This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mw4aax5neyyO7biCg_R2Z4yrLVY.roa File: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (raw, json) Hash identifier: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28= Subject key identifier: 9B:0E:1A:6B:1E:67:7B:2C:8E:ED:B8:82:83:F4:76:67:8C:AB:2D:56 Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E84637CB9746C53F411BC56CC371 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mw4aax5neyyO7biCg_R2Z4yrLVY.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139138 IP address blocks: 199.182.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e8:46:37:cb:97:46:c5:3f:41:1b:c5:6c:c3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b0e1a6b1e677b2c8eedb88283f476678cab2d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:4d:41:66:35:3f:50:b9:78:47:9a:cd:5e: ed:1d:43:ae:8d:61:3b:1d:08:8f:6b:89:93:54:5f: 33:d1:54:f2:2d:02:d7:ab:31:46:ed:12:13:82:9b: cc:be:a3:8a:0b:79:e9:cd:8d:18:17:f1:9b:ea:1b: 6d:9b:da:4a:88:80:8f:f5:7e:f2:37:35:5f:f2:e5: 3a:ec:c8:f6:68:e2:9d:a9:bf:f8:39:3c:62:8c:a5: 46:e4:11:f7:2c:39:ab:44:34:18:7a:39:17:04:63: b6:a6:1e:d6:f8:95:40:d8:7c:92:73:00:ab:49:b6: 13:7b:75:8a:92:7f:f3:80:9f:3f:78:43:1f:1b:f1: bd:a3:96:53:db:1b:ef:81:f1:7b:db:20:b6:8a:f0: 4b:aa:b5:30:f9:bd:0b:1f:d6:33:1c:a3:21:63:00: 0d:83:fe:a2:17:39:3d:8c:7a:7f:62:88:43:90:df: 57:a3:a1:99:49:46:c7:d3:c6:1b:c0:cf:a0:4b:8d: f4:59:17:2f:06:dd:38:06:09:35:7d:81:9f:5c:9c: a9:ea:9f:1b:40:72:be:7c:b5:0e:4c:be:0d:ba:a6: 1c:09:f3:c5:c5:e5:d8:02:e9:83:6b:eb:ee:b6:0d: aa:94:35:63:ab:59:33:78:14:59:e7:08:92:d8:b0: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0E:1A:6B:1E:67:7B:2C:8E:ED:B8:82:83:F4:76:67:8C:AB:2D:56 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mw4aax5neyyO7biCg_R2Z4yrLVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.182.239.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9b:34:a6:e2:f4:32:7d:7a:0d:1f:84:11:08:70:30:59:bd: ca:9a:d3:b0:15:5c:4a:51:96:5b:7c:2a:10:c0:b8:6f:3e:a0: ba:39:eb:e6:1e:f2:68:9c:b4:f3:23:f6:88:80:f3:d4:51:67: 15:78:81:a5:24:0b:c8:cd:35:3b:c2:99:3d:41:73:d8:2e:13: 0a:ce:d7:8a:e3:2c:76:2a:f7:f8:0c:0a:87:e6:06:e7:6c:23: 77:4f:7b:b9:35:1f:63:8f:b8:a1:8b:ad:03:de:bd:81:79:91: 06:88:de:24:48:0c:32:41:d8:ee:47:1f:4b:5e:79:84:90:b0: cc:b2:2f:88:2c:d5:78:4f:c4:7b:17:51:fb:4d:36:b7:d7:d7: ea:63:0f:ac:51:78:7d:de:7d:29:42:b3:b5:fe:17:2a:76:7b: 39:2c:98:d2:94:fa:37:bf:7b:b9:29:58:a2:d8:a8:78:a4:82: be:7e:01:b1:7d:cc:da:98:10:6b:31:8a:57:3b:e7:d1:47:1c: 50:49:29:f0:a3:5a:18:2b:b4:6b:c1:dc:d8:bb:01:57:da:49: 69:bf:b8:12:85:f5:c8:65:56:db:3d:0d:2d:1f:bd:cd:cb:f8: 63:31:aa:d2:dc:3f:5e:55:9d:7a:c1:6a:df:46:da:37:5d:8b: 3e:d2:85:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yehGN8uXRsU/QRvFbMNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjBlMWE2YjFlNjc3YjJjOGVlZGI4ODI4M2Y0NzY2NzhjYWIyZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLVNQWY1P1C5eEeazV7tHUOujWE7 HQiPa4mTVF8z0VTyLQLXqzFG7RITgpvMvqOKC3npzY0YF/Gb6httm9pKiICP9X7y NzVf8uU67Mj2aOKdqb/4OTxijKVG5BH3LDmrRDQYejkXBGO2ph7W+JVA2HyScwCr SbYTe3WKkn/zgJ8/eEMfG/G9o5ZT2xvvgfF72yC2ivBLqrUw+b0LH9YzHKMhYwAN g/6iFzk9jHp/YohDkN9Xo6GZSUbH08YbwM+gS430WRcvBt04Bgk1fYGfXJyp6p8b QHK+fLUOTL4NuqYcCfPFxeXYAumDa+vutg2qlDVjq1kzeBRZ5wiS2LC12wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsOGmseZ3ssju24goP0dmeMqy1WMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvbXc0YWF4NW5leXlPN2JpQ2dfUjJaNHlyTFZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7bvMA0G CSqGSIb3DQEBCwUAA4IBAQCDmzSm4vQyfXoNH4QRCHAwWb3KmtOwFVxKUZZbfCoQ wLhvPqC6OevmHvJonLTzI/aIgPPUUWcVeIGlJAvIzTU7wpk9QXPYLhMKzteK4yx2 Kvf4DAqH5gbnbCN3T3u5NR9jj7ihi60D3r2BeZEGiN4kSAwyQdjuRx9LXnmEkLDM si+ILNV4T8R7F1H7TTa319fqYw+sUXh93n0pQrO1/hcqdns5LJjSlPo3v3u5KVii 2Kh4pIK+fgGxfczamBBrMYpXO+fRRxxQSSnwo1oYK7RrwdzYuwFX2klpv7gShfXI ZVbbPQ0tH73Ny/hjMarS3D9eVZ16wWrfRto3XYs+0oW3 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:38 2026 by rpki-client