This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mtby6HwJt-qTyoSxpWnoourxuwI.roa File: mtby6HwJt-qTyoSxpWnoourxuwI.roa (raw, json) Hash identifier: 9x8korHyDKLnel1VwtggSyhKnwA1Zl2k7SfyuDInt+k= Subject key identifier: 9A:D6:F2:E8:7C:09:B7:EA:93:CA:84:B1:A5:69:E8:A2:EA:F1:BB:02 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783492DC20F54E5371C9D81D7CA24117 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mtby6HwJt-qTyoSxpWnoourxuwI.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210614 IP address blocks: 193.183.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:92:dc:20:f5:4e:53:71:c9:d8:1d:7c:a2:41:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ad6f2e87c09b7ea93ca84b1a569e8a2eaf1bb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:cd:0d:2d:8c:77:0d:67:64:96:c7:5f:59: 33:ca:65:c6:29:23:4a:50:2a:9d:6c:9b:75:2a:79: 46:60:25:ad:85:cd:b1:b6:5a:be:f7:7e:dd:0f:b4: cd:22:20:08:53:6d:2e:e6:b2:8f:09:f8:bc:64:2c: 81:2b:67:e9:74:db:3f:76:cd:ea:98:f2:3d:a0:7a: fd:4f:cc:48:77:33:54:d1:1e:8b:29:56:68:f3:cc: 19:a6:8f:bb:ab:9a:3f:c2:3b:d2:b3:75:7e:44:14: c5:c5:35:b9:7a:0c:ab:93:9d:1b:a5:ee:ec:fc:c4: bb:1a:79:9e:f4:f0:1f:59:31:15:7e:2c:3e:22:0b: 64:9b:f7:8c:ea:e3:b7:35:bd:74:c7:66:9a:cd:00: 21:35:9f:b7:57:f2:45:58:1d:07:56:d2:f9:ed:17: a6:80:c1:e4:4c:c9:e1:04:1b:54:29:3d:b3:fe:67: 63:92:16:0e:18:af:d8:51:94:8c:9a:d9:1e:87:5b: cf:45:93:a7:f5:8d:b5:50:5b:69:15:a1:77:2b:0a: 9e:12:94:74:e8:dd:92:2c:ef:f1:6a:9b:ff:ec:c4: c4:14:17:70:a0:4b:f7:dd:5e:aa:e4:6a:7c:4b:30: d5:5e:72:9f:4c:4d:3e:03:32:92:60:bb:c6:0a:ad: 80:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D6:F2:E8:7C:09:B7:EA:93:CA:84:B1:A5:69:E8:A2:EA:F1:BB:02 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mtby6HwJt-qTyoSxpWnoourxuwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.79.0/24 Signature Algorithm: sha256WithRSAEncryption 17:aa:e3:36:5c:71:2f:2b:ad:dc:ff:63:be:76:7c:9b:78:54: 00:49:0a:57:8c:49:f7:55:53:c8:4c:56:99:78:22:c5:7d:cb: 4e:d2:6a:4b:a6:a2:32:e1:7b:0b:f6:c3:f5:a1:0d:06:0d:50: 8f:fb:34:ea:85:07:db:5f:b6:6c:b8:66:61:21:1f:c8:2f:e5: a9:98:54:a4:fd:aa:50:0c:d0:17:64:1b:28:81:60:76:59:88: 50:32:66:e2:56:fc:d8:bf:cb:91:34:e3:6e:8a:39:8b:3a:8d: 97:43:d8:48:c6:d9:2a:fe:f5:bc:bd:fb:41:0e:32:1f:42:8d: 92:98:c7:71:9a:d9:de:5e:7c:a7:f0:05:84:bc:34:19:27:b4: 86:58:30:08:80:c5:5a:62:7e:6c:9f:1d:e3:0c:19:85:59:7b: c1:b9:82:c6:dc:db:f6:8e:e0:41:90:8a:c1:5b:5d:0a:e0:08: 93:03:c5:81:f5:f0:57:41:76:8f:75:dd:a6:f5:ba:1a:74:e6: 2a:d3:95:ea:00:5a:61:fc:de:68:75:05:f0:28:fd:e0:25:8a: 52:84:35:29:8c:ba:2e:58:83:24:cf:51:ab:23:ef:f7:fd:27: 6e:b3:8a:fc:df:60:a8:44:a8:20:05:f6:8e:84:3c:46:cc:b4: 9b:02:64:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJLcIPVOU3HJ2B18okEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWQ2ZjJlODdjMDliN2VhOTNjYTg0YjFhNTY5ZThhMmVhZjFiYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvrNDS2Mdw1nZJbHX1kzymXGKSNK UCqdbJt1KnlGYCWthc2xtlq+937dD7TNIiAIU20u5rKPCfi8ZCyBK2fpdNs/ds3q mPI9oHr9T8xIdzNU0R6LKVZo88wZpo+7q5o/wjvSs3V+RBTFxTW5egyrk50bpe7s /MS7Gnme9PAfWTEVfiw+Igtkm/eM6uO3Nb10x2aazQAhNZ+3V/JFWB0HVtL57Rem gMHkTMnhBBtUKT2z/mdjkhYOGK/YUZSMmtkeh1vPRZOn9Y21UFtpFaF3KwqeEpR0 6N2SLO/xapv/7MTEFBdwoEv33V6q5Gp8SzDVXnKfTE0+AzKSYLvGCq2AJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrW8uh8Cbfqk8qEsaVp6KLq8bsCMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbXRieTZId0p0LXFUeW9TeHBXbm9vdXJ4dXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbdPMA0G CSqGSIb3DQEBCwUAA4IBAQAXquM2XHEvK63c/2O+dnybeFQASQpXjEn3VVPITFaZ eCLFfctO0mpLpqIy4XsL9sP1oQ0GDVCP+zTqhQfbX7ZsuGZhIR/IL+WpmFSk/apQ DNAXZBsogWB2WYhQMmbiVvzYv8uRNONuijmLOo2XQ9hIxtkq/vW8vftBDjIfQo2S mMdxmtneXnyn8AWEvDQZJ7SGWDAIgMVaYn5snx3jDBmFWXvBuYLG3Nv2juBBkIrB W10K4AiTA8WB9fBXQXaPdd2m9boadOYq05XqAFph/N5odQXwKP3gJYpShDUpjLou WIMkz1GrI+/3/Sdus4r832CoRKggBfaOhDxGzLSbAmRe -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:02 2026 by rpki-client