This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa File: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (raw, json) Hash identifier: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU= Subject key identifier: 9B:29:12:2F:B4:21:DC:F4:9D:16:C5:9B:80:05:68:3C:B2:B8:F4:B4 Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Certificate serial: 019B79EC5374AEF8825A2DE9247F1CBD1070 Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa Signing time: Thu 01 Jan 2026 14:18:09 +0000 ROA not before: Thu 01 Jan 2026 14:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20832 IP address blocks: 185.109.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:53:74:ae:f8:82:5a:2d:e9:24:7f:1c:bd:10:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b29122fb421dcf49d16c59b8005683cb2b8f4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:dc:11:9f:dc:d2:f0:76:e0:c9:ab:2e:f5: a5:84:aa:f7:da:d7:01:0a:e6:1e:16:a2:9f:33:20: 75:ae:77:65:45:11:8f:c2:43:9a:3d:12:19:11:f0: 38:19:d6:74:e1:c6:21:4e:8c:e8:3f:03:c3:a6:0f: 12:fe:ab:1b:74:61:f7:68:66:15:6c:a1:9a:74:74: bb:9d:2a:35:5b:d4:01:3b:fe:07:9c:50:b7:6e:bf: 54:76:db:87:8b:ce:ff:4a:58:4d:24:e8:ed:02:b1: c6:70:3f:b9:27:bc:c8:73:cd:dc:4f:e5:60:bc:59: 4c:ef:e6:94:61:10:2c:f5:2d:5a:36:07:37:5a:c4: 9a:5a:75:46:8e:13:bb:29:81:c5:fa:e8:57:6e:9d: aa:df:92:94:ef:c3:d7:44:1e:4f:60:46:c5:32:c4: cf:bf:4e:2e:b6:53:20:2e:fa:e6:98:40:81:90:8f: 5b:de:50:46:7e:4f:fe:cf:fb:e9:b3:f8:4b:2a:d9: 30:51:00:e1:83:aa:2e:f3:4a:f0:ff:60:4d:fd:60: 88:14:29:50:67:57:ca:b9:63:09:f2:6d:a2:95:9e: 3b:8a:3f:59:54:7a:bf:6c:f5:b6:85:c5:34:99:56: be:c0:23:71:f7:25:8f:5c:5f:fd:25:ff:0d:03:fd: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:29:12:2F:B4:21:DC:F4:9D:16:C5:9B:80:05:68:3C:B2:B8:F4:B4 X509v3 Authority Key Identifier: keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.104.0/22 Signature Algorithm: sha256WithRSAEncryption 69:18:3b:06:62:d2:00:f8:ab:55:c8:a6:64:2a:2c:b6:f6:ff: 5c:f7:93:8f:2a:21:b2:3c:5a:df:2f:10:db:6f:c4:4a:3b:c2: 53:37:7a:33:c8:bf:b2:e8:11:75:82:ed:f6:0b:a1:9a:5a:d9: db:d9:2e:f3:57:87:5c:c2:70:e7:96:a0:56:d1:e6:a2:cb:d3: 7b:17:7d:a4:ad:6c:cb:fc:3a:52:8e:05:e9:e9:48:37:9f:f8: 8d:07:78:4d:9f:aa:c5:ee:18:44:dd:04:9a:4d:cc:d2:ce:d1: 29:17:eb:56:a3:64:b6:19:e3:cd:38:da:f8:af:c3:8b:5b:6a: 69:6d:fa:80:ba:4d:57:d5:b6:0b:e0:57:31:cf:3f:a5:55:fc: 46:0e:80:aa:3a:35:1d:65:56:73:54:db:c2:cc:c7:a9:2e:07: db:04:29:bd:7d:f8:07:fa:28:9b:ed:e6:ae:2d:1b:55:b2:86: c9:c6:1a:50:e3:5f:0b:ba:ca:a4:f7:46:fc:3f:48:5d:94:13: 12:23:1b:94:71:9a:be:3d:08:69:73:10:1a:61:36:0a:ed:a7: 07:bd:f3:a3:96:4a:67:7e:ff:a8:1f:56:73:d1:5b:6a:da:e9: 2b:55:da:3d:c6:dc:62:bd:cb:6a:9d:48:66:77:df:10:38:f6: 62:ab:52:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FN0rviCWi3pJH8cvRBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4 NTViZGUwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjI5MTIyZmI0MjFkY2Y0OWQxNmM1OWI4MDA1NjgzY2IyYjhmNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjncEZ/c0vB24MmrLvWlhKr32tcB CuYeFqKfMyB1rndlRRGPwkOaPRIZEfA4GdZ04cYhTozoPwPDpg8S/qsbdGH3aGYV bKGadHS7nSo1W9QBO/4HnFC3br9UdtuHi87/SlhNJOjtArHGcD+5J7zIc83cT+Vg vFlM7+aUYRAs9S1aNgc3WsSaWnVGjhO7KYHF+uhXbp2q35KU78PXRB5PYEbFMsTP v04utlMgLvrmmECBkI9b3lBGfk/+z/vps/hLKtkwUQDhg6ou80rw/2BN/WCIFClQ Z1fKuWMJ8m2ilZ47ij9ZVHq/bPW2hcU0mVa+wCNx9yWPXF/9Jf8NA/2IUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJspEi+0Idz0nRbFm4AFaDyyuPS0MB8GA1UdIwQY MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt YmEyODg5YWZhYWRkLzEvbXlrU0w3UWgzUFNkRnNXYmdBVm9QTEs0OUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW1oMA0G CSqGSIb3DQEBCwUAA4IBAQBpGDsGYtIA+KtVyKZkKiy29v9c95OPKiGyPFrfLxDb b8RKO8JTN3ozyL+y6BF1gu32C6GaWtnb2S7zV4dcwnDnlqBW0eaiy9N7F32krWzL /DpSjgXp6Ug3n/iNB3hNn6rF7hhE3QSaTczSztEpF+tWo2S2GePNONr4r8OLW2pp bfqAuk1X1bYL4Fcxzz+lVfxGDoCqOjUdZVZzVNvCzMepLgfbBCm9ffgH+iib7eau LRtVsobJxhpQ418Lusqk90b8P0hdlBMSIxuUcZq+PQhpcxAaYTYK7acHvfOjlkpn fv+oH1Zz0Vtq2ukrVdo9xtxivctqnUhmd98QOPZiq1JU -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:45 2026 by rpki-client