This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/mJ7goJLPxt6WLTrHUK5dn6uffyw.roa File: mJ7goJLPxt6WLTrHUK5dn6uffyw.roa (raw, json) Hash identifier: xPOuaH+Jv4nTcu4W7pFvN3DaBKDrAjXSPG2Gujx8Qe8= Subject key identifier: 98:9E:E0:A0:92:CF:C6:DE:96:2D:3A:C7:50:AE:5D:9F:AB:9F:7F:2C Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Certificate serial: 019B7FF23009E1E45AC6F70D41A89C21E2A9 Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/mJ7goJLPxt6WLTrHUK5dn6uffyw.roa Signing time: Fri 02 Jan 2026 18:22:16 +0000 ROA not before: Fri 02 Jan 2026 18:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39718 IP address blocks: 81.30.117.0/24 maxlen: 24 81.30.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:30:09:e1:e4:5a:c6:f7:0d:41:a8:9c:21:e2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Validity Not Before: Jan 2 18:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=989ee0a092cfc6de962d3ac750ae5d9fab9f7f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:ea:6a:19:a5:4e:2b:be:75:ca:3c:cd:2a: a2:ac:b7:c0:77:3c:93:6e:74:7c:44:b5:37:d3:97: 0d:78:a3:cb:34:a4:46:70:a2:fc:8e:86:dc:45:1a: bf:2c:2d:5c:66:fc:29:ac:e2:6b:b2:6d:6f:93:86: 24:04:74:39:d6:52:68:56:ba:b1:cb:da:9d:dd:40: 29:47:fc:27:12:82:d2:cd:30:fc:39:f6:59:43:3d: d4:84:e8:cc:b1:ba:d6:36:a5:54:2d:aa:30:c8:98: 79:16:74:d1:93:aa:dc:df:c5:70:10:57:36:31:93: 29:42:fd:a0:2d:e2:c4:73:f7:eb:e6:b2:ba:2c:a0: 46:e9:38:05:dd:d8:ab:93:37:2d:a2:e0:dc:64:2c: 41:88:c9:5e:d3:a0:81:24:30:fb:03:1d:3a:83:d2: 83:5c:b9:6f:90:7d:11:c8:22:88:63:63:67:e7:b7: 79:6b:24:7e:fc:2b:0f:e3:de:3b:5c:fb:e4:84:6b: 9e:c8:7b:b3:bf:e8:34:7c:ed:84:a6:c7:3e:50:c6: a2:dd:e4:e3:78:dc:57:bc:48:8c:cf:35:79:e5:96: 75:d1:9c:af:fa:23:e1:86:2a:9f:1c:07:fc:68:05: e4:2d:88:6f:e7:88:39:93:4a:2f:b8:6d:76:59:0b: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9E:E0:A0:92:CF:C6:DE:96:2D:3A:C7:50:AE:5D:9F:AB:9F:7F:2C X509v3 Authority Key Identifier: keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/mJ7goJLPxt6WLTrHUK5dn6uffyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.117.0/24 81.30.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d6:c9:d5:db:f9:58:fc:02:5f:fb:f0:80:e7:6d:0a:db:d4: 13:f9:67:d0:77:fb:0a:37:1b:05:4b:9e:f8:3c:fb:be:a2:df: 3c:fa:d9:80:f0:25:20:cb:dc:53:57:54:55:de:71:f8:1b:73: da:26:26:d9:bd:10:f0:2b:9e:10:52:e2:1a:58:35:50:f0:11: b1:ca:a3:a4:9c:b5:8f:ef:b1:fa:3c:17:13:ec:e1:cb:08:b3: 7c:48:1f:35:c2:c4:e7:55:2f:a0:6f:b4:a4:63:24:3e:6c:86: 2e:2b:7d:19:1c:ad:27:43:0c:77:61:ff:0f:12:7b:e3:13:43: b8:7f:28:f7:48:33:69:3f:21:a3:b9:06:da:aa:d8:f1:df:a0: 46:9d:05:9f:44:7b:9d:9d:8b:05:a2:6d:74:af:74:5e:09:33: 29:af:41:08:74:78:ff:a3:d7:09:75:f4:2d:b7:df:9c:bd:e8: 90:13:87:ce:db:42:0b:54:56:03:82:ad:79:f2:58:40:07:55: 69:0a:09:6f:d4:66:75:24:ba:2d:a7:69:44:00:e9:cd:fd:b5: 68:7e:32:66:0c:d4:89:e6:f5:dc:72:fd:ca:d1:c1:f3:81:a7: db:76:f2:35:65:d4:31:70:e4:21:0f:f9:2b:16:85:a1:0f:d1: 21:ac:25:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8jAJ4eRaxvcNQaicIeKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2 ZjBlMmMwHhcNMjYwMTAyMTgyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODllZTBhMDkyY2ZjNmRlOTYyZDNhYzc1MGFlNWQ5ZmFiOWY3ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhvqahmlTiu+dco8zSqirLfAdzyT bnR8RLU305cNeKPLNKRGcKL8jobcRRq/LC1cZvwprOJrsm1vk4YkBHQ51lJoVrqx y9qd3UApR/wnEoLSzTD8OfZZQz3UhOjMsbrWNqVULaowyJh5FnTRk6rc38VwEFc2 MZMpQv2gLeLEc/fr5rK6LKBG6TgF3dirkzctouDcZCxBiMle06CBJDD7Ax06g9KD XLlvkH0RyCKIY2Nn57d5ayR+/CsP4947XPvkhGueyHuzv+g0fO2Epsc+UMai3eTj eNxXvEiMzzV55ZZ10Zyv+iPhhiqfHAf8aAXkLYhv54g5k0ovuG12WQvROwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJie4KCSz8beli06x1CuXZ+rn38sMB8GA1UdIwQY MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt OGJiZjhiZmM2ZDhlLzEvbUo3Z29KTFB4dDZXTFRySFVLNWRuNnVmZnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUR51AwQA UR5/MA0GCSqGSIb3DQEBCwUAA4IBAQB61snV2/lY/AJf+/CA520K29QT+WfQd/sK NxsFS574PPu+ot88+tmA8CUgy9xTV1RV3nH4G3PaJibZvRDwK54QUuIaWDVQ8BGx yqOknLWP77H6PBcT7OHLCLN8SB81wsTnVS+gb7SkYyQ+bIYuK30ZHK0nQwx3Yf8P EnvjE0O4fyj3SDNpPyGjuQbaqtjx36BGnQWfRHudnYsFom10r3ReCTMpr0EIdHj/ o9cJdfQtt9+cveiQE4fO20ILVFYDgq158lhAB1VpCglv1GZ1JLotp2lEAOnN/bVo fjJmDNSJ5vXccv3K0cHzgafbdvI1ZdQxcOQhD/krFoWhD9EhrCXS -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:58 2026 by rpki-client