This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa File: mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa (raw, json) Hash identifier: UjqoTpMMczna/METwrK97MJ304NWBJz6gI+TWhRdCgs= Subject key identifier: 9A:36:40:5F:C3:A9:1D:8D:5D:BE:34:A5:A0:BF:A9:E9:90:7A:62:F0 Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c Certificate serial: 019B7C8046EEE0442F10FDF0E7DC46330C57 Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39756 IP address blocks: 194.126.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:46:ee:e0:44:2f:10:fd:f0:e7:dc:46:33:0c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a36405fc3a91d8d5dbe34a5a0bfa9e9907a62f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:4f:bd:08:39:d8:6b:de:8b:e7:fd:3f:89: ce:79:5e:89:bf:f2:0a:50:d9:60:f6:02:48:61:2e: 5b:c8:40:84:9f:45:19:3c:33:25:51:8f:6d:1f:3b: 8e:5b:5f:76:68:8e:54:9b:4d:3d:5d:9e:a4:f0:b1: 6c:7c:bc:d7:17:8d:7a:dd:89:34:db:ef:cb:b6:02: 09:48:a6:3e:93:66:b3:55:73:12:7b:d0:0a:39:e8: c5:e5:02:71:79:59:71:69:86:07:e3:7b:de:4d:36: f4:9d:b8:8e:50:26:31:e7:87:07:ae:0f:e7:c2:08: e0:69:5f:51:43:a3:6d:64:b4:1e:54:ca:c8:ca:bc: f2:6e:c2:b9:85:31:75:67:c2:fe:49:bb:2f:4a:78: b2:18:45:6c:39:20:71:e5:fd:b6:a3:37:c2:14:d3: 3b:d5:60:36:05:e3:23:69:c2:41:a8:e9:c8:83:52: f1:e9:e9:65:ac:5a:c0:61:54:36:2b:fd:cb:c0:56: c4:e3:2d:68:49:51:e4:1a:1e:43:da:7b:a7:3f:32: f4:bc:46:88:27:16:e8:2c:91:53:b8:6e:34:9f:dd: 2a:e5:a7:62:23:ff:a7:c3:d8:ce:f5:62:4b:cf:fb: 6b:36:2f:66:6c:03:32:d2:ff:9b:22:14:4f:5e:6a: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:36:40:5F:C3:A9:1D:8D:5D:BE:34:A5:A0:BF:A9:E9:90:7A:62:F0 X509v3 Authority Key Identifier: keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.253.0/24 Signature Algorithm: sha256WithRSAEncryption c2:f7:ac:6c:48:04:59:f5:0b:23:71:5f:a7:ba:3b:33:6e:78: ba:11:94:32:8c:16:a7:32:1c:bd:63:bb:f0:26:37:82:da:63: 38:24:5d:a6:14:58:85:ee:f0:6a:75:6b:8e:21:0a:27:45:4a: f4:3f:89:af:f3:14:5a:bf:0e:aa:73:0c:c6:ee:8a:fd:d2:ae: 3b:2d:11:50:5e:82:2b:c6:8e:db:fd:69:d9:b5:72:f4:de:8b: 18:b7:03:5f:86:fb:7b:b4:9b:2e:d5:0f:cf:bf:cd:2e:f6:fb: 22:b8:3b:1a:4c:cb:4c:9d:fb:3d:10:43:e3:0d:90:c7:bb:45: 56:82:0e:5c:0f:5d:ad:80:ad:55:07:63:d6:24:d6:65:b0:6a: a4:c1:80:d7:be:cb:b4:da:07:9e:97:55:71:5f:19:02:a3:03: 2a:1a:4b:59:fd:f0:81:11:11:34:43:e5:e8:17:fe:47:5a:10: 04:46:d8:c2:b4:95:d4:0e:cd:c2:ff:b9:13:01:07:96:d6:e3: e0:e9:5d:f2:69:09:aa:41:a7:bd:65:fc:72:96:ce:ea:80:be: cc:7b:8f:8f:9c:00:6d:69:c9:59:e6:25:92:90:d1:94:9a:f3: 11:7f:61:48:fc:68:48:01:85:b0:30:54:24:6b:76:65:4c:84: d3:f5:7e:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEbu4EQvEP3w59xGMwxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzBiMDUxZTVjZGY5NjJkYmMyNmIzNTI0ODhkMDgzMWJk ZjlhM2MwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM2NDA1ZmMzYTkxZDhkNWRiZTM0YTVhMGJmYTllOTkwN2E2MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+RPvQg52Gvei+f9P4nOeV6Jv/IK UNlg9gJIYS5byECEn0UZPDMlUY9tHzuOW192aI5Um009XZ6k8LFsfLzXF4163Yk0 2+/LtgIJSKY+k2azVXMSe9AKOejF5QJxeVlxaYYH43veTTb0nbiOUCYx54cHrg/n wgjgaV9RQ6NtZLQeVMrIyrzybsK5hTF1Z8L+SbsvSniyGEVsOSBx5f22ozfCFNM7 1WA2BeMjacJBqOnIg1Lx6ellrFrAYVQ2K/3LwFbE4y1oSVHkGh5D2nunPzL0vEaI JxboLJFTuG40n90q5adiI/+nw9jO9WJLz/trNi9mbAMy0v+bIhRPXmp1cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJo2QF/DqR2NXb40paC/qemQemLwMB8GA1UdIwQY MBaAFJpwsFHlzfli28JrNSSI0IMb35o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjIt ZmE0NmI0ZjlhMjBjLzEvbWpaQVg4T3BIWTFkdmpTbG9MLXA2WkI2WXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjItZmE0NmI0ZjlhMjBj LzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn79MA0G CSqGSIb3DQEBCwUAA4IBAQDC96xsSARZ9QsjcV+nujszbni6EZQyjBanMhy9Y7vw JjeC2mM4JF2mFFiF7vBqdWuOIQonRUr0P4mv8xRavw6qcwzG7or90q47LRFQXoIr xo7b/WnZtXL03osYtwNfhvt7tJsu1Q/Pv80u9vsiuDsaTMtMnfs9EEPjDZDHu0VW gg5cD12tgK1VB2PWJNZlsGqkwYDXvsu02geel1VxXxkCowMqGktZ/fCBERE0Q+Xo F/5HWhAERtjCtJXUDs3C/7kTAQeW1uPg6V3yaQmqQae9Zfxyls7qgL7Me4+PnABt aclZ5iWSkNGUmvMRf2FI/GhIAYWwMFQka3ZlTITT9X5y -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client