This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/mrPW8j13_GBigYYiFRrGmv4NiKA.roa File: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (raw, json) Hash identifier: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA= Subject key identifier: 9A:B3:D6:F2:3D:77:FC:60:62:81:86:22:15:1A:C6:9A:FE:0D:88:A0 Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Certificate serial: 019B7F15BB40826B1FD59D3F55E14AAA192C Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/mrPW8j13_GBigYYiFRrGmv4NiKA.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 195.43.149.0/24 maxlen: 24 2001:67c:2aa8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bb:40:82:6b:1f:d5:9d:3f:55:e1:4a:aa:19:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ab3d6f23d77fc6062818622151ac69afe0d88a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:ac:fd:22:12:20:2d:d3:fc:a5:3a:de:f9: 88:c4:84:a4:87:21:b8:e9:dd:59:6c:54:4d:60:02: 9b:e8:eb:26:b5:a1:26:d1:b5:b6:0a:9d:be:9f:5f: 3b:ca:86:ed:c8:3e:48:01:c7:0e:1d:24:82:82:2e: 49:95:57:03:c8:2c:b2:19:e5:93:7b:55:0b:e5:a4: 56:4a:f2:93:e2:c8:77:00:e3:0e:b5:0f:e0:ab:b0: 55:07:6f:79:23:de:41:2e:db:37:06:98:53:03:c8: ef:d4:d9:42:df:3a:5b:97:05:33:31:25:35:0d:07: 04:56:58:bd:8b:5c:ab:75:f2:7a:a1:09:4c:7a:28: 7d:9a:3f:95:d4:f6:fb:d9:66:a1:4f:1a:e9:b9:69: 32:19:6a:f8:de:38:08:1d:51:7b:a3:b6:1e:95:c9: 31:cf:a0:96:c3:c3:d6:72:08:6b:d5:e4:27:e9:89: a5:d4:95:1b:d0:2d:75:94:d3:85:c0:2c:f0:bf:6b: d4:ee:1c:c3:1e:1d:79:2f:8b:e8:0d:d0:05:0e:55: 1f:cb:aa:94:5e:0c:09:c9:4b:21:df:bb:64:3a:b5: 89:15:03:f6:64:a4:95:58:c6:73:84:77:6f:91:38: 0c:17:df:a9:08:54:c5:dd:e5:ca:67:c2:f8:55:c8: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B3:D6:F2:3D:77:FC:60:62:81:86:22:15:1A:C6:9A:FE:0D:88:A0 X509v3 Authority Key Identifier: keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/mrPW8j13_GBigYYiFRrGmv4NiKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.149.0/24 IPv6: 2001:67c:2aa8::/48 Signature Algorithm: sha256WithRSAEncryption 62:f7:80:8d:37:f2:1f:e1:f9:02:82:38:7d:7b:fe:78:49:c2: 56:e0:7e:50:19:a9:c6:38:53:8f:fa:91:2e:90:50:99:f9:d6: 4e:e2:8c:7c:12:29:c4:d1:70:a7:14:73:1e:c0:bb:72:a3:7c: d6:65:f8:08:73:65:33:ac:d8:39:0a:62:02:c0:47:0f:d3:fa: 82:a2:f7:e5:0f:b9:39:d5:24:af:6c:e1:0b:d5:0f:7f:0f:28: ab:3e:64:d9:24:74:42:42:8f:0b:cb:6f:a5:1d:15:d3:f0:75: 3f:d5:4a:5c:1d:7c:ae:1f:09:ab:82:56:a5:bf:dc:21:5b:d6: 20:fe:8d:f1:b1:48:45:fc:8d:21:e0:4b:ce:80:6a:de:a0:35: c1:a2:bd:83:67:e3:96:e6:d4:fb:c7:83:a5:83:53:d4:9c:99: 71:e3:82:77:fe:9e:c3:37:e0:c7:3d:c3:b5:e3:6c:f5:54:ea: a7:01:2a:48:57:cc:63:0d:29:c4:3b:83:dd:42:31:cd:58:00: d7:17:e2:36:00:c8:42:33:08:e0:47:b7:e4:92:12:8c:35:64: ab:82:a4:41:ec:7b:8c:cb:a0:f8:b1:3e:13:e5:99:8e:bb:5f: c0:e0:8c:f6:72:87:68:83:4d:3f:d3:e6:74:02:a6:3d:5f:2e: 6a:ee:a8:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FbtAgmsf1Z0/VeFKqhksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw YTg3YTQwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWIzZDZmMjNkNzdmYzYwNjI4MTg2MjIxNTFhYzY5YWZlMGQ4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHGs/SISIC3T/KU63vmIxISkhyG4 6d1ZbFRNYAKb6OsmtaEm0bW2Cp2+n187yobtyD5IAccOHSSCgi5JlVcDyCyyGeWT e1UL5aRWSvKT4sh3AOMOtQ/gq7BVB295I95BLts3BphTA8jv1NlC3zpblwUzMSU1 DQcEVli9i1yrdfJ6oQlMeih9mj+V1Pb72WahTxrpuWkyGWr43jgIHVF7o7Yelckx z6CWw8PWcghr1eQn6Yml1JUb0C11lNOFwCzwv2vU7hzDHh15L4voDdAFDlUfy6qU XgwJyUsh37tkOrWJFQP2ZKSVWMZzhHdvkTgMF9+pCFTF3eXKZ8L4Vcj0MQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJqz1vI9d/xgYoGGIhUaxpr+DYigMB8GA1UdIwQY MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt OWJhNmRhNzBmYWRiLzEvbXJQVzhqMTNfR0JpZ1lZaUZSckdtdjROaUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwyuVMA8E AgACMAkDBwAgAQZ8KqgwDQYJKoZIhvcNAQELBQADggEBAGL3gI038h/h+QKCOH17 /nhJwlbgflAZqcY4U4/6kS6QUJn51k7ijHwSKcTRcKcUcx7Au3KjfNZl+AhzZTOs 2DkKYgLARw/T+oKi9+UPuTnVJK9s4QvVD38PKKs+ZNkkdEJCjwvLb6UdFdPwdT/V SlwdfK4fCauCVqW/3CFb1iD+jfGxSEX8jSHgS86Aat6gNcGivYNn45bm1PvHg6WD U9ScmXHjgnf+nsM34Mc9w7XjbPVU6qcBKkhXzGMNKcQ7g91CMc1YANcX4jYAyEIz COBHt+SSEow1ZKuCpEHse4zLoPixPhPlmY67X8DgjPZyh2iDTT/T5nQCpj1fLmru qNw= -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:02 2026 by rpki-client