This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/MK2noUVGla3OTUx2ogGw2XUu6Gs.roa File: MK2noUVGla3OTUx2ogGw2XUu6Gs.roa (raw, json) Hash identifier: veceQ15vq5ia7EiqoqV8aOxRd8PGbXJRsqwiJKSo+Tg= Subject key identifier: 30:AD:A7:A1:45:46:95:AD:CE:4D:4C:76:A2:01:B0:D9:75:2E:E8:6B Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7 Certificate serial: 019B783559D5BEB45755FB9B6CAEBC0A7190 Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/MK2noUVGla3OTUx2ogGw2XUu6Gs.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198785 IP address blocks: 195.114.113.0/24 maxlen: 24 195.130.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:59:d5:be:b4:57:55:fb:9b:6c:ae:bc:0a:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30ada7a1454695adce4d4c76a201b0d9752ee86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:32:1f:e3:f7:76:7a:a7:40:0f:98:e8:b6: 3a:23:6f:90:52:61:a8:43:13:4a:9c:7c:36:77:d6: cb:4a:4a:48:f7:77:af:0c:c2:dd:da:b3:83:2f:fa: b5:a8:70:13:51:c2:1a:ec:f8:a2:01:14:fb:20:2d: b2:55:89:8c:15:0b:b5:d4:7a:5c:ed:68:2a:59:cc: af:5d:a7:a6:77:ac:dd:fc:2a:23:0d:6b:fc:e8:70: 2e:83:ca:37:a2:4e:48:3c:ef:aa:a7:d8:bd:0c:49: 6e:ca:18:10:41:18:fd:9e:39:ba:33:3b:71:b8:21: b8:10:d0:fc:6b:86:6c:0a:41:0b:17:c3:f7:6b:56: dd:df:ca:fc:9b:a9:f3:9b:a3:2a:af:93:68:94:13: 45:84:b9:41:3b:da:aa:86:a0:11:65:fe:39:f3:b9: 17:2f:5e:a4:69:5e:4c:da:f9:f8:c3:07:b7:5c:87: 29:01:12:ac:bd:1e:6b:b6:2f:d4:85:0f:49:15:73: 7b:d4:19:e5:01:70:56:0b:76:63:0d:2e:62:05:85: d5:a5:f6:de:5f:0a:f7:a3:4f:26:b8:c7:3a:5c:18: d5:8d:6a:7e:17:af:03:ad:09:3d:9c:b1:22:5b:d0: fc:38:16:a5:e7:a8:ae:38:ea:85:f7:f7:d1:d4:9d: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:A7:A1:45:46:95:AD:CE:4D:4C:76:A2:01:B0:D9:75:2E:E8:6B X509v3 Authority Key Identifier: keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/MK2noUVGla3OTUx2ogGw2XUu6Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.113.0/24 195.130.192.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:54:36:16:f0:e6:fc:82:09:9e:de:ca:10:79:c2:86:b7:0a: d3:1a:35:72:3a:60:b7:2e:96:05:9c:65:fb:94:ee:8d:5f:79: a2:87:41:c6:f4:4f:31:c2:bf:87:cd:32:92:33:ed:aa:4a:12: 4d:17:48:61:ff:98:d9:2b:89:f0:9b:bd:2d:85:3e:12:07:7a: 61:35:52:6a:26:f2:f6:5b:c5:d0:c8:5b:a2:e3:69:7b:9d:74: b4:09:77:62:d4:2f:e3:b4:ea:ed:f0:55:ce:18:49:2d:6b:c7: 83:31:17:49:85:0e:2f:68:07:d5:1b:3a:b9:33:1c:cd:f5:7e: da:c4:e2:24:0c:7f:d9:7c:8a:f5:83:c9:0e:66:24:f6:7b:a2: ba:6c:90:0a:2a:01:05:81:2d:94:0c:de:cd:b0:63:aa:c0:86: 14:68:33:d6:60:aa:be:3b:f1:9b:a8:96:bb:ff:74:aa:71:e1: 03:3d:cb:30:0d:f8:4c:92:44:db:81:00:fc:54:04:65:40:49: 0a:89:f6:1f:8f:2e:06:20:1e:e3:5a:38:29:5f:7c:fc:50:10: 4d:51:c3:41:45:68:a6:55:16:b6:16:19:ae:71:aa:dd:79:3d: 4b:46:58:46:51:d4:c4:a7:53:8f:57:12:98:56:5c:50:35:d3: 27:c6:88:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVnVvrRXVfubbK68CnGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx MTZmYjcwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGFkYTdhMTQ1NDY5NWFkY2U0ZDRjNzZhMjAxYjBkOTc1MmVlODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzIyH+P3dnqnQA+Y6LY6I2+QUmGo QxNKnHw2d9bLSkpI93evDMLd2rODL/q1qHATUcIa7PiiART7IC2yVYmMFQu11Hpc 7WgqWcyvXaemd6zd/CojDWv86HAug8o3ok5IPO+qp9i9DEluyhgQQRj9njm6Mztx uCG4END8a4ZsCkELF8P3a1bd38r8m6nzm6Mqr5NolBNFhLlBO9qqhqARZf4587kX L16kaV5M2vn4wwe3XIcpARKsvR5rti/UhQ9JFXN71BnlAXBWC3ZjDS5iBYXVpfbe Xwr3o08muMc6XBjVjWp+F68DrQk9nLEiW9D8OBal56iuOOqF9/fR1J0uqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDCtp6FFRpWtzk1MdqIBsNl1LuhrMB8GA1UdIwQY MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt MmYzNTJkNjRhYWM4LzEvTUsybm9VVkdsYTNPVFV4Mm9nR3cyWFV1NkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4 LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3JxAwQA w4LAMA0GCSqGSIb3DQEBCwUAA4IBAQAeVDYW8Ob8ggme3soQecKGtwrTGjVyOmC3 LpYFnGX7lO6NX3mih0HG9E8xwr+HzTKSM+2qShJNF0hh/5jZK4nwm70thT4SB3ph NVJqJvL2W8XQyFui42l7nXS0CXdi1C/jtOrt8FXOGEkta8eDMRdJhQ4vaAfVGzq5 MxzN9X7axOIkDH/ZfIr1g8kOZiT2e6K6bJAKKgEFgS2UDN7NsGOqwIYUaDPWYKq+ O/GbqJa7/3SqceEDPcswDfhMkkTbgQD8VARlQEkKifYfjy4GIB7jWjgpX3z8UBBN UcNBRWimVRa2FhmucardeT1LRlhGUdTEp1OPVxKYVlxQNdMnxohO -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:29 2026 by rpki-client