This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/mMZgXaTh11njkW9J1aXnh-Fk-kI.roa File: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (raw, json) Hash identifier: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0= Subject key identifier: 98:C6:60:5D:A4:E1:D7:59:E3:91:6F:49:D5:A5:E7:87:E1:64:FA:42 Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe Certificate serial: 019B790FF5DD4B3D6B029172604A6BCA9C79 Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/mMZgXaTh11njkW9J1aXnh-Fk-kI.roa Signing time: Thu 01 Jan 2026 10:17:27 +0000 ROA not before: Thu 01 Jan 2026 10:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64089 IP address blocks: 67.158.62.0/24 maxlen: 24 148.59.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f5:dd:4b:3d:6b:02:91:72:60:4a:6b:ca:9c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe Validity Not Before: Jan 1 10:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c6605da4e1d759e3916f49d5a5e787e164fa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3f:88:10:48:94:40:1f:c2:f5:b0:e6:66:49: 9e:81:b0:19:6b:0e:33:70:cb:9b:ff:6f:64:c4:2b: c8:72:b2:2b:6a:18:2e:aa:d7:11:2c:5b:80:39:e3: 30:40:ba:bb:af:f6:dc:73:95:6b:14:63:63:7b:c3: de:3e:b4:43:0d:74:4c:75:88:28:c1:5c:7e:8d:be: 9f:15:b2:ae:0c:0d:08:94:8c:95:74:57:9b:1d:2b: 50:d4:06:ea:41:9c:28:5b:da:d8:e6:ff:3c:b8:d4: 7e:0c:25:cd:cd:a3:13:b6:08:78:aa:58:1b:c9:75: 68:dc:87:98:b7:1e:1f:84:b0:1a:41:02:13:06:78: 22:2d:7a:65:9f:ee:54:f5:66:26:99:8d:14:a9:b6: 5e:18:76:3f:38:96:9e:20:4d:5f:ad:b7:1c:e8:f2: 9a:d8:63:af:42:89:00:ea:6e:5e:ce:98:a9:57:4d: 98:67:41:9a:a8:1d:de:b7:18:79:ed:b3:22:b4:17: 1f:98:9d:be:c9:f1:d3:5e:36:71:5e:e2:6e:b8:8a: 9d:bf:54:5c:da:83:f0:27:57:e3:94:b2:67:7a:c1: 72:c5:69:41:25:9e:eb:46:4a:f2:f2:8f:ba:b5:d9: 8c:22:6c:14:e8:72:d9:49:b8:1b:da:94:73:a3:49: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:60:5D:A4:E1:D7:59:E3:91:6F:49:D5:A5:E7:87:E1:64:FA:42 X509v3 Authority Key Identifier: keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/mMZgXaTh11njkW9J1aXnh-Fk-kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.158.62.0/24 148.59.115.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:12:17:a2:2d:a4:62:51:f2:ac:18:16:63:19:1b:ad:15:5c: 0b:5d:ca:f5:af:23:36:3d:b4:b6:46:0d:35:b9:94:ca:0b:64: f8:e3:d9:dd:de:f6:a1:e8:88:69:8f:6b:82:35:e9:3c:95:16: 86:b0:4b:4d:5d:58:72:7d:ef:f7:cc:80:af:1d:48:09:b4:93: 9d:fe:30:81:64:e6:2b:29:7a:68:1c:9b:e3:4f:b5:40:64:61: 2e:a7:6a:61:fe:d1:7d:7e:96:8d:a9:f3:d8:08:33:bb:9e:c3: b4:ee:c4:57:32:f5:da:3f:3e:9a:70:e2:e0:22:f4:b6:a1:c0: cf:0c:1f:2e:cc:7a:bc:23:81:31:1b:f2:3c:78:91:14:1d:05: 27:16:99:32:1a:f4:00:b7:3a:06:d2:8f:dc:d8:ee:4e:6f:75: 0a:a2:6d:04:89:ee:43:85:31:52:18:3f:d9:81:7e:ce:e6:e3: 6d:af:65:8c:7e:cf:1f:7a:14:31:4b:fb:2e:df:e4:62:4c:6e: 1f:42:d6:c3:f4:37:53:26:dd:a4:9f:b8:14:54:57:9e:d1:e7: 2c:34:ab:d9:91:ab:95:6f:f0:6b:24:c3:d4:20:58:a9:ad:16: e3:65:f3:21:8c:04:51:0f:ad:68:d8:91:6a:55:1b:20:cd:d8: 88:18:b0:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/XdSz1rApFyYEprypx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm ZTk5ZmUwHhcNMjYwMTAxMTAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM2NjA1ZGE0ZTFkNzU5ZTM5MTZmNDlkNWE1ZTc4N2UxNjRmYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j+IEEiUQB/C9bDmZkmegbAZaw4z cMub/29kxCvIcrIrahguqtcRLFuAOeMwQLq7r/bcc5VrFGNje8PePrRDDXRMdYgo wVx+jb6fFbKuDA0IlIyVdFebHStQ1AbqQZwoW9rY5v88uNR+DCXNzaMTtgh4qlgb yXVo3IeYtx4fhLAaQQITBngiLXpln+5U9WYmmY0UqbZeGHY/OJaeIE1frbcc6PKa 2GOvQokA6m5ezpipV02YZ0GaqB3etxh57bMitBcfmJ2+yfHTXjZxXuJuuIqdv1Rc 2oPwJ1fjlLJnesFyxWlBJZ7rRkry8o+6tdmMImwU6HLZSbgb2pRzo0mmxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJjGYF2k4ddZ45FvSdWl54fhZPpCMB8GA1UdIwQY MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt YzEzNWE2ZWRiODYxLzEvbU1aZ1hhVGgxMW5qa1c5SjFhWG5oLUZrLWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ54+AwQA lDtzMA0GCSqGSIb3DQEBCwUAA4IBAQBbEheiLaRiUfKsGBZjGRutFVwLXcr1ryM2 PbS2Rg01uZTKC2T449nd3vah6Ihpj2uCNek8lRaGsEtNXVhyfe/3zICvHUgJtJOd /jCBZOYrKXpoHJvjT7VAZGEup2ph/tF9fpaNqfPYCDO7nsO07sRXMvXaPz6acOLg IvS2ocDPDB8uzHq8I4ExG/I8eJEUHQUnFpkyGvQAtzoG0o/c2O5Ob3UKom0Eie5D hTFSGD/ZgX7O5uNtr2WMfs8fehQxS/su3+RiTG4fQtbD9DdTJt2kn7gUVFee0ecs NKvZkauVb/BrJMPUIFiprRbjZfMhjARRD61o2JFqVRsgzdiIGLCN -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:09 2026 by rpki-client