This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/mFfXpLKFugPnpjv01dOdi4FA4Gw.roa File: mFfXpLKFugPnpjv01dOdi4FA4Gw.roa (raw, json) Hash identifier: 3g2SXGJpuzV1vU10pMqGPocyoDuCUv6hUHSIZHwoqs4= Subject key identifier: 98:57:D7:A4:B2:85:BA:03:E7:A6:3B:F4:D5:D3:9D:8B:81:40:E0:6C Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110 Certificate serial: 019B783437083FBDC7EA2FC3F6A8A809EB2C Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/mFfXpLKFugPnpjv01dOdi4FA4Gw.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58282 IP address blocks: 192.66.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:37:08:3f:bd:c7:ea:2f:c3:f6:a8:a8:09:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9857d7a4b285ba03e7a63bf4d5d39d8b8140e06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:af:76:eb:bd:8e:63:2b:d9:88:15:d3:21: 65:b7:9c:f7:53:f5:72:b2:d2:70:3f:51:91:8f:1c: f9:54:6c:a2:50:58:9e:e1:36:d3:2b:06:2b:df:8f: b7:c6:25:cb:cb:60:62:8b:72:3f:cb:ac:cd:c3:f7: aa:70:5c:3c:b1:36:d5:4a:2e:2c:11:14:bf:e2:be: a0:1e:84:44:7d:ab:8a:eb:42:33:83:5a:cd:58:3a: c0:65:b2:e3:07:7b:6a:29:24:b8:77:b1:f2:75:39: a5:74:29:86:51:76:69:dc:b5:fb:41:d3:51:69:75: 90:c3:1a:12:38:bc:91:e7:dd:cc:e9:ee:07:c0:95: 8f:93:78:c1:23:49:7d:e1:34:da:6e:e5:2c:16:3c: d0:65:4c:0b:54:a9:61:fa:01:21:a8:5e:ae:7a:44: c5:0b:3f:69:28:25:68:33:87:04:ca:4f:72:be:db: 99:49:cc:37:1c:0d:12:77:16:e6:90:f2:31:1c:72: 61:60:b4:ac:fc:b9:c0:07:92:e8:dc:a1:d5:3b:49: 2b:56:70:91:d2:21:e7:26:d7:07:60:37:e1:ac:d5: 25:24:ce:0b:df:45:61:a5:07:6e:04:86:f9:86:53: 76:98:d7:cd:2f:34:82:7d:bf:c3:db:27:34:00:83: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:D7:A4:B2:85:BA:03:E7:A6:3B:F4:D5:D3:9D:8B:81:40:E0:6C X509v3 Authority Key Identifier: keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/mFfXpLKFugPnpjv01dOdi4FA4Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.66.62.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:6a:ff:04:9f:90:d0:cd:52:31:f0:66:81:30:dd:a1:8a:80: c4:06:9d:9a:c0:ca:9c:51:81:75:1d:94:69:60:9d:fb:1d:a6: 22:bc:47:cd:25:ab:50:74:d8:06:a3:ca:66:9d:61:15:44:9f: 7f:28:26:b9:5f:57:59:5c:ae:a1:cd:3b:41:67:35:63:31:ff: 3c:b4:32:75:b2:86:44:c9:94:65:4d:ae:b7:a1:d7:87:c2:b8: f6:e1:1d:7c:42:c1:19:3b:f1:8f:97:cd:6d:84:fa:af:c8:2b: 87:09:ea:16:82:1c:cc:34:2d:59:89:43:95:9e:74:6b:ca:6c: 68:58:ab:b6:e1:ee:ac:47:4a:74:1e:69:a3:35:1d:c5:48:e1: 2d:f8:54:c2:29:0a:5c:64:48:6e:43:21:8b:46:1d:b4:d5:98: 4b:54:79:f4:3b:4c:6d:55:93:e4:52:79:8c:4a:3f:7e:a5:6d: f3:ab:a7:65:dc:c8:cc:7c:ec:ce:b9:4a:7b:64:74:63:c4:d9: 98:63:d5:88:f0:32:79:18:ec:31:14:08:7d:7e:25:30:ca:66: 0a:16:9d:2d:4f:41:fc:af:ee:87:d6:9d:27:46:9f:5a:47:53: d3:13:82:7b:45:28:9f:f5:0d:fa:b8:3e:f9:40:4c:d4:44:79: 96:ac:83:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDcIP73H6i/D9qioCessMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTVjM2VmMDBjZmZlY2UyZjcxYjYxOTkxYzZjNmQzZGE0 OWMxMTAwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODU3ZDdhNGIyODViYTAzZTdhNjNiZjRkNWQzOWQ4YjgxNDBlMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC2vduu9jmMr2YgV0yFlt5z3U/Vy stJwP1GRjxz5VGyiUFie4TbTKwYr34+3xiXLy2Bii3I/y6zNw/eqcFw8sTbVSi4s ERS/4r6gHoREfauK60Izg1rNWDrAZbLjB3tqKSS4d7HydTmldCmGUXZp3LX7QdNR aXWQwxoSOLyR593M6e4HwJWPk3jBI0l94TTabuUsFjzQZUwLVKlh+gEhqF6uekTF Cz9pKCVoM4cEyk9yvtuZScw3HA0SdxbmkPIxHHJhYLSs/LnAB5Lo3KHVO0krVnCR 0iHnJtcHYDfhrNUlJM4L30VhpQduBIb5hlN2mNfNLzSCfb/D2yc0AIOtCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhX16SyhboD56Y79NXTnYuBQOBsMB8GA1UdIwQY MBaAFEKVw+8Az/7OL3G2GZHGxtPaScEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDIt OTY5ZjJhMDBlZGUwLzEvbUZmWHBMS0Z1Z1BucGp2MDFkT2RpNEZBNEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDItOTY5ZjJhMDBlZGUw LzEvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEI+MA0G CSqGSIb3DQEBCwUAA4IBAQBaav8En5DQzVIx8GaBMN2hioDEBp2awMqcUYF1HZRp YJ37HaYivEfNJatQdNgGo8pmnWEVRJ9/KCa5X1dZXK6hzTtBZzVjMf88tDJ1soZE yZRlTa63odeHwrj24R18QsEZO/GPl81thPqvyCuHCeoWghzMNC1ZiUOVnnRrymxo WKu24e6sR0p0HmmjNR3FSOEt+FTCKQpcZEhuQyGLRh201ZhLVHn0O0xtVZPkUnmM Sj9+pW3zq6dl3MjMfOzOuUp7ZHRjxNmYY9WI8DJ5GOwxFAh9fiUwymYKFp0tT0H8 r+6H1p0nRp9aR1PTE4J7RSif9Q36uD75QEzURHmWrIOc -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:25 2026 by rpki-client