This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa File: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (raw, json) Hash identifier: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU= Subject key identifier: 9B:EB:8C:BB:4B:96:50:73:00:77:74:67:C1:98:9A:8B:2E:BE:BB:42 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11FCD55D8D55106BD3A38C136CDE2E Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa Signing time: Fri 02 Jan 2026 00:18:32 +0000 ROA not before: Fri 02 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208305 IP address blocks: 217.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:fc:d5:5d:8d:55:10:6b:d3:a3:8c:13:6c:de:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9beb8cbb4b96507300777467c1989a8b2ebebb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:2e:29:a7:cf:dd:a2:36:5d:4d:06:aa:c7: a6:94:85:23:98:80:db:14:2c:45:ea:22:e7:6f:0d: 73:dd:39:8f:22:db:8e:9a:15:1d:5e:79:8c:2b:6c: 3e:3b:84:b3:ea:90:e4:f2:15:3e:3e:03:70:d1:03: e7:e6:18:2d:00:90:16:35:92:9f:40:50:56:14:56: b5:b9:81:d5:9c:34:d2:83:70:c5:a7:93:45:f1:cf: ba:8d:92:4b:4c:32:09:4d:11:be:72:f1:57:5f:91: 29:75:0c:da:13:45:dc:ea:35:23:f9:45:b8:b6:03: 2f:4a:2e:2d:72:14:68:09:cf:1b:d7:96:4a:6b:c1: 26:72:db:ec:85:7f:44:f7:20:33:97:b9:fb:38:e2: 69:e8:ad:9f:03:fa:c3:18:df:8e:31:8f:7d:13:f1: 3d:20:59:eb:99:9b:34:5e:e6:32:18:4f:df:ab:eb: 7c:d9:f7:16:03:e9:c6:89:ae:d8:38:42:4d:73:ad: 53:05:81:f3:6e:c3:7b:e0:bc:63:e0:9f:14:c3:60: eb:64:24:0e:7f:0a:42:d7:5b:28:d9:a4:98:32:16: 61:67:34:88:4f:f3:c8:5e:75:7d:93:85:94:02:07: 57:9e:64:49:87:98:71:04:d0:5c:75:5b:7f:b8:0a: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:8C:BB:4B:96:50:73:00:77:74:67:C1:98:9A:8B:2E:BE:BB:42 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.111.139.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3a:e5:96:f5:ba:f9:92:67:15:b5:0f:cf:2a:08:b7:de:ab: fb:da:83:0e:0b:55:54:23:d7:d8:eb:19:9a:4a:5c:43:4c:61: f3:cd:16:49:57:46:92:09:01:97:df:a3:79:93:e0:24:30:63: b4:76:d7:a6:eb:b2:4b:39:72:aa:32:f9:c0:77:7c:ce:2c:37: 7e:bc:01:19:9c:b4:bc:9f:c3:eb:13:88:1b:0d:7e:1c:97:28: 55:fa:58:58:d0:ae:0d:6e:6f:25:74:61:bd:54:01:54:55:4b: f6:4c:48:a8:39:db:7e:7c:6a:19:05:36:b6:5b:78:c7:56:d4: 9c:91:20:3c:5d:06:a7:71:d5:cb:d8:86:bf:0d:56:1e:ce:b9: 52:71:35:de:80:b7:a0:1b:22:b7:1e:4a:95:15:4e:c1:da:a2: 57:53:da:81:82:e0:61:16:1d:58:8e:4c:33:21:38:f7:b8:c9: ba:cc:8b:e9:de:84:56:02:08:b8:e7:c8:9f:5c:89:b9:00:ae: 8b:00:99:ac:06:96:c6:75:95:8e:c6:01:44:05:56:39:f7:29: 63:ad:aa:2f:1f:af:f9:1c:4c:4b:2e:fc:36:b1:06:c2:85:86: 22:88:b4:80:ee:e7:80:a1:2e:60:25:b4:6c:95:08:70:fe:bb: 31:24:ba:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfzVXY1VEGvTo4wTbN4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmViOGNiYjRiOTY1MDczMDA3Nzc0NjdjMTk4OWE4YjJlYmViYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sMuKafP3aI2XU0GqsemlIUjmIDb FCxF6iLnbw1z3TmPItuOmhUdXnmMK2w+O4Sz6pDk8hU+PgNw0QPn5hgtAJAWNZKf QFBWFFa1uYHVnDTSg3DFp5NF8c+6jZJLTDIJTRG+cvFXX5EpdQzaE0Xc6jUj+UW4 tgMvSi4tchRoCc8b15ZKa8EmctvshX9E9yAzl7n7OOJp6K2fA/rDGN+OMY99E/E9 IFnrmZs0XuYyGE/fq+t82fcWA+nGia7YOEJNc61TBYHzbsN74Lxj4J8Uw2DrZCQO fwpC11so2aSYMhZhZzSIT/PIXnV9k4WUAgdXnmRJh5hxBNBcdVt/uAqA+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJvrjLtLllBzAHd0Z8GYmosuvrtCMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvbS11TXUwdVdVSE1BZDNSbndaaWFpeTYtdTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2W+LMA0G CSqGSIb3DQEBCwUAA4IBAQByOuWW9br5kmcVtQ/PKgi33qv72oMOC1VUI9fY6xma SlxDTGHzzRZJV0aSCQGX36N5k+AkMGO0dtem67JLOXKqMvnAd3zOLDd+vAEZnLS8 n8PrE4gbDX4clyhV+lhY0K4Nbm8ldGG9VAFUVUv2TEioOdt+fGoZBTa2W3jHVtSc kSA8XQancdXL2Ia/DVYezrlScTXegLegGyK3HkqVFU7B2qJXU9qBguBhFh1Yjkwz ITj3uMm6zIvp3oRWAgi458ifXIm5AK6LAJmsBpbGdZWOxgFEBVY59yljraovH6/5 HExLLvw2sQbChYYiiLSA7ueAoS5gJbRslQhw/rsxJLp5 -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:18 2026 by rpki-client