This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mu8sewjnHs63ljc5EPin04mGuqc.roa File: mu8sewjnHs63ljc5EPin04mGuqc.roa (raw, json) Hash identifier: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k= Subject key identifier: 9A:EF:2C:7B:08:E7:1E:CE:B7:96:37:39:10:F8:A7:D3:89:86:BA:A7 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019BA1EFEDEC083AE3169FCC7C498A0EF848 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mu8sewjnHs63ljc5EPin04mGuqc.roa Signing time: Fri 09 Jan 2026 08:46:54 +0000 ROA not before: Fri 09 Jan 2026 08:46:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 86.38.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:ef:ed:ec:08:3a:e3:16:9f:cc:7c:49:8a:0e:f8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 9 08:46:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aef2c7b08e71eceb796373910f8a7d38986baa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:6d:56:6a:c2:b5:92:95:84:70:3d:e4:64: b8:84:9b:b3:49:cf:7f:42:6e:a2:3c:d2:bb:32:65: 39:84:ae:f5:0c:03:2a:3c:02:80:a9:cd:7e:64:f3: ac:82:9f:c1:9c:f4:45:84:03:fa:ff:ea:87:ca:d1: d4:00:8c:1e:4b:92:05:b8:9e:9c:66:f9:11:98:79: 48:b0:d6:f0:b0:2c:cd:3c:7b:36:0d:e9:7e:0d:ee: b5:9e:ed:be:ea:8a:d1:b1:78:97:5f:99:0a:32:1f: b9:5a:61:36:a9:18:4c:f0:a8:5a:c9:b3:39:41:fd: 9a:68:cf:5d:5f:cb:d1:97:8e:a0:18:ae:33:42:db: 2d:c8:bd:0d:73:74:3d:b5:7f:61:7d:75:ae:e7:1f: d6:45:b9:8d:fb:39:96:1e:c7:f2:83:ec:e2:9e:cb: 82:61:32:7b:e7:78:61:a7:25:f3:65:9f:39:5b:ab: 25:2d:3d:3b:d9:46:9f:ef:4c:5c:e2:24:d0:12:6c: 6b:7b:d0:cc:4e:1a:23:b2:8d:c0:15:97:69:01:7a: 6f:22:7d:d2:b0:fb:67:bd:42:db:64:ba:28:91:b9: e6:76:c1:b8:f1:33:36:29:fe:43:a7:bd:2f:e4:69: 45:dc:8f:ef:b1:78:e6:a1:09:e2:4f:73:f4:c1:a6: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:2C:7B:08:E7:1E:CE:B7:96:37:39:10:F8:A7:D3:89:86:BA:A7 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mu8sewjnHs63ljc5EPin04mGuqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.128.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:90:c1:69:55:cd:1a:7b:42:5f:89:bc:b8:d1:0b:4f:97:9b: e7:00:0d:9a:47:97:aa:a0:d5:19:0a:02:c1:a2:60:9b:c0:4c: c4:27:db:a3:3a:e6:63:28:d7:c0:2a:72:4c:58:92:f3:8b:df: d7:b3:7a:d1:bd:70:e7:9c:e6:64:4c:1c:e8:e5:b5:a1:6d:75: d4:52:e5:ac:90:cd:45:a8:39:7d:83:0d:05:2d:63:0e:4f:ca: d2:00:21:3b:ba:a3:04:58:9b:cc:eb:7c:f1:6b:88:f3:63:83: 9a:86:e8:07:8d:75:59:6e:c7:33:7f:1a:1e:24:81:0e:85:e7: 07:98:f9:e1:70:40:f8:07:8d:f0:63:86:c3:3d:cf:24:b9:1f: 87:f8:69:7b:2a:bf:2d:e7:e9:f3:38:9f:f1:8b:4d:bf:9f:56: 78:80:91:0b:0f:49:ce:bf:5f:bb:eb:1d:45:8c:4e:4d:9a:4f: 2a:1b:73:fa:ac:88:b5:bc:1a:09:2d:c6:76:1f:a2:eb:28:f7: dd:82:32:63:46:8c:80:d2:37:95:41:d9:33:0e:5f:de:81:6f: 12:fb:37:82:33:a1:f9:46:07:49:a7:59:2c:4c:d1:d7:7f:42: c6:86:c1:2d:11:e0:68:5c:a3:76:f6:f7:2c:ad:82:29:12:4e: 73:0d:3f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuh7+3sCDrjFp/MfEmKDvhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTA5MDg0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVmMmM3YjA4ZTcxZWNlYjc5NjM3MzkxMGY4YTdkMzg5ODZiYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUltVmrCtZKVhHA95GS4hJuzSc9/ Qm6iPNK7MmU5hK71DAMqPAKAqc1+ZPOsgp/BnPRFhAP6/+qHytHUAIweS5IFuJ6c ZvkRmHlIsNbwsCzNPHs2Del+De61nu2+6orRsXiXX5kKMh+5WmE2qRhM8KhaybM5 Qf2aaM9dX8vRl46gGK4zQtstyL0Nc3Q9tX9hfXWu5x/WRbmN+zmWHsfyg+zinsuC YTJ753hhpyXzZZ85W6slLT072Uaf70xc4iTQEmxre9DMThojso3AFZdpAXpvIn3S sPtnvULbZLookbnmdsG48TM2Kf5Dp70v5GlF3I/vsXjmoQniT3P0waYSlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrvLHsI5x7Ot5Y3ORD4p9OJhrqnMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvbXU4c2V3am5IczYzbGpjNUVQaW4wNG1HdXFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAViaAMA0G CSqGSIb3DQEBCwUAA4IBAQAOkMFpVc0ae0Jfiby40QtPl5vnAA2aR5eqoNUZCgLB omCbwEzEJ9ujOuZjKNfAKnJMWJLzi9/Xs3rRvXDnnOZkTBzo5bWhbXXUUuWskM1F qDl9gw0FLWMOT8rSACE7uqMEWJvM63zxa4jzY4OahugHjXVZbsczfxoeJIEOhecH mPnhcED4B43wY4bDPc8kuR+H+Gl7Kr8t5+nzOJ/xi02/n1Z4gJELD0nOv1+76x1F jE5Nmk8qG3P6rIi1vBoJLcZ2H6LrKPfdgjJjRoyA0jeVQdkzDl/egW8S+zeCM6H5 RgdJp1ksTNHXf0LGhsEtEeBoXKN29vcsrYIpEk5zDT8f -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:41 2026 by rpki-client