This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/mkpUVZc-vUGm02tucPpx4ITb8yc.roa File: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (raw, json) Hash identifier: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8= Subject key identifier: 9A:4A:54:55:97:3E:BD:41:A6:D3:6B:6E:70:FA:71:E0:84:DB:F3:27 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019B7CEE501FF20F33B216E9BCB6BEC4D571 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/mkpUVZc-vUGm02tucPpx4ITb8yc.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33875 IP address blocks: 89.35.218.0/24 maxlen: 24 89.35.219.0/24 maxlen: 24 89.35.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:1f:f2:0f:33:b2:16:e9:bc:b6:be:c4:d5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4a5455973ebd41a6d36b6e70fa71e084dbf327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:74:b1:6e:3f:58:5f:2c:66:8d:c0:8f:22: cf:fd:8f:4f:16:be:78:71:0e:97:f1:75:6b:90:42: 6f:ce:d7:b5:81:38:5b:4d:e6:49:48:57:81:c8:ac: 59:d3:b1:b9:a0:3d:17:80:14:72:bf:e2:42:ac:df: 0b:20:7c:12:34:02:53:2d:ba:e4:28:8a:02:f2:fa: 8c:e3:ee:f6:0d:6c:27:be:4c:9a:06:2e:4d:3a:61: 70:20:ed:d7:d7:d0:72:41:be:27:0b:87:83:a7:75: 15:55:33:ce:65:07:61:e7:a2:4c:52:b9:40:91:51: 3f:80:b4:bb:94:a2:a8:f3:dd:e5:f3:2c:39:44:44: fc:27:1d:2d:d4:9a:fa:13:fa:93:b9:ae:21:94:b5: a5:f9:51:d2:c1:1f:2d:8a:07:b7:f2:32:19:88:e4: 11:40:9a:1f:a2:62:5b:88:87:70:dd:5e:d5:08:10: 2f:74:5a:a1:46:8f:d6:36:cc:70:ae:ab:54:df:08: 03:69:9a:b7:b0:d8:cc:ca:72:34:65:41:74:eb:9e: b2:a7:57:21:56:d1:bd:b6:c5:44:62:4e:96:28:45: 97:10:19:94:9c:8e:07:84:a7:40:57:14:62:00:03: 07:58:90:ac:de:f5:76:86:ca:02:7d:45:43:01:b2: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4A:54:55:97:3E:BD:41:A6:D3:6B:6E:70:FA:71:E0:84:DB:F3:27 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/mkpUVZc-vUGm02tucPpx4ITb8yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.218.0-89.35.220.255 Signature Algorithm: sha256WithRSAEncryption 05:e1:20:35:37:6f:21:c0:0d:01:b1:7e:6e:4b:85:46:c7:ca: f7:8c:04:b6:ba:3c:57:45:23:00:03:ff:f1:66:86:c0:06:62: 88:5b:9d:06:33:11:4f:45:0e:1e:25:1d:ea:c4:a2:cd:75:6c: 2a:24:34:ec:9f:c0:22:38:f7:00:af:c4:9b:57:e7:19:3f:19: 1a:87:5e:2d:c4:6b:81:84:0a:a5:46:79:f0:13:c7:7c:dc:68: 91:dc:0c:f6:e4:c5:fc:89:b3:08:9b:d3:02:59:1e:d8:5a:15: 00:2a:b6:20:cf:68:99:73:6b:3e:de:65:33:3a:5c:9d:2f:44: 59:00:1d:53:a2:0b:53:7d:ef:fc:ac:9a:10:65:b0:d2:93:a1: e2:cb:86:76:31:c3:54:08:f8:ac:c6:cd:7d:82:0a:28:37:b2: 17:71:79:8a:41:0d:13:5b:d3:57:67:7d:51:9b:b8:15:fc:60: 5e:bf:15:22:2e:50:7a:8f:dd:20:ab:b4:48:67:e9:75:d4:8d: 1e:a8:37:a0:13:ae:77:95:b8:c6:89:1c:be:bf:f4:4a:e6:60: aa:3b:99:7e:f2:9f:9f:f8:ab:a6:0e:6a:20:ee:cd:cf:ce:45: ec:9c:86:5b:52:16:ae:53:36:69:db:17:4c:e2:91:a8:c2:60: 86:29:e7:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87lAf8g8zshbpvLa+xNVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTRhNTQ1NTk3M2ViZDQxYTZkMzZiNmU3MGZhNzFlMDg0ZGJmMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZ0sW4/WF8sZo3AjyLP/Y9PFr54 cQ6X8XVrkEJvzte1gThbTeZJSFeByKxZ07G5oD0XgBRyv+JCrN8LIHwSNAJTLbrk KIoC8vqM4+72DWwnvkyaBi5NOmFwIO3X19ByQb4nC4eDp3UVVTPOZQdh56JMUrlA kVE/gLS7lKKo893l8yw5RET8Jx0t1Jr6E/qTua4hlLWl+VHSwR8tige38jIZiOQR QJofomJbiIdw3V7VCBAvdFqhRo/WNsxwrqtU3wgDaZq3sNjMynI0ZUF0656yp1ch VtG9tsVEYk6WKEWXEBmUnI4HhKdAVxRiAAMHWJCs3vV2hsoCfUVDAbJbzQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJpKVFWXPr1BptNrbnD6ceCE2/MnMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvbWtwVVZaYy12VUdtMDJ0dWNQcHg0SVRiOHljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFZI9oD BABZI9wwDQYJKoZIhvcNAQELBQADggEBAAXhIDU3byHADQGxfm5LhUbHyveMBLa6 PFdFIwAD//FmhsAGYohbnQYzEU9FDh4lHerEos11bCokNOyfwCI49wCvxJtX5xk/ GRqHXi3Ea4GECqVGefATx3zcaJHcDPbkxfyJswib0wJZHthaFQAqtiDPaJlzaz7e ZTM6XJ0vRFkAHVOiC1N97/ysmhBlsNKToeLLhnYxw1QI+KzGzX2CCig3shdxeYpB DRNb01dnfVGbuBX8YF6/FSIuUHqP3SCrtEhn6XXUjR6oN6ATrneVuMaJHL6/9Erm YKo7mX7yn5/4q6YOaiDuzc/OReychltSFq5TNmnbF0zikajCYIYp500= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:27 2026 by rpki-client