This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa File: mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa (raw, json) Hash identifier: A+YQ/4Az7bNkzemJO71ARj4rjsy96lN9Lz8BWv7V8fg= Subject key identifier: 9A:33:24:63:09:A3:65:18:8C:CB:15:D5:A9:68:AE:E8:7E:05:0F:FA Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019BA3340645C8972114E0438F29800519D9 Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa Signing time: Fri 09 Jan 2026 14:40:54 +0000 ROA not before: Fri 09 Jan 2026 14:40:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50130 IP address blocks: 31.129.224.0/22 maxlen: 22 31.129.224.0/23 maxlen: 23 31.129.224.0/24 maxlen: 24 31.129.225.0/24 maxlen: 24 31.129.226.0/23 maxlen: 23 31.129.226.0/24 maxlen: 24 31.129.227.0/24 maxlen: 24 31.129.228.0/23 maxlen: 23 31.129.228.0/24 maxlen: 24 31.129.229.0/24 maxlen: 24 31.129.234.0/24 maxlen: 24 31.129.240.0/23 maxlen: 23 31.129.242.0/23 maxlen: 23 31.129.248.0/23 maxlen: 23 31.129.248.0/24 maxlen: 24 31.129.249.0/24 maxlen: 24 31.129.252.0/22 maxlen: 22 31.129.252.0/23 maxlen: 23 31.129.252.0/24 maxlen: 24 31.129.253.0/24 maxlen: 24 31.129.254.0/23 maxlen: 23 31.129.254.0/24 maxlen: 24 31.129.255.0/24 maxlen: 24 213.5.198.0/23 maxlen: 23 213.5.198.0/24 maxlen: 24 213.5.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:34:06:45:c8:97:21:14:e0:43:8f:29:80:05:19:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Jan 9 14:40:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a33246309a365188ccb15d5a968aee87e050ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:bf:5a:f6:b3:a1:06:8d:f1:5b:40:45:b4: d9:3c:f4:8a:66:c3:eb:24:54:63:66:92:c9:17:aa: 09:b4:27:fe:34:e8:af:0b:72:c4:46:0c:22:27:57: fe:20:a7:e4:6d:97:c3:0f:4d:d2:eb:2d:c3:fa:d6: b0:a0:33:6f:a9:60:f3:d8:02:a2:81:06:8d:b4:a0: 73:ee:52:eb:79:4a:62:0e:66:9b:c9:cc:34:d2:a9: cb:bb:20:10:8f:f0:4a:a1:7f:be:ff:38:a4:44:70: 75:81:d6:0e:cb:ee:d5:cb:27:4b:f4:6f:c7:0c:65: 53:50:39:4a:4c:5b:4b:e9:97:60:36:75:8c:f3:88: ba:92:30:c8:5f:b0:09:26:97:0c:95:0c:e9:3e:0d: 38:f1:51:fb:04:23:c6:39:5b:71:b0:e6:f3:f5:64: 6a:96:3a:fa:e5:4e:5a:9f:e3:f2:ee:a6:77:cb:67: 6a:69:a6:be:7f:1e:ba:32:f6:36:2e:05:8a:4d:17: 83:3a:d4:64:b1:8e:47:ff:4d:58:c6:5a:a3:d8:69: 7f:c9:16:8c:c7:ea:59:88:88:49:f3:e9:67:ec:54: 70:c6:38:95:52:c1:f6:84:d5:5f:80:60:4e:11:d3: fd:91:d7:92:35:76:fa:16:01:3b:f7:bf:2e:e7:59: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:33:24:63:09:A3:65:18:8C:CB:15:D5:A9:68:AE:E8:7E:05:0F:FA