This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa File: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (raw, json) Hash identifier: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4= Subject key identifier: 31:A8:F6:0F:C7:12:AA:B0:77:08:B2:39:2F:2A:EF:35:46:DE:F5:32 Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019B797EBE1BF38FDFD3A9AA13B4DA8CB5E6 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208152 IP address blocks: 45.85.220.0/22 maxlen: 22 185.61.248.0/22 maxlen: 22 2a13:86c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:1b:f3:8f:df:d3:a9:aa:13:b4:da:8c:b5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a8f60fc712aab07708b2392f2aef3546def532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:85:36:a2:17:90:ac:1f:d9:83:95:a9:4a: 86:68:30:c8:a5:3a:01:cd:2c:9d:47:f6:a2:b8:6d: 0b:43:a4:95:ee:95:3c:d5:4d:0f:98:1f:de:40:2a: e9:5f:76:21:ee:47:a1:8c:d9:4f:8c:00:d5:b3:45: 1e:7c:53:79:66:2a:a6:96:2f:38:dd:37:1a:07:9e: 41:e9:70:5b:f6:55:6d:d6:0e:e3:3d:37:79:02:d8: 01:51:b4:bb:e5:e3:85:68:7f:32:b4:31:76:db:0f: 6b:94:6a:28:f9:bb:5b:8c:09:23:da:54:41:99:5c: 76:2c:22:89:11:f0:a9:10:a6:38:f2:71:f0:88:db: 44:2a:1f:b6:80:e4:76:0f:f0:bf:f9:57:a1:94:1c: 3c:6d:76:4c:83:bc:5a:d4:76:57:cc:77:b3:a9:94: 7b:98:53:7a:9a:60:27:80:8e:88:cf:24:1c:39:b6: b4:c1:81:24:ae:15:01:e4:04:e9:3f:59:a3:09:a7: 19:9c:25:b6:83:f2:90:da:2b:af:a8:46:20:80:38: 4b:14:12:35:c8:ab:c7:b7:78:fb:ce:cd:e9:14:a3: 11:38:5d:33:a1:bf:da:3d:a2:32:81:a5:06:e7:60: 7b:77:d2:b8:73:f7:4c:b4:e4:9e:9e:36:8b:ec:34: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:F6:0F:C7:12:AA:B0:77:08:B2:39:2F:2A:EF:35:46:DE:F5:32 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.220.0/22 185.61.248.0/22 IPv6: 2a13:86c0::/29 Signature Algorithm: sha256WithRSAEncryption 36:92:20:64:41:70:56:de:2a:48:06:12:20:be:5a:d4:16:16: 99:b4:02:77:b4:cd:f6:dc:05:26:9f:43:d6:30:b7:62:dd:fb: b7:4b:38:c1:6a:cf:08:58:fe:aa:27:ca:07:36:13:72:52:3f: 15:8d:ce:19:13:e4:54:55:b0:1e:1e:9a:89:24:8b:a7:b4:db: 4d:9f:9a:48:b2:e9:df:24:07:ec:f7:28:03:6d:31:bf:36:ab: 06:64:2d:69:8e:a6:54:fa:ce:40:55:78:36:3b:8d:c6:16:c3: bf:f9:13:77:bf:68:b8:3d:74:d8:3f:89:72:c5:4e:d8:b9:4f: 0c:da:ca:4c:07:2a:bd:8a:52:67:6e:7f:f2:54:05:1f:17:13: 7f:d4:2b:c5:64:67:9f:52:ba:73:02:d7:c6:d3:fd:22:10:94: e8:28:3d:21:a1:ec:87:b1:e8:ae:0f:8e:1b:d7:f6:d9:06:3f: ee:80:fc:0d:88:88:38:2b:4b:96:59:ea:52:cc:55:f4:c8:ec: 80:c3:ef:67:c2:c2:05:1e:bf:f1:40:16:5c:48:07:29:f8:e7: 35:f5:16:5a:3f:2c:93:3d:ec:93:d8:5a:d0:af:4e:16:93:83: 2b:33:02:95:ce:33:9f:27:74:0c:46:2d:86:10:81:46:2c:3d: c0:4b:58:fd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fr4b84/f06mqE7TajLXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWE4ZjYwZmM3MTJhYWIwNzcwOGIyMzkyZjJhZWYzNTQ2ZGVmNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOFNqIXkKwf2YOVqUqGaDDIpToB zSydR/aiuG0LQ6SV7pU81U0PmB/eQCrpX3Yh7kehjNlPjADVs0UefFN5Ziqmli84 3TcaB55B6XBb9lVt1g7jPTd5AtgBUbS75eOFaH8ytDF22w9rlGoo+btbjAkj2lRB mVx2LCKJEfCpEKY48nHwiNtEKh+2gOR2D/C/+VehlBw8bXZMg7xa1HZXzHezqZR7 mFN6mmAngI6IzyQcOba0wYEkrhUB5ATpP1mjCacZnCW2g/KQ2iuvqEYggDhLFBI1 yKvHt3j7zs3pFKMROF0zob/aPaIygaUG52B7d9K4c/dMtOSenjaL7DSDSwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDGo9g/HEqqwdwiyOS8q7zVG3vUyMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvTWFqMkQ4Y1NxckIzQ0xJNUx5cnZOVWJlOVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVXcAwQC uT34MA0EAgACMAcDBQMqE4bAMA0GCSqGSIb3DQEBCwUAA4IBAQA2kiBkQXBW3ipI BhIgvlrUFhaZtAJ3tM323AUmn0PWMLdi3fu3SzjBas8IWP6qJ8oHNhNyUj8Vjc4Z E+RUVbAeHpqJJIuntNtNn5pIsunfJAfs9ygDbTG/NqsGZC1pjqZU+s5AVXg2O43G FsO/+RN3v2i4PXTYP4lyxU7YuU8M2spMByq9ilJnbn/yVAUfFxN/1CvFZGefUrpz AtfG0/0iEJToKD0hoeyHseiuD44b1/bZBj/ugPwNiIg4K0uWWepSzFX0yOyAw+9n wsIFHr/xQBZcSAcp+Oc19RZaPyyTPeyT2FrQr04Wk4MrMwKVzjOfJ3QMRi2GEIFG LD3AS1j9 -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:26 2026 by rpki-client