This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/mr-z6LiGLk9vnc0l0RH_6o8bsBI.roa File: mr-z6LiGLk9vnc0l0RH_6o8bsBI.roa (raw, json) Hash identifier: UZNObGvWLEcjZGMY4bRXGikOE8QWK4zT7JgfjIfGX9Y= Subject key identifier: 9A:BF:B3:E8:B8:86:2E:4F:6F:9D:CD:25:D1:11:FF:EA:8F:1B:B0:12 Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Certificate serial: 019B77C6BC6FC561524B6B7A1D69E63C5EE0 Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/mr-z6LiGLk9vnc0l0RH_6o8bsBI.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215643 IP address blocks: 109.107.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bc:6f:c5:61:52:4b:6b:7a:1d:69:e6:3c:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9abfb3e8b8862e4f6f9dcd25d111ffea8f1bb012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:81:65:b7:07:a8:7f:9f:20:d2:62:c9:ed: 08:59:aa:5b:0c:fd:62:f4:9c:10:7b:cf:ec:d7:9f: d4:5b:49:25:0a:70:23:25:6f:a9:83:29:8a:e8:a8: 9f:af:ee:b8:38:ad:c0:12:50:66:04:bc:0e:8e:74: dd:17:66:4e:bb:55:70:f0:c8:bd:38:60:1e:da:67: a9:3e:0e:11:6a:4e:7a:01:d9:9b:13:97:46:e7:ab: 06:d3:70:b0:95:6c:13:59:a0:a5:d0:b0:18:c0:f0: 9c:38:f4:84:62:d6:48:92:e0:f1:48:23:a0:97:b3: d3:55:a0:a5:76:23:55:d0:7f:ec:44:6d:3b:4a:27: 5d:8a:15:35:82:49:e5:3f:53:fa:a2:27:a1:6d:dd: 6d:99:5d:0b:18:19:e2:65:c1:a8:fd:c0:43:f4:6f: d6:b8:cc:ef:7a:0a:12:60:73:df:3d:9f:8b:37:ac: 81:b3:6e:5c:d4:3d:e7:a5:62:02:c5:fd:91:a4:87: 2d:15:c4:7d:4f:12:9e:ff:ac:27:3b:d5:a7:62:7c: ab:2c:bc:97:3e:4a:32:c1:6c:00:60:b2:5d:ec:67: f8:48:97:f2:fc:e9:76:b2:a9:d9:80:7b:1f:2d:33: 40:a8:d9:9c:17:fa:cf:b8:43:03:15:52:36:3f:8a: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:B3:E8:B8:86:2E:4F:6F:9D:CD:25:D1:11:FF:EA:8F:1B:B0:12 X509v3 Authority Key Identifier: keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/mr-z6LiGLk9vnc0l0RH_6o8bsBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:f1:ed:98:c3:65:41:04:8e:85:d5:0a:8e:20:ef:5c:12:44: f1:58:36:00:fb:b0:19:5d:49:23:d6:b3:4d:41:50:1a:27:ff: 4c:9e:ce:c9:ae:aa:38:10:65:29:3f:71:ff:6e:06:46:8f:33: 65:a4:56:71:8c:c3:ee:20:05:74:bc:ce:c8:e4:38:2d:b0:37: 2b:b3:23:cb:9b:a3:ed:68:7b:bd:0f:bb:1d:a9:ae:0e:e8:de: d0:7e:8a:84:4f:81:84:c9:53:88:2f:c9:ed:b3:a2:e6:c6:f7: 91:c7:7c:6e:fb:be:d0:27:8c:54:8c:8d:09:91:d0:38:5a:55: eb:65:1b:aa:36:ff:82:19:f1:8a:56:f1:a8:9f:6b:49:51:cf: 3f:da:8f:ef:85:fa:9e:a7:d6:cf:d2:cd:30:22:99:5b:5c:b0: bc:1a:10:76:09:99:6a:2c:d0:9a:97:13:f0:a4:2e:5b:6d:9a: 41:6f:b9:e9:b3:99:ed:9b:9d:7c:f0:6c:05:07:b5:1c:c8:ae: 5c:d9:43:0c:89:6c:25:f6:5f:86:ba:32:39:6d:69:07:7c:64: 2e:9b:54:38:3a:30:fb:61:ef:df:85:f1:8f:30:6d:2b:fd:d9: c5:8e:05:2e:be:1f:52:9c:fb:b5:6a:93:63:1e:f6:5f:78:4a: bc:a6:c0:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrxvxWFSS2t6HWnmPF7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2 MzkwODYwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJmYjNlOGI4ODYyZTRmNmY5ZGNkMjVkMTExZmZlYThmMWJiMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+SBZbcHqH+fINJiye0IWapbDP1i 9JwQe8/s15/UW0klCnAjJW+pgymK6Kifr+64OK3AElBmBLwOjnTdF2ZOu1Vw8Mi9 OGAe2mepPg4Rak56AdmbE5dG56sG03CwlWwTWaCl0LAYwPCcOPSEYtZIkuDxSCOg l7PTVaCldiNV0H/sRG07SiddihU1gknlP1P6oiehbd1tmV0LGBniZcGo/cBD9G/W uMzvegoSYHPfPZ+LN6yBs25c1D3npWICxf2RpIctFcR9TxKe/6wnO9WnYnyrLLyX PkoywWwAYLJd7Gf4SJfy/Ol2sqnZgHsfLTNAqNmcF/rPuEMDFVI2P4pfvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq/s+i4hi5Pb53NJdER/+qPG7ASMB8GA1UdIwQY MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt NzdmNmU5NGUzZGNjLzEvbXItejZMaUdMazl2bmMwbDBSSF82bzhic0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuKMA0G CSqGSIb3DQEBCwUAA4IBAQAc8e2Yw2VBBI6F1QqOIO9cEkTxWDYA+7AZXUkj1rNN QVAaJ/9Mns7Jrqo4EGUpP3H/bgZGjzNlpFZxjMPuIAV0vM7I5DgtsDcrsyPLm6Pt aHu9D7sdqa4O6N7QfoqET4GEyVOIL8nts6LmxveRx3xu+77QJ4xUjI0JkdA4WlXr ZRuqNv+CGfGKVvGon2tJUc8/2o/vhfqep9bP0s0wIplbXLC8GhB2CZlqLNCalxPw pC5bbZpBb7nps5ntm5188GwFB7UcyK5c2UMMiWwl9l+GujI5bWkHfGQum1Q4OjD7 Ye/fhfGPMG0r/dnFjgUuvh9SnPu1apNjHvZfeEq8psAH -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:21 2026 by rpki-client