This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa File: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (raw, json) Hash identifier: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw= Subject key identifier: 32:6A:6E:A6:32:FA:FB:D5:BC:BE:E6:38:CE:8F:50:DE:D0:EA:DE:1D Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414 Certificate serial: 019B7BA5179A871B46A72AE083FCBF26850A Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200624 IP address blocks: 212.48.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:9a:87:1b:46:a7:2a:e0:83:fc:bf:26:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=326a6ea632fafbd5bcbee638ce8f50ded0eade1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:77:f0:13:00:9e:5e:ef:f6:72:71:95:87: 84:e6:9b:84:1f:80:89:d2:ba:bc:40:6e:a7:c8:0f: 26:6d:b7:ce:50:cf:29:a9:ca:2b:f8:94:89:3f:27: dd:36:33:00:f9:0a:91:87:3b:f0:61:73:91:82:76: c7:01:f9:41:7d:b7:75:1c:b6:4f:bd:39:5b:0c:9f: fa:02:7a:8b:0a:a7:b5:74:80:61:24:34:43:84:3a: bc:b8:d0:94:03:41:25:e0:e8:f4:8e:b8:59:a9:a6: 2e:c6:2e:7f:ce:38:68:b9:5f:2f:42:ba:97:f0:0c: af:f7:69:57:9c:0b:89:99:b9:06:41:4c:b7:53:53: 86:3e:1e:f0:c7:21:62:b8:3a:57:c0:13:b7:0a:0c: 38:c7:51:9c:65:b8:88:a8:19:3c:ae:63:44:22:aa: a6:50:ee:3f:b3:1c:cf:29:55:cd:49:37:e0:ca:0b: ba:38:90:52:70:62:3e:69:74:c2:f8:73:6d:48:69: 0e:99:41:41:40:5e:0e:aa:e9:30:57:22:9e:bb:85: c5:de:88:dd:07:89:66:3b:78:ac:d5:fb:ac:d1:2e: 9e:c2:69:88:51:80:57:fc:b0:4a:2e:42:70:e8:fe: e9:4e:8a:41:7e:11:be:ca:e6:50:ec:4b:a3:c2:d4: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:6E:A6:32:FA:FB:D5:BC:BE:E6:38:CE:8F:50:DE:D0:EA:DE:1D X509v3 Authority Key Identifier: keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.48.235.0/24 Signature Algorithm: sha256WithRSAEncryption 02:d0:2b:e6:f6:d1:b3:ac:1d:7c:5d:e4:75:a7:e7:8b:83:fe: 9e:ad:6b:17:03:81:6b:a5:ab:d4:52:3c:bd:87:3a:6e:01:98: d3:e5:75:72:a5:5b:1d:df:29:ba:b8:ca:e8:cb:18:e0:59:32: 32:5e:08:20:37:ba:ea:ee:5e:79:5d:d0:c8:09:36:23:f2:63: 16:41:84:09:5c:c4:ed:ed:cc:08:e4:2a:a3:a9:d3:5d:70:17: 91:ed:c0:3c:ae:50:ba:f0:69:28:e4:ff:8e:20:c4:e5:7d:bb: 6d:e4:15:72:71:41:a9:9d:f7:09:df:f7:38:8a:2c:a9:fb:87: 24:72:94:e3:25:77:01:52:bc:e3:08:5f:c0:29:85:49:68:35: 8f:53:a2:d5:8b:dd:ba:2c:bd:cc:80:dc:a1:f3:e4:64:a1:44: 46:05:a0:ba:73:05:78:2d:40:bb:10:3e:24:50:d5:98:01:2e: 06:ff:b5:fe:44:7a:ef:a5:cb:bd:b6:3e:90:fb:c8:0e:3b:fe: 55:6f:4d:3f:2c:fa:16:4a:b2:d9:01:37:6c:a5:c9:2c:20:6e: 47:73:f6:08:d3:f0:a1:d8:97:a0:da:e5:c9:d4:02:1c:02:e3: 07:79:1a:ca:c6:0c:83:1b:ba:17:a5:af:24:f3:93:39:5c:1d: 68:18:7e:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pReahxtGpyrgg/y/JoUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3 ODM0MTQwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjZhNmVhNjMyZmFmYmQ1YmNiZWU2MzhjZThmNTBkZWQwZWFkZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JZ38BMAnl7v9nJxlYeE5puEH4CJ 0rq8QG6nyA8mbbfOUM8pqcor+JSJPyfdNjMA+QqRhzvwYXORgnbHAflBfbd1HLZP vTlbDJ/6AnqLCqe1dIBhJDRDhDq8uNCUA0El4Oj0jrhZqaYuxi5/zjhouV8vQrqX 8Ayv92lXnAuJmbkGQUy3U1OGPh7wxyFiuDpXwBO3Cgw4x1GcZbiIqBk8rmNEIqqm UO4/sxzPKVXNSTfgygu6OJBScGI+aXTC+HNtSGkOmUFBQF4OqukwVyKeu4XF3ojd B4lmO3is1fus0S6ewmmIUYBX/LBKLkJw6P7pTopBfhG+yuZQ7EujwtSAeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJqbqYy+vvVvL7mOM6PUN7Q6t4dMB8GA1UdIwQY MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt MWY2ODk5MzViOTBmLzEvTW1wdXBqTDYtOVc4dnVZNHpvOVEzdERxM2gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DDrMA0G CSqGSIb3DQEBCwUAA4IBAQAC0Cvm9tGzrB18XeR1p+eLg/6erWsXA4FrpavUUjy9 hzpuAZjT5XVypVsd3ym6uMroyxjgWTIyXgggN7rq7l55XdDICTYj8mMWQYQJXMTt 7cwI5CqjqdNdcBeR7cA8rlC68Gko5P+OIMTlfbtt5BVycUGpnfcJ3/c4iiyp+4ck cpTjJXcBUrzjCF/AKYVJaDWPU6LVi926LL3MgNyh8+RkoURGBaC6cwV4LUC7ED4k UNWYAS4G/7X+RHrvpcu9tj6Q+8gOO/5Vb00/LPoWSrLZATdspcksIG5Hc/YI0/Ch 2Jeg2uXJ1AIcAuMHeRrKxgyDG7oXpa8k85M5XB1oGH4e -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:22 2026 by rpki-client