This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa File: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (raw, json) Hash identifier: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg= Subject key identifier: 98:9C:6F:95:57:AC:60:5C:AA:30:62:59:A1:58:C9:E8:7F:1B:CA:D4 Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26 Certificate serial: 019B7C1344EB31947B81027504DF1ADB2ED5 Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400897 IP address blocks: 188.227.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:eb:31:94:7b:81:02:75:04:df:1a:db:2e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=989c6f9557ac605caa306259a158c9e87f1bcad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:62:b8:0b:d1:33:e6:2e:40:79:fe:16:f8: ff:de:a7:02:22:31:25:8c:e3:03:82:90:db:50:42: 0e:e8:04:cd:bf:9d:3d:25:fc:18:99:d5:9c:6c:4a: a6:72:2c:a6:de:d9:5e:44:09:26:06:3b:18:6a:76: 85:29:f5:81:bf:c6:05:d3:85:63:89:b9:15:91:e0: 4a:2f:02:27:68:63:ce:af:29:f3:54:c1:2d:8a:2e: 1a:16:04:3e:c6:ad:1a:ae:a3:be:16:c0:cc:db:39: f2:cb:86:f7:f4:c1:96:12:ed:be:84:a6:14:04:36: 8d:61:25:6c:6d:ec:fc:1f:be:4e:76:c1:13:b1:7b: f3:07:8c:22:ba:e4:d6:f0:53:fb:de:3f:f3:04:f4: 0e:8b:b4:0b:ef:01:bc:3c:69:6f:e6:59:93:76:9a: d6:cc:5a:ec:71:8f:ce:32:c3:41:04:e3:66:2e:b1: 05:10:db:f1:13:b4:55:18:44:80:f5:86:31:33:d4: f2:b2:86:67:5f:d9:41:15:a1:b1:2b:9b:2d:11:ba: f1:10:cd:6e:91:9e:26:e7:62:8e:32:74:8b:99:37: 12:d8:4a:0b:4b:1f:1b:75:8c:c7:2c:47:99:6e:45: 1f:f4:07:68:54:ca:11:f6:1e:5e:ea:42:95:32:e3: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9C:6F:95:57:AC:60:5C:AA:30:62:59:A1:58:C9:E8:7F:1B:CA:D4 X509v3 Authority Key Identifier: keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.227.196.0/23 Signature Algorithm: sha256WithRSAEncryption 22:44:ba:cb:e6:93:5a:48:6d:5b:89:99:20:bf:50:60:a8:ad: cd:ed:99:1f:af:55:5b:cc:de:dd:80:46:9d:29:df:f7:e8:a7: 35:27:86:3a:4c:1f:23:ee:1d:d3:c7:41:61:f4:8b:72:01:10: 67:63:0a:a1:f1:4b:4d:9e:2d:d8:57:2c:51:72:61:30:31:93: f2:d7:25:75:85:f2:a1:be:06:f5:64:47:8f:f3:ac:7b:db:2d: d2:42:e8:95:3a:a9:00:5c:bb:6f:eb:4c:76:61:0a:84:bd:83: 91:14:43:3f:5f:7a:3b:29:2c:6b:2d:79:a0:3f:9b:76:ad:26: 67:cd:1a:d9:e6:67:b9:1c:b1:5f:b5:43:21:ab:b8:ed:1c:d6: 88:5c:23:49:31:c4:b9:3f:63:32:e6:e4:27:d9:36:a9:e9:19: dd:0b:e7:4e:c4:4d:a6:1b:65:87:80:33:72:0e:9f:2a:fb:80: 47:10:b5:8d:48:74:1b:d3:7a:b0:d7:a4:ca:23:41:7f:8e:b9: e9:87:5b:24:e9:2c:1b:71:dd:08:67:88:dc:2d:88:5a:8d:81: 5d:9d:b1:4f:9b:4a:4f:42:6e:76:b6:ce:b0:7a:18:09:9d:b2: 8b:60:5a:f2:ab:d5:d5:03:69:5f:eb:2d:90:94:9c:62:bf:c5: 81:b4:00:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0TrMZR7gQJ1BN8a2y7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0 YTlhMjYwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODljNmY5NTU3YWM2MDVjYWEzMDYyNTlhMTU4YzllODdmMWJjYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq1iuAvRM+YuQHn+Fvj/3qcCIjEl jOMDgpDbUEIO6ATNv509JfwYmdWcbEqmciym3tleRAkmBjsYanaFKfWBv8YF04Vj ibkVkeBKLwInaGPOrynzVMEtii4aFgQ+xq0arqO+FsDM2znyy4b39MGWEu2+hKYU BDaNYSVsbez8H75OdsETsXvzB4wiuuTW8FP73j/zBPQOi7QL7wG8PGlv5lmTdprW zFrscY/OMsNBBONmLrEFENvxE7RVGESA9YYxM9TysoZnX9lBFaGxK5stEbrxEM1u kZ4m52KOMnSLmTcS2EoLSx8bdYzHLEeZbkUf9AdoVMoR9h5e6kKVMuPQJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJicb5VXrGBcqjBiWaFYyeh/G8rUMB8GA1UdIwQY MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt OTI0MWZmNmVjM2JmLzEvbUp4dmxWZXNZRnlxTUdKWm9Wako2SDhieXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvOPEMA0G CSqGSIb3DQEBCwUAA4IBAQAiRLrL5pNaSG1biZkgv1BgqK3N7Zkfr1VbzN7dgEad Kd/36Kc1J4Y6TB8j7h3Tx0Fh9ItyARBnYwqh8UtNni3YVyxRcmEwMZPy1yV1hfKh vgb1ZEeP86x72y3SQuiVOqkAXLtv60x2YQqEvYORFEM/X3o7KSxrLXmgP5t2rSZn zRrZ5me5HLFftUMhq7jtHNaIXCNJMcS5P2My5uQn2Tap6RndC+dOxE2mG2WHgDNy Dp8q+4BHELWNSHQb03qw16TKI0F/jrnph1sk6Swbcd0IZ4jcLYhajYFdnbFPm0pP Qm52ts6wehgJnbKLYFryq9XVA2lf6y2QlJxiv8WBtADQ -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:55 2026 by rpki-client