This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa File: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (raw, json) Hash identifier: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU= Subject key identifier: 98:AA:8F:26:31:91:67:41:FA:62:B3:B5:6D:EA:21:F9:88:26:4A:BC Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654 Certificate serial: 019B7FF1495324F5CF94D1997A19220305DE Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa Signing time: Fri 02 Jan 2026 18:21:18 +0000 ROA not before: Fri 02 Jan 2026 18:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203653 IP address blocks: 185.128.39.0/24 maxlen: 24 2a03:9f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:49:53:24:f5:cf:94:d1:99:7a:19:22:03:05:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Validity Not Before: Jan 2 18:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98aa8f2631916741fa62b3b56dea21f988264abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:aa:5f:df:0a:e9:20:bd:11:1d:73:da:fc: 18:bc:a7:f8:57:f3:fb:47:6e:57:8e:a8:c2:8e:f3: 71:b1:2c:15:e4:fa:5a:66:15:42:40:a0:f1:51:46: 28:ad:bc:77:4b:92:a1:20:d6:2f:21:b3:97:76:93: 9a:9f:6c:3d:11:c0:e8:86:7f:98:8d:88:7d:57:86: 51:45:c0:12:ad:b9:13:46:c3:d0:49:e7:85:c0:e4: cf:6c:8f:f8:e9:59:c4:dd:75:fd:56:6d:05:6d:1b: c0:c0:99:6c:83:02:c5:00:9b:17:10:3a:e1:e2:34: f8:70:52:83:fe:1a:e7:4a:29:c5:b8:b9:a8:1f:45: 68:4d:f2:4b:be:c1:bf:d7:ff:d7:7e:0d:36:39:d4: 6d:a2:fa:39:a6:98:8d:aa:d9:e0:92:a7:52:15:fe: 6b:02:ec:5b:ab:26:f5:4b:4a:18:b4:28:51:52:fc: 11:e0:49:6e:2f:04:74:94:b2:7b:9c:ac:a3:74:c2: 74:01:98:8a:c5:6a:6f:34:12:c0:5a:19:64:64:de: 73:d1:e1:27:2f:1e:08:95:01:53:2f:b2:cc:e8:91: 2c:6c:80:f7:1a:6a:71:48:9c:62:0f:f0:e9:2b:19: f2:d6:e6:24:86:55:f2:c1:da:84:0d:54:d2:eb:cc: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AA:8F:26:31:91:67:41:FA:62:B3:B5:6D:EA:21:F9:88:26:4A:BC X509v3 Authority Key Identifier: keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.39.0/24 IPv6: 2a03:9f60::/32 Signature Algorithm: sha256WithRSAEncryption 1a:02:73:52:5e:b1:ef:cf:85:34:df:78:e1:9a:41:a4:5a:4a: 60:c6:16:ab:65:5c:64:e5:fd:1b:c6:d6:c8:1d:a4:dd:1a:d0: 0f:1c:e4:63:ea:f1:6c:e5:d5:74:d1:bb:52:42:fa:6d:8e:61: ff:0d:3c:60:18:7b:a3:92:72:e7:78:91:ed:c2:5a:cf:53:78: 38:dd:2e:7e:e7:52:27:f5:9e:bd:17:99:ff:6a:e0:ef:23:bb: 34:81:04:bb:e1:4a:9a:37:bd:20:44:80:7e:7f:6b:52:e0:07: b2:0f:88:56:09:e7:8c:1f:01:4f:e3:28:ec:c2:d0:4a:89:74: e7:08:c9:d7:f1:4d:49:51:11:9d:e7:e8:e3:b2:62:59:ce:38: 1d:ad:45:51:4d:78:ca:54:f6:c4:76:63:dc:74:5e:cd:fd:94: bb:21:de:2e:30:d9:20:db:a0:ca:2f:46:6a:57:8a:6e:8d:2d: a1:69:ef:7f:53:0c:38:0e:61:f5:b6:41:15:fb:b1:13:bb:6a: 97:eb:1b:fa:1f:a5:3c:7f:d8:93:56:c1:c4:88:33:c9:37:67: e2:6c:94:0c:b0:b0:83:d9:fb:5c:26:b9:d0:ac:99:96:dd:6e: 78:cc:0d:bf:0b:60:1b:28:ad:3a:69:85:23:82:b7:47:79:aa: 05:00:4e:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8UlTJPXPlNGZehkiAwXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2 MjE2NTQwHhcNMjYwMTAyMTgyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGFhOGYyNjMxOTE2NzQxZmE2MmIzYjU2ZGVhMjFmOTg4MjY0YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte6qX98K6SC9ER1z2vwYvKf4V/P7 R25XjqjCjvNxsSwV5PpaZhVCQKDxUUYorbx3S5KhINYvIbOXdpOan2w9EcDohn+Y jYh9V4ZRRcASrbkTRsPQSeeFwOTPbI/46VnE3XX9Vm0FbRvAwJlsgwLFAJsXEDrh 4jT4cFKD/hrnSinFuLmoH0VoTfJLvsG/1//Xfg02OdRtovo5ppiNqtngkqdSFf5r Auxbqyb1S0oYtChRUvwR4EluLwR0lLJ7nKyjdMJ0AZiKxWpvNBLAWhlkZN5z0eEn Lx4IlQFTL7LM6JEsbID3GmpxSJxiD/DpKxny1uYkhlXywdqEDVTS68zZwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJiqjyYxkWdB+mKztW3qIfmIJkq8MB8GA1UdIwQY MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt ZGM5ODQyNjU1NjdkLzEvbUtxUEpqR1JaMEg2WXJPMWJlb2gtWWdtU3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYAnMA0E AgACMAcDBQAqA59gMA0GCSqGSIb3DQEBCwUAA4IBAQAaAnNSXrHvz4U033jhmkGk WkpgxharZVxk5f0bxtbIHaTdGtAPHORj6vFs5dV00btSQvptjmH/DTxgGHujknLn eJHtwlrPU3g43S5+51In9Z69F5n/auDvI7s0gQS74UqaN70gRIB+f2tS4AeyD4hW CeeMHwFP4yjswtBKiXTnCMnX8U1JURGd5+jjsmJZzjgdrUVRTXjKVPbEdmPcdF7N /ZS7Id4uMNkg26DKL0ZqV4pujS2hae9/Uww4DmH1tkEV+7ETu2qX6xv6H6U8f9iT VsHEiDPJN2fibJQMsLCD2ftcJrnQrJmW3W54zA2/C2AbKK06aYUjgrdHeaoFAE7n -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:29 2026 by rpki-client