0/24 maxlen: 24 194.36.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6d:37:da:33:70:e8:d3:56:bf:8f:43:14:d2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d7c96d3fcb02443ba078cfce2e603949897f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:6c:f2:55:ce:cb:00:84:6b:26:73:3b:c5: aa:91:b3:99:b0:5c:96:0f:50:5b:b1:9f:80:d3:3c: cc:4a:49:80:78:91:86:e3:1a:c8:ba:3a:35:a6:3b: 33:0c:96:61:29:84:98:fe:37:33:a8:0c:75:5c:13: e3:fb:9a:32:a3:65:0c:26:d8:f4:87:40:64:4f:bd: bc:44:7d:47:93:36:57:b4:dd:f2:16:3c:35:ea:28: 43:b3:27:73:5c:77:9d:01:93:13:ee:c4:a1:2a:92: c0:be:46:7d:7c:e0:ef:bc:cd:3a:66:cd:65:c2:99: f2:f5:ca:a0:2b:59:4f:48:2f:45:ad:d5:f4:36:32: ab:3f:bd:90:dd:04:9a:37:81:9a:26:80:22:a5:4e: 3d:3c:78:89:b4:e3:a6:bd:df:00:22:fd:e3:03:d7: ec:37:3b:a9:87:9f:7b:f8:89:3d:b6:5f:85:26:93: 35:80:99:e4:44:eb:63:a7:da:c3:31:3a:9c:b9:78: 2a:c9:45:e6:4e:aa:cc:f7:18:90:59:69:c5:2b:9c: c5:bb:65:09:7b:b9:38:71:d0:41:ba:33:fd:54:ef: eb:d4:3d:79:6c:32:5b:d7:90:83:8d:1f:e9:b4:a4: 69:cf:58:3a:fe:38:ab:89:2a:04:dd:00:f1:e6:34: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:C9:6D:3F:CB:02:44:3B:A0:78:CF:CE:2E:60:39:49:89:7F:69 X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.125.0/24 194.36.85.0/24 Signature Algorithm: sha256WithRSAEncryption a1:2a:ef:1a:55:0b:87:55:bc:bd:82:2a:75:b1:be:95:bd:7f: fa:8b:57:e9:ca:31:ea:80:03:9b:75:2c:d1:7d:99:5d:1f:54: 05:c6:1d:88:e7:0a:94:c5:b2:57:05:02:a2:78:84:6e:ab:c9: 4c:4c:9a:b0:0c:20:20:5a:7e:79:06:f1:15:37:f5:10:a1:a0: 3f:ef:7c:3d:74:5b:7d:f4:78:ca:20:f4:c2:6a:25:e7:a4:47: 54:36:30:1c:2a:a0:10:a3:8b:1f:3d:79:dd:d6:9a:de:0f:db: 4e:44:f8:62:27:85:10:d1:ce:77:9b:96:e2:32:fd:68:3f:46: 20:fe:49:fe:9d:cb:fc:3c:1b:95:65:5b:1a:0f:a5:33:a6:95: 36:e1:0a:a3:af:45:38:18:e3:74:23:2d:bb:75:77:c7:4e:04: a9:6f:a3:8b:92:4d:7e:37:b7:e3:4d:eb:09:1b:60:46:f9:79: 13:8a:04:63:55:8d:ab:e2:17:4f:01:44:75:bd:2b:97:d2:38: 25:99:ff:40:1d:5e:80:21:fe:3b:c1:c6:e1:2c:70:c0:88:42: dd:4e:76:af:54:34:87:32:4b:b9:47:f5:31:21:b6:80:38:df: ec:e8:4d:79:73:96:e9:e3:87:06:82:0d:b4:51:7a:09:be:e2: 62:b3:e3:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NW032jNw6NNWv49DFNLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQ3Yzk2ZDNmY2IwMjQ0M2JhMDc4Y2ZjZTJlNjAzOTQ5ODk3ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J1s8lXOywCEayZzO8WqkbOZsFyW D1BbsZ+A0zzMSkmAeJGG4xrIujo1pjszDJZhKYSY/jczqAx1XBPj+5oyo2UMJtj0 h0BkT728RH1HkzZXtN3yFjw16ihDsydzXHedAZMT7sShKpLAvkZ9fODvvM06Zs1l wpny9cqgK1lPSC9FrdX0NjKrP72Q3QSaN4GaJoAipU49PHiJtOOmvd8AIv3jA9fs Nzuph597+Ik9tl+FJpM1gJnkROtjp9rDMTqcuXgqyUXmTqrM9xiQWWnFK5zFu2UJ e7k4cdBBujP9VO/r1D15bDJb15CDjR/ptKRpz1g6/jiriSoE3QDx5jQW1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJjXyW0/ywJEO6B4z84uYDlJiX9pMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvbU5mSmJUX0xBa1E3b0hqUHppNWdPVW1KZjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZt9AwQA wiRVMA0GCSqGSIb3DQEBCwUAA4IBAQChKu8aVQuHVby9gip1sb6VvX/6i1fpyjHq gAObdSzRfZldH1QFxh2I5wqUxbJXBQKieIRuq8lMTJqwDCAgWn55BvEVN/UQoaA/ 73w9dFt99HjKIPTCaiXnpEdUNjAcKqAQo4sfPXnd1preD9tORPhiJ4UQ0c53m5bi Mv1oP0Yg/kn+ncv8PBuVZVsaD6UzppU24Qqjr0U4GON0Iy27dXfHTgSpb6OLkk1+ N7fjTesJG2BG+XkTigRjVY2r4hdPAUR1vSuX0jglmf9AHV6AIf47wcbhLHDAiELd TnavVDSHMku5R/UxIbaAON/s6E15c5bp44cGgg20UXoJvuJis+OY -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client