This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/m64MgsXTuVAo-KXrz-HC9VS3YL4.roa File: m64MgsXTuVAo-KXrz-HC9VS3YL4.roa (raw, json) Hash identifier: aAemQZEctQRghlYaCM8BeUg6WijqhJ1QuHQjJjaDAco= Subject key identifier: 9B:AE:0C:82:C5:D3:B9:50:28:F8:A5:EB:CF:E1:C2:F5:54:B7:60:BE Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5 Certificate serial: 019B7AC8ED8E52A29BF3DD1EFEF21BD7F80F Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/m64MgsXTuVAo-KXrz-HC9VS3YL4.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33848 IP address blocks: 84.21.32.0/19 maxlen: 27 141.36.0.0/16 maxlen: 27 147.12.96.0/19 maxlen: 27 185.152.96.0/22 maxlen: 27 192.109.218.0/24 maxlen: 27 2a00:4980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ed:8e:52:a2:9b:f3:dd:1e:fe:f2:1b:d7:f8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5 Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bae0c82c5d3b95028f8a5ebcfe1c2f554b760be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:05:d2:5d:ba:24:1a:a0:d8:4d:c0:17:cf: 34:1e:f8:ee:f3:6b:8a:e3:a3:e3:cf:5d:a2:13:39: e1:76:43:8c:e2:a2:35:37:fc:dc:1b:b1:79:3c:7d: f2:34:ff:14:8f:54:f3:31:73:5e:c3:c2:64:e2:31: 2a:ec:59:63:6a:6e:03:f5:c9:95:e8:03:2f:c4:e8: 8d:d0:14:be:66:1b:37:0b:4b:4d:01:c8:bd:d3:0a: cb:c0:4e:0b:2f:20:05:6d:3f:0f:04:39:29:67:1d: b3:48:ee:83:de:e6:84:e9:25:5d:66:32:53:95:ce: 89:7f:5c:82:76:96:56:79:30:08:8b:86:87:43:78: 56:cf:96:9e:c5:3c:a3:1e:88:ba:0c:a3:a3:b0:f5: ef:49:8c:92:e5:e0:70:f6:75:53:d7:c1:64:75:a9: e3:1c:b1:52:56:ef:6e:f5:fb:48:b0:71:f1:13:50: 36:13:ef:82:60:d3:d4:d7:b5:b8:65:a5:81:40:21: 58:6c:43:f2:8e:f4:47:04:9d:6f:d2:0e:77:25:cc: 44:f7:a7:d8:dd:11:5f:25:c4:4e:6b:d9:b7:1b:7e: 8c:b1:ad:6f:50:59:9a:db:f2:a7:d2:a1:ba:96:7e: 99:44:48:23:66:bc:6a:24:4c:24:49:9f:bc:28:81: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:0C:82:C5:D3:B9:50:28:F8:A5:EB:CF:E1:C2:F5:54:B7:60:BE X509v3 Authority Key Identifier: keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/m64MgsXTuVAo-KXrz-HC9VS3YL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.32.0/19 141.36.0.0/16 147.12.96.0/19 185.152.96.0/22 192.109.218.0/24 IPv6: 2a00:4980::/29 Signature Algorithm: sha256WithRSAEncryption 99:62:2d:33:22:0d:e0:29:cc:39:f8:fe:b8:3b:25:0c:86:1b: c3:9a:15:8e:a4:6d:2c:58:d3:b6:33:22:75:65:fa:14:08:94: f3:66:42:ca:b1:93:45:30:ce:0e:14:bf:78:eb:65:72:f7:77: c1:50:98:ff:a0:50:32:6f:e9:68:19:54:b7:48:09:6b:a7:1c: 16:0d:de:42:2c:1f:c7:7d:32:48:19:37:db:4f:70:92:30:0e: d1:f0:66:b4:d2:2a:a9:53:fc:03:80:80:9d:07:68:5c:76:31: 01:97:5c:3e:c7:61:fd:25:90:45:ed:1c:4a:e6:65:56:a4:f4: ee:d0:c0:90:a1:ce:da:66:99:9e:24:85:9b:eb:a8:ae:ec:e3: 21:05:96:4c:45:a3:60:49:91:5f:a9:b3:cf:61:ee:94:36:52: 72:0e:fc:b3:f3:f0:ba:0c:7e:c3:56:fc:f5:b8:e3:66:b4:c7: 21:f6:ef:de:4b:96:87:28:6c:c8:17:40:d3:ff:28:f3:a8:a6: 4e:ef:00:6d:5e:f3:a0:3b:0d:f3:b2:82:7e:73:82:11:04:ec: ed:62:55:93:d8:7e:06:db:cc:54:68:32:38:00:6d:93:01:43: ee:00:b6:52:3a:88:34:d7:5b:8a:dd:ab:9b:b5:e0:9b:6f:de: 11:4e:33:d3 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6yO2OUqKb890e/vIb1/gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjg2Yzg1MmYzNmZiZTlmYzhiZTc3YzQwOWI1MjI2YTZl ZTU0ZDUwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmFlMGM4MmM1ZDNiOTUwMjhmOGE1ZWJjZmUxYzJmNTU0Yjc2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmgF0l26JBqg2E3AF880Hvju82uK 46Pjz12iEznhdkOM4qI1N/zcG7F5PH3yNP8Uj1TzMXNew8Jk4jEq7Fljam4D9cmV 6AMvxOiN0BS+Zhs3C0tNAci90wrLwE4LLyAFbT8PBDkpZx2zSO6D3uaE6SVdZjJT lc6Jf1yCdpZWeTAIi4aHQ3hWz5aexTyjHoi6DKOjsPXvSYyS5eBw9nVT18Fkdanj HLFSVu9u9ftIsHHxE1A2E++CYNPU17W4ZaWBQCFYbEPyjvRHBJ1v0g53JcxE96fY 3RFfJcROa9m3G36Msa1vUFma2/Kn0qG6ln6ZREgjZrxqJEwkSZ+8KIHxaQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJuuDILF07lQKPil68/hwvVUt2C+MB8GA1UdIwQY MBaAFJJobIUvNvvp/IvnfECbUiam7lTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEt YmE3MWZiZGIwMzc0LzEvbTY0TWdzWFR1VkFvLUtYcnotSEM5VlMzWUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEtYmE3MWZiZGIwMzc0 LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwQFVBUgAwMA jSQDBAWTDGADBAK5mGADBADAbdowDQQCAAIwBwMFAyoASYAwDQYJKoZIhvcNAQEL BQADggEBAJliLTMiDeApzDn4/rg7JQyGG8OaFY6kbSxY07YzInVl+hQIlPNmQsqx k0Uwzg4Uv3jrZXL3d8FQmP+gUDJv6WgZVLdICWunHBYN3kIsH8d9MkgZN9tPcJIw DtHwZrTSKqlT/AOAgJ0HaFx2MQGXXD7HYf0lkEXtHErmZVak9O7QwJChztpmmZ4k hZvrqK7s4yEFlkxFo2BJkV+ps89h7pQ2UnIO/LPz8LoMfsNW/PW442a0xyH2795L locobMgXQNP/KPOopk7vAG1e86A7DfOygn5zghEE7O1iVZPYfgbbzFRoMjgAbZMB Q+4AtlI6iDTXW4rdq5u14Jtv3hFOM9M= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:36 2026 by rpki-client