This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/mrgQvPT5f81LqdW8fBMupeJKuJU.roa File: mrgQvPT5f81LqdW8fBMupeJKuJU.roa (raw, json) Hash identifier: xHnIDJmAiiC8Js7rQ2nzM4B4BoLoJOSKWWF32wLisBM= Subject key identifier: 9A:B8:10:BC:F4:F9:7F:CD:4B:A9:D5:BC:7C:13:2E:A5:E2:4A:B8:95 Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e Certificate serial: 019B79ED60A3A07CA859D6E5A506DAAE1A4D Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/mrgQvPT5f81LqdW8fBMupeJKuJU.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197701 IP address blocks: 192.166.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:60:a3:a0:7c:a8:59:d6:e5:a5:06:da:ae:1a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ab810bcf4f97fcd4ba9d5bc7c132ea5e24ab895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:7d:87:18:6a:75:7e:d2:d8:74:36:41:49: 2d:2a:f0:c4:3f:79:3b:a6:51:dc:37:8b:34:3a:6a: 7e:00:a1:5e:da:e1:89:e4:d1:99:e2:e2:f5:58:cb: 25:d8:64:5b:0e:ac:8a:f0:3b:40:bc:68:1e:b3:22: f3:15:75:e7:ea:4b:a7:50:68:1d:f2:73:d2:46:f4: bf:e5:2e:02:ef:00:72:cf:79:b0:ff:b4:d7:e4:a0: 38:91:0e:4d:1a:cc:64:38:e7:a3:f5:36:e1:89:08: 0e:7e:a6:23:c8:1e:dc:cc:f4:dc:00:b1:a1:c2:8c: 1d:34:ef:95:1b:46:b6:ce:eb:ba:fc:b6:e3:47:a1: 25:5d:7d:62:bb:74:e3:bf:8a:14:65:85:b4:7b:f0: 7e:5f:5e:19:d7:8a:ee:bf:ce:f2:d1:70:fa:8e:4f: a4:75:20:ce:44:e2:b1:25:3c:4a:db:32:0a:a9:21: d4:5c:70:8a:f4:8f:d4:2b:90:c7:c0:f2:dd:b1:7d: f3:4d:50:18:b3:8d:4d:8e:d6:cd:43:69:1b:af:53: 47:2a:b4:57:e8:a8:f1:10:2f:e1:6a:76:01:64:9a: 95:8f:ad:f3:9f:05:b5:e8:59:c2:7a:0f:33:91:03: a7:7c:73:fa:62:5b:27:e5:ce:cd:c0:c7:6b:e5:55: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B8:10:BC:F4:F9:7F:CD:4B:A9:D5:BC:7C:13:2E:A5:E2:4A:B8:95 X509v3 Authority Key Identifier: keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/mrgQvPT5f81LqdW8fBMupeJKuJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.255.0/24 Signature Algorithm: sha256WithRSAEncryption e8:1b:33:75:41:07:f6:d9:66:34:01:37:0c:41:f2:06:ec:84: 12:13:e6:d4:ad:fe:22:64:87:27:24:aa:b8:3b:a9:26:68:64: bb:48:5c:16:58:43:50:2e:64:97:d9:67:2d:b9:5a:96:95:2f: 28:d4:f3:61:af:3e:93:d1:4a:59:aa:e7:1d:d6:9b:cd:fa:9b: 1e:c2:67:61:19:48:7a:92:5b:2f:7a:9c:b9:36:ff:62:fb:dd: 85:7f:e1:77:54:96:e7:41:2b:44:06:dd:c1:6f:62:d2:b1:f9: 72:19:f0:e8:5a:39:f7:6f:f0:63:df:06:a9:ec:36:a8:45:9a: fe:ce:69:fe:04:9f:98:5c:ff:5c:a7:4b:60:48:ba:55:c6:c8: 95:5e:09:e3:61:eb:db:b2:10:e5:90:bd:c7:bc:3a:08:4b:15: ba:85:5c:6d:b3:34:78:0b:b0:53:44:62:95:7a:44:c6:7f:b2: fa:ce:0d:ae:0a:76:9c:4c:42:1c:bd:28:4e:23:a5:28:ff:31: c5:6d:cf:f3:6d:9e:c0:f9:50:3a:c6:05:84:7e:c4:c5:1e:36: 97:c2:fe:47:29:da:14:ff:fe:4a:33:20:30:7f:c1:6a:e1:46: e0:4e:d8:60:f9:45:16:4d:97:0f:13:c9:25:4a:e0:c3:d4:d8: e4:56:90:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WCjoHyoWdblpQbarhpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTY5MDg1ZGJmYWVlNWEyYjExZjVjYzg3ZjU5ZDc0MTg3 OGJkMWUwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWI4MTBiY2Y0Zjk3ZmNkNGJhOWQ1YmM3YzEzMmVhNWUyNGFiODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j59hxhqdX7S2HQ2QUktKvDEP3k7 plHcN4s0Omp+AKFe2uGJ5NGZ4uL1WMsl2GRbDqyK8DtAvGgesyLzFXXn6kunUGgd 8nPSRvS/5S4C7wByz3mw/7TX5KA4kQ5NGsxkOOej9TbhiQgOfqYjyB7czPTcALGh wowdNO+VG0a2zuu6/LbjR6ElXX1iu3Tjv4oUZYW0e/B+X14Z14ruv87y0XD6jk+k dSDOROKxJTxK2zIKqSHUXHCK9I/UK5DHwPLdsX3zTVAYs41NjtbNQ2kbr1NHKrRX 6KjxEC/hanYBZJqVj63znwW16FnCeg8zkQOnfHP6Ylsn5c7NwMdr5VXMdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq4ELz0+X/NS6nVvHwTLqXiSriVMB8GA1UdIwQY MBaAFAGWkIXb+u5aKxH1zIf1nXQYeL0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzIt NjY3ZDk3NGY4YjE0LzEvbXJnUXZQVDVmODFMcWRXOGZCTXVwZUpLdUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzItNjY3ZDk3NGY4YjE0 LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKb/MA0G CSqGSIb3DQEBCwUAA4IBAQDoGzN1QQf22WY0ATcMQfIG7IQSE+bUrf4iZIcnJKq4 O6kmaGS7SFwWWENQLmSX2WctuVqWlS8o1PNhrz6T0UpZqucd1pvN+psewmdhGUh6 klsvepy5Nv9i+92Ff+F3VJbnQStEBt3Bb2LSsflyGfDoWjn3b/Bj3wap7DaoRZr+ zmn+BJ+YXP9cp0tgSLpVxsiVXgnjYevbshDlkL3HvDoISxW6hVxtszR4C7BTRGKV ekTGf7L6zg2uCnacTEIcvShOI6Uo/zHFbc/zbZ7A+VA6xgWEfsTFHjaXwv5HKdoU //5KMyAwf8Fq4UbgTthg+UUWTZcPE8klSuDD1NjkVpCY -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:56 2026 by rpki-client