This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/mGHfTe4HlOI6ikD255Ba9ypvq-M.roa File: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (raw, json) Hash identifier: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw= Subject key identifier: 98:61:DF:4D:EE:07:94:E2:3A:8A:40:F6:E7:90:5A:F7:2A:6F:AB:E3 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F1958E4AA976F51BDE87A6D3D669 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/mGHfTe4HlOI6ikD255Ba9ypvq-M.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213014 IP address blocks: 91.236.75.0/24 maxlen: 24 2a0d:f407:1021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f1:95:8e:4a:a9:76:f5:1b:de:87:a6:d3:d6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9861df4dee0794e23a8a40f6e7905af72a6fabe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:e5:1f:47:d0:bf:13:13:a4:ae:9b:01:86: 6d:a5:6f:c8:97:07:57:87:74:78:1e:d5:6d:fd:79: d9:aa:86:56:66:00:0a:10:4f:9c:4d:70:9d:36:2c: 99:6d:9e:48:98:2e:a8:a6:1e:4c:a9:44:65:4f:ba: e0:5b:25:00:f8:dd:cf:bb:9a:c7:ad:75:a4:12:a3: 3b:20:8e:ed:e1:39:e2:ed:5d:00:3e:37:35:c0:19: 19:d2:d9:1d:15:02:02:5d:ea:39:81:59:ef:9a:1d: 88:83:21:94:8a:69:06:37:5a:33:6b:cb:69:3d:f9: c4:ee:88:7f:89:43:3f:19:1e:92:19:3c:90:14:dc: 7e:6c:5a:ce:65:72:e8:32:93:0e:95:0c:71:81:79: 69:56:a1:3b:4c:9f:2f:d4:92:1e:fa:b6:bc:91:f6: a3:d5:67:d1:1d:b1:53:6c:1b:5f:47:c8:3f:9b:03: d1:ec:d0:62:15:40:1f:85:13:dc:4f:2b:c6:22:1f: 4e:64:32:67:97:59:bb:b3:63:e1:31:58:a1:32:3e: d9:ad:ea:6d:29:77:6e:9a:96:2d:de:8d:ca:94:30: d3:23:37:a7:00:5f:87:db:4d:2d:59:76:5b:75:00: bc:69:ca:58:cc:0f:63:70:74:a1:46:f4:10:c8:03: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:DF:4D:EE:07:94:E2:3A:8A:40:F6:E7:90:5A:F7:2A:6F:AB:E3 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/mGHfTe4HlOI6ikD255Ba9ypvq-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.75.0/24 IPv6: 2a0d:f407:1021::/48 Signature Algorithm: sha256WithRSAEncryption 0c:d9:59:ea:dc:03:0a:75:9a:13:94:6b:0f:49:2c:79:42:a1: 41:47:aa:f4:de:1a:5d:2b:9a:0e:c2:a0:c3:88:24:38:9b:2b: 1e:2c:bd:23:54:36:59:78:d2:3d:9a:df:48:23:11:4e:22:bf: f6:23:e4:45:0d:6f:64:88:54:f5:f9:5d:5e:93:7d:09:a8:4d: d8:7b:a0:96:f3:11:54:2e:0d:28:9d:11:78:40:be:27:18:aa: f2:9d:7a:c2:43:00:99:39:65:b0:3a:ab:48:88:9e:1c:0c:f9: 23:41:2c:8a:46:70:40:3b:81:7d:c7:77:56:7c:e3:eb:56:5f: 2c:1d:a5:08:a4:71:20:f9:77:0d:e4:57:6d:d4:38:1e:b9:bf: df:e5:e0:80:84:64:b1:ed:91:f0:94:43:65:1e:19:31:81:4d: 12:4d:a7:3d:04:50:23:8f:15:12:f1:9c:83:78:bc:b8:dd:c5: 8e:25:1c:ff:75:e3:f9:9b:df:b4:12:ba:ab:6e:44:d0:66:54: a8:fc:a2:20:6b:66:a9:4b:b6:8d:27:56:be:aa:67:bd:03:37: 08:9c:67:88:ff:00:e1:c0:38:27:4c:ce:40:17:ac:37:65:8b: d2:53:19:e2:68:8b:fd:52:19:8c:f3:b2:26:99:fd:ef:c6:97: 5c:80:45:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EPGVjkqpdvUb3oem09ZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODYxZGY0ZGVlMDc5NGUyM2E4YTQwZjZlNzkwNWFmNzJhNmZhYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvflH0fQvxMTpK6bAYZtpW/IlwdX h3R4HtVt/XnZqoZWZgAKEE+cTXCdNiyZbZ5ImC6oph5MqURlT7rgWyUA+N3Pu5rH rXWkEqM7II7t4Tni7V0APjc1wBkZ0tkdFQICXeo5gVnvmh2IgyGUimkGN1oza8tp PfnE7oh/iUM/GR6SGTyQFNx+bFrOZXLoMpMOlQxxgXlpVqE7TJ8v1JIe+ra8kfaj 1WfRHbFTbBtfR8g/mwPR7NBiFUAfhRPcTyvGIh9OZDJnl1m7s2PhMVihMj7Zrept KXdumpYt3o3KlDDTIzenAF+H200tWXZbdQC8acpYzA9jcHShRvQQyAMDhwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJhh303uB5TiOopA9ueQWvcqb6vjMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvbUdIZlRlNEhsT0k2aWtEMjU1QmE5eXB2cS1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+xLMA8E AgACMAkDBwAqDfQHECEwDQYJKoZIhvcNAQELBQADggEBAAzZWercAwp1mhOUaw9J LHlCoUFHqvTeGl0rmg7CoMOIJDibKx4svSNUNll40j2a30gjEU4iv/Yj5EUNb2SI VPX5XV6TfQmoTdh7oJbzEVQuDSidEXhAvicYqvKdesJDAJk5ZbA6q0iInhwM+SNB LIpGcEA7gX3Hd1Z84+tWXywdpQikcSD5dw3kV23UOB65v9/l4ICEZLHtkfCUQ2Ue GTGBTRJNpz0EUCOPFRLxnIN4vLjdxY4lHP914/mb37QSuqtuRNBmVKj8oiBrZqlL to0nVr6qZ70DNwicZ4j/AOHAOCdMzkAXrDdli9JTGeJoi/1SGYzzsiaZ/e/Gl1yA RXE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:34:10 2026 by rpki-client