This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mhK9zCgXdFlII0XrtCsgCaL9xjI.roa File: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (raw, json) Hash identifier: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ= Subject key identifier: 9A:12:BD:CC:28:17:74:59:48:23:45:EB:B4:2B:20:09:A2:FD:C6:32 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E8C14AA0A57FEBBBB9C0F78B6889 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mhK9zCgXdFlII0XrtCsgCaL9xjI.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200964 IP address blocks: 193.226.197.0/24 maxlen: 24 193.226.235.0/24 maxlen: 24 195.184.5.0/24 maxlen: 24 195.184.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e8:c1:4a:a0:a5:7f:eb:bb:b9:c0:f7:8b:68:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a12bdcc28177459482345ebb42b2009a2fdc632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:78:7b:e1:8e:f7:db:87:c0:2f:b9:9e:05: e7:5d:9e:88:13:b3:aa:a3:30:98:eb:65:34:b9:fe: 63:f4:d2:11:64:e0:0e:e5:98:0f:3a:20:3f:f5:92: 29:34:35:8b:60:ff:e1:c8:83:9d:ec:15:92:57:4c: f7:0c:58:f7:e1:4b:14:51:96:79:13:f8:13:6e:6e: 28:68:2a:52:24:ac:73:75:12:20:8d:d8:04:65:4c: f4:03:25:96:cd:cf:5c:66:c0:c6:80:1b:43:0b:7a: 9e:54:be:06:cc:ac:27:0d:a6:29:0c:ec:a8:5b:f0: 1a:4d:c5:97:ef:e9:fb:71:0c:19:85:19:5d:fd:fc: cb:cf:7d:a7:44:5d:df:70:fc:21:e0:5a:ac:7a:58: 44:6f:64:14:0d:b9:29:58:d5:c5:d7:4c:0e:54:c9: 1c:ea:2f:e5:32:43:46:f6:76:8f:87:33:fe:d9:ae: 3a:11:ec:76:44:74:20:40:f5:4d:a2:fe:d4:f7:49: 46:56:ee:41:b2:5e:32:4c:56:3a:46:56:f8:6c:29: d8:67:ac:53:b0:09:7c:7a:ae:81:2f:fe:54:8d:0c: 4c:f2:f8:b6:0b:93:e1:d4:f0:8f:d9:db:2a:8e:c4: a1:d5:94:bf:da:45:d4:19:5a:94:2b:d5:6c:36:03: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:12:BD:CC:28:17:74:59:48:23:45:EB:B4:2B:20:09:A2:FD:C6:32 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mhK9zCgXdFlII0XrtCsgCaL9xjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.226.197.0/24 193.226.235.0/24 195.184.5.0/24 195.184.8.0/24 Signature Algorithm: sha256WithRSAEncryption 54:51:bb:be:3d:96:fa:df:04:2a:be:e9:56:2e:a8:a1:7d:b9: b5:63:b3:12:ea:50:f0:81:e6:d8:59:49:ff:b0:46:a1:9a:e2: 8b:d0:fd:a0:46:17:c3:2c:79:f9:8f:ae:60:ba:48:ae:ae:d1: 83:04:db:fe:a3:95:f4:ca:23:b8:08:a0:b5:ae:60:07:e6:d1: 87:5d:ac:39:aa:2b:47:8a:17:c1:4f:39:cf:a9:bc:b5:97:59: 6c:af:2e:f3:8d:df:81:33:f7:91:75:d8:c2:85:ff:9a:7e:72: 53:e3:eb:67:d4:1b:40:0e:75:5a:b1:3b:ab:c9:58:63:2e:49: a8:89:ae:00:7f:8d:1b:0b:89:ca:3e:9b:64:88:ce:bc:d5:d6: d2:fe:2d:e2:c3:c9:dc:fe:d8:63:73:d8:80:90:27:48:67:96: df:c2:73:59:6f:3d:d8:cf:88:bb:11:ae:3e:ed:ff:61:83:e8: 0b:9d:35:46:6c:92:11:d6:89:46:88:05:9d:67:0c:27:2f:6c: 05:01:84:8b:9f:86:54:24:27:53:97:8e:e6:45:65:a2:93:ae: af:3c:ce:48:95:44:dd:f2:bf:a7:f1:dd:5e:b7:59:ea:40:f0: db:30:4a:e0:be:28:74:fa:52:27:28:69:4e:07:40:9b:4a:e3: 33:1c:22:33 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o+jBSqClf+u7ucD3i2iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTEyYmRjYzI4MTc3NDU5NDgyMzQ1ZWJiNDJiMjAwOWEyZmRjNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/94e+GO99uHwC+5ngXnXZ6IE7Oq ozCY62U0uf5j9NIRZOAO5ZgPOiA/9ZIpNDWLYP/hyIOd7BWSV0z3DFj34UsUUZZ5 E/gTbm4oaCpSJKxzdRIgjdgEZUz0AyWWzc9cZsDGgBtDC3qeVL4GzKwnDaYpDOyo W/AaTcWX7+n7cQwZhRld/fzLz32nRF3fcPwh4FqselhEb2QUDbkpWNXF10wOVMkc 6i/lMkNG9naPhzP+2a46Eex2RHQgQPVNov7U90lGVu5Bsl4yTFY6Rlb4bCnYZ6xT sAl8eq6BL/5UjQxM8vi2C5Ph1PCP2dsqjsSh1ZS/2kXUGVqUK9VsNgM6FQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJoSvcwoF3RZSCNF67QrIAmi/cYyMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvbWhLOXpDZ1hkRmxJSTBYcnRDc2dDYUw5eGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAweLFAwQA weLrAwQAw7gFAwQAw7gIMA0GCSqGSIb3DQEBCwUAA4IBAQBUUbu+PZb63wQqvulW Lqihfbm1Y7MS6lDwgebYWUn/sEahmuKL0P2gRhfDLHn5j65gukiurtGDBNv+o5X0 yiO4CKC1rmAH5tGHXaw5qitHihfBTznPqby1l1lsry7zjd+BM/eRddjChf+afnJT 4+tn1BtADnVasTuryVhjLkmoia4Af40bC4nKPptkiM681dbS/i3iw8nc/thjc9iA kCdIZ5bfwnNZbz3Yz4i7Ea4+7f9hg+gLnTVGbJIR1olGiAWdZwwnL2wFAYSLn4ZU JCdTl47mRWWik66vPM5IlUTd8r+n8d1et1nqQPDbMErgvih0+lInKGlOB0CbSuMz HCIz -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:24 2026 by rpki-client