This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MXfEYwDEMNeJTrZldVxTqic7F_A.roa File: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (raw, json) Hash identifier: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM= Subject key identifier: 31:77:C4:63:00:C4:30:D7:89:4E:B6:65:75:5C:53:AA:27:3B:17:F0 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759006F6108BB25537362F07227DC42 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MXfEYwDEMNeJTrZldVxTqic7F_A.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 84.55.0.0/24 maxlen: 24 84.55.2.0/24 maxlen: 24 84.55.4.0/24 maxlen: 24 84.55.5.0/24 maxlen: 24 84.55.6.0/24 maxlen: 24 84.55.7.0/24 maxlen: 24 84.55.15.0/24 maxlen: 24 88.223.172.0/24 maxlen: 24 88.223.173.0/24 maxlen: 24 95.173.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:6f:61:08:bb:25:53:73:62:f0:72:27:dc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3177c46300c430d7894eb665755c53aa273b17f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:2b:95:26:c9:3c:66:e1:9b:e4:2e:5a:a5: 7c:d3:40:43:98:e7:f2:7f:7d:c7:04:71:0e:39:7a: 8c:67:ea:e2:f9:74:a6:b0:51:7a:8c:c6:eb:8d:f0: 63:53:eb:13:81:9f:c3:5e:fd:1c:3e:a2:38:ec:17: 7e:13:8b:32:6c:07:98:19:08:c1:9b:c8:a8:86:ea: 3b:84:20:46:0e:5b:3f:32:7e:b3:a4:f1:8b:c0:95: d8:0f:fb:82:a3:13:ff:c6:a1:6b:32:8e:86:ee:21: 75:2b:ea:45:4c:f6:6f:09:e7:36:9b:9c:df:e1:4e: be:fe:81:6c:fb:30:ed:12:a0:70:b8:26:f7:09:e9: 3b:c3:07:d3:15:7a:b0:84:ce:f8:ab:29:94:88:2b: a7:09:cd:b3:c4:a9:83:2d:dd:2f:1f:f0:10:99:b1: fd:44:76:c6:a3:31:6a:5a:68:b3:87:29:8a:67:90: d8:89:a9:a4:20:a7:ed:56:40:4d:2c:8d:d2:90:d0: af:f1:4b:27:63:6d:3e:24:8c:f0:fd:d6:1b:03:98: f0:20:83:bb:90:d1:85:11:36:df:d3:0e:1e:89:b9: b4:18:5b:75:36:de:98:a1:19:4e:c2:f0:af:03:59: 02:0d:6e:4c:67:81:f8:06:a0:62:78:5e:07:73:c2: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:C4:63:00:C4:30:D7:89:4E:B6:65:75:5C:53:AA:27:3B:17:F0 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MXfEYwDEMNeJTrZldVxTqic7F_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.0.0/24 84.55.2.0/24 84.55.4.0/22 84.55.15.0/24 88.223.172.0/23 95.173.52.0/24 Signature Algorithm: sha256WithRSAEncryption 54:fd:0d:cc:a9:76:23:dd:15:1b:fc:15:1a:99:fd:1f:1f:cb: 43:02:0d:33:aa:01:80:b3:cd:a8:a6:e4:fb:5e:09:ac:8f:46: 36:d8:6a:0a:7d:4f:64:b6:70:91:c2:24:07:cf:a2:69:08:7c: b8:05:3a:e2:8a:7e:b8:8a:76:68:18:5f:a8:04:1e:20:ec:14: 66:1f:13:7e:5c:52:1e:f1:e3:6a:97:db:4d:f1:7d:c1:a2:d0: 4a:44:6f:fe:bf:d9:64:6d:af:e5:f7:88:fb:17:76:d9:7b:cc: 71:21:96:c1:79:5f:9d:17:98:4d:95:d4:ae:cd:40:69:d1:45: c5:55:f5:be:a2:d3:00:c1:47:b1:dd:a4:4e:cd:6a:38:ff:08: 2e:5d:07:8e:7b:22:5b:a5:a3:99:d0:cf:37:ee:7e:9d:58:60: 3c:ee:7b:5f:fa:e5:0f:6b:65:de:f9:a5:51:8e:17:5c:20:4a: 74:28:8d:c8:eb:d7:2b:2b:73:c6:8f:c0:0e:76:34:86:4b:c5: ba:0e:38:cf:37:f9:79:dc:4d:9f:df:72:d7:5d:01:a0:cf:58: 11:82:30:ee:2a:2f:85:6b:6e:a3:ac:5b:b4:13:f0:e1:2b:71: 2e:81:54:1f:f0:d8:e0:2f:5c:02:28:10:88:cd:f4:a0:fa:81: bd:3d:16:aa -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3WQBvYQi7JVNzYvByJ9xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTc3YzQ2MzAwYzQzMGQ3ODk0ZWI2NjU3NTVjNTNhYTI3M2IxN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztIrlSbJPGbhm+QuWqV800BDmOfy f33HBHEOOXqMZ+ri+XSmsFF6jMbrjfBjU+sTgZ/DXv0cPqI47Bd+E4sybAeYGQjB m8iohuo7hCBGDls/Mn6zpPGLwJXYD/uCoxP/xqFrMo6G7iF1K+pFTPZvCec2m5zf 4U6+/oFs+zDtEqBwuCb3Cek7wwfTFXqwhM74qymUiCunCc2zxKmDLd0vH/AQmbH9 RHbGozFqWmizhymKZ5DYiamkIKftVkBNLI3SkNCv8UsnY20+JIzw/dYbA5jwIIO7 kNGFETbf0w4eibm0GFt1Nt6YoRlOwvCvA1kCDW5MZ4H4BqBieF4Hc8JW/wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDF3xGMAxDDXiU62ZXVcU6onOxfwMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvTVhmRVl3REVNTmVKVHJabGRWeFRxaWM3Rl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVDcAAwQA VDcCAwQCVDcEAwQAVDcPAwQBWN+sAwQAX600MA0GCSqGSIb3DQEBCwUAA4IBAQBU /Q3MqXYj3RUb/BUamf0fH8tDAg0zqgGAs82opuT7Xgmsj0Y22GoKfU9ktnCRwiQH z6JpCHy4BTriin64inZoGF+oBB4g7BRmHxN+XFIe8eNql9tN8X3BotBKRG/+v9lk ba/l94j7F3bZe8xxIZbBeV+dF5hNldSuzUBp0UXFVfW+otMAwUex3aROzWo4/wgu XQeOeyJbpaOZ0M837n6dWGA87ntf+uUPa2Xe+aVRjhdcIEp0KI3I69crK3PGj8AO djSGS8W6DjjPN/l53E2f33LXXQGgz1gRgjDuKi+Fa26jrFu0E/DhK3EugVQf8Njg L1wCKBCIzfSg+oG9PRaq -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:30 2026 by rpki-client