This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/Ma_amKjqYIBpQdC-wusEIcHfGU4.roa File: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (raw, json) Hash identifier: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k= Subject key identifier: 31:AF:DA:98:A8:EA:60:80:69:41:D0:BE:C2:EB:04:21:C1:DF:19:4E Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14 Certificate serial: 019B7E38ED52DB9542BC0C36DFCB4FF9E17E Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/Ma_amKjqYIBpQdC-wusEIcHfGU4.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60717 IP address blocks: 185.13.92.0/22 maxlen: 22 2a02:f480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ed:52:db:95:42:bc:0c:36:df:cb:4f:f9:e1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31afda98a8ea60806941d0bec2eb0421c1df194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:ae:02:eb:a2:92:22:7b:b2:98:36:bb:a3: e9:9e:67:94:e4:ea:59:22:32:d7:ae:17:8f:2a:94: 37:6b:d2:39:f7:ae:e6:b7:31:b8:ff:33:2b:69:f0: eb:61:51:83:6a:69:12:dd:43:12:66:0c:14:5b:ae: ec:21:65:38:a2:a7:7b:fa:51:a2:41:d0:1f:51:8b: 2d:74:b7:7b:00:92:2a:6e:c0:c1:03:b9:03:d7:0d: 9b:af:1f:2c:01:e2:98:38:27:41:36:77:27:13:bb: bb:68:84:d9:72:de:ff:b5:3d:74:0f:bf:b5:fb:95: 40:b1:62:3c:53:f8:0b:19:69:73:b0:e7:96:0f:c2: c9:e8:ed:24:da:08:c7:36:df:36:89:ee:b4:ef:cb: 1f:2b:cf:0d:33:be:8c:3c:c0:4f:cb:37:2c:e6:88: 3c:12:df:df:5e:af:4b:71:d1:75:8e:82:5d:10:31: f2:fc:d3:ae:24:f8:87:33:10:78:56:61:18:7d:75: a3:d2:e0:4b:f3:3d:f0:80:86:39:c8:72:4d:72:6a: 9e:d1:eb:97:72:8f:d3:ee:0f:4a:f0:aa:4e:ca:4f: a0:69:77:d3:be:6f:1e:d4:17:1f:0f:55:21:cb:52: 0b:e6:66:bf:5a:fd:b6:e3:c3:97:c2:58:17:61:36: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:DA:98:A8:EA:60:80:69:41:D0:BE:C2:EB:04:21:C1:DF:19:4E X509v3 Authority Key Identifier: keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/Ma_amKjqYIBpQdC-wusEIcHfGU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.92.0/22 IPv6: 2a02:f480::/29 Signature Algorithm: sha256WithRSAEncryption 08:fe:67:7d:05:48:48:81:34:ca:45:34:c4:41:2c:46:bf:43: 02:0b:01:2d:63:bc:6b:90:d1:37:e4:45:60:30:aa:03:d9:36: c3:d7:94:51:56:76:80:04:2b:04:aa:3d:23:2e:1e:1f:92:79: 1c:34:07:c5:d9:68:f3:8e:98:ec:e6:0d:4c:17:56:9f:a6:f4: 8d:2e:2f:e7:ad:10:3d:e1:b7:b2:6a:eb:0d:86:86:e3:76:e7: 79:0e:6c:34:bc:ab:42:0b:c9:51:4e:8d:99:61:2e:2f:7d:85: 0f:7a:46:00:49:1f:dc:66:e9:c0:1f:11:4b:ff:bb:6a:ed:9b: 2a:29:de:01:40:cb:23:fe:91:42:9b:82:93:5d:92:6c:b4:f6: e7:1a:5f:fe:54:04:40:5f:3a:eb:9e:0c:db:b3:98:c8:f2:91: 95:34:a7:78:30:35:92:d3:11:05:29:c9:ed:2a:e8:90:24:58: 3d:63:1e:9a:a9:98:e2:a4:96:05:0e:92:8f:0e:d3:53:6a:1e: 88:5a:9c:00:fd:57:51:5a:48:b3:d6:d1:37:b5:dd:34:6d:67: 05:bf:80:82:92:51:3a:5c:4b:06:7b:fc:bb:3c:bb:47:dd:da: 8c:90:00:61:1b:69:42:2f:51:39:eb:85:a9:f8:6f:98:f1:bd: 60:8f:e5:d9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OO1S25VCvAw238tP+eF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy ODFmMTQwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWFmZGE5OGE4ZWE2MDgwNjk0MWQwYmVjMmViMDQyMWMxZGYxOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UquAuuikiJ7spg2u6PpnmeU5OpZ IjLXrhePKpQ3a9I5967mtzG4/zMrafDrYVGDamkS3UMSZgwUW67sIWU4oqd7+lGi QdAfUYstdLd7AJIqbsDBA7kD1w2brx8sAeKYOCdBNncnE7u7aITZct7/tT10D7+1 +5VAsWI8U/gLGWlzsOeWD8LJ6O0k2gjHNt82ie6078sfK88NM76MPMBPyzcs5og8 Et/fXq9LcdF1joJdEDHy/NOuJPiHMxB4VmEYfXWj0uBL8z3wgIY5yHJNcmqe0euX co/T7g9K8KpOyk+gaXfTvm8e1BcfD1Uhy1IL5ma/Wv2248OXwlgXYTZidQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDGv2pio6mCAaUHQvsLrBCHB3xlOMB8GA1UdIwQY MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt MjkwOTVhZDFjY2VkLzEvTWFfYW1LanFZSUJwUWRDLXd1c0VJY0hmR1U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ1cMA0E AgACMAcDBQMqAvSAMA0GCSqGSIb3DQEBCwUAA4IBAQAI/md9BUhIgTTKRTTEQSxG v0MCCwEtY7xrkNE35EVgMKoD2TbD15RRVnaABCsEqj0jLh4fknkcNAfF2Wjzjpjs 5g1MF1afpvSNLi/nrRA94beyausNhobjdud5Dmw0vKtCC8lRTo2ZYS4vfYUPekYA SR/cZunAHxFL/7tq7ZsqKd4BQMsj/pFCm4KTXZJstPbnGl/+VARAXzrrngzbs5jI 8pGVNKd4MDWS0xEFKcntKuiQJFg9Yx6aqZjipJYFDpKPDtNTah6IWpwA/VdRWkiz 1tE3td00bWcFv4CCklE6XEsGe/y7PLtH3dqMkABhG2lCL1E564Wp+G+Y8b1gj+XZ -----END CERTIFICATE-----Generated at Mon Jan 26 12:20:46 2026 by rpki-client