This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/mNaUQzwFX0BqVlBJLpzVszIOnM4.roa File: mNaUQzwFX0BqVlBJLpzVszIOnM4.roa (raw, json) Hash identifier: SiNsZYiIVTVZpo2V87H2BrP189PsIRUH34sgwW+FJSs= Subject key identifier: 98:D6:94:43:3C:05:5F:40:6A:56:50:49:2E:9C:D5:B3:32:0E:9C:CE Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Certificate serial: 019B7EA53BC763F26865D712925AE6A67F77 Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/mNaUQzwFX0BqVlBJLpzVszIOnM4.roa Signing time: Fri 02 Jan 2026 12:18:36 +0000 ROA not before: Fri 02 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209475 IP address blocks: 217.64.156.0/22 maxlen: 22 217.64.156.0/24 maxlen: 24 217.64.157.0/24 maxlen: 24 217.64.158.0/24 maxlen: 24 217.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3b:c7:63:f2:68:65:d7:12:92:5a:e6:a6:7f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d694433c055f406a5650492e9cd5b3320e9cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:e2:e2:c2:e9:18:be:39:b2:09:2c:d9:8f: 09:25:ee:b1:89:e2:4c:48:2a:12:c6:c4:07:ec:56: 29:ff:69:e9:96:2b:69:ef:de:b0:ac:4b:48:d9:ba: dc:f5:24:15:8b:4e:c2:65:a1:0c:a2:94:7f:8a:28: cb:cd:6b:87:55:a7:20:6e:18:9c:2d:e6:48:b7:ac: 96:41:49:b1:0c:27:31:0d:2b:68:af:2c:4a:5b:2c: aa:64:c4:fd:88:9f:a3:20:f2:87:e2:1e:0f:bf:00: fb:7a:16:0d:37:f0:09:3c:41:70:22:76:c6:1a:1e: 65:66:a6:10:04:08:a2:b0:1a:6e:2d:c2:d3:55:2b: c6:4e:76:a3:a4:71:fc:46:cc:8f:ef:b8:88:36:5b: ae:e6:f3:97:e0:db:8c:9f:0d:bf:1c:8c:88:00:54: da:4d:d5:0f:96:33:0e:05:f0:05:e0:6b:3d:38:30: e7:29:56:aa:36:33:95:db:cd:b8:7f:30:1d:c4:d5: 6b:c4:e8:8a:a6:95:bc:06:e6:55:3c:dc:b9:10:68: 77:50:54:97:4c:1d:8d:bc:cd:27:86:77:8d:e6:cc: f1:09:a7:26:1e:54:41:49:ae:3e:a3:ef:f2:c0:80: a8:18:1e:54:5f:6a:9f:0a:38:53:b4:94:1d:27:78: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:94:43:3C:05:5F:40:6A:56:50:49:2E:9C:D5:B3:32:0E:9C:CE X509v3 Authority Key Identifier: keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/mNaUQzwFX0BqVlBJLpzVszIOnM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.64.156.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:b4:43:14:42:d8:19:ef:32:29:46:80:75:5c:c9:07:43:32: fd:18:e5:46:06:3b:04:9d:77:0e:97:9c:77:34:98:00:a9:6a: 40:88:a4:9f:46:36:94:39:34:c2:39:b9:c3:2e:47:e7:6b:69: 78:68:a2:7b:d7:13:1e:c1:47:ba:07:e0:2b:b2:74:2d:07:30: d6:9e:83:fc:26:ac:ba:45:21:bb:75:64:40:05:e9:d7:66:65: db:40:69:ea:ed:0d:fd:9c:25:19:0d:df:4c:76:c5:bf:f1:c2: 1b:36:dd:8c:77:d0:38:f2:9f:66:57:87:8d:ae:51:ed:13:b6: 39:e3:19:15:f2:96:ac:58:db:31:de:cc:d4:46:43:7f:83:59: 2b:e4:0f:d8:1a:68:73:7f:63:d4:0f:fa:b0:12:c3:eb:10:4c: 26:59:42:43:bd:a0:23:af:93:da:bf:8b:e6:17:37:4e:c1:8f: 08:04:1c:a7:b3:91:53:b0:73:19:78:36:8f:12:49:c2:63:c9: c9:18:6e:eb:aa:4d:52:7b:03:d5:85:4f:eb:f9:f1:4b:62:73: d1:61:9e:35:9e:21:90:22:e5:e3:60:3b:1c:c6:c8:b0:d2:b2: 6d:43:59:62:41:e3:2c:58:74:71:4b:ee:67:e5:06:e6:bf:34: 94:9c:d0:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTvHY/JoZdcSklrmpn93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTNkZmVlMTc2ODczOWViNTk3NmMyNDViNWFkMDA1YjMy NThlYzYwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQ2OTQ0MzNjMDU1ZjQwNmE1NjUwNDkyZTljZDViMzMyMGU5Y2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw7i4sLpGL45sgks2Y8JJe6xieJM SCoSxsQH7FYp/2nplitp796wrEtI2brc9SQVi07CZaEMopR/iijLzWuHVacgbhic LeZIt6yWQUmxDCcxDStoryxKWyyqZMT9iJ+jIPKH4h4PvwD7ehYNN/AJPEFwInbG Gh5lZqYQBAiisBpuLcLTVSvGTnajpHH8RsyP77iINluu5vOX4NuMnw2/HIyIAFTa TdUPljMOBfAF4Gs9ODDnKVaqNjOV2824fzAdxNVrxOiKppW8BuZVPNy5EGh3UFSX TB2NvM0nhneN5szxCacmHlRBSa4+o+/ywICoGB5UX2qfCjhTtJQdJ3jnAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjWlEM8BV9AalZQSS6c1bMyDpzOMB8GA1UdIwQY MBaAFIaT3+4XaHOetZdsJFta0AWzJY7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAt NjY0ODIwNzFiODE5LzEvbU5hVVF6d0ZYMEJxVmxCSkxwelZzeklPbk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAtNjY0ODIwNzFiODE5 LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UCcMA0G CSqGSIb3DQEBCwUAA4IBAQBvtEMUQtgZ7zIpRoB1XMkHQzL9GOVGBjsEnXcOl5x3 NJgAqWpAiKSfRjaUOTTCObnDLkfna2l4aKJ71xMewUe6B+ArsnQtBzDWnoP8Jqy6 RSG7dWRABenXZmXbQGnq7Q39nCUZDd9MdsW/8cIbNt2Md9A48p9mV4eNrlHtE7Y5 4xkV8pasWNsx3szURkN/g1kr5A/YGmhzf2PUD/qwEsPrEEwmWUJDvaAjr5Pav4vm FzdOwY8IBByns5FTsHMZeDaPEknCY8nJGG7rqk1SewPVhU/r+fFLYnPRYZ41niGQ IuXjYDscxsiw0rJtQ1liQeMsWHRxS+5n5QbmvzSUnNDg -----END CERTIFICATE-----Generated at Sun Jan 11 21:03:38 2026 by rpki-client