This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/mdj55pZO6nRDbpPFsXBoK-GkNU8.roa File: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (raw, json) Hash identifier: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0= Subject key identifier: 99:D8:F9:E6:96:4E:EA:74:43:6E:93:C5:B1:70:68:2B:E1:A4:35:4F Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B313D5C7DD378E3441568866591E8 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/mdj55pZO6nRDbpPFsXBoK-GkNU8.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6740 IP address blocks: 82.202.0.0/18 maxlen: 18 185.193.128.0/22 maxlen: 22 212.90.224.0/19 maxlen: 19 213.235.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:31:3d:5c:7d:d3:78:e3:44:15:68:86:65:91:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99d8f9e6964eea74436e93c5b170682be1a4354f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:6c:01:22:ac:81:0f:87:9f:9b:d5:dc:1f: 6c:c3:e0:2a:b5:c0:4d:34:46:2e:34:c0:10:bd:f4: e5:e9:67:53:a7:3f:23:54:61:89:60:76:f2:32:d3: e4:b7:da:7a:2c:fc:a2:dc:ef:ff:d6:80:8e:8a:eb: 7f:67:2a:2a:70:e6:37:1c:b9:6f:32:ce:11:02:09: 50:34:cd:55:4a:9b:d2:6f:98:54:7f:4a:c9:d1:84: 82:08:01:d8:09:5f:a4:93:04:8b:32:2f:58:34:50: 54:7f:35:9c:37:90:4d:07:e2:53:3b:aa:f7:b3:1c: 55:d7:b7:86:3c:f1:7d:43:c7:91:1c:9c:01:c8:c3: 30:c7:a0:7b:f2:2e:a7:f8:f2:d9:20:fa:33:57:7e: 54:5b:8f:5a:5a:60:f0:00:2e:96:5c:3e:98:cc:6f: 72:4c:70:42:1a:c8:8e:08:38:a5:d0:41:68:61:c9: 81:73:76:5c:3e:3d:dd:76:6b:bc:91:7a:1b:04:36: 44:60:c3:dd:24:53:71:85:0a:e9:23:cd:da:e0:2c: 99:5d:ec:09:71:cd:14:7a:b1:56:6a:68:4a:14:eb: 1c:4a:22:91:d5:40:a6:4a:05:ae:40:35:05:34:01: 98:dd:48:ad:4a:43:13:7e:d6:2c:c1:11:1e:85:6b: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:F9:E6:96:4E:EA:74:43:6E:93:C5:B1:70:68:2B:E1:A4:35:4F X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/mdj55pZO6nRDbpPFsXBoK-GkNU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.202.0.0/18 185.193.128.0/22 212.90.224.0/19 213.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 2b:33:fa:74:de:47:86:a0:09:d3:54:9d:66:28:95:24:34:97: df:18:06:87:fb:bf:43:3e:69:71:ed:d9:7f:58:4c:2d:b2:a3: 62:94:5f:80:3b:80:d4:22:41:da:ef:ae:28:cc:c5:d5:d2:7f: 60:33:a7:0b:82:9d:2d:86:6b:4b:7b:44:2f:6c:fb:46:b4:38: c0:d2:e7:91:27:b9:50:4a:88:ba:fa:ad:18:c7:9c:ce:d8:5c: e3:4d:cf:61:ab:87:e2:05:96:31:a6:52:0d:ef:49:4f:92:49: cd:6b:e7:b5:0a:93:b9:0f:10:43:18:ba:40:8a:6f:be:40:42: cd:2c:76:c3:e9:39:aa:8e:14:13:ba:61:dd:40:59:c6:98:e0: 0f:49:94:4b:4e:b2:ae:c0:79:96:94:9e:41:ed:7f:5d:64:28: 51:c9:70:95:7b:aa:71:e8:96:04:94:60:ad:e2:01:ed:50:cc: 12:90:3a:d6:86:87:ca:8f:42:e2:9f:e9:ba:ca:8b:6b:44:59: ad:5c:68:f1:af:7d:a7:a9:82:33:45:4d:ba:77:66:d7:e8:77: ce:9d:da:9c:e9:c4:c9:9e:34:b8:c4:06:3e:a6:97:a1:ea:f3: c5:ce:45:73:8c:f1:79:9f:24:66:8a:c0:7f:4c:0e:1c:fb:82: 22:99:2e:9e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WzE9XH3TeONEFWiGZZHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWQ4ZjllNjk2NGVlYTc0NDM2ZTkzYzViMTcwNjgyYmUxYTQzNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlpsASKsgQ+Hn5vV3B9sw+AqtcBN NEYuNMAQvfTl6WdTpz8jVGGJYHbyMtPkt9p6LPyi3O//1oCOiut/ZyoqcOY3HLlv Ms4RAglQNM1VSpvSb5hUf0rJ0YSCCAHYCV+kkwSLMi9YNFBUfzWcN5BNB+JTO6r3 sxxV17eGPPF9Q8eRHJwByMMwx6B78i6n+PLZIPozV35UW49aWmDwAC6WXD6YzG9y THBCGsiOCDil0EFoYcmBc3ZcPj3ddmu8kXobBDZEYMPdJFNxhQrpI83a4CyZXewJ cc0UerFWamhKFOscSiKR1UCmSgWuQDUFNAGY3UitSkMTftYswREehWuajwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJnY+eaWTup0Q26TxbFwaCvhpDVPMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvbWRqNTVwWk82blJEYnBQRnNYQm9LLUdrTlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGUsoAAwQC ucGAAwQF1FrgAwQG1etAMA0GCSqGSIb3DQEBCwUAA4IBAQArM/p03keGoAnTVJ1m KJUkNJffGAaH+79DPmlx7dl/WEwtsqNilF+AO4DUIkHa764ozMXV0n9gM6cLgp0t hmtLe0QvbPtGtDjA0ueRJ7lQSoi6+q0Yx5zO2FzjTc9hq4fiBZYxplIN70lPkknN a+e1CpO5DxBDGLpAim++QELNLHbD6TmqjhQTumHdQFnGmOAPSZRLTrKuwHmWlJ5B 7X9dZChRyXCVe6px6JYElGCt4gHtUMwSkDrWhofKj0Lin+m6yotrRFmtXGjxr32n qYIzRU26d2bX6HfOndqc6cTJnjS4xAY+ppeh6vPFzkVzjPF5nyRmisB/TA4c+4Ii mS6e -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:03 2026 by rpki-client