This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/MxK4lS7Htpm_IH-kALADE2GeLuc.roa File: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (raw, json) Hash identifier: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8= Subject key identifier: 33:12:B8:95:2E:C7:B6:99:BF:20:7F:A4:00:B0:03:13:61:9E:2E:E7 Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196 Certificate serial: 019B76EB77DC2A1C56E30CF7A2BB8AF45174 Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/MxK4lS7Htpm_IH-kALADE2GeLuc.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202376 IP address blocks: 2.59.166.0/24 maxlen: 24 2.59.167.0/24 maxlen: 24 2a09:f540::/32 maxlen: 48 2a09:f541::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:77:dc:2a:1c:56:e3:0c:f7:a2:bb:8a:f4:51:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3312b8952ec7b699bf207fa400b00313619e2ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:cd:7b:e1:21:6a:15:f8:20:66:00:a9:e1: 1c:a8:f9:4f:5d:85:c7:5b:26:65:d9:90:d1:3f:a9: e7:68:58:6c:80:22:e8:ad:52:94:d5:31:fe:c6:11: 84:ff:5d:4e:52:d8:f7:ad:1c:dc:fc:51:c5:97:b7: a2:5c:37:38:b8:53:cc:0e:60:bb:85:a7:b9:2d:04: c7:11:a2:f0:fa:3d:a6:42:e3:9d:11:14:59:4e:ad: 29:94:63:40:32:06:c4:ed:3a:b9:8f:0a:f6:5a:fc: 0e:7d:69:49:66:8a:fe:65:0b:af:d3:89:67:3c:4f: 75:82:66:fc:f0:a7:ca:e4:1c:1e:e9:94:bf:26:83: 82:08:32:0a:00:7e:05:48:4c:c6:4c:59:39:4b:0c: ec:8f:3d:c1:39:65:6b:5d:a7:ef:94:df:1d:f7:cc: 45:97:21:bd:aa:b6:b0:c7:89:56:c1:c3:02:e5:c3: b6:11:58:65:c9:5d:c8:0b:00:a7:c1:33:3f:2d:da: d2:66:b9:35:fe:10:98:97:50:ce:2a:16:b5:74:30: 20:6f:c4:e7:a4:81:c0:2b:09:08:b3:ad:d1:19:67: ac:13:9d:bc:4c:23:e1:9d:c2:9e:3e:ae:df:f7:96: 4c:f2:1f:3e:ba:0c:d8:60:3c:f5:df:2e:5b:05:c9: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:B8:95:2E:C7:B6:99:BF:20:7F:A4:00:B0:03:13:61:9E:2E:E7 X509v3 Authority Key Identifier: keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/MxK4lS7Htpm_IH-kALADE2GeLuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.166.0/23 IPv6: 2a09:f540::/31 Signature Algorithm: sha256WithRSAEncryption 40:e7:24:d4:36:b4:08:a4:c7:f9:d6:91:1f:1b:68:4f:83:1b: 9b:e8:2c:e8:bc:eb:b7:b9:fb:95:db:d9:8e:bd:5c:87:fd:11: 47:8e:4d:65:36:35:dd:25:07:18:ca:9c:a0:a2:9a:0f:87:00: 1c:e1:cc:36:34:1c:68:9a:84:3a:19:85:24:2e:9c:83:6b:6c: 92:6d:cc:e6:49:b7:bf:56:ba:a2:77:20:c9:ee:2a:da:b6:5a: 8f:68:b7:64:e0:4c:8e:a4:6a:21:81:ab:c6:51:1f:df:1d:c7: c6:24:2c:c5:b9:82:62:21:7e:e3:3f:c3:ff:e3:5c:67:52:b6: 06:d7:32:88:0b:65:70:4e:b0:cd:91:eb:ed:9c:24:30:e3:3c: b6:69:ca:ae:ff:8b:f0:61:0a:15:40:82:ac:10:38:e4:a9:41: b9:be:d3:ee:97:8f:a2:99:d3:1c:4b:95:c9:e0:f5:64:13:28: 2a:67:46:69:14:bf:d0:03:a7:79:87:07:b4:35:6c:16:97:70: 79:2a:f9:8e:37:ba:7f:d6:8e:6a:45:de:a8:e7:c2:d5:b3:62: f1:6b:c6:ba:67:4d:66:81:11:47:ee:ef:15:c6:70:2c:48:ef: d9:f2:de:35:9d:ad:99:34:18:fa:d5:da:86:18:40:ea:8a:3f: 7b:92:1d:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt263fcKhxW4wz3oruK9FF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm MGIxOTYwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzEyYjg5NTJlYzdiNjk5YmYyMDdmYTQwMGIwMDMxMzYxOWUyZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJnNe+EhahX4IGYAqeEcqPlPXYXH WyZl2ZDRP6nnaFhsgCLorVKU1TH+xhGE/11OUtj3rRzc/FHFl7eiXDc4uFPMDmC7 hae5LQTHEaLw+j2mQuOdERRZTq0plGNAMgbE7Tq5jwr2WvwOfWlJZor+ZQuv04ln PE91gmb88KfK5Bwe6ZS/JoOCCDIKAH4FSEzGTFk5Swzsjz3BOWVrXafvlN8d98xF lyG9qrawx4lWwcMC5cO2EVhlyV3ICwCnwTM/LdrSZrk1/hCYl1DOKha1dDAgb8Tn pIHAKwkIs63RGWesE528TCPhncKePq7f95ZM8h8+ugzYYDz13y5bBcnQKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDMSuJUux7aZvyB/pACwAxNhni7nMB8GA1UdIwQY MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt YjQxMzM1YjAwNTg3LzEvTXhLNGxTN0h0cG1fSUgta0FMQURFMkdlTHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3 LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBAjumMA0E AgACMAcDBQEqCfVAMA0GCSqGSIb3DQEBCwUAA4IBAQBA5yTUNrQIpMf51pEfG2hP gxub6CzovOu3ufuV29mOvVyH/RFHjk1lNjXdJQcYypygopoPhwAc4cw2NBxomoQ6 GYUkLpyDa2ySbczmSbe/VrqidyDJ7iratlqPaLdk4EyOpGohgavGUR/fHcfGJCzF uYJiIX7jP8P/41xnUrYG1zKIC2VwTrDNkevtnCQw4zy2acqu/4vwYQoVQIKsEDjk qUG5vtPul4+imdMcS5XJ4PVkEygqZ0ZpFL/QA6d5hwe0NWwWl3B5KvmON7p/1o5q Rd6o58LVs2Lxa8a6Z01mgRFH7u8VxnAsSO/Z8t41na2ZNBj61dqGGEDqij97kh1T -----END CERTIFICATE-----Generated at Wed Jan 7 14:14:32 2026 by rpki-client