This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/mTuVuiw3HM2pBIheqITWSq5I3n0.roa File: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (raw, json) Hash identifier: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ= Subject key identifier: 99:3B:95:BA:2C:37:1C:CD:A9:04:88:5E:A8:84:D6:4A:AE:48:DE:7D Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019B7C126A5D462A86A0F528750327EC6E3B Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/mTuVuiw3HM2pBIheqITWSq5I3n0.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207590 IP address blocks: 94.154.1.0/24 maxlen: 24 94.154.1.1/32 maxlen: 32 2a0f:f3c0::/29 maxlen: 29 2a0f:f3c0::/48 maxlen: 48 2a0f:f3c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:5d:46:2a:86:a0:f5:28:75:03:27:ec:6e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993b95ba2c371ccda904885ea884d64aae48de7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:9c:b6:af:50:03:dd:85:fe:ac:a1:cd:1e: 23:98:17:e1:7f:1b:c4:6b:87:a9:ad:8c:67:32:ec: 01:0e:33:f4:d3:4d:51:d2:ac:22:6b:87:e7:b8:73: d6:f1:d2:9e:4a:60:49:58:56:43:4a:9d:11:7b:41: ce:95:5e:40:03:9f:42:b9:47:fe:32:09:37:98:52: ae:e9:f7:17:17:dd:b8:53:09:33:8d:86:24:c1:af: a5:56:f9:93:da:f9:f4:55:3a:21:8a:e0:6d:3e:d0: 5d:8f:38:6e:f2:ed:1e:b1:08:44:c8:09:c0:4b:50: 7c:b9:58:ab:cb:fd:fe:31:b5:59:27:9b:5c:a2:5a: 42:8b:ac:58:69:cc:38:2c:c8:39:41:0a:c4:32:d3: 61:10:fc:4a:20:ee:bc:51:3b:3f:77:45:7d:ba:a1: a0:86:e5:d5:f4:cf:ae:d7:cf:f8:63:d0:6e:52:a3: 5e:4e:4b:e4:7c:e1:8e:27:18:8b:24:30:cd:c0:d5: f7:a5:4d:a1:ea:ca:1e:24:09:eb:77:d4:27:ec:ec: f1:c1:26:dd:09:3a:07:41:70:58:4a:63:ca:57:5a: 9e:43:41:e0:f5:c1:b4:4e:5e:5a:b6:79:c1:ba:13: c9:15:18:df:aa:c1:51:55:88:cd:78:37:d0:9e:cb: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:95:BA:2C:37:1C:CD:A9:04:88:5E:A8:84:D6:4A:AE:48:DE:7D X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/mTuVuiw3HM2pBIheqITWSq5I3n0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.1.0/24 IPv6: 2a0f:f3c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:3f:0c:ad:f1:f0:bb:34:c6:a5:c0:8c:87:7f:a9:5b:c7:c2: e8:a3:8a:9e:96:56:32:35:6d:fe:23:6d:5c:17:ff:68:b0:75: 0a:d9:ae:b5:c4:a4:10:a2:13:b8:59:f6:38:e4:ef:88:af:23: 00:83:e2:56:33:81:e3:2a:1f:b9:64:c1:dc:15:37:e6:2b:2f: 71:ad:56:88:8e:76:f9:f1:5a:ea:63:7a:36:ab:48:b4:f3:d0: 52:46:d5:d1:e6:b7:b8:64:dd:a5:c5:2d:db:33:47:3f:f7:48: 42:68:09:6f:43:59:54:1b:e0:84:d9:24:2d:4d:c8:05:9c:97: 08:6f:54:13:c2:92:36:eb:02:f4:b5:26:36:56:bc:98:3c:18: 7a:ba:ef:56:ce:dc:b7:64:5e:46:25:11:f3:53:56:b6:32:2d: 82:ed:1f:e0:4f:8d:22:3b:d3:38:4c:2a:c7:16:f4:bf:f8:41: 14:e9:fd:8c:0f:6e:16:33:ea:43:b7:eb:75:5a:b4:05:d5:74: 33:f3:e0:d5:20:e0:20:8f:92:02:96:a8:fc:88:52:f9:67:bb: c4:aa:d5:81:b2:30:e4:f3:e3:13:1f:36:71:a2:47:8a:6e:e8: b7:50:d8:61:60:df:c8:4a:02:3e:38:ab:3f:51:3c:c7:d5:a8: be:70:a9:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EmpdRiqGoPUodQMn7G47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNiOTViYTJjMzcxY2NkYTkwNDg4NWVhODg0ZDY0YWFlNDhkZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN2ctq9QA92F/qyhzR4jmBfhfxvE a4eprYxnMuwBDjP0001R0qwia4fnuHPW8dKeSmBJWFZDSp0Re0HOlV5AA59CuUf+ Mgk3mFKu6fcXF924UwkzjYYkwa+lVvmT2vn0VTohiuBtPtBdjzhu8u0esQhEyAnA S1B8uViry/3+MbVZJ5tcolpCi6xYacw4LMg5QQrEMtNhEPxKIO68UTs/d0V9uqGg huXV9M+u18/4Y9BuUqNeTkvkfOGOJxiLJDDNwNX3pU2h6soeJAnrd9Qn7OzxwSbd CToHQXBYSmPKV1qeQ0Hg9cG0Tl5atnnBuhPJFRjfqsFRVYjNeDfQnsurvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJk7lbosNxzNqQSIXqiE1kquSN59MB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEvbVR1VnVpdzNITTJwQkloZXFJVFdTcTVJM24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpoBMA0E AgACMAcDBQMqD/PAMA0GCSqGSIb3DQEBCwUAA4IBAQCGPwyt8fC7NMalwIyHf6lb x8Loo4qellYyNW3+I21cF/9osHUK2a61xKQQohO4WfY45O+IryMAg+JWM4HjKh+5 ZMHcFTfmKy9xrVaIjnb58VrqY3o2q0i089BSRtXR5re4ZN2lxS3bM0c/90hCaAlv Q1lUG+CE2SQtTcgFnJcIb1QTwpI26wL0tSY2VryYPBh6uu9Wzty3ZF5GJRHzU1a2 Mi2C7R/gT40iO9M4TCrHFvS/+EEU6f2MD24WM+pDt+t1WrQF1XQz8+DVIOAgj5IC lqj8iFL5Z7vEqtWBsjDk8+MTHzZxokeKbui3UNhhYN/ISgI+OKs/UTzH1ai+cKnB -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:56 2026 by rpki-client