This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa File: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (raw, json) Hash identifier: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk= Subject key identifier: 9A:13:3A:23:BC:0B:FF:47:69:5F:E7:3D:06:39:F6:71:78:F0:0F:7D Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019BDA9206E4FB62442FAEC55D54E9377B0A Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa Signing time: Tue 20 Jan 2026 08:42:41 +0000 ROA not before: Tue 20 Jan 2026 08:42:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 31.24.81.0/24 maxlen: 24 77.87.123.0/24 maxlen: 24 86.54.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:92:06:e4:fb:62:44:2f:ae:c5:5d:54:e9:37:7b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Jan 20 08:42:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a133a23bc0bff47695fe73d0639f67178f00f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ae:98:62:76:99:1a:28:5a:29:28:04:3f:33: d4:4d:d3:33:66:0f:9f:4e:41:ae:6a:1f:a6:1e:99: 1b:36:ae:fb:81:a2:d5:a4:a6:a1:66:c3:7d:ac:e6: 2d:b9:55:fd:52:98:4c:66:95:5a:d5:fa:3b:d5:d1: ee:74:1e:6d:53:63:3d:28:42:03:cf:38:cd:09:38: 89:fc:95:30:50:56:88:e1:e2:29:69:42:8f:7c:52: c9:de:43:00:52:e2:a2:0d:2a:7f:b6:fc:a9:d9:e8: 53:ac:17:bb:a1:d5:27:2d:09:94:05:89:b8:f3:51: 38:fa:36:3e:b7:61:ee:eb:a8:47:22:46:87:43:21: bc:34:91:f4:4f:06:af:58:a1:82:a1:bd:83:4a:61: 22:c0:2a:92:92:26:e9:ee:21:28:b0:37:a2:8f:67: 31:ff:a2:05:27:d0:5d:78:71:b7:5d:db:77:04:32: 75:75:d5:9a:98:02:98:f7:94:81:0b:c1:d8:98:87: 24:7b:f2:1f:c3:a0:57:78:d6:e4:b6:40:38:5e:2e: ae:39:4f:83:ff:21:67:e1:dc:50:87:e9:a2:3d:8e: 77:7f:80:8a:dd:22:e3:0d:72:58:9e:35:7c:9e:7e: c4:bc:3c:80:a5:11:0b:ac:60:4e:7c:9a:f6:90:e5: e9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:3A:23:BC:0B:FF:47:69:5F:E7:3D:06:39:F6:71:78:F0:0F:7D X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.81.0/24 77.87.123.0/24 86.54.26.0/24 Signature Algorithm: sha256WithRSAEncryption af:81:00:13:d4:73:36:e3:e3:e5:8d:90:67:c8:ff:84:53:ba: 97:cb:10:7b:b2:c7:a0:c1:58:79:44:c2:1a:82:fb:dc:c9:e4: 41:73:a3:14:e6:41:1a:0b:fe:1c:ac:b0:d3:68:e6:5a:09:66: 0e:54:89:13:45:f5:46:a0:2d:fb:97:3f:91:74:46:9b:77:d5: 29:df:e3:4d:60:08:0c:17:48:b9:c7:eb:6b:12:7f:12:b3:f9: 67:1e:d6:82:7d:87:92:1f:4e:73:82:4b:8a:d4:f7:7f:1a:85: 38:a2:a6:3c:d6:f4:7e:f4:09:22:0e:c1:07:c4:21:92:45:03: 60:19:ef:57:bc:e4:85:45:7c:63:71:b2:08:46:ac:98:26:3e: 6d:6b:c9:3c:0a:2d:e7:20:74:03:57:d7:4f:9d:96:7d:cc:74: fe:dd:20:fa:61:fe:69:ed:86:d0:60:c3:80:4b:8c:08:6b:7b: 7b:94:83:e3:52:61:64:75:cd:cf:b1:c7:cf:04:dc:ce:6d:85: 6a:11:07:ce:95:5b:3f:35:0e:5f:7f:fc:af:50:0d:62:b6:0f: 06:d5:75:39:97:57:86:2d:c8:67:38:6d:ae:00:47:1c:5f:0c: fd:88:e2:97:85:8f:0d:8d:ab:db:99:9f:75:11:81:67:ee:4c: 61:ce:2b:c6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvakgbk+2JEL67FXVTpN3sKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjYwMTIwMDg0MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTEzM2EyM2JjMGJmZjQ3Njk1ZmU3M2QwNjM5ZjY3MTc4ZjAwZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a6YYnaZGihaKSgEPzPUTdMzZg+f TkGuah+mHpkbNq77gaLVpKahZsN9rOYtuVX9UphMZpVa1fo71dHudB5tU2M9KEID zzjNCTiJ/JUwUFaI4eIpaUKPfFLJ3kMAUuKiDSp/tvyp2ehTrBe7odUnLQmUBYm4 81E4+jY+t2Hu66hHIkaHQyG8NJH0TwavWKGCob2DSmEiwCqSkibp7iEosDeij2cx /6IFJ9BdeHG3Xdt3BDJ1ddWamAKY95SBC8HYmIcke/Ifw6BXeNbktkA4Xi6uOU+D /yFn4dxQh+miPY53f4CK3SLjDXJYnjV8nn7EvDyApRELrGBOfJr2kOXpqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJoTOiO8C/9HaV/nPQY59nF48A99MB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvbWhNNkk3d0xfMGRwWC1jOUJqbjJjWGp3RDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHxhRAwQA TVd7AwQAVjYaMA0GCSqGSIb3DQEBCwUAA4IBAQCvgQAT1HM24+PljZBnyP+EU7qX yxB7ssegwVh5RMIagvvcyeRBc6MU5kEaC/4crLDTaOZaCWYOVIkTRfVGoC37lz+R dEabd9Up3+NNYAgMF0i5x+trEn8Ss/lnHtaCfYeSH05zgkuK1Pd/GoU4oqY81vR+ 9AkiDsEHxCGSRQNgGe9XvOSFRXxjcbIIRqyYJj5ta8k8Ci3nIHQDV9dPnZZ9zHT+ 3SD6Yf5p7YbQYMOAS4wIa3t7lIPjUmFkdc3PscfPBNzObYVqEQfOlVs/NQ5ff/yv UA1itg8G1XU5l1eGLchnOG2uAEccXwz9iOKXhY8NjavbmZ91EYFn7kxhzivG -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:21 2026 by rpki-client