This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/pEE9oryUWOVeetd5uFrgO_cdrpE.roa File: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (raw, json) Hash identifier: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks= Subject key identifier: A4:41:3D:A2:BC:94:58:E5:5E:7A:D7:79:B8:5A:E0:3B:F7:1D:AE:91 Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Certificate serial: 019B7A5B1272FE9297DBFEB9B044EC75B5D9 Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/pEE9oryUWOVeetd5uFrgO_cdrpE.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50309 IP address blocks: 46.182.192.0/21 maxlen: 32 94.142.132.0/23 maxlen: 32 185.160.128.0/22 maxlen: 32 185.221.184.0/22 maxlen: 32 2a0b:5e00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:12:72:fe:92:97:db:fe:b9:b0:44:ec:75:b5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4413da2bc9458e55e7ad779b85ae03bf71dae91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:1c:b1:f9:0a:13:cf:b6:e4:96:e5:24:65: a1:96:d0:b7:9e:cf:33:68:24:92:a5:39:4e:52:0c: 61:4a:cf:2c:97:62:c5:53:e5:e9:25:75:01:df:e8: 9b:38:5e:cf:6c:80:60:31:bf:aa:4f:6b:46:df:c5: a8:10:ad:5a:47:ba:72:c3:1d:d8:16:c1:48:6f:ba: 57:47:01:93:ea:10:0b:0c:b6:2d:db:05:5a:21:9c: 23:fd:28:eb:61:45:69:9e:74:8b:14:56:c6:28:d7: 68:f4:ea:0c:56:2c:99:50:a1:35:6f:48:10:a9:69: 70:ff:57:1e:86:62:7e:38:f0:69:b8:65:07:84:49: a1:c4:bf:3c:68:61:67:71:79:66:55:9d:33:48:5b: 5f:04:e9:e6:56:79:1e:c7:36:0e:91:53:3e:51:f8: a3:7c:3c:b2:ef:85:9e:c1:d9:37:29:44:03:3a:83: 56:86:d7:62:21:70:45:32:c1:d9:90:76:96:78:fa: cb:28:dd:48:15:75:24:36:c1:45:e7:0e:e5:c4:41: 87:5b:0a:11:26:b8:e8:37:cc:fd:4a:df:8b:e1:b0: 75:28:08:d7:5c:de:0f:a1:99:1e:a2:f0:59:4c:c9: 1f:67:18:cc:3c:62:27:2c:e0:84:33:79:f2:ae:50: 41:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:3D:A2:BC:94:58:E5:5E:7A:D7:79:B8:5A:E0:3B:F7:1D:AE:91 X509v3 Authority Key Identifier: keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/pEE9oryUWOVeetd5uFrgO_cdrpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.192.0/21 94.142.132.0/23 185.160.128.0/22 185.221.184.0/22 IPv6: 2a0b:5e00::/29 Signature Algorithm: sha256WithRSAEncryption 88:3d:77:b4:36:eb:b9:de:1e:5e:45:d2:62:bb:b6:cd:a9:4a: 67:6b:0a:44:a4:b8:b2:61:ca:1d:b1:44:d1:88:db:79:0e:78: db:74:ef:b5:f4:07:ab:01:c8:cb:a3:54:87:56:61:e9:f8:cf: 22:86:1d:18:e8:e1:9d:46:d7:b0:02:44:d8:ef:d5:f5:c0:f3: 1c:b0:a2:26:1b:08:1c:80:c7:6d:f3:2a:d7:cb:b5:25:7b:3b: 36:29:55:c7:81:c6:d8:15:f7:83:22:87:94:30:02:2f:6d:c0: 0e:42:6c:42:a6:95:54:9c:e9:97:47:21:80:7c:89:14:a4:d9: 54:0a:cc:73:de:a1:12:d3:c0:86:86:66:30:cd:7f:0c:ea:59: 3e:d4:99:60:0c:b9:cc:0f:35:5c:4b:76:8c:41:7f:71:c8:f7: 72:4d:d1:65:71:35:a1:9e:c5:5b:25:1f:10:e7:bc:fe:99:3d: 0f:e8:2f:97:bd:8b:6f:37:80:16:75:5e:b7:5d:a3:45:53:1e: 90:14:7e:d6:a5:38:09:03:25:5e:1d:03:e9:f7:c1:1b:43:cd: f9:97:0d:53:89:99:d6:90:8f:67:37:2c:0d:1a:11:1c:84:c5: 67:f8:0a:b8:cf:5f:f5:19:e1:3c:c1:af:73:b5:6b:37:cf:fb: 2c:e3:78:72 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6WxJy/pKX2/65sETsdbXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm ZTQ2OWMwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQxM2RhMmJjOTQ1OGU1NWU3YWQ3NzliODVhZTAzYmY3MWRhZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XccsfkKE8+25JblJGWhltC3ns8z aCSSpTlOUgxhSs8sl2LFU+XpJXUB3+ibOF7PbIBgMb+qT2tG38WoEK1aR7pywx3Y FsFIb7pXRwGT6hALDLYt2wVaIZwj/SjrYUVpnnSLFFbGKNdo9OoMViyZUKE1b0gQ qWlw/1cehmJ+OPBpuGUHhEmhxL88aGFncXlmVZ0zSFtfBOnmVnkexzYOkVM+Ufij fDyy74Wewdk3KUQDOoNWhtdiIXBFMsHZkHaWePrLKN1IFXUkNsFF5w7lxEGHWwoR JrjoN8z9St+L4bB1KAjXXN4PoZkeovBZTMkfZxjMPGInLOCEM3nyrlBBXwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKRBPaK8lFjlXnrXebha4Dv3Ha6RMB8GA1UdIwQY MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt NDQ2OTJkYmNjYjMyLzEvcEVFOW9yeVVXT1ZlZXRkNXVGcmdPX2NkcnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLrbAAwQB Xo6EAwQCuaCAAwQCud24MA0EAgACMAcDBQMqC14AMA0GCSqGSIb3DQEBCwUAA4IB AQCIPXe0Nuu53h5eRdJiu7bNqUpnawpEpLiyYcodsUTRiNt5DnjbdO+19AerAcjL o1SHVmHp+M8ihh0Y6OGdRtewAkTY79X1wPMcsKImGwgcgMdt8yrXy7Ulezs2KVXH gcbYFfeDIoeUMAIvbcAOQmxCppVUnOmXRyGAfIkUpNlUCsxz3qES08CGhmYwzX8M 6lk+1JlgDLnMDzVcS3aMQX9xyPdyTdFlcTWhnsVbJR8Q57z+mT0P6C+XvYtvN4AW dV63XaNFUx6QFH7WpTgJAyVeHQPp98EbQ835lw1TiZnWkI9nNywNGhEchMVn+Aq4 z1/1GeE8wa9ztWs3z/ss43hy -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:07 2026 by rpki-client