This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/msjxasNTYVip4ytkLcozKUIyuLU.roa File: msjxasNTYVip4ytkLcozKUIyuLU.roa (raw, json) Hash identifier: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg= Subject key identifier: 9A:C8:F1:6A:C3:53:61:58:A9:E3:2B:64:2D:CA:33:29:42:32:B8:B5 Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d Certificate serial: 019B7E3915FDACD542EA47E5DF43A7E6A282 Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/msjxasNTYVip4ytkLcozKUIyuLU.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.124.232.0/23 maxlen: 23 2001:67c:1984::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:fd:ac:d5:42:ea:47:e5:df:43:a7:e6:a2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ac8f16ac3536158a9e32b642dca33294232b8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:13:61:e2:0b:ab:1b:65:05:10:85:3a:c9: bf:82:5e:54:ba:58:dc:ab:0e:60:b5:c1:03:e9:9e: 70:42:02:db:63:46:76:19:39:ac:f2:6d:59:94:40: 51:ec:66:ac:e0:52:7b:24:73:32:e1:cf:8a:4b:55: 0c:71:eb:ab:45:ca:ca:1b:00:2a:9c:86:80:71:d1: c5:e4:06:44:81:14:cd:d0:af:00:8b:c8:ff:13:d0: 3b:15:17:b5:90:12:ed:9d:43:09:96:36:bd:a6:f5: ce:b9:95:ab:7d:82:de:53:4f:d7:5d:8a:22:de:a3: d9:e9:74:4c:ef:3e:bd:c8:87:5b:6e:f3:05:30:93: 34:bd:e5:90:27:23:45:24:20:d2:67:71:7a:1e:8e: d3:b2:ac:88:f2:60:6a:f4:46:ea:6e:bc:f6:c5:8f: 9b:dc:5b:6b:db:77:48:b5:e4:c7:a6:f2:e0:d2:09: 18:7e:8c:2f:43:da:63:12:77:ee:5c:5a:89:ff:64: 3e:23:c0:dc:b2:8d:c1:c7:18:da:f2:ba:c9:7e:dd: 15:8c:46:8f:6e:21:85:87:9d:6a:27:90:1b:94:cb: ae:64:28:23:70:22:de:de:be:15:54:22:52:18:b6: 56:d6:6b:49:c5:67:3e:ed:4c:db:a8:32:5f:9a:e0: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:F1:6A:C3:53:61:58:A9:E3:2B:64:2D:CA:33:29:42:32:B8:B5 X509v3 Authority Key Identifier: keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/msjxasNTYVip4ytkLcozKUIyuLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.232.0/23 IPv6: 2001:67c:1984::/48 Signature Algorithm: sha256WithRSAEncryption 87:3d:93:7c:89:87:32:0f:c7:e5:55:d7:49:2d:60:50:b3:4b: 2e:6c:23:20:26:c8:c2:9b:90:60:b1:bd:d7:24:e6:91:63:ff: 37:db:82:ef:09:fe:38:42:9e:de:16:70:1f:28:73:16:20:f3: c1:51:72:43:61:be:d6:90:69:1c:f9:2c:d7:61:cc:f7:2c:15: d9:a2:77:fe:38:4c:74:db:ee:be:fe:ee:f6:a2:98:e3:ca:a6: f4:4a:c5:74:c8:98:9d:8c:82:71:6f:fb:78:32:bf:4a:f5:a3: 16:ef:e3:4f:72:dc:20:a5:96:9f:c3:46:f9:c4:53:0a:49:3f: 41:ab:4c:fd:c3:ac:65:fb:b9:32:ca:a2:9f:5f:d8:4e:f2:e7: f9:ab:4e:21:df:aa:03:ca:5b:36:be:99:ac:9a:db:45:2b:73: 01:3c:e3:37:ab:dd:7b:09:96:30:60:34:54:e8:4b:61:76:18: 9e:72:da:9f:a9:ab:23:44:bc:64:ce:40:3f:25:15:8d:68:b1: 40:81:db:13:5b:69:f7:c3:11:14:63:d2:83:84:8e:43:38:0a: a1:e0:63:12:ac:9d:a8:78:7a:56:66:e9:87:99:94:57:84:33: 8f:c9:7d:e1:d2:16:f5:a4:5e:76:b8:07:e0:50:c8:f0:f6:b2: b3:78:a3:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+ORX9rNVC6kfl30On5qKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzg2MjEzNGYxNDEzNjVlZjg4NzkwMmU2MDU3YzI4YjI4 MjljOWQwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWM4ZjE2YWMzNTM2MTU4YTllMzJiNjQyZGNhMzMyOTQyMzJiOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgTYeILqxtlBRCFOsm/gl5Uuljc qw5gtcED6Z5wQgLbY0Z2GTms8m1ZlEBR7Gas4FJ7JHMy4c+KS1UMceurRcrKGwAq nIaAcdHF5AZEgRTN0K8Ai8j/E9A7FRe1kBLtnUMJlja9pvXOuZWrfYLeU0/XXYoi 3qPZ6XRM7z69yIdbbvMFMJM0veWQJyNFJCDSZ3F6Ho7TsqyI8mBq9Ebqbrz2xY+b 3Ftr23dIteTHpvLg0gkYfowvQ9pjEnfuXFqJ/2Q+I8Dcso3Bxxja8rrJft0VjEaP biGFh51qJ5AblMuuZCgjcCLe3r4VVCJSGLZW1mtJxWc+7UzbqDJfmuBxLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJrI8WrDU2FYqeMrZC3KMylCMri1MB8GA1UdIwQY MBaAFHo4YhNPFBNl74h5AuYFfCiygpydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmIt ZGEwYTQwNjVlODI0LzEvbXNqeGFzTlRZVmlwNHl0a0xjb3pLVUl5dUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmItZGEwYTQwNjVlODI0 LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwnzoMA8E AgACMAkDBwAgAQZ8GYQwDQYJKoZIhvcNAQELBQADggEBAIc9k3yJhzIPx+VV10kt YFCzSy5sIyAmyMKbkGCxvdck5pFj/zfbgu8J/jhCnt4WcB8ocxYg88FRckNhvtaQ aRz5LNdhzPcsFdmid/44THTb7r7+7vaimOPKpvRKxXTImJ2MgnFv+3gyv0r1oxbv 409y3CCllp/DRvnEUwpJP0GrTP3DrGX7uTLKop9f2E7y5/mrTiHfqgPKWza+maya 20UrcwE84zer3XsJljBgNFToS2F2GJ5y2p+pqyNEvGTOQD8lFY1osUCB2xNbaffD ERRj0oOEjkM4CqHgYxKsnah4elZm6YeZlFeEM4/JfeHSFvWkXna4B+BQyPD2srN4 o0U= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:40 2026 by rpki-client