This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa File: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (raw, json) Hash identifier: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y= Subject key identifier: 98:A3:AE:84:36:F4:94:D8:3F:74:9F:37:4D:3A:E6:15:83:0D:21:E0 Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729 Certificate serial: 019B77588E03118D278E218A292EA7791648 Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8e:03:11:8d:27:8e:21:8a:29:2e:a7:79:16:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98a3ae8436f494d83f749f374d3ae615830d21e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:31:77:60:28:93:17:ed:93:79:8b:f4:b3: 79:32:7f:2b:78:23:db:6c:03:0b:5b:6e:b2:25:2e: 7e:ad:84:6d:7a:4c:ff:74:e3:5d:0c:16:23:5e:e8: d6:cd:b2:92:7d:3c:98:38:c8:b1:af:c4:d7:d6:ad: 5f:6e:b3:ec:98:85:2f:a4:82:4c:ad:f5:c4:8e:32: 79:c7:8e:a6:8e:a1:6d:b3:70:ca:e6:fd:f7:9e:0a: 28:0e:b4:87:cc:d9:48:79:b5:3a:c7:1f:73:8e:3b: 4c:ba:e0:4a:4c:26:be:a7:a2:cf:86:50:5e:e2:7a: 21:05:77:8e:ac:c0:18:2f:4b:99:0c:fa:d3:aa:43: 31:cd:d1:86:da:f1:70:99:67:3e:4f:c8:a8:04:27: 11:9c:73:b6:9c:b0:d7:64:21:8d:9b:2f:0b:5f:d8: f3:5d:d8:fe:ff:00:b5:34:66:dc:50:05:09:be:c6: 74:c9:a3:ea:9d:2c:c5:29:b4:be:c8:e0:21:f4:bb: cb:a1:54:4f:6e:a2:e6:66:a7:db:8b:09:f5:b0:54: 02:3b:26:c6:ec:ec:ff:70:a4:5c:85:7c:89:7b:d1: 2c:ae:6b:f4:3b:8c:3b:71:81:92:22:17:b4:57:07: 9a:64:c2:cf:32:bf:09:f6:73:d0:0f:01:b7:59:42: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A3:AE:84:36:F4:94:D8:3F:74:9F:37:4D:3A:E6:15:83:0D:21:E0 X509v3 Authority Key Identifier: keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:b4:95:15:e2:90:48:0b:40:b4:9f:0b:d5:4d:ed:47:ce:c4: e4:0c:5b:80:d3:7c:16:53:1c:88:e2:f3:c8:c8:4f:2d:89:d3: 08:8a:2a:59:de:23:03:c9:62:3d:d8:dc:c4:11:c5:5e:ee:76: 5a:98:0c:e0:12:ee:59:00:bf:a6:f6:5d:a8:37:2b:ab:84:dd: a5:69:c4:67:1e:20:1a:a0:cd:dc:20:bf:02:44:6b:5a:39:56: bf:ad:38:f6:41:63:dc:85:f1:7e:22:4e:f0:66:e9:45:ca:7f: cc:ce:c2:b7:84:e8:9a:18:9a:ea:d4:92:34:db:64:15:3f:8f: 1d:80:5c:29:60:f7:e0:56:d3:7d:09:bf:33:fa:9b:00:82:f2: c2:c8:53:d5:f4:aa:c2:0d:fd:a1:1e:f7:7e:2f:63:40:32:74: 3a:98:6c:cd:12:39:fc:86:38:69:a9:44:b4:0a:4a:36:33:c9: ad:73:84:26:4d:42:01:1e:3d:ce:0b:fc:6c:18:9d:47:64:c8: 08:c9:60:4d:a6:67:c3:b3:69:2f:21:fe:8b:82:ab:6c:7b:1d: 9a:99:4b:34:6d:1e:cc:d9:08:2a:e5:e9:9d:1a:ed:8e:2a:28: aa:b6:20:60:47:fb:1c:f9:a3:64:1f:f6:1f:88:ad:fe:a6:37: 2d:8a:11:cf -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WI4DEY0njiGKKS6neRZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl MjQ3MjkwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGEzYWU4NDM2ZjQ5NGQ4M2Y3NDlmMzc0ZDNhZTYxNTgzMGQyMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptYxd2Aokxftk3mL9LN5Mn8reCPb bAMLW26yJS5+rYRtekz/dONdDBYjXujWzbKSfTyYOMixr8TX1q1fbrPsmIUvpIJM rfXEjjJ5x46mjqFts3DK5v33ngooDrSHzNlIebU6xx9zjjtMuuBKTCa+p6LPhlBe 4nohBXeOrMAYL0uZDPrTqkMxzdGG2vFwmWc+T8ioBCcRnHO2nLDXZCGNmy8LX9jz Xdj+/wC1NGbcUAUJvsZ0yaPqnSzFKbS+yOAh9LvLoVRPbqLmZqfbiwn1sFQCOybG 7Oz/cKRchXyJe9Esrmv0O4w7cYGSIhe0VweaZMLPMr8J9nPQDwG3WUKf3wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJijroQ29JTYP3SfN0065hWDDSHgMB8GA1UdIwQY MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt YjExOTI3NGFkNjU0LzEvbUtPdWhEYjBsTmdfZEo4M1RUcm1GWU1OSWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0 LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjTwwDQYJ KoZIhvcNAQELBQADggEBADW0lRXikEgLQLSfC9VN7UfOxOQMW4DTfBZTHIji88jI Ty2J0wiKKlneIwPJYj3Y3MQRxV7udlqYDOAS7lkAv6b2Xag3K6uE3aVpxGceIBqg zdwgvwJEa1o5Vr+tOPZBY9yF8X4iTvBm6UXKf8zOwreE6JoYmurUkjTbZBU/jx2A XClg9+BW030JvzP6mwCC8sLIU9X0qsIN/aEe934vY0AydDqYbM0SOfyGOGmpRLQK SjYzya1zhCZNQgEePc4L/GwYnUdkyAjJYE2mZ8OzaS8h/ouCq2x7HZqZSzRtHszZ CCrl6Z0a7Y4qKKq2IGBH+xz5o2Qf9h+Irf6mNy2KEc8= -----END CERTIFICATE-----Generated at Mon Jan 12 01:43:26 2026 by rpki-client