This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mjVkEiJ7CevFZEXl60GAIOUCZ2Q.roa File: mjVkEiJ7CevFZEXl60GAIOUCZ2Q.roa (raw, json) Hash identifier: q+wqvzGW4R9s9CgoZyclpJYKDRnmPhl50/DfZTpdEz8= Subject key identifier: 9A:35:64:12:22:7B:09:EB:C5:64:45:E5:EB:41:80:20:E5:02:67:64 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775946FAC73A4A3AC367A622A66B8E38 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mjVkEiJ7CevFZEXl60GAIOUCZ2Q.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35775 IP address blocks: 94.176.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:46:fa:c7:3a:4a:3a:c3:67:a6:22:a6:6b:8e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a356412227b09ebc56445e5eb418020e5026764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:cf:4d:5f:93:93:76:8e:e9:51:c5:76:f8: 7f:9e:46:85:2f:cf:a3:40:ff:da:7f:4a:70:a6:36: 01:53:f9:cb:18:df:1c:50:4a:ba:64:fb:97:a6:2a: dd:a2:c3:3e:de:8a:41:52:4d:b5:d6:92:a2:e2:62: ac:0d:c4:ea:54:57:a4:fb:f2:b6:bd:75:3e:1b:91: 47:6e:41:ff:54:eb:6c:06:61:aa:2c:61:48:94:01: 7d:3b:50:68:b5:b6:e0:86:f1:40:bb:d2:dd:06:91: 3b:46:a6:5d:68:c9:d4:2c:7c:a8:6a:aa:93:0e:2c: c3:7e:1a:fd:3d:3f:5b:c3:63:d1:b2:74:6c:87:6e: 52:ab:0c:b6:90:52:f5:89:79:54:1a:2d:22:ba:f2: c7:ae:81:99:ac:a3:79:2d:4b:fb:58:dd:d4:15:24: 88:08:fd:a5:33:f6:95:39:63:22:a1:f7:05:02:a9: c7:1d:cf:38:65:82:17:99:fd:71:42:2e:1c:16:28: fb:a1:31:81:8c:76:a3:bf:8a:2f:f9:54:80:44:9d: 26:02:d1:cb:cb:64:7a:2d:1f:d0:48:9d:3d:dd:59: 8e:78:77:45:6f:5f:e1:e8:fd:c8:00:57:c2:42:92: 46:ca:08:0b:70:7d:58:7d:aa:2b:34:86:f5:c6:d7: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:64:12:22:7B:09:EB:C5:64:45:E5:EB:41:80:20:E5:02:67:64 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mjVkEiJ7CevFZEXl60GAIOUCZ2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.134.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d2:75:be:15:95:de:15:2d:04:cf:c7:3e:f8:8e:2c:0b:a9: c8:d3:ae:8b:46:0d:84:e0:c6:ca:7a:4e:5f:95:e7:9f:a3:58: ba:ff:82:69:87:1f:53:cb:f6:7b:46:c4:6a:24:3b:9b:f3:b8: 53:01:9f:05:c4:e8:6c:30:3e:77:74:70:e2:56:65:bd:76:01: d9:6c:10:36:87:61:43:9e:a2:18:5e:93:4e:0c:10:16:59:ab: 08:b3:d7:e6:45:c1:11:ce:c5:77:90:e0:59:55:08:c0:2c:30: 65:e4:91:f7:22:f4:68:d6:25:2a:52:58:b2:ba:0d:36:7c:30: 31:75:62:c0:3a:a9:69:fc:a3:c0:cd:71:59:8f:9b:c5:db:c0: a5:0a:6b:3f:37:6d:9a:64:32:32:f5:2a:36:1f:02:d6:c8:7c: 63:88:c7:1c:bc:af:b8:9d:50:0c:a7:6e:d6:ec:1c:26:64:8d: 49:e4:56:01:19:0e:43:bf:6c:20:ef:6d:12:fc:fe:70:91:1d: bc:fe:20:38:09:f8:a9:d9:94:3b:d0:ef:e2:2e:37:07:c3:52: 29:0e:4f:8f:ab:74:7b:39:7c:0a:fe:39:67:a3:4d:2f:c8:aa: b1:ec:7a:37:4e:24:b0:15:66:e0:db:08:1a:a2:a7:15:1f:52: fa:32:8c:82 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUb6xzpKOsNnpiKma444MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM1NjQxMjIyN2IwOWViYzU2NDQ1ZTVlYjQxODAyMGU1MDI2NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fnPTV+Tk3aO6VHFdvh/nkaFL8+j QP/af0pwpjYBU/nLGN8cUEq6ZPuXpirdosM+3opBUk211pKi4mKsDcTqVFek+/K2 vXU+G5FHbkH/VOtsBmGqLGFIlAF9O1BotbbghvFAu9LdBpE7RqZdaMnULHyoaqqT DizDfhr9PT9bw2PRsnRsh25Sqwy2kFL1iXlUGi0iuvLHroGZrKN5LUv7WN3UFSSI CP2lM/aVOWMiofcFAqnHHc84ZYIXmf1xQi4cFij7oTGBjHajv4ov+VSARJ0mAtHL y2R6LR/QSJ093VmOeHdFb1/h6P3IAFfCQpJGyggLcH1YfaorNIb1xtefcQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJo1ZBIiewnrxWRF5etBgCDlAmdkMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL21qVmtFaUo3Q2V2RlpFWGw2MEdBSU9VQ1oyUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABesIYw DQYJKoZIhvcNAQELBQADggEBADLSdb4Vld4VLQTPxz74jiwLqcjTrotGDYTgxsp6 Tl+V55+jWLr/gmmHH1PL9ntGxGokO5vzuFMBnwXE6GwwPnd0cOJWZb12AdlsEDaH YUOeohhek04MEBZZqwiz1+ZFwRHOxXeQ4FlVCMAsMGXkkfci9GjWJSpSWLK6DTZ8 MDF1YsA6qWn8o8DNcVmPm8XbwKUKaz83bZpkMjL1KjYfAtbIfGOIxxy8r7idUAyn btbsHCZkjUnkVgEZDkO/bCDvbRL8/nCRHbz+IDgJ+KnZlDvQ7+IuNwfDUikOT4+r dHs5fAr+OWejTS/IqrHsejdOJLAVZuDbCBqipxUfUvoyjII= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:51 2026 by rpki-client