This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/mjlQCUwBjGWrcW4jdhqdW0o0SSE.roa File: mjlQCUwBjGWrcW4jdhqdW0o0SSE.roa (raw, json) Hash identifier: MZkg+G0jF+K909+Jj6nECm0W5mFocEbKr2UCWfN+GJM= Subject key identifier: 9A:39:50:09:4C:01:8C:65:AB:71:6E:23:76:1A:9D:5B:4A:34:49:21 Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Certificate serial: 019B76EB7BB06E79E6F6A3EED0C30E128019 Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/mjlQCUwBjGWrcW4jdhqdW0o0SSE.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206174 IP address blocks: 66.84.72.0/24 maxlen: 24 193.31.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:b0:6e:79:e6:f6:a3:ee:d0:c3:0e:12:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a3950094c018c65ab716e23761a9d5b4a344921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6f:cf:a0:01:15:45:c8:dc:63:2f:57:4c:09: 20:1f:86:6f:7d:03:5d:4d:cc:79:84:37:e5:99:32: 2f:7a:05:e1:ab:51:99:53:be:96:0e:29:2d:ef:09: 1d:b5:fc:36:0d:95:49:a2:98:3a:5e:ca:fb:d2:79: e9:9e:a8:46:70:30:b0:14:ac:b4:46:00:f0:f5:f4: b1:1e:f7:2d:35:c7:92:6d:6f:6a:e3:f0:7f:eb:e8: 71:d2:13:90:9f:03:42:58:01:9e:db:f8:28:d4:27: 2f:5e:43:0f:e8:3b:fc:ee:ce:07:28:0d:38:5e:9b: 31:4b:04:5e:79:08:a5:d9:20:3f:c0:79:a5:43:bd: bb:59:ec:d1:21:f3:94:f3:6b:00:a4:bb:8b:3f:4f: 87:55:ec:e5:4e:41:c6:90:85:69:61:68:71:47:ce: 27:14:ff:75:f4:6f:11:c6:60:b2:3c:c5:92:4a:2f: 77:ea:f7:1f:f2:04:97:62:63:f1:7f:11:52:27:2c: d4:c5:5d:ae:85:7b:0c:7c:2a:96:34:cf:80:bc:a4: 75:dd:ac:7c:72:75:12:21:a9:b7:f7:02:3d:3d:e2: 0a:4f:92:b2:e2:8a:d3:8b:fd:38:ef:7f:84:92:76: 42:1a:e9:ea:9d:ff:db:32:c4:20:12:f4:fb:17:e9: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:39:50:09:4C:01:8C:65:AB:71:6E:23:76:1A:9D:5B:4A:34:49:21 X509v3 Authority Key Identifier: keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/mjlQCUwBjGWrcW4jdhqdW0o0SSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.84.72.0/24 193.31.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:d1:7b:75:de:c6:a4:c0:51:36:4f:39:de:94:41:3c:68:17: cc:bd:8e:03:38:b1:13:7f:1c:e2:32:42:79:9b:ca:ab:a4:d0: a2:54:3e:48:2e:f0:19:34:02:08:f6:36:ae:a7:b5:54:9d:01: 89:a4:03:00:66:d4:9d:bf:76:c8:c8:30:99:86:e9:b9:be:e6: 83:29:92:e3:1f:4e:42:a1:bf:7e:37:5f:34:c0:08:c9:9c:73: c7:e5:e9:ce:c7:1e:4b:5b:41:77:13:9c:9a:c1:0e:e5:20:05: fd:43:25:34:4b:78:fa:ab:82:3d:69:23:41:98:a6:3a:23:2c: 9c:d6:86:56:7f:f3:00:12:21:89:07:74:92:43:4e:82:41:06: 77:94:a7:12:c3:c0:7d:05:92:f9:06:f5:02:ef:2e:e7:ad:27: 65:53:b1:6a:23:f5:35:0d:a8:a3:e8:60:54:8a:9c:cd:cf:d2: 83:8b:9a:ee:f7:c9:b5:c6:aa:3f:fe:c0:33:4d:16:c7:87:44: 05:c8:f2:a2:e0:ff:ec:b5:de:60:bc:16:09:80:7b:38:fb:55: e7:1b:c8:73:70:be:42:ed:ca:53:4f:fe:38:eb:38:7d:49:b5: cd:f1:73:b9:1c:04:b4:9e:a9:0e:40:46:ed:78:c4:23:b4:db: 0e:52:cc:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt263uwbnnm9qPu0MMOEoAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDZlOGE3NmQzMGM3YzA0OTViYzVjZThlZTUxMTBmZWFi Mjg2ZTYwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM5NTAwOTRjMDE4YzY1YWI3MTZlMjM3NjFhOWQ1YjRhMzQ0OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG/PoAEVRcjcYy9XTAkgH4ZvfQNd Tcx5hDflmTIvegXhq1GZU76WDikt7wkdtfw2DZVJopg6Xsr70nnpnqhGcDCwFKy0 RgDw9fSxHvctNceSbW9q4/B/6+hx0hOQnwNCWAGe2/go1CcvXkMP6Dv87s4HKA04 XpsxSwReeQil2SA/wHmlQ727WezRIfOU82sApLuLP0+HVezlTkHGkIVpYWhxR84n FP919G8RxmCyPMWSSi936vcf8gSXYmPxfxFSJyzUxV2uhXsMfCqWNM+AvKR13ax8 cnUSIam39wI9PeIKT5Ky4orTi/0473+EknZCGunqnf/bMsQgEvT7F+lgEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJo5UAlMAYxlq3FuI3YanVtKNEkhMB8GA1UdIwQY MBaAFAJG6KdtMMfASVvFzo7lEQ/qsobmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEt N2I5NmE5OTk3NzE4LzEvbWpsUUNVd0JqR1dyY1c0amRocWRXMG8wU1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEtN2I5NmE5OTk3NzE4 LzEvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQlRIAwQA wR/dMA0GCSqGSIb3DQEBCwUAA4IBAQB80Xt13sakwFE2TznelEE8aBfMvY4DOLET fxziMkJ5m8qrpNCiVD5ILvAZNAII9jaup7VUnQGJpAMAZtSdv3bIyDCZhum5vuaD KZLjH05Cob9+N180wAjJnHPH5enOxx5LW0F3E5yawQ7lIAX9QyU0S3j6q4I9aSNB mKY6Iyyc1oZWf/MAEiGJB3SSQ06CQQZ3lKcSw8B9BZL5BvUC7y7nrSdlU7FqI/U1 Daij6GBUipzNz9KDi5ru98m1xqo//sAzTRbHh0QFyPKi4P/std5gvBYJgHs4+1Xn G8hzcL5C7cpTT/446zh9SbXN8XO5HAS0nqkOQEbteMQjtNsOUsyk -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:20 2026 by rpki-client