This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa File: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (raw, json) Hash identifier: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg= Subject key identifier: 99:C6:9C:F1:77:5A:42:EE:64:F6:28:EB:F6:03:DD:AC:B6:3F:11:BD Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019B797DD4ABF0470921654121CBDED29BFC Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa Signing time: Thu 01 Jan 2026 12:17:28 +0000 ROA not before: Thu 01 Jan 2026 12:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33854 IP address blocks: 80.93.170.0/24 maxlen: 24 194.150.252.0/24 maxlen: 24 194.150.253.0/24 maxlen: 24 2a00:1a90::/32 maxlen: 34 2a00:1a90:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d4:ab:f0:47:09:21:65:41:21:cb:de:d2:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c69cf1775a42ee64f628ebf603ddacb63f11bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:b7:10:27:52:56:da:4a:2e:b5:19:9a:e2: d2:b9:51:82:33:51:6c:ae:f5:9b:82:26:8c:9f:2e: 32:22:31:5e:e3:ae:23:36:80:bd:d3:5d:fd:92:a0: 60:dd:f7:c2:ea:9b:d6:e4:81:66:88:09:e0:fc:92: cd:d2:e2:2f:82:43:47:35:7a:d2:ed:95:18:42:e1: f1:70:a1:f0:5d:fe:a8:52:f8:f3:5f:02:05:43:c1: 86:2d:7b:ee:d8:67:41:ed:5b:0d:95:7a:69:51:b4: 77:42:41:91:68:28:62:5e:7d:00:1c:77:d0:1f:0c: 81:ab:f3:1a:81:0f:ef:34:87:64:6b:38:18:b3:1c: 36:cb:45:fd:6a:09:19:f7:aa:bb:b0:3a:18:38:fd: 62:54:5a:cc:c6:61:77:e0:b2:31:8b:21:93:3a:5e: 71:66:1e:3d:0b:3d:4e:3c:17:50:20:fe:42:3d:5f: 30:51:3a:eb:e3:3b:84:2a:0e:76:9a:a3:a4:d5:05: 0d:96:3e:0b:f9:aa:55:0a:a0:60:7b:e8:d2:ed:bf: 3f:a3:b7:9b:ee:dd:9d:12:76:c8:7a:02:85:72:cd: 9f:2c:81:9b:61:46:cd:9c:ca:a8:39:86:af:55:c4: fa:27:92:18:6a:c8:ef:8f:dc:53:d6:14:6c:cf:6c: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:9C:F1:77:5A:42:EE:64:F6:28:EB:F6:03:DD:AC:B6:3F:11:BD X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.170.0/24 194.150.252.0/23 IPv6: 2a00:1a90::/32 Signature Algorithm: sha256WithRSAEncryption a5:b4:8c:de:99:68:01:b3:49:1a:ad:1a:e0:f9:cc:35:01:21: 16:a1:cd:04:21:df:df:11:56:7c:a0:96:92:53:70:33:db:aa: 9b:c4:97:4a:49:62:9e:bd:81:f6:90:b7:7b:42:f3:1d:de:12: e1:53:d8:5e:f9:bb:e0:43:e6:2f:a9:52:22:e0:e9:4e:2f:f0: 8b:20:0c:36:17:da:31:3b:66:da:9c:2b:89:8a:94:41:20:b2: ca:2d:01:d0:2f:f7:b7:27:56:7d:59:67:93:a6:49:72:ec:98: 1b:99:c0:5e:b7:81:7b:15:89:2e:30:9b:b