This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/mvCe3f9mkn2mitGHtGGloSB3nS8.roa File: mvCe3f9mkn2mitGHtGGloSB3nS8.roa (raw, json) Hash identifier: 0bqyMFhS31D4KUaalrXamAweNa9OOdMZFGOzpiIcELU= Subject key identifier: 9A:F0:9E:DD:FF:66:92:7D:A6:8A:D1:87:B4:61:A5:A1:20:77:9D:2F Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Certificate serial: 019B7834ED885D92CBF968BB995C6B30B25F Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/mvCe3f9mkn2mitGHtGGloSB3nS8.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42191 IP address blocks: 195.110.24.0/23 maxlen: 23 195.110.24.0/24 maxlen: 24 195.110.25.0/24 maxlen: 24 2001:67c:14a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ed:88:5d:92:cb:f9:68:bb:99:5c:6b:30:b2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9af09eddff66927da68ad187b461a5a120779d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:05:9b:9e:fe:63:5b:69:48:2c:d5:3f:a6: 40:3c:ab:52:f3:10:4e:b8:21:8a:f3:da:03:a3:63: af:65:7b:20:ac:35:f7:19:24:9e:96:cf:33:57:95: 7a:9c:1f:b1:b3:68:21:88:ea:a7:0b:b8:40:6b:c6: df:99:16:a2:57:7d:6b:0c:8e:f1:a4:df:c6:f4:55: 68:12:fd:50:bf:0a:1c:11:e6:94:b3:d6:60:cd:82: c0:8b:0c:b7:a0:a4:14:9d:1b:64:67:d4:81:36:38: 23:d5:76:3e:f7:b2:93:6a:40:84:43:99:88:37:51: 68:9b:52:a3:b6:13:66:de:aa:c6:8d:c4:ec:b0:39: f3:7d:05:b0:06:89:a4:1b:bb:44:ee:96:46:4b:08: d7:b6:49:ba:a9:28:56:22:12:7f:f2:af:3d:5d:77: bf:14:17:9d:75:66:e7:a8:04:04:d0:1a:be:53:7c: d1:7a:ca:39:5e:9b:88:c1:4e:7e:0d:fb:06:83:a9: ed:2d:38:67:f9:45:98:51:13:47:59:32:4c:ff:a5: 79:a7:41:60:a3:32:84:a0:d2:86:f5:d0:ca:be:2a: 21:eb:ef:38:1b:e5:a8:c5:ab:ec:5e:c3:6d:5c:ac: 2a:e9:b2:a1:8d:ef:3b:3e:a6:80:4d:1e:fc:84:e0: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:9E:DD:FF:66:92:7D:A6:8A:D1:87:B4:61:A5:A1:20:77:9D:2F X509v3 Authority Key Identifier: keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/mvCe3f9mkn2mitGHtGGloSB3nS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.110.24.0/23 IPv6: 2001:67c:14a4::/48 Signature Algorithm: sha256WithRSAEncryption 0f:3e:3f:97:bc:94:00:80:41:92:46:0f:11:13:82:15:bc:43: 48:b7:f3:60:c0:f9:db:ee:33:ae:87:ad:5c:70:ef:a9:cf:e5: a0:9d:7e:e7:d5:f5:e8:99:c1:ff:13:5f:5a:0f:55:d4:bd:11: 4d:d8:22:af:c5:f8:5e:f0:e2:65:d7:10:ee:ba:19:b9:68:52: 5b:ba:9a:89:a3:7b:65:68:9e:d6:f8:cb:33:31:0c:46:29:d6: f7:5e:cc:61:5a:56:98:35:31:5c:40:c6:4e:50:29:aa:33:45: a0:5f:cf:4d:c7:d7:d5:c1:bd:3d:71:e3:db:97:dc:7b:fc:1c: f7:48:f3:d3:2d:e9:ee:b5:38:98:8d:7f:2f:63:fb:82:06:2f: d6:4f:fe:63:12:b3:cd:50:dc:0b:59:94:2c:5e:3c:d7:98:51: 94:6f:7e:72:d9:6b:96:d5:9f:69:75:21:a2:04:11:60:ea:3b: d5:ab:d5:16:34:bd:a5:a5:de:3a:86:f5:12:ff:46:b7:99:b7: 7e:ef:ca:40:48:37:c7:1a:fc:0c:b1:29:4e:fc:e8:0f:24:d1: a8:e7:f7:c4:dc:66:c5:86:a7:9b:03:84:9e:e7:d3:60:1d:d5: 3c:e8:8d:62:49:b3:57:18:16:1b:8d:e1:ea:70:ed:00:43:f5: 40:e8:a0:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NO2IXZLL+Wi7mVxrMLJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5 NjlmYjkwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWYwOWVkZGZmNjY5MjdkYTY4YWQxODdiNDYxYTVhMTIwNzc5ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/0Fm57+Y1tpSCzVP6ZAPKtS8xBO uCGK89oDo2OvZXsgrDX3GSSels8zV5V6nB+xs2ghiOqnC7hAa8bfmRaiV31rDI7x pN/G9FVoEv1QvwocEeaUs9ZgzYLAiwy3oKQUnRtkZ9SBNjgj1XY+97KTakCEQ5mI N1Fom1KjthNm3qrGjcTssDnzfQWwBomkG7tE7pZGSwjXtkm6qShWIhJ/8q89XXe/ FBeddWbnqAQE0Bq+U3zReso5XpuIwU5+DfsGg6ntLThn+UWYURNHWTJM/6V5p0Fg ozKEoNKG9dDKvioh6+84G+WoxavsXsNtXKwq6bKhje87PqaATR78hOBj9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJrwnt3/ZpJ9porRh7RhpaEgd50vMB8GA1UdIwQY MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt YThhOTExYTNlMmUwLzEvbXZDZTNmOW1rbjJtaXRHSHRHR2xvU0IzblM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw24YMA8E AgACMAkDBwAgAQZ8FKQwDQYJKoZIhvcNAQELBQADggEBAA8+P5e8lACAQZJGDxET ghW8Q0i382DA+dvuM66HrVxw76nP5aCdfufV9eiZwf8TX1oPVdS9EU3YIq/F+F7w 4mXXEO66GbloUlu6momje2Vontb4yzMxDEYp1vdezGFaVpg1MVxAxk5QKaozRaBf z03H19XBvT1x49uX3Hv8HPdI89Mt6e61OJiNfy9j+4IGL9ZP/mMSs81Q3AtZlCxe PNeYUZRvfnLZa5bVn2l1IaIEEWDqO9Wr1RY0vaWl3jqG9RL/RreZt37vykBIN8ca /AyxKU786A8k0ajn98TcZsWGp5sDhJ7n02Ad1TzojWJJs1cYFhuN4epw7QBD9UDo oCg= -----END CERTIFICATE-----Generated at Mon Jan 12 02:50:30 2026 by rpki-client