This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/mwRdGEd4WRoql9JK1a5PSVnSLxU.roa File: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (raw, json) Hash identifier: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks= Subject key identifier: 9B:04:5D:18:47:78:59:1A:2A:97:D2:4A:D5:AE:4F:49:59:D2:2F:15 Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Certificate serial: 019B8D1A6B4E5EEC77AFA3F4D5D99719A57B Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/mwRdGEd4WRoql9JK1a5PSVnSLxU.roa Signing time: Mon 05 Jan 2026 07:41:17 +0000 ROA not before: Mon 05 Jan 2026 07:41:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213200 IP address blocks: 212.108.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:1a:6b:4e:5e:ec:77:af:a3:f4:d5:d9:97:19:a5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Validity Not Before: Jan 5 07:41:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b045d184778591a2a97d24ad5ae4f4959d22f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:53:02:e2:81:4e:62:8b:82:68:d8:82:3c: ec:b8:9a:27:31:a5:65:55:3a:99:0b:77:1d:f2:aa: c4:7a:c2:7f:9b:b3:a4:e3:9d:45:19:99:d1:88:0c: 60:6a:f5:9d:42:6c:3a:93:9f:e4:8d:de:12:36:72: eb:d7:99:5f:76:4d:df:7d:23:59:1d:24:fd:69:03: fe:82:ea:b5:e7:4b:46:9d:b6:88:99:36:b1:74:13: a5:14:ac:1d:da:a0:80:2a:34:a8:7f:04:5b:eb:74: 21:d2:79:03:94:0f:0c:e9:ab:26:15:56:5f:2b:bf: fe:a6:05:0f:74:d8:60:16:5f:d4:2d:ee:fa:1e:32: 4c:c2:e8:5a:0b:e5:88:b1:83:30:b0:43:48:0e:68: 09:58:78:28:55:94:a3:37:99:9f:de:52:6b:f2:1e: b1:c0:c6:25:80:96:d0:82:ef:5f:26:43:4c:d5:a7: b2:b6:ee:b4:43:cc:22:42:ad:4f:d1:9e:af:01:67: 38:46:16:db:f0:55:ad:4f:8b:1f:47:92:f4:19:4f: 8f:9e:b2:65:75:2a:3b:34:22:50:02:cc:80:46:f2: 97:38:cb:4b:44:47:e6:a1:c7:24:d2:3c:95:fb:04: 49:2c:44:2f:64:a8:a2:d8:55:96:07:61:25:2c:52: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:04:5D:18:47:78:59:1A:2A:97:D2:4A:D5:AE:4F:49:59:D2:2F:15 X509v3 Authority Key Identifier: keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/mwRdGEd4WRoql9JK1a5PSVnSLxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:f5:6b:0f:ca:03:9f:ee:07:95:42:d7:26:c9:81:52:84:77: e8:1c:20:d3:37:72:f8:15:05:f1:fd:4b:93:50:c6:81:b7:a3: 4c:e8:59:6c:6e:51:82:18:eb:a0:b0:be:19:57:9c:83:67:14: dd:ec:a8:2a:8d:c7:00:3a:79:48:c5:f2:54:93:8c:f7:28:83: e1:2d:49:c3:c5:f0:f5:f8:d9:4b:f1:27:c2:bf:6d:9c:f4:53: 7a:2d:e6:25:41:b1:80:e5:95:d6:9d:a1:8f:dd:9b:e1:3f:2a: 1a:4f:9c:b4:b9:ec:03:34:2d:d1:52:39:53:00:aa:f9:86:b1: 38:66:56:5a:a1:01:ea:f0:6e:cf:34:d7:b0:f2:d4:9e:c0:e3: a6:3c:3a:e9:f5:71:d5:a3:02:5d:b6:90:54:f8:64:cf:51:5f: 38:61:95:f2:61:47:67:cf:e3:8e:f9:05:6a:8a:e6:e9:df:30: 4e:91:45:0e:2f:7d:0a:f4:d8:c6:d6:7a:12:57:1f:fd:6a:d8: d4:d3:9a:c6:b5:46:25:51:3b:87:cb:0c:97:e5:39:05:a3:69: 82:c6:e4:4d:9b:ae:09:41:e2:83:9c:22:55:80:0a:bb:a6:b3: 88:0e:40:64:55:67:a8:3b:39:f4:1c:6e:fc:2f:81:20:c9:2c: f7:e8:fc:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNGmtOXux3r6P01dmXGaV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy NGVmNjUwHhcNMjYwMTA1MDc0MTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjA0NWQxODQ3Nzg1OTFhMmE5N2QyNGFkNWFlNGY0OTU5ZDIyZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl1TAuKBTmKLgmjYgjzsuJonMaVl VTqZC3cd8qrEesJ/m7Ok451FGZnRiAxgavWdQmw6k5/kjd4SNnLr15lfdk3ffSNZ HST9aQP+guq150tGnbaImTaxdBOlFKwd2qCAKjSofwRb63Qh0nkDlA8M6asmFVZf K7/+pgUPdNhgFl/ULe76HjJMwuhaC+WIsYMwsENIDmgJWHgoVZSjN5mf3lJr8h6x wMYlgJbQgu9fJkNM1aeytu60Q8wiQq1P0Z6vAWc4Rhbb8FWtT4sfR5L0GU+PnrJl dSo7NCJQAsyARvKXOMtLREfmocck0jyV+wRJLEQvZKii2FWWB2ElLFKbkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsEXRhHeFkaKpfSStWuT0lZ0i8VMB8GA1UdIwQY MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt NTJjYmE5N2Q5YjllLzEvbXdSZEdFZDRXUm9xbDlKSzFhNVBTVm5TTHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GxhMA0G CSqGSIb3DQEBCwUAA4IBAQBc9WsPygOf7geVQtcmyYFShHfoHCDTN3L4FQXx/UuT UMaBt6NM6FlsblGCGOugsL4ZV5yDZxTd7KgqjccAOnlIxfJUk4z3KIPhLUnDxfD1 +NlL8SfCv22c9FN6LeYlQbGA5ZXWnaGP3ZvhPyoaT5y0uewDNC3RUjlTAKr5hrE4 ZlZaoQHq8G7PNNew8tSewOOmPDrp9XHVowJdtpBU+GTPUV84YZXyYUdnz+OO+QVq iubp3zBOkUUOL30K9NjG1noSVx/9atjU05rGtUYlUTuHywyX5TkFo2mCxuRNm64J QeKDnCJVgAq7prOIDkBkVWeoOzn0HG78L4EgySz36Pzd -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:59 2026 by rpki-client