This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/mdu3xdhyXhJdxS8EEEljr-DR8go.roa File: mdu3xdhyXhJdxS8EEEljr-DR8go.roa (raw, json) Hash identifier: rnQ2hZVq/YedWUKl/nEjRuy3KybsEEgeJU8EAN9cR0E= Subject key identifier: 99:DB:B7:C5:D8:72:5E:12:5D:C5:2F:04:10:49:63:AF:E0:D1:F2:0A Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Certificate serial: 019B7E373543C49ACC329190ECBFB8501DC2 Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/mdu3xdhyXhJdxS8EEEljr-DR8go.roa Signing time: Fri 02 Jan 2026 10:18:25 +0000 ROA not before: Fri 02 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.118.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:35:43:c4:9a:cc:32:91:90:ec:bf:b8:50:1d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Validity Not Before: Jan 2 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99dbb7c5d8725e125dc52f04104963afe0d1f20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6d:46:08:88:3c:2c:cb:4b:e4:ca:a1:7c:33: 69:d8:d8:ac:52:c0:f0:f2:7e:e8:2a:60:7d:39:2d: a0:10:de:02:35:2a:ce:5e:e9:f9:2f:19:af:4d:90: a5:7b:ac:0f:36:10:e6:b8:56:0b:47:46:1a:c3:1a: 62:94:d1:ae:59:0d:c8:c2:3d:12:fd:a4:07:7e:43: 0c:b4:61:dd:6d:c6:5e:49:6a:e5:f7:b6:b6:66:66: 53:58:8c:c1:51:c6:61:a5:75:d8:4b:c9:64:d1:c9: 88:d9:ec:af:b8:3b:0c:96:87:9b:dc:4e:73:01:de: 64:5b:17:e8:d7:90:24:87:96:e3:2c:b1:92:07:ff: b7:c5:e5:13:6b:22:40:c8:3f:57:c9:0b:3a:c4:24: da:a5:ea:d8:8f:00:e5:e9:ef:ac:3e:3a:8e:8b:fc: 58:3d:8c:54:48:e0:bb:2e:8c:1c:d5:6f:d2:0a:e9: 71:1b:0f:35:30:86:c6:78:58:67:85:9f:9e:f8:8e: 38:d9:ce:37:57:dc:f4:24:93:fe:7b:af:95:6a:93: 00:57:bd:2f:be:03:cc:58:23:d0:ac:13:f1:f5:06: 56:10:fc:26:25:e2:79:fb:f8:c6:72:0a:9a:bd:17: c3:cb:fe:12:2e:61:53:af:f2:95:9b:36:b2:94:1a: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:B7:C5:D8:72:5E:12:5D:C5:2F:04:10:49:63:AF:E0:D1:F2:0A X509v3 Authority Key Identifier: keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/mdu3xdhyXhJdxS8EEEljr-DR8go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.118.242.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:89:70:c0:5e:08:a5:d8:c9:ac:16:dd:3e:50:bc:fa:59:9f: d7:84:7b:43:1d:3b:a6:d4:f4:f4:b9:a0:30:d7:22:19:9a:ba: 6a:51:a2:81:a1:e8:7c:f9:30:f0:60:27:d0:71:b7:9e:f5:0b: 56:2e:42:38:1f:94:d1:33:49:50:9a:ea:f6:4e:56:a8:f9:d5: 99:2b:20:11:9d:54:94:77:6a:1b:62:0b:24:9a:cf:6a:06:09: 09:b1:16:1c:59:bf:66:00:1c:22:9c:03:8b:79:ec:20:a7:cf: d7:41:c3:69:5e:1d:01:89:ea:96:3f:00:7a:d6:b5:7b:d1:25: 34:c9:02:6c:1a:92:d8:51:83:cc:08:87:0a:05:af:10:08:07: 30:67:94:87:02:76:53:f3:af:f7:1f:b2:ff:69:33:40:40:30: 79:77:4e:d2:3f:98:fa:3a:c2:b3:0b:ca:05:88:d9:f0:06:bb: 20:23:e7:8e:05:1f:25:59:3d:fa:9c:d8:a2:f0:b0:28:1e:ae: 00:44:2b:be:ba:60:7b:df:84:80:c8:f0:23:0e:0f:e1:ab:28: 2f:4b:7a:eb:c7:7f:d2:72:1e:30:69:26:69:06:f0:ea:16:04: 67:ad:65:fa:78:75:07:9b:7a:21:03:71:a6:b7:17:9f:16:16: 78:da:bb:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NzVDxJrMMpGQ7L+4UB3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl ZDQyMTgwHhcNMjYwMTAyMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRiYjdjNWQ4NzI1ZTEyNWRjNTJmMDQxMDQ5NjNhZmUwZDFmMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W1GCIg8LMtL5MqhfDNp2NisUsDw 8n7oKmB9OS2gEN4CNSrOXun5LxmvTZCle6wPNhDmuFYLR0YawxpilNGuWQ3Iwj0S /aQHfkMMtGHdbcZeSWrl97a2ZmZTWIzBUcZhpXXYS8lk0cmI2eyvuDsMloeb3E5z Ad5kWxfo15Akh5bjLLGSB/+3xeUTayJAyD9XyQs6xCTaperYjwDl6e+sPjqOi/xY PYxUSOC7Lowc1W/SCulxGw81MIbGeFhnhZ+e+I442c43V9z0JJP+e6+VapMAV70v vgPMWCPQrBPx9QZWEPwmJeJ5+/jGcgqavRfDy/4SLmFTr/KVmzaylBqrKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnbt8XYcl4SXcUvBBBJY6/g0fIKMB8GA1UdIwQY MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt ZDI0YzM1ZGZhYzk0LzEvbWR1M3hkaHlYaEpkeFM4RUVFbGpyLURSOGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0 LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XbyMA0G CSqGSIb3DQEBCwUAA4IBAQAOiXDAXgil2MmsFt0+ULz6WZ/XhHtDHTum1PT0uaAw 1yIZmrpqUaKBoeh8+TDwYCfQcbee9QtWLkI4H5TRM0lQmur2Tlao+dWZKyARnVSU d2obYgskms9qBgkJsRYcWb9mABwinAOLeewgp8/XQcNpXh0BieqWPwB61rV70SU0 yQJsGpLYUYPMCIcKBa8QCAcwZ5SHAnZT86/3H7L/aTNAQDB5d07SP5j6OsKzC8oF iNnwBrsgI+eOBR8lWT36nNii8LAoHq4ARCu+umB734SAyPAjDg/hqygvS3rrx3/S ch4waSZpBvDqFgRnrWX6eHUHm3ohA3GmtxefFhZ42rt6 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client