This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/mryfSMsiVc0yv4FSUpt7qiqcwh4.roa File: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (raw, json) Hash identifier: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU= Subject key identifier: 9A:BC:9F:48:CB:22:55:CD:32:BF:81:52:52:9B:7B:AA:2A:9C:C2:1E Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e Certificate serial: 019B7A5AF7485375851AEEA86C5D08FE2004 Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/mryfSMsiVc0yv4FSUpt7qiqcwh4.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214739 IP address blocks: 5.1.108.0/24 maxlen: 24 5.1.109.0/24 maxlen: 24 5.1.110.0/24 maxlen: 24 5.1.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f7:48:53:75:85:1a:ee:a8:6c:5d:08:fe:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9abc9f48cb2255cd32bf8152529b7baa2a9cc21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:3a:d1:ab:e5:a1:7b:be:e2:00:f1:4e:1f: 1f:44:50:0a:bf:b3:1b:a2:e6:47:94:65:4d:fa:93: 53:25:d5:c6:18:7f:13:9b:d2:35:42:af:2b:23:bb: 5b:75:9a:51:3d:98:d9:e1:15:5d:73:cb:73:c3:20: 0f:5b:44:7d:d4:48:cc:4f:db:30:f1:d6:be:18:cd: cd:24:f7:45:ca:1a:39:7d:56:15:bc:fc:d6:e9:a9: 38:fe:1c:d8:22:6a:77:f6:d1:fb:61:79:c1:d1:59: 45:28:64:37:c0:31:b1:6e:5e:b3:c3:d4:00:fa:e1: 21:50:cc:4b:98:bd:ef:ec:29:7e:5c:81:16:35:30: 70:6e:49:6b:23:f9:c0:50:7b:68:76:61:cf:4e:5a: 28:74:6a:15:22:c2:5d:52:e8:21:e4:ed:61:ad:f7: 9f:f0:9c:81:4b:5e:50:a0:49:b8:93:ed:aa:d2:74: 08:ba:99:b0:22:fb:ab:22:73:f4:ff:9d:a4:eb:bb: 4a:9f:64:7c:7c:04:1a:b0:13:0a:ef:47:b8:d5:78: 1d:e7:5b:9e:29:75:e5:6f:9e:86:5a:b2:44:cf:8d: 44:e5:55:45:3a:a9:7c:0f:44:d6:29:a8:ba:09:9f: ef:bb:13:0d:22:e8:8c:99:f7:06:7f:6c:55:46:5f: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BC:9F:48:CB:22:55:CD:32:BF:81:52:52:9B:7B:AA:2A:9C:C2:1E X509v3 Authority Key Identifier: keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/mryfSMsiVc0yv4FSUpt7qiqcwh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.108.0/22 Signature Algorithm: sha256WithRSAEncryption 88:46:84:81:d4:9b:74:a4:af:8c:c0:b5:1b:fd:37:3f:56:3b: d5:3b:30:a6:56:0c:d9:a3:e2:cc:0d:7f:fb:81:2d:e6:ac:cd: 3d:dc:b9:ad:6c:14:3c:34:5c:1a:62:7c:8f:2b:93:a8:5c:63: 69:a5:aa:12:20:0e:42:3c:62:07:d1:62:b7:75:91:c0:ee:d6: 86:66:e8:1f:3a:e8:e9:f3:a9:16:69:d3:ca:90:cb:8f:a7:3f: ae:6e:59:b0:9a:9d:45:22:0c:77:32:0d:e5:4e:b1:ab:55:92: f1:06:b6:a5:07:96:80:c2:a6:49:54:8a:93:9a:cf:3f:de:19: 6f:5d:d3:f3:6f:30:a8:de:bb:1f:20:17:cf:e5:65:35:a9:f7: 08:05:cd:07:08:7c:13:01:f2:2b:50:c3:a1:ee:20:06:47:6e: 9f:69:3d:e3:93:b8:74:6f:5e:38:77:f9:c6:80:68:ee:c0:ce: 69:32:a8:58:4c:0e:e0:9e:cb:80:0f:63:97:d7:d6:c0:ae:07: c8:4b:6f:b4:a1:df:a9:9b:70:9d:b7:71:0c:08:bd:e7:94:84: c2:be:86:b8:be:44:7a:f2:c0:8f:24:0b:a7:fb:6a:11:b1:1b: 95:22:1a:6e:f4:c1:37:15:7e:af:38:17:9f:18:83:31:30:c3: 2b:be:10:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvdIU3WFGu6obF0I/iAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1 MjVmNGUwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJjOWY0OGNiMjI1NWNkMzJiZjgxNTI1MjliN2JhYTJhOWNjMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv860avloXu+4gDxTh8fRFAKv7Mb ouZHlGVN+pNTJdXGGH8Tm9I1Qq8rI7tbdZpRPZjZ4RVdc8tzwyAPW0R91EjMT9sw 8da+GM3NJPdFyho5fVYVvPzW6ak4/hzYImp39tH7YXnB0VlFKGQ3wDGxbl6zw9QA +uEhUMxLmL3v7Cl+XIEWNTBwbklrI/nAUHtodmHPTloodGoVIsJdUugh5O1hrfef 8JyBS15QoEm4k+2q0nQIupmwIvurInP0/52k67tKn2R8fAQasBMK70e41Xgd51ue KXXlb56GWrJEz41E5VVFOql8D0TWKai6CZ/vuxMNIuiMmfcGf2xVRl9tuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq8n0jLIlXNMr+BUlKbe6oqnMIeMB8GA1UdIwQY MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt OGQyNDgxNmQ5N2RlLzEvbXJ5ZlNNc2lWYzB5djRGU1VwdDdxaXFjd2g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBQFsMA0G CSqGSIb3DQEBCwUAA4IBAQCIRoSB1Jt0pK+MwLUb/Tc/VjvVOzCmVgzZo+LMDX/7 gS3mrM093LmtbBQ8NFwaYnyPK5OoXGNppaoSIA5CPGIH0WK3dZHA7taGZugfOujp 86kWadPKkMuPpz+ublmwmp1FIgx3Mg3lTrGrVZLxBralB5aAwqZJVIqTms8/3hlv XdPzbzCo3rsfIBfP5WU1qfcIBc0HCHwTAfIrUMOh7iAGR26faT3jk7h0b144d/nG gGjuwM5pMqhYTA7gnsuAD2OX19bArgfIS2+0od+pm3Cdt3EMCL3nlITCvoa4vkR6 8sCPJAun+2oRsRuVIhpu9ME3FX6vOBefGIMxMMMrvhA2 -----END CERTIFICATE-----Generated at Thu Jan 29 06:12:55 2026 by rpki-client