X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.224.0-31.129.229.255 31.129.234.0/24 31.129.240.0/22 31.129.248.0/23 31.129.252.0/22 213.5.198.0/23 Signature Algorithm: sha256WithRSAEncryption 09:86:07:c5:d6:56:0a:da:b9:1a:cb:5f:26:84:be:34:1b:39: de:8f:b1:a2:58:7e:b9:7b:2b:47:2a:5d:ab:03:14:08:7b:5f: 1b:22:5c:d2:ae:90:4d:98:7a:81:5b:a7:0f:ca:e5:4e:3e:4c: 22:c8:3c:61:7f:41:a8:36:c9:a9:4c:a3:2c:58:cf:0e:3d:39: 30:a1:19:2e:54:59:cd:ca:7f:94:66:b0:d6:4a:36:37:0a:d0: 53:a7:59:25:60:f3:07:f8:61:0d:30:42:a8:a2:40:eb:58:e0: 0b:4f:44:7e:66:85:4e:3d:14:e5:8a:33:71:f9:9f:13:c0:7b: 79:65:b0:f5:ba:c2:93:14:ad:0c:39:fc:69:ea:04:5a:f5:39: 46:0f:f8:a2:85:38:67:e7:5c:1e:cd:90:98:55:b7:2e:08:1f: 78:50:21:ef:94:0a:2e:3d:ae:33:3c:fa:a7:91:58:62:f3:e9: fd:34:21:da:f3:2f:73:c4:bf:92:7b:6a:ba:b7:aa:be:77:2c: f7:58:e2:43:5a:53:87:21:d5:8a:3e:0f:67:6a:1b:ed:45:80: c9:52:50:95:db:f4:47:7c:64:0b:eb:5e:fb:15:07:d7:cf:66: 5e:94:09:79:20:e1:2d:8c:82:ef:2f:61:53:a7:34:dc:5b:95: 43:81:71:fa -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZujNAZFyJchFOBDjymABRnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjYwMTA5MTQ0MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTMzMjQ2MzA5YTM2NTE4OGNjYjE1ZDVhOTY4YWVlODdlMDUwZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigq/WvazoQaN8VtARbTZPPSKZsPr JFRjZpLJF6oJtCf+NOivC3LERgwiJ1f+IKfkbZfDD03S6y3D+tawoDNvqWDz2AKi gQaNtKBz7lLreUpiDmabycw00qnLuyAQj/BKoX++/zikRHB1gdYOy+7VyydL9G/H DGVTUDlKTFtL6ZdgNnWM84i6kjDIX7AJJpcMlQzpPg048VH7BCPGOVtxsObz9WRq ljr65U5an+Py7qZ3y2dqaaa+fx66MvY2LgWKTReDOtRksY5H/01Yxlqj2Gl/yRaM x+pZiIhJ8+ln7FRwxjiVUsH2hNVfgGBOEdP9kdeSNXb6FgE7978u51m4HwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJozJGMJo2UYjMsV1aloruh+BQ/6MB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvbWpNa1l3bWpaUmlNeXhYVnFXaXU2SDRGRF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAUfgeAD BAEfgeQDBAAfgeoDBAIfgfADBAEfgfgDBAIfgfwDBAHVBcYwDQYJKoZIhvcNAQEL BQADggEBAAmGB8XWVgrauRrLXyaEvjQbOd6PsaJYfrl7K0cqXasDFAh7XxsiXNKu kE2YeoFbpw/K5U4+TCLIPGF/Qag2yalMoyxYzw49OTChGS5UWc3Kf5RmsNZKNjcK 0FOnWSVg8wf4YQ0wQqiiQOtY4AtPRH5mhU49FOWKM3H5nxPAe3llsPW6wpMUrQw5 /GnqBFr1OUYP+KKFOGfnXB7NkJhVty4IH3hQIe+UCi49rjM8+qeRWGLz6f00Idrz L3PEv5J7arq3qr53LPdY4kNaU4ch1Yo+D2dqG+1FgMlSUJXb9Ed8ZAvrXvsVB9fP Zl6UCXkg4S2Mgu8vYVOnNNxblUOBcfo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:07 2026 by rpki-client