This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/mNafWshijFwD-Ut7Wdi6Nk68ro4.roa File: mNafWshijFwD-Ut7Wdi6Nk68ro4.roa (raw, json) Hash identifier: y33b561nOMPIeg/yMx0/7quUZ2RAxT/gk02bC3hNJts= Subject key identifier: 98:D6:9F:5A:C8:62:8C:5C:03:F9:4B:7B:59:D8:BA:36:4E:BC:AE:8E Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca Certificate serial: 019B7F13ADC3EB6DCD14CBECE5E834AF28C7 Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/mNafWshijFwD-Ut7Wdi6Nk68ro4.roa Signing time: Fri 02 Jan 2026 14:19:14 +0000 ROA not before: Fri 02 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 80.242.20.0/24 maxlen: 24 80.242.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ad:c3:eb:6d:cd:14:cb:ec:e5:e8:34:af:28:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53585138107965c389f367b55abd792b531eb9ca Validity Not Before: Jan 2 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d69f5ac8628c5c03f94b7b59d8ba364ebcae8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:6e:b2:69:36:bb:cf:3a:50:00:1f:8c:3a: 28:48:c7:06:dc:a0:5d:25:7c:5f:0b:08:45:e7:08: c5:2b:d2:21:70:e2:c2:f7:fd:9b:46:2f:3f:ee:34: 49:50:92:ef:f3:86:c6:f8:df:af:e1:d4:b7:74:29: 40:e8:d8:5a:ac:2a:8b:94:fd:4e:70:e8:68:6c:03: e0:be:a6:61:d0:08:69:04:73:1c:4e:b7:74:df:c2: c4:ce:8b:6b:db:2b:f6:c7:11:4b:25:bf:3f:3b:40: d4:50:fe:20:df:36:45:54:95:8b:4e:ec:e6:69:36: 7b:27:c8:db:0e:ef:c8:82:fb:8b:fc:09:e7:af:f9: bf:52:b2:b4:4b:8c:19:59:18:1d:e7:45:db:d6:7d: 8b:c3:c3:ba:e3:5f:35:35:db:a8:8a:68:f1:dd:01: 10:7a:3e:9e:cf:c5:aa:cd:38:ff:ed:ce:32:15:c7: 66:01:a4:ab:ad:11:83:0d:17:6e:38:b1:c7:95:25: 65:68:b6:d4:82:d8:c4:3d:5d:41:c7:73:de:3b:3b: a1:b2:c2:a9:38:d7:e5:85:d8:3f:6a:95:87:79:0a: f5:79:82:77:0c:0c:30:1b:7c:1b:3f:4b:cb:ec:e7: 69:28:66:fa:89:9c:98:c6:5d:19:cb:4f:e3:52:6b: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:9F:5A:C8:62:8C:5C:03:F9:4B:7B:59:D8:BA:36:4E:BC:AE:8E X509v3 Authority Key Identifier: keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/mNafWshijFwD-Ut7Wdi6Nk68ro4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.242.20.0/24 80.242.31.0/24 Signature Algorithm: sha256WithRSAEncryption 88:78:5c:25:66:ae:30:99:62:98:8e:89:a4:3c:78:31:05:84: 0a:40:48:a0:b8:71:05:63:16:ac:fd:89:bf:d8:4a:28:ba:e8: 0d:13:0e:39:77:dc:83:2b:cd:00:de:1c:24:f4:fd:74:96:f0: 3f:65:80:f3:fe:f2:9e:23:62:0f:da:20:ac:5b:09:34:64:34: 41:d9:7c:2e:8f:4f:00:01:bf:e1:ee:11:ae:75:09:88:83:62: 72:34:29:c3:05:16:3d:2f:04:d6:b9:39:c5:6d:06:8b:62:c8: 5a:23:4b:4b:fe:4a:1d:0b:5f:0d:f7:bb:a4:c0:c3:40:65:3a: 04:60:cf:b2:1f:d0:78:2d:cb:03:bf:ac:39:10:59:02:78:6d: 9e:1c:1e:8c:48:e9:b8:0c:e5:58:50:1c:36:ff:5c:4c:64:8c: 90:25:09:99:65:9c:57:5a:c1:f7:f7:46:e8:e2:e0:36:49:04: 8a:83:ec:f4:f6:cd:3a:2a:4e:02:11:29:6d:5b:bc:b2:bb:27: a8:2f:a2:49:ad:e3:53:d7:8e:e0:bd:56:38:27:70:2f:59:26: 86:f9:e6:57:cc:cf:87:a1:c4:bd:18:40:c6:cd:1e:6e:43:2e: 81:42:f1:79:78:63:35:ce:c6:10:d3:1a:e3:ff:25:ea:c1:01: 0f:12:00:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E63D623NFMvs5eg0ryjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx ZWI5Y2EwHhcNMjYwMTAyMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQ2OWY1YWM4NjI4YzVjMDNmOTRiN2I1OWQ4YmEzNjRlYmNhZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BFusmk2u886UAAfjDooSMcG3KBd JXxfCwhF5wjFK9IhcOLC9/2bRi8/7jRJUJLv84bG+N+v4dS3dClA6NharCqLlP1O cOhobAPgvqZh0AhpBHMcTrd038LEzotr2yv2xxFLJb8/O0DUUP4g3zZFVJWLTuzm aTZ7J8jbDu/IgvuL/Annr/m/UrK0S4wZWRgd50Xb1n2Lw8O64181Nduoimjx3QEQ ej6ez8WqzTj/7c4yFcdmAaSrrRGDDRduOLHHlSVlaLbUgtjEPV1Bx3PeOzuhssKp ONflhdg/apWHeQr1eYJ3DAwwG3wbP0vL7OdpKGb6iZyYxl0Zy0/jUmvnlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJjWn1rIYoxcA/lLe1nYujZOvK6OMB8GA1UdIwQY MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt MTg1MGZmZjA0NDI1LzEvbU5hZldzaGlqRndELVV0N1dkaTZOazY4cm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1 LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPIUAwQA UPIfMA0GCSqGSIb3DQEBCwUAA4IBAQCIeFwlZq4wmWKYjomkPHgxBYQKQEiguHEF Yxas/Ym/2EoouugNEw45d9yDK80A3hwk9P10lvA/ZYDz/vKeI2IP2iCsWwk0ZDRB 2Xwuj08AAb/h7hGudQmIg2JyNCnDBRY9LwTWuTnFbQaLYshaI0tL/kodC18N97uk wMNAZToEYM+yH9B4LcsDv6w5EFkCeG2eHB6MSOm4DOVYUBw2/1xMZIyQJQmZZZxX WsH390bo4uA2SQSKg+z09s06Kk4CESltW7yyuyeoL6JJreNT147gvVY4J3AvWSaG +eZXzM+HocS9GEDGzR5uQy6BQvF5eGM1zsYQ0xrj/yXqwQEPEgDl -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:15 2026 by rpki-client