This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/mYQqzKv427W5-Gl4amiQFyFNlWI.roa File: mYQqzKv427W5-Gl4amiQFyFNlWI.roa (raw, json) Hash identifier: xj5YFixKhBqBGjGQYQdSVRPVe8wusXZXxp3YqA0Gvx4= Subject key identifier: 99:84:2A:CC:AB:F8:DB:B5:B9:F8:69:78:6A:68:90:17:21:4D:95:62 Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Certificate serial: 019B7910548CFABBEDB145341A3BC891131B Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/mYQqzKv427W5-Gl4amiQFyFNlWI.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2603 IP address blocks: 109.105.96.0/20 maxlen: 20 109.105.112.0/21 maxlen: 21 109.105.120.0/22 maxlen: 22 185.174.116.0/22 maxlen: 22 2001:948::/29 maxlen: 29 2001:948::/32 maxlen: 32 2001:948:feed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:54:8c:fa:bb:ed:b1:45:34:1a:3b:c8:91:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99842accabf8dbb5b9f869786a689017214d9562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:d5:87:4c:89:f0:28:8a:d5:1f:56:ef:9c: 58:a6:76:08:5c:f1:2b:11:a3:73:6d:cb:71:2c:de: 3f:24:ad:cf:f5:71:51:61:27:e0:f8:39:fb:f3:20: 17:f3:48:3b:82:30:18:59:ff:08:00:0a:da:0d:e6: 0c:51:f8:37:7c:de:52:37:a2:67:79:bf:5f:10:6a: c4:bc:0e:34:f2:a1:4f:6e:eb:c5:a8:93:98:71:26: 00:62:a1:48:5b:04:39:da:5b:38:c9:e1:f5:2b:38: a9:5d:0a:ef:94:49:49:61:ca:a1:21:57:44:06:7a: 1b:2f:13:1e:24:18:37:c5:23:9f:51:90:04:15:d3: 5a:e9:1e:2a:1e:af:ab:0f:fb:90:75:4d:42:72:ad: cc:92:b7:59:c1:be:fb:9b:76:06:b2:bd:5f:36:b3: 36:08:0a:c5:41:85:40:29:73:93:1e:da:a2:c8:04: e0:b1:2f:f0:22:b5:06:40:43:04:72:27:fb:fd:53: 5b:2c:c4:96:81:b5:bd:87:9a:17:c6:9e:4c:d7:68: cc:4c:e4:fa:2f:5c:05:23:2c:c3:8d:0c:95:c3:9a: bc:6c:9f:e7:8b:96:9a:2a:99:01:d7:15:c6:41:1b: a8:63:70:4a:d8:da:e0:21:3e:67:8c:cd:bd:3e:99: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:84:2A:CC:AB:F8:DB:B5:B9:F8:69:78:6A:68:90:17:21:4D:95:62 X509v3 Authority Key Identifier: keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/mYQqzKv427W5-Gl4amiQFyFNlWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.96.0-109.105.123.255 185.174.116.0/22 IPv6: 2001:948::/29 Signature Algorithm: sha256WithRSAEncryption c4:3b:ad:f5:ed:73:2c:87:46:f1:5c:6d:86:86:10:ff:c4:70: f9:d7:49:a2:1c:13:f1:7c:4d:93:fc:a8:31:54:ec:1e:c7:a1: 4c:70:9e:9c:c9:1f:70:3f:78:b6:31:46:99:ee:a7:ba:a4:fc: 2b:0e:f7:44:22:d1:b1:07:97:dc:14:76:4b:b7:b6:52:41:3b: 4f:db:e1:18:67:3a:54:9e:13:87:4e:f9:1e:e3:25:49:03:02: 07:2e:46:da:44:22:52:34:84:5b:32:39:c6:14:c9:41:6f:d1: de:af:fd:27:59:d3:9c:38:de:1c:cf:a9:f7:93:c6:7c:b1:97: 43:05:46:9a:c8:a4:06:4e:cb:c4:1b:73:03:70:1d:8a:6f:30: d6:03:41:11:a1:05:14:0e:2f:70:88:fa:ec:8f:ea:e9:5a:7a: 5e:11:7b:db:67:1f:4c:3a:64:64:37:47:5e:67:b2:bd:0b:5f: a2:ce:82:41:53:52:40:5e:79:9a:43:01:ec:91:37:eb:61:01: 5e:db:35:8e:b4:45:af:58:ce:33:5e:7c:95:0a:dd:3e:19:a2: 59:a4:80:d2:f9:d1:03:15:1b:18:e0:e3:6b:ab:b6:47:58:82: 0d:b2:64:11:31:7b:23:d9:69:5b:d2:18:14:44:40:81:a3:0f: ce:06:67:91 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EFSM+rvtsUU0GjvIkRMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3 M2E4ZjgwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTg0MmFjY2FiZjhkYmI1YjlmODY5Nzg2YTY4OTAxNzIxNGQ5NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxHVh0yJ8CiK1R9W75xYpnYIXPEr EaNzbctxLN4/JK3P9XFRYSfg+Dn78yAX80g7gjAYWf8IAAraDeYMUfg3fN5SN6Jn eb9fEGrEvA408qFPbuvFqJOYcSYAYqFIWwQ52ls4yeH1KzipXQrvlElJYcqhIVdE BnobLxMeJBg3xSOfUZAEFdNa6R4qHq+rD/uQdU1Ccq3MkrdZwb77m3YGsr1fNrM2 CArFQYVAKXOTHtqiyATgsS/wIrUGQEMEcif7/VNbLMSWgbW9h5oXxp5M12jMTOT6 L1wFIyzDjQyVw5q8bJ/ni5aaKpkB1xXGQRuoY3BK2NrgIT5njM29PpkavQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJmEKsyr+Nu1ufhpeGpokBchTZViMB8GA1UdIwQY MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt MmVhODdlNmVhMmEwLzEvbVlRcXpLdjQyN1c1LUdsNGFtaVFGeUZObFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAVtaWAD BAJtaXgDBAK5rnQwDQQCAAIwBwMFAyABCUgwDQYJKoZIhvcNAQELBQADggEBAMQ7 rfXtcyyHRvFcbYaGEP/EcPnXSaIcE/F8TZP8qDFU7B7HoUxwnpzJH3A/eLYxRpnu p7qk/CsO90Qi0bEHl9wUdku3tlJBO0/b4RhnOlSeE4dO+R7jJUkDAgcuRtpEIlI0 hFsyOcYUyUFv0d6v/SdZ05w43hzPqfeTxnyxl0MFRprIpAZOy8QbcwNwHYpvMNYD QRGhBRQOL3CI+uyP6ulael4Re9tnH0w6ZGQ3R15nsr0LX6LOgkFTUkBeeZpDAeyR N+thAV7bNY60Ra9YzjNefJUK3T4ZolmkgNL50QMVGxjg42urtkdYgg2yZBExeyPZ aVvSGBREQIGjD84GZ5E= -----END CERTIFICATE-----Generated at Thu Jan 1 15:53:52 2026 by rpki-client