This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rmG_Mx4OERgiuD3P5wGx8USzfRc.roa File: rmG_Mx4OERgiuD3P5wGx8USzfRc.roa (raw, json) Hash identifier: EVDCfM58CfL8EZ3fG32e3+1OR69T0z1tPNxcvYnXhZw= Subject key identifier: AE:61:BF:33:1E:0E:11:18:22:B8:3D:CF:E7:01:B1:F1:44:B3:7D:17 Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487 Certificate serial: 019B7F84F5FE9AF454175CD656ABA842EC88 Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rmG_Mx4OERgiuD3P5wGx8USzfRc.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 170.237.6.0/23 maxlen: 24 170.237.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f5:fe:9a:f4:54:17:5c:d6:56:ab:a8:42:ec:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae61bf331e0e111822b83dcfe701b1f144b37d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:c1:50:86:a0:39:01:7f:f9:b0:7f:9a:18: 33:1d:ff:40:cd:05:48:cb:ba:66:26:4c:7e:af:35: 6d:c4:b0:86:d2:94:19:11:fe:19:04:de:04:2c:ac: da:27:c5:5d:eb:5f:8c:4b:d0:7b:c4:63:95:51:c0: 91:7d:74:b7:6c:f9:69:f4:c5:d9:96:d1:42:8e:3f: ea:61:21:2d:5f:e7:25:d5:1c:1d:7a:d5:b1:e7:17: c5:94:b0:97:be:70:08:a0:00:1a:56:74:93:23:f7: b2:d1:d4:79:68:ec:9f:69:2b:a2:68:f4:fe:65:a1: 20:f0:63:23:14:0c:a1:db:90:07:6b:5c:95:91:8e: cc:17:3b:1f:f5:af:ba:4b:6a:cb:67:b5:ae:d7:3d: 58:76:32:6c:41:30:3c:5a:cb:24:56:1b:36:2d:68: e8:de:a7:59:08:63:a1:ff:9a:8a:2b:82:de:fc:2a: 50:91:08:cd:60:56:9c:17:a9:d6:cb:f8:8a:44:cd: 5a:8f:72:b2:e5:6c:26:9d:c1:77:88:3b:8a:44:66: 6c:e5:e1:fa:e6:0d:2a:11:36:f1:99:c4:82:f6:38: d2:1f:20:d7:02:b4:79:fb:cd:59:d3:7e:8f:bf:f2: a5:fd:1c:ef:66:9b:74:3d:00:28:e7:ed:03:b2:81: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:61:BF:33:1E:0E:11:18:22:B8:3D:CF:E7:01:B1:F1:44:B3:7D:17 X509v3 Authority Key Identifier: keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rmG_Mx4OERgiuD3P5wGx8USzfRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.237.6.0-170.237.9.255 Signature Algorithm: sha256WithRSAEncryption 38:d3:f4:ca:84:51:4c:e4:54:bc:97:78:f0:e3:f7:47:ba:f6: 59:03:51:f1:c6:7c:27:d6:9f:29:74:ae:de:2a:c6:f3:12:23: 1a:0f:ea:0f:0b:40:1a:fb:22:23:ee:72:06:a1:d8:6a:0b:4c: 58:cc:cb:3b:81:73:cb:8e:c5:cf:74:1e:38:97:e2:b7:42:ea: 8e:7f:8a:28:fd:95:ff:b2:be:e8:d1:83:6d:cb:08:9d:4e:dc: 8c:bb:30:43:16:a9:a4:fb:e9:cd:32:2d:5e:8f:37:14:8c:a5: 8f:18:f4:58:5f:79:11:05:60:5d:53:34:8b:63:84:30:4e:89: dd:a6:ac:e1:ac:58:16:13:96:ac:50:a4:89:cf:37:e6:88:37: 0f:70:84:f5:a0:1a:a3:4b:1e:dd:36:ec:ae:e4:0d:bb:69:54: 39:f2:32:00:9e:84:13:2e:b8:11:29:bd:9b:8c:e7:46:7e:69: 8f:cc:99:e4:58:7e:2e:47:83:fc:c5:00:08:a7:ff:ef:b0:fe: bb:df:e7:7c:1c:d9:52:0f:8f:78:82:86:13:c2:5c:79:87:a8: cb:44:37:80:28:6b:37:b0:92:42:ca:58:cf:ea:ee:04:b3:4d: 4d:09:21:0f:02:4f:7f:b9:98:6d:3e:62:6e:d7:95:61:03:39: 3a:28:7c:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hPX+mvRUF1zWVquoQuyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl YjM0ODcwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTYxYmYzMzFlMGUxMTE4MjJiODNkY2ZlNzAxYjFmMTQ0YjM3ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v3BUIagOQF/+bB/mhgzHf9AzQVI y7pmJkx+rzVtxLCG0pQZEf4ZBN4ELKzaJ8Vd61+MS9B7xGOVUcCRfXS3bPlp9MXZ ltFCjj/qYSEtX+cl1RwdetWx5xfFlLCXvnAIoAAaVnSTI/ey0dR5aOyfaSuiaPT+ ZaEg8GMjFAyh25AHa1yVkY7MFzsf9a+6S2rLZ7Wu1z1YdjJsQTA8WsskVhs2LWjo 3qdZCGOh/5qKK4Le/CpQkQjNYFacF6nWy/iKRM1aj3Ky5WwmncF3iDuKRGZs5eH6 5g0qETbxmcSC9jjSHyDXArR5+81Z036Pv/Kl/RzvZpt0PQAo5+0DsoGeNwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK5hvzMeDhEYIrg9z+cBsfFEs30XMB8GA1UdIwQY MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut MzJlYjNhNGVhZDQzLzEvcm1HX014NE9FUmdpdUQzUDV3R3g4VVN6ZlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGq7QYD BAGq7QgwDQYJKoZIhvcNAQELBQADggEBADjT9MqEUUzkVLyXePDj90e69lkDUfHG fCfWnyl0rt4qxvMSIxoP6g8LQBr7IiPucgah2GoLTFjMyzuBc8uOxc90HjiX4rdC 6o5/iij9lf+yvujRg23LCJ1O3Iy7MEMWqaT76c0yLV6PNxSMpY8Y9FhfeREFYF1T NItjhDBOid2mrOGsWBYTlqxQpInPN+aINw9whPWgGqNLHt027K7kDbtpVDnyMgCe hBMuuBEpvZuM50Z+aY/MmeRYfi5Hg/zFAAin/++w/rvf53wc2VIPj3iChhPCXHmH qMtEN4AoazewkkLKWM/q7gSzTU0JIQ8CT3+5mG0+Ym7XlWEDOToofFo= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:10 2026 by rpki-client