This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/mk7ttr1hKMruQA-V9YpclvWNi_0.roa File: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (raw, json) Hash identifier: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c= Subject key identifier: 9A:4E:ED:B6:BD:61:28:CA:EE:40:0F:95:F5:8A:5C:96:F5:8D:8B:FD Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Certificate serial: 019B7F83DA570B47631D26A36072AE8E94A0 Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/mk7ttr1hKMruQA-V9YpclvWNi_0.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209625 IP address blocks: 84.238.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:da:57:0b:47:63:1d:26:a3:60:72:ae:8e:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4eedb6bd6128caee400f95f58a5c96f58d8bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:8c:01:0a:de:3c:5a:f2:61:0a:b9:4f:71: d4:5a:4b:f3:64:c8:8c:20:57:d5:c4:8a:f0:54:73: f3:8c:ef:d8:9b:60:24:d7:5f:ba:14:b0:93:57:1a: b7:ed:19:1e:40:95:3e:2e:d2:a6:ad:c0:c2:c9:9e: 06:f6:14:ac:6f:b6:74:06:c3:58:46:86:22:c1:7a: 6a:46:1e:95:ee:3c:7a:78:63:05:a9:28:b8:da:50: bf:5f:35:69:bc:59:bd:9a:ec:41:ff:42:0e:5f:2f: 1a:07:a0:9d:b0:35:57:a9:15:92:c7:83:cd:38:bf: 66:c8:7c:e8:56:c3:e6:82:d8:7c:65:f7:d5:a0:de: 53:c1:fb:b7:45:8d:00:17:6c:a3:f0:f7:72:f4:6f: 3e:b8:d3:0a:ca:4c:e5:a6:32:36:85:48:b4:b5:91: 47:ce:f6:5c:4f:1e:f7:35:00:37:81:58:e4:90:f6: 0f:0d:a4:36:d1:aa:27:f3:84:3b:17:f2:80:aa:15: 81:21:c3:fa:be:1f:fd:df:1a:aa:51:ef:a8:68:e4: 70:8d:4f:b9:5e:6e:6c:0e:06:f8:ea:c4:b6:d6:01: e9:7d:47:7c:a3:7f:4f:78:50:e8:fe:fb:03:ab:00: 70:da:7b:69:08:a2:c9:dd:ab:b2:61:ba:1d:f0:47: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:ED:B6:BD:61:28:CA:EE:40:0F:95:F5:8A:5C:96:F5:8D:8B:FD X509v3 Authority Key Identifier: keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/mk7ttr1hKMruQA-V9YpclvWNi_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.238.133.0/24 Signature Algorithm: sha256WithRSAEncryption 52:25:f2:1b:ae:40:2d:2a:80:cb:60:d1:a5:45:1e:68:3c:ec: de:11:c5:0f:75:8a:e2:61:16:43:54:d8:c6:30:42:96:23:af: 4c:69:5c:d3:3b:56:76:9c:f1:19:e9:04:4b:fa:1a:f1:5a:be: af:09:bb:cc:0b:6d:43:d6:3a:6d:88:4a:56:d7:8a:b1:70:0d: 7a:00:c6:dc:6b:12:9f:66:c5:47:64:c0:13:77:d6:40:d0:d4: 6e:8d:21:8e:17:61:c4:ba:b8:71:37:af:c0:ce:38:7d:5e:17: fd:ca:79:8c:93:58:23:be:d8:ef:c2:3f:2d:22:63:81:cf:52: 44:6b:33:3e:43:68:10:de:94:d3:a4:75:47:9d:48:b8:09:66: 22:6c:68:34:3f:b4:cb:75:54:33:f1:f4:c7:73:c9:c2:20:7d: 2f:94:f8:47:3e:b2:07:c8:3f:ec:c9:ec:f6:77:35:f5:09:26: 1b:ed:25:fe:c0:f6:8b:66:c2:84:0b:e1:05:cd:34:38:a2:87: 96:b5:39:e5:03:41:80:79:52:1b:7c:78:55:42:06:f9:d2:5e: ea:d0:94:4a:bb:a7:4f:ee:96:13:b9:f5:8b:8f:38:0b:87:84: 5b:d6:1a:05:12:5f:8e:d7:d1:47:32:e5:2e:a2:46:49:38:57: 91:8a:88:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9pXC0djHSajYHKujpSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz NjVkODcwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTRlZWRiNmJkNjEyOGNhZWU0MDBmOTVmNThhNWM5NmY1OGQ4YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYGMAQrePFryYQq5T3HUWkvzZMiM IFfVxIrwVHPzjO/Ym2Ak11+6FLCTVxq37RkeQJU+LtKmrcDCyZ4G9hSsb7Z0BsNY RoYiwXpqRh6V7jx6eGMFqSi42lC/XzVpvFm9muxB/0IOXy8aB6CdsDVXqRWSx4PN OL9myHzoVsPmgth8ZffVoN5Twfu3RY0AF2yj8Pdy9G8+uNMKykzlpjI2hUi0tZFH zvZcTx73NQA3gVjkkPYPDaQ20aon84Q7F/KAqhWBIcP6vh/93xqqUe+oaORwjU+5 Xm5sDgb46sS21gHpfUd8o39PeFDo/vsDqwBw2ntpCKLJ3auyYbod8EcckQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpO7ba9YSjK7kAPlfWKXJb1jYv9MB8GA1UdIwQY MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt OTFlMzJjNTE3MTUyLzEvbWs3dHRyMWhLTXJ1UUEtVjlZcGNsdldOaV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVO6FMA0G CSqGSIb3DQEBCwUAA4IBAQBSJfIbrkAtKoDLYNGlRR5oPOzeEcUPdYriYRZDVNjG MEKWI69MaVzTO1Z2nPEZ6QRL+hrxWr6vCbvMC21D1jptiEpW14qxcA16AMbcaxKf ZsVHZMATd9ZA0NRujSGOF2HEurhxN6/Azjh9Xhf9ynmMk1gjvtjvwj8tImOBz1JE azM+Q2gQ3pTTpHVHnUi4CWYibGg0P7TLdVQz8fTHc8nCIH0vlPhHPrIHyD/syez2 dzX1CSYb7SX+wPaLZsKEC+EFzTQ4ooeWtTnlA0GAeVIbfHhVQgb50l7q0JRKu6dP 7pYTufWLjzgLh4Rb1hoFEl+O19FHMuUuokZJOFeRiojf -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:00 2026 by rpki-client