This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jMuwXyY0o5YGEiDsFTDXL-1Hhms.roa File: jMuwXyY0o5YGEiDsFTDXL-1Hhms.roa (raw, json) Hash identifier: sleRY2h/PdckTTHL8gEIoq89xucyU0AmASi2dpuIMD4= Subject key identifier: 8C:CB:B0:5F:26:34:A3:96:06:12:20:EC:15:30:D7:2F:ED:47:86:6B Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76FF2FFB813796151185A180525F8 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jMuwXyY0o5YGEiDsFTDXL-1Hhms.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35389 IP address blocks: 87.236.40.0/21 maxlen: 21 93.90.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6f:f2:ff:b8:13:79:61:51:18:5a:18:05:25:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ccbb05f2634a396061220ec1530d72fed47866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:e3:3b:6b:19:17:63:3d:e5:a0:91:4a:7b: 83:3e:86:16:5b:a8:e3:69:c8:83:0e:9f:cf:f6:fe: ec:eb:1c:6a:1e:f5:44:fe:63:55:51:1b:a6:40:8c: be:3e:9e:2d:69:69:d2:f4:f8:f6:48:63:6b:65:f7: 06:e4:d1:f4:70:56:6b:42:c0:62:d9:7e:f0:c3:90: 00:e0:d9:cb:66:66:50:ed:2a:af:b7:18:08:a4:96: df:66:47:f6:8e:9c:9f:d7:a2:54:24:7a:e1:10:3e: 76:4b:9e:0d:a4:44:ac:51:b4:36:1a:87:fe:b5:e4: 35:f2:f0:72:26:0b:11:d7:e8:dc:53:a0:e1:b2:6d: 83:c9:b7:03:8d:ed:35:5f:b6:95:36:48:51:ca:0a: 4d:8d:d2:de:ce:b5:e1:3b:d7:33:37:5c:90:e1:be: 87:8e:78:6d:ad:c0:3b:70:8d:d0:67:5d:33:a2:ac: e2:1b:a7:b0:5d:fd:fb:f1:b6:74:4d:a5:68:dc:6b: f2:db:03:77:d4:e5:ab:4b:0d:55:88:b0:5e:47:37: ce:ea:45:48:61:44:86:4b:35:bb:9a:4a:e0:5b:dd: 42:94:97:24:3f:88:bc:84:22:b2:67:d1:a2:29:2a: 9c:a8:db:10:b4:35:01:44:e2:2c:60:dc:ba:c6:1c: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CB:B0:5F:26:34:A3:96:06:12:20:EC:15:30:D7:2F:ED:47:86:6B X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jMuwXyY0o5YGEiDsFTDXL-1Hhms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.40.0/21 93.90.240.0/20 Signature Algorithm: sha256WithRSAEncryption 73:03:81:4f:98:11:ed:9f:4d:a7:0b:84:8b:02:54:a1:4a:cb: 9c:af:62:5a:09:00:08:8f:fb:b2:13:f2:30:8b:12:73:9d:04: 96:82:ad:c8:81:4c:5d:f0:ab:98:cf:78:ef:d7:e0:dc:cd:4c: e7:bd:b8:7f:f6:86:79:52:56:19:91:47:d6:24:4e:31:1b:b4: 9a:26:a5:45:41:0e:d0:4f:2b:bb:6e:6b:60:f1:ac:fe:df:a0: 27:ed:b4:dd:ec:ff:87:68:44:98:97:39:7a:19:fa:24:d4:31: 83:a5:01:c9:f3:ef:c8:43:40:20:b5:4d:fa:c8:56:be:ec:51: 61:3a:e4:9a:44:be:a6:43:0b:c8:31:37:34:21:fa:60:23:56: f8:c7:fc:d7:f5:33:83:73:29:67:48:3e:1e:a0:72:a2:c5:d9: 54:7d:64:20:4d:18:03:35:ca:5f:c4:87:23:54:61:73:f6:26: 28:c9:a3:13:cd:19:2d:13:ef:72:b9:43:5e:40:da:fe:ce:13: fd:b8:f6:bd:06:e7:45:f7:99:33:6b:d4:1f:e5:79:20:6a:89: c8:88:ae:ce:2d:13:ab:de:f0:0b:d6:d8:30:7b:42:14:20:50: 84:ee:e9:87:53:0a:3c:23:5f:e3:6b:45:4f:bd:c9:cb:f6:07: 69:a6:67:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p2/y/7gTeWFRGFoYBSX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2NiYjA1ZjI2MzRhMzk2MDYxMjIwZWMxNTMwZDcyZmVkNDc4NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTjO2sZF2M95aCRSnuDPoYWW6jj aciDDp/P9v7s6xxqHvVE/mNVURumQIy+Pp4taWnS9Pj2SGNrZfcG5NH0cFZrQsBi 2X7ww5AA4NnLZmZQ7SqvtxgIpJbfZkf2jpyf16JUJHrhED52S54NpESsUbQ2Gof+ teQ18vByJgsR1+jcU6Dhsm2DybcDje01X7aVNkhRygpNjdLezrXhO9czN1yQ4b6H jnhtrcA7cI3QZ10zoqziG6ewXf378bZ0TaVo3Gvy2wN31OWrSw1ViLBeRzfO6kVI YUSGSzW7mkrgW91ClJckP4i8hCKyZ9GiKSqcqNsQtDUBROIsYNy6xhzz2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIzLsF8mNKOWBhIg7BUw1y/tR4ZrMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvak11d1h5WTBvNVlHRWlEc0ZURFhMLTFIaG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+woAwQE XVrwMA0GCSqGSIb3DQEBCwUAA4IBAQBzA4FPmBHtn02nC4SLAlShSsucr2JaCQAI j/uyE/IwixJznQSWgq3IgUxd8KuYz3jv1+DczUznvbh/9oZ5UlYZkUfWJE4xG7Sa JqVFQQ7QTyu7bmtg8az+36An7bTd7P+HaESYlzl6Gfok1DGDpQHJ8+/IQ0AgtU36 yFa+7FFhOuSaRL6mQwvIMTc0IfpgI1b4x/zX9TODcylnSD4eoHKixdlUfWQgTRgD NcpfxIcjVGFz9iYoyaMTzRktE+9yuUNeQNr+zhP9uPa9BudF95kza9Qf5XkgaonI iK7OLROr3vAL1tgwe0IUIFCE7umHUwo8I1/ja0VPvcnL9gdppmdI -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:54 2026 by rpki-client