This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/mug4xbomzaetj7AbqFb1Z7Hzfuc.roa File: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (raw, json) Hash identifier: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U= Subject key identifier: 9A:E8:38:C5:BA:26:CD:A7:AD:8F:B0:1B:A8:56:F5:67:B1:F3:7E:E7 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED220D3E4A3765BD0A2ABEE198E193 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/mug4xbomzaetj7AbqFb1Z7Hzfuc.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211236 IP address blocks: 94.188.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:22:0d:3e:4a:37:65:bd:0a:2a:be:e1:98:e1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ae838c5ba26cda7ad8fb01ba856f567b1f37ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:a6:f3:45:b1:67:bc:c9:81:07:cb:a3:ab: 0a:f5:a5:62:b1:86:69:37:a8:d3:91:d8:47:ff:71: e7:23:91:25:ea:73:a9:d8:6c:ed:64:fe:46:f1:51: dd:15:46:90:bc:f1:38:f9:33:08:fb:1f:9c:78:0c: f3:aa:78:15:75:69:f7:73:67:3e:5b:e0:68:7d:85: c6:38:f9:61:9e:f7:d4:b7:0c:16:1d:7b:4a:2a:3d: da:c1:64:30:45:16:88:1a:b9:52:11:2a:6a:55:8c: ec:6d:29:3e:9b:65:e7:7c:77:61:d7:53:c0:74:d6: e3:10:4b:59:39:e9:b8:f8:eb:8f:0c:5d:1f:d2:99: e5:1e:51:1f:b3:c7:d9:b1:56:54:b3:f1:b5:57:76: c2:e5:4c:55:ee:86:53:3b:6b:35:84:fa:9d:67:0b: 3a:5f:0d:fb:7c:a7:27:4f:88:c9:fb:cb:35:05:32: 94:c8:c0:f0:14:85:a2:55:17:ca:ea:c8:75:8b:b9: 6c:c3:b7:ed:10:6e:0e:82:65:d6:69:30:9b:5f:9a: c0:5e:f2:cf:bc:69:ab:65:64:56:19:2d:9b:2e:3a: 01:42:7d:73:56:fc:eb:9e:3d:be:7d:9d:c6:f8:64: 23:d4:68:c1:3d:ea:10:ec:e9:3b:64:72:db:8b:b4: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E8:38:C5:BA:26:CD:A7:AD:8F:B0:1B:A8:56:F5:67:B1:F3:7E:E7 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/mug4xbomzaetj7AbqFb1Z7Hzfuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.251.0/24 Signature Algorithm: sha256WithRSAEncryption 35:3e:d4:cf:35:73:15:e7:03:fb:ec:b3:76:6e:49:19:62:3e: 7b:a2:3b:cd:ae:d2:81:75:02:cc:dd:1a:f8:5b:15:50:0a:7c: c4:04:3c:ce:c5:de:00:b8:af:09:51:7d:91:27:19:3d:ab:0f: 83:b5:16:f5:ff:67:47:02:c8:a3:e0:85:16:ba:92:64:82:4a: b6:25:17:f7:0b:8e:88:2c:45:81:d1:cd:6b:88:17:f4:53:28: 96:a2:4b:16:25:66:06:3a:05:af:7f:f7:0e:d6:ca:36:12:58: 14:eb:8d:38:40:46:a7:29:0c:69:5a:2f:c0:c1:34:c0:c8:5f: 11:4c:6b:fd:e7:9c:44:9e:11:5f:ac:d6:52:ed:ef:9a:4f:74: 5f:a5:23:cc:23:54:32:f5:58:f3:c5:be:66:73:92:68:1f:e7: 3c:24:65:58:a8:d7:70:34:96:af:23:40:ce:2d:62:de:30:ef: 93:41:43:ae:b4:7a:81:08:47:0d:0e:67:8a:41:82:39:be:8a: 32:89:5f:e1:30:8c:ed:90:d1:d8:36:6a:9c:45:1d:0c:fc:77: 26:09:dd:d0:4d:db:a8:a7:39:93:fc:d4:d0:3c:94:40:2c:76: 6b:78:19:9a:03:dd:6b:2f:ed:2a:a0:b4:06:fc:0c:08:59:66: 21:40:13:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SINPko3Zb0KKr7hmOGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWU4MzhjNWJhMjZjZGE3YWQ4ZmIwMWJhODU2ZjU2N2IxZjM3ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO2m80WxZ7zJgQfLo6sK9aVisYZp N6jTkdhH/3HnI5El6nOp2GztZP5G8VHdFUaQvPE4+TMI+x+ceAzzqngVdWn3c2c+ W+BofYXGOPlhnvfUtwwWHXtKKj3awWQwRRaIGrlSESpqVYzsbSk+m2XnfHdh11PA dNbjEEtZOem4+OuPDF0f0pnlHlEfs8fZsVZUs/G1V3bC5UxV7oZTO2s1hPqdZws6 Xw37fKcnT4jJ+8s1BTKUyMDwFIWiVRfK6sh1i7lsw7ftEG4OgmXWaTCbX5rAXvLP vGmrZWRWGS2bLjoBQn1zVvzrnj2+fZ3G+GQj1GjBPeoQ7Ok7ZHLbi7QkXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJroOMW6Js2nrY+wG6hW9Wex837nMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvbXVnNHhib216YWV0ajdBYnFGYjFaN0h6ZnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrz7MA0G CSqGSIb3DQEBCwUAA4IBAQA1PtTPNXMV5wP77LN2bkkZYj57ojvNrtKBdQLM3Rr4 WxVQCnzEBDzOxd4AuK8JUX2RJxk9qw+DtRb1/2dHAsij4IUWupJkgkq2JRf3C46I LEWB0c1riBf0UyiWoksWJWYGOgWvf/cO1so2ElgU6404QEanKQxpWi/AwTTAyF8R TGv955xEnhFfrNZS7e+aT3RfpSPMI1Qy9Vjzxb5mc5JoH+c8JGVYqNdwNJavI0DO LWLeMO+TQUOutHqBCEcNDmeKQYI5vooyiV/hMIztkNHYNmqcRR0M/HcmCd3QTduo pzmT/NTQPJRALHZreBmaA91rL+0qoLQG/AwIWWYhQBNf -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:26 2026 by rpki-client