This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/mVvHewUtT9I-qpdCqcI3X4EnSSk.roa File: mVvHewUtT9I-qpdCqcI3X4EnSSk.roa (raw, json) Hash identifier: xatBOvMf3uPihDeymrDUB8H89u9KOADx6FDvJr+qC+E= Subject key identifier: 99:5B:C7:7B:05:2D:4F:D2:3E:AA:97:42:A9:C2:37:5F:81:27:49:29 Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200 Certificate serial: 019B7B35D1D9BA7B2B0B39D036B7637F5C15 Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/mVvHewUtT9I-qpdCqcI3X4EnSSk.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211410 IP address blocks: 5.159.4.0/22 maxlen: 24 162.213.160.0/24 maxlen: 24 185.21.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d1:d9:ba:7b:2b:0b:39:d0:36:b7:63:7f:5c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200 Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=995bc77b052d4fd23eaa9742a9c2375f81274929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:2e:12:c6:b8:27:ad:df:e8:82:5e:7d:33: ba:b0:a2:56:ba:a8:66:29:45:82:da:3d:10:23:1a: 23:ec:d1:c4:26:46:5b:42:23:43:4c:dc:78:c5:e7: 3c:03:5e:19:3f:7e:be:77:1a:99:db:53:1d:8c:d5: 83:cd:bf:a8:ea:82:ee:9c:6e:b4:b2:69:65:df:42: 48:14:e1:c1:e4:6d:9f:b8:5d:17:b6:b4:8d:b0:97: 7f:8a:6b:99:79:6f:54:10:f1:0f:5e:5d:d9:1b:6f: a4:4b:1e:40:a2:4b:75:48:49:4f:67:2c:1e:6b:ed: d0:d3:cb:bb:a0:1f:96:21:47:19:3b:be:05:86:cf: 8e:46:03:96:c5:54:bb:f1:4c:80:d8:58:8f:df:1b: bd:30:da:0f:05:0a:30:79:46:fc:21:a9:9c:b5:f7: 82:8e:7b:d4:ee:72:92:e0:cc:26:f8:a4:02:a7:e5: 97:81:9f:38:2a:e8:97:c4:33:a0:22:10:80:40:2c: 21:48:1c:2c:2a:0a:da:0f:30:43:3b:1b:83:c2:94: 1f:70:43:c9:2c:15:ba:6a:70:d3:55:77:fd:e7:ff: a0:1d:1d:03:40:7f:dd:89:0c:f8:3f:00:81:be:d5: 72:f4:85:2f:07:5d:65:fa:c4:42:c1:63:40:a0:55: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:C7:7B:05:2D:4F:D2:3E:AA:97:42:A9:C2:37:5F:81:27:49:29 X509v3 Authority Key Identifier: keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/mVvHewUtT9I-qpdCqcI3X4EnSSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.4.0/22 162.213.160.0/24 185.21.96.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c5:41:41:28:fe:10:b6:c4:91:75:0a:78:9a:e2:4f:1e:bd: 2e:a7:17:9e:bb:c6:51:c6:fd:70:e4:36:0c:c0:06:12:64:79: dc:e0:3b:ac:6e:6c:21:e4:23:46:45:fb:8b:65:1d:9b:bc:43: e8:7b:79:64:23:5d:13:26:97:94:d9:4f:90:11:c0:41:01:3e: ae:bd:79:f1:16:9b:dd:5f:04:b2:32:e1:d9:55:7d:44:74:c7: ab:80:6e:f3:b9:01:6a:12:16:cf:20:13:10:7a:7c:07:90:63: fa:de:36:47:3b:44:81:78:2e:1f:83:bf:cb:a5:40:f0:90:0d: 02:db:d6:b6:2e:9a:bf:c1:f2:c1:3f:59:63:fc:ca:05:bc:23: 24:50:e4:da:33:06:97:9c:6d:a0:46:5f:18:2f:9b:e2:67:0f: 4d:9a:76:a6:40:bc:73:3b:53:ee:2c:d0:e6:d2:ee:90:df:5e: 1c:e6:21:49:f2:a6:a9:ac:30:8d:91:82:40:c0:2e:3e:b4:2d: 99:70:64:aa:56:6e:fb:5f:e6:72:78:fc:96:12:0b:3e:4c:be: 0a:fe:27:3b:b9:76:54:74:48:f2:66:9f:6e:ae:59:94:40:cb: b1:75:56:89:6e:4e:7a:8f:f8:cb:7c:21:37:ac:07:47:be:9a: 65:71:fa:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NdHZunsrCznQNrdjf1wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWIxOGUzMjk2ZDc5NWQzYTljOTU5YmUyNWM3MGFhYWIz NjUyMDAwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTViYzc3YjA1MmQ0ZmQyM2VhYTk3NDJhOWMyMzc1ZjgxMjc0OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSsuEsa4J63f6IJefTO6sKJWuqhm KUWC2j0QIxoj7NHEJkZbQiNDTNx4xec8A14ZP36+dxqZ21MdjNWDzb+o6oLunG60 smll30JIFOHB5G2fuF0XtrSNsJd/imuZeW9UEPEPXl3ZG2+kSx5Aokt1SElPZywe a+3Q08u7oB+WIUcZO74Fhs+ORgOWxVS78UyA2FiP3xu9MNoPBQoweUb8IamctfeC jnvU7nKS4Mwm+KQCp+WXgZ84KuiXxDOgIhCAQCwhSBwsKgraDzBDOxuDwpQfcEPJ LBW6anDTVXf95/+gHR0DQH/diQz4PwCBvtVy9IUvB11l+sRCwWNAoFUkwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJlbx3sFLU/SPqqXQqnCN1+BJ0kpMB8GA1UdIwQY MBaAFESbGOMpbXldOpyVm+JccKqrNlIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQt NjVhODk5YTYwMzY2LzEvbVZ2SGV3VXRUOUktcXBkQ3FjSTNYNEVuU1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQtNjVhODk5YTYwMzY2 LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBZ8EAwQA otWgAwQBuRVgMA0GCSqGSIb3DQEBCwUAA4IBAQCsxUFBKP4QtsSRdQp4muJPHr0u pxeeu8ZRxv1w5DYMwAYSZHnc4Dusbmwh5CNGRfuLZR2bvEPoe3lkI10TJpeU2U+Q EcBBAT6uvXnxFpvdXwSyMuHZVX1EdMergG7zuQFqEhbPIBMQenwHkGP63jZHO0SB eC4fg7/LpUDwkA0C29a2Lpq/wfLBP1lj/MoFvCMkUOTaMwaXnG2gRl8YL5viZw9N mnamQLxzO1PuLNDm0u6Q314c5iFJ8qaprDCNkYJAwC4+tC2ZcGSqVm77X+ZyePyW Egs+TL4K/ic7uXZUdEjyZp9urlmUQMuxdVaJbk56j/jLfCE3rAdHvpplcfqM -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:08 2026 by rpki-client