This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa File: mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa (raw, json) Hash identifier: BPcVgU4gGWv1T2VHL8hZhWOkWk8wdsCpDTIDhtWwrK4= Subject key identifier: 9B:11:8F:B6:59:A5:D1:C0:B7:7E:00:A2:2A:D2:EF:F8:58:F1:D2:D8 Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529 Certificate serial: 019B7A5AE91F11098A3E06462ED2FBE0F1F1 Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213672 IP address blocks: 194.164.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e9:1f:11:09:8a:3e:06:46:2e:d2:fb:e0:f1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b118fb659a5d1c0b77e00a22ad2eff858f1d2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:f9:98:2a:ce:bd:b2:11:66:51:80:2b:21: 6d:1a:66:a1:87:6a:5a:a8:11:dd:27:c8:c2:84:f8: 64:a2:69:62:ca:af:e6:be:63:e3:55:34:49:7d:02: 12:45:a3:ba:97:eb:72:5a:89:d9:dd:8e:87:1f:0f: 57:43:3a:22:c0:eb:d9:6a:c2:6e:eb:7f:56:b7:7b: 8a:c8:f0:b5:bf:69:8e:54:c8:31:65:73:76:0a:ef: db:13:97:a7:a8:bf:62:09:2d:a2:d3:0e:69:73:1d: 2d:60:9d:a9:4d:38:84:c3:19:88:53:9d:1f:63:1c: 19:c3:e4:ff:ac:bf:8f:29:70:00:5f:68:35:17:d5: bc:7e:f3:4a:b5:41:c4:fa:28:12:10:ac:8a:a0:ba: d7:08:d2:b1:f9:ed:43:9c:4a:ed:fd:04:a0:0b:55: 2a:d7:37:15:7b:a6:a5:ba:a7:df:ca:fa:05:24:7d: 3d:eb:34:ad:58:88:12:bd:26:f1:5b:31:a4:7f:af: 38:45:2a:a2:52:c5:fd:13:17:fd:aa:11:23:5a:00: 52:6f:20:35:8a:b4:71:84:5c:2a:f8:e7:eb:e6:39: 3d:ed:92:b7:53:5e:8d:52:d7:1f:7d:5f:34:c8:a8: cf:1e:0d:92:99:35:37:02:e0:8d:fc:30:9a:a3:c2: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:8F:B6:59:A5:D1:C0:B7:7E:00:A2:2A:D2:EF:F8:58:F1:D2:D8 X509v3 Authority Key Identifier: keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.118.0/23 Signature Algorithm: sha256WithRSAEncryption 29:23:ad:35:21:92:c9:dd:6c:10:20:be:ae:9a:94:d1:40:56: ed:78:67:0b:ea:1b:20:26:7e:32:4e:25:a5:9c:5c:bc:e8:e3: ae:fb:44:cd:1d:c7:6b:eb:8c:12:77:d5:40:f8:ef:f6:6a:8a: 96:cc:b9:0e:d0:47:db:0c:d0:66:52:80:79:ab:f8:15:be:16: 28:80:91:46:10:f5:1d:1a:35:05:59:fa:5b:44:e6:59:2a:60: 05:fb:c8:74:ef:fa:65:9a:3a:8f:1e:e1:c4:0b:44:0c:f6:5f: bc:30:ac:a2:fe:77:51:d9:32:d2:2f:1a:87:84:ff:74:e8:18: 1b:af:10:4b:ef:96:0f:84:ce:f4:90:99:20:8f:ce:17:89:0b: 84:0e:be:c7:04:20:d4:74:07:86:09:3a:32:a2:3b:b5:a9:af: d6:9f:68:b0:48:b3:3a:88:8e:c7:b0:a4:fb:b0:f8:9a:fc:7b: e1:69:68:b2:ff:fd:35:94:3b:8c:50:e8:d9:32:69:2b:d7:26: 37:df:34:89:02:cc:ac:85:41:e6:2c:2b:8d:cb:64:02:d4:f0: 79:9c:c9:fb:60:46:0d:ba:4b:85:ce:37:8a:9c:e1:8e:48:cd: 0d:a0:5c:65:c9:ae:0d:e9:e9:6b:b2:b6:e4:6d:fc:49:39:33: b7:48:2b:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WukfEQmKPgZGLtL74PHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmU4YjZkNzNmMmYzODU0ODk5NmY2NjYyMTMzMGE4ZDcx MDg1MjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjExOGZiNjU5YTVkMWMwYjc3ZTAwYTIyYWQyZWZmODU4ZjFkMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpD5mCrOvbIRZlGAKyFtGmahh2pa qBHdJ8jChPhkomliyq/mvmPjVTRJfQISRaO6l+tyWonZ3Y6HHw9XQzoiwOvZasJu 639Wt3uKyPC1v2mOVMgxZXN2Cu/bE5enqL9iCS2i0w5pcx0tYJ2pTTiEwxmIU50f YxwZw+T/rL+PKXAAX2g1F9W8fvNKtUHE+igSEKyKoLrXCNKx+e1DnErt/QSgC1Uq 1zcVe6aluqffyvoFJH096zStWIgSvSbxWzGkf684RSqiUsX9Exf9qhEjWgBSbyA1 irRxhFwq+Ofr5jk97ZK3U16NUtcffV80yKjPHg2SmTU3AuCN/DCao8ICXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsRj7ZZpdHAt34AoirS7/hY8dLYMB8GA1UdIwQY MBaAFLlui21z8vOFSJlvZmITMKjXEIUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYt YmMwMDQ2NDllZTk5LzEvbXhHUHRsbWwwY0MzZmdDaUt0THYtRmp4MHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYtYmMwMDQ2NDllZTk5 LzEvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwqR2MA0G CSqGSIb3DQEBCwUAA4IBAQApI601IZLJ3WwQIL6umpTRQFbteGcL6hsgJn4yTiWl nFy86OOu+0TNHcdr64wSd9VA+O/2aoqWzLkO0EfbDNBmUoB5q/gVvhYogJFGEPUd GjUFWfpbROZZKmAF+8h07/plmjqPHuHEC0QM9l+8MKyi/ndR2TLSLxqHhP906Bgb rxBL75YPhM70kJkgj84XiQuEDr7HBCDUdAeGCToyoju1qa/Wn2iwSLM6iI7HsKT7 sPia/HvhaWiy//01lDuMUOjZMmkr1yY33zSJAsyshUHmLCuNy2QC1PB5nMn7YEYN ukuFzjeKnOGOSM0NoFxlya4N6elrsrbkbfxJOTO3SCtg -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:29 2026 by rpki-client