This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa File: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (raw, json) Hash identifier: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA= Subject key identifier: 99:DC:0C:C4:1D:A2:E0:9A:86:B7:FD:AE:FB:7F:D2:84:2B:52:AE:A6 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797ECA595172EC63A36B5EA1C75BA9A3 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 14.102.8.0/24 maxlen: 24 91.200.255.0/24 maxlen: 24 110.172.188.0/24 maxlen: 24 114.69.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ca:59:51:72:ec:63:a3:6b:5e:a1:c7:5b:a9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99dc0cc41da2e09a86b7fdaefb7fd2842b52aea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:21:fc:0e:51:60:e1:05:1f:62:bf:04:be: 63:1d:ed:86:7d:62:3b:c1:fd:d3:b8:0b:74:c4:6d: 84:ec:4c:12:33:3f:08:d3:92:a4:4c:3e:f0:bd:bc: 7c:1c:6f:60:54:8c:d0:74:73:60:cf:6c:f6:51:61: a8:47:fc:fe:1a:20:b9:75:32:42:63:99:36:0f:1e: 19:ce:a6:f1:5b:9f:25:43:b7:2d:3d:27:7e:8b:4f: 7f:a0:4e:50:9b:99:83:97:75:52:ab:78:6e:62:d5: 56:ba:b1:5e:50:80:43:d6:87:e6:52:7d:f0:ef:0d: 7a:0e:cb:8a:a8:87:03:80:e5:c1:af:b6:2d:85:45: 32:01:7e:60:ea:e1:20:d0:cd:24:30:4c:c0:d0:48: 99:05:b3:2f:ba:81:7d:86:c2:9b:66:22:1d:d6:0c: cd:19:cf:b9:76:32:61:7d:78:fe:c7:7e:66:60:b1: 83:a0:27:58:d5:51:83:a6:ef:35:7e:63:83:85:8d: 2e:8d:46:a3:d8:c9:d3:56:81:97:c8:de:06:d3:3f: b5:ef:68:91:30:46:37:63:2f:0d:fe:e4:02:82:30: d8:66:70:b7:84:52:ef:f9:c6:e9:a8:ef:0c:df:a0: 24:67:fb:ba:28:ae:d2:7b:79:2d:0f:ee:13:53:b2: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DC:0C:C4:1D:A2:E0:9A:86:B7:FD:AE:FB:7F:D2:84:2B:52:AE:A6 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.8.0/24 91.200.255.0/24 110.172.188.0/24 114.69.246.0/24 Signature Algorithm: sha256WithRSAEncryption 54:6a:bb:9d:60:82:da:17:49:fd:bf:79:34:f7:15:2b:19:ea: 03:3e:67:c4:76:d4:3b:c7:c7:a8:c3:cf:da:94:8d:4d:d0:0f: 3c:6a:14:a6:77:0d:b7:9c:0f:4b:e7:39:2d:43:c3:24:5f:53: 83:20:fc:3f:1d:41:d1:9d:ad:c2:90:e5:87:8a:3e:cb:88:67: b8:e7:bd:05:2b:d4:f7:44:4b:30:d3:73:35:57:e7:0a:29:f7: 4c:af:ce:d2:9b:00:c9:80:d3:dc:93:cf:57:7c:9a:8b:46:ff: d8:13:c2:ca:f0:73:11:7b:94:92:ed:8b:98:3d:66:d7:e9:d5: 6f:dd:b4:6a:68:f6:ae:ce:36:7f:5e:a4:c3:5d:36:fb:3c:44: 1a:85:9f:f6:c7:0f:1d:a6:e1:f5:9b:1e:e6:63:68:66:9e:5f: c2:05:24:be:cb:0f:e9:32:15:ac:e3:a6:36:bd:e5:53:80:ba: f5:66:5f:6f:65:de:c6:cb:52:9d:f2:a7:10:4c:d1:65:74:1b: 76:12:32:b3:0d:9c:6e:7a:89:05:aa:66:32:5e:16:ea:c4:3d: fa:53:c3:79:3f:81:53:c6:e4:ae:d5:74:e7:d8:ff:2d:8b:b2: 42:73:d3:4f:dd:a1:bc:62:28:96:0c:1b:02:23:e9:00:04:62: 53:d3:91:9f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fspZUXLsY6NrXqHHW6mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRjMGNjNDFkYTJlMDlhODZiN2ZkYWVmYjdmZDI4NDJiNTJhZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzEh/A5RYOEFH2K/BL5jHe2GfWI7 wf3TuAt0xG2E7EwSMz8I05KkTD7wvbx8HG9gVIzQdHNgz2z2UWGoR/z+GiC5dTJC Y5k2Dx4ZzqbxW58lQ7ctPSd+i09/oE5Qm5mDl3VSq3huYtVWurFeUIBD1ofmUn3w 7w16DsuKqIcDgOXBr7YthUUyAX5g6uEg0M0kMEzA0EiZBbMvuoF9hsKbZiId1gzN Gc+5djJhfXj+x35mYLGDoCdY1VGDpu81fmODhY0ujUaj2MnTVoGXyN4G0z+172iR MEY3Yy8N/uQCgjDYZnC3hFLv+cbpqO8M36AkZ/u6KK7Se3ktD+4TU7JgEQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJncDMQdouCahrf9rvt/0oQrUq6mMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvbWR3TXhCMmk0SnFHdF8ydS0zX1NoQ3RTcnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQADmYIAwQA W8j/AwQAbqy8AwQAckX2MA0GCSqGSIb3DQEBCwUAA4IBAQBUarudYILaF0n9v3k0 9xUrGeoDPmfEdtQ7x8eow8/alI1N0A88ahSmdw23nA9L5zktQ8MkX1ODIPw/HUHR na3CkOWHij7LiGe4570FK9T3REsw03M1V+cKKfdMr87SmwDJgNPck89XfJqLRv/Y E8LK8HMRe5SS7YuYPWbX6dVv3bRqaPauzjZ/XqTDXTb7PEQahZ/2xw8dpuH1mx7m Y2hmnl/CBSS+yw/pMhWs46Y2veVTgLr1Zl9vZd7Gy1Kd8qcQTNFldBt2EjKzDZxu eokFqmYyXhbqxD36U8N5P4FTxuSu1XTn2P8ti7JCc9NP3aG8YiiWDBsCI+kABGJT 05Gf -----END CERTIFICATE-----Generated at Wed Jan 21 05:19:58 2026 by rpki-client