This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mHsT0gV4PAGCmFZ6dTcPkeEaFX4.roa File: mHsT0gV4PAGCmFZ6dTcPkeEaFX4.roa (raw, json) Hash identifier: MjtwqRDzdpgM3vKZr0hEE02lAvGMlKdwJSzjavyLoQM= Subject key identifier: 98:7B:13:D2:05:78:3C:01:82:98:56:7A:75:37:0F:91:E1:1A:15:7E Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76C8EA4F19120A64B6EA75F01CC0B Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mHsT0gV4PAGCmFZ6dTcPkeEaFX4.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34205 IP address blocks: 81.89.112.0/20 maxlen: 20 109.236.224.0/20 maxlen: 20 212.14.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6c:8e:a4:f1:91:20:a6:4b:6e:a7:5f:01:cc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987b13d205783c018298567a75370f91e11a157e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:72:a6:a2:84:5c:b6:09:0a:45:aa:e1:ad: 75:95:e2:88:21:46:6e:0f:af:df:8c:c3:39:3d:c4: ec:f9:45:98:8a:59:cc:44:9f:ba:08:e1:fe:f3:df: df:a4:26:25:90:4c:bf:f1:af:ca:13:fe:33:55:13: 43:fe:82:30:36:07:76:4d:f3:6e:b2:24:72:b8:44: 32:53:ed:a3:ec:6b:41:31:0a:60:df:61:18:ff:e9: 7f:88:f8:bb:9c:aa:8f:8e:54:c5:0f:fc:bb:ee:63: b7:e0:4c:3d:85:65:ab:18:dc:8e:a9:89:6c:25:b6: e7:12:66:01:81:ba:d3:04:65:7e:73:eb:70:84:df: 55:ae:c8:85:7f:de:ba:ac:ff:9d:24:25:bc:21:33: f4:30:07:7d:76:da:a9:33:da:d9:40:44:9b:db:e0: 29:32:e1:01:cb:53:5a:7c:69:14:60:99:e1:79:2e: f1:4a:b8:2a:32:e2:40:6f:a7:eb:85:b7:bd:c9:2a: 7d:ce:7a:83:8a:56:87:d0:bc:58:32:6e:00:8e:82: 81:63:02:1b:e0:3e:59:d6:01:67:cc:1f:8f:e8:90: c0:b0:fb:7c:ee:d5:b3:eb:56:3d:dd:4e:14:9d:78: e3:9e:47:e2:4b:53:ae:34:25:28:1c:42:9b:48:ff: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7B:13:D2:05:78:3C:01:82:98:56:7A:75:37:0F:91:E1:1A:15:7E X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mHsT0gV4PAGCmFZ6dTcPkeEaFX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.112.0/20 109.236.224.0/20 212.14.192.0/19 Signature Algorithm: sha256WithRSAEncryption 47:95:03:13:74:60:ee:75:29:5f:ca:3b:87:fb:ed:26:f5:3d: 72:e1:f4:42:44:7d:1c:03:e1:4d:bf:c4:3d:c8:e0:ac:2b:5b: 42:6e:cc:60:17:53:8d:18:50:e5:fd:76:21:e2:6a:0b:68:5d: a7:d6:04:df:d1:e9:46:3f:28:1b:bf:ec:26:ad:b9:c8:0c:ed: f5:b4:d3:87:d5:21:e3:1f:4a:04:6b:17:01:07:d2:7e:f6:ee: 9e:0a:8c:2e:50:9d:b8:36:d6:65:99:f5:2b:43:9f:63:d3:06: 8c:a0:e7:8b:92:c9:69:f4:c2:32:7a:95:17:51:8f:10:f0:59: a4:e4:61:f1:e2:83:c8:3f:5c:8c:ab:de:50:8e:2c:db:28:20: a1:68:79:57:68:1a:40:d9:d8:f2:e1:58:82:1f:bf:34:1b:6c: 75:2e:10:50:39:7a:dd:ee:6b:86:fc:e8:7b:fa:6a:38:fd:55: 63:95:ed:61:cb:ee:3d:58:f2:d8:76:f9:f3:13:b5:d0:fc:39: fc:f0:35:df:a8:63:43:65:33:53:91:de:32:11:01:1c:19:07: 57:03:2a:5f:cb:3e:9a:b5:35:47:d6:ad:b2:91:b5:4c:8b:b1: 08:86:61:62:5f:3d:a2:83:26:6c:49:3a:d6:91:af:f4:28:d4: 54:1a:bd:24 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p2yOpPGRIKZLbqdfAcwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODdiMTNkMjA1NzgzYzAxODI5ODU2N2E3NTM3MGY5MWUxMWExNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHdypqKEXLYJCkWq4a11leKIIUZu D6/fjMM5PcTs+UWYilnMRJ+6COH+89/fpCYlkEy/8a/KE/4zVRND/oIwNgd2TfNu siRyuEQyU+2j7GtBMQpg32EY/+l/iPi7nKqPjlTFD/y77mO34Ew9hWWrGNyOqYls JbbnEmYBgbrTBGV+c+twhN9VrsiFf966rP+dJCW8ITP0MAd9dtqpM9rZQESb2+Ap MuEBy1NafGkUYJnheS7xSrgqMuJAb6frhbe9ySp9znqDilaH0LxYMm4AjoKBYwIb 4D5Z1gFnzB+P6JDAsPt87tWz61Y93U4UnXjjnkfiS1OuNCUoHEKbSP9PdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJh7E9IFeDwBgphWenU3D5HhGhV+MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvbUhzVDBnVjRQQUdDbUZaNmRUY1BrZUVhRlg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUVlwAwQE bezgAwQF1A7AMA0GCSqGSIb3DQEBCwUAA4IBAQBHlQMTdGDudSlfyjuH++0m9T1y 4fRCRH0cA+FNv8Q9yOCsK1tCbsxgF1ONGFDl/XYh4moLaF2n1gTf0elGPygbv+wm rbnIDO31tNOH1SHjH0oEaxcBB9J+9u6eCowuUJ24NtZlmfUrQ59j0waMoOeLkslp 9MIyepUXUY8Q8Fmk5GHx4oPIP1yMq95QjizbKCChaHlXaBpA2djy4ViCH780G2x1 LhBQOXrd7muG/Oh7+mo4/VVjle1hy+49WPLYdvnzE7XQ/Dn88DXfqGNDZTNTkd4y EQEcGQdXAypfyz6atTVH1q2ykbVMi7EIhmFiXz2igyZsSTrWka/0KNRUGr0k -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:55 2026 by rpki-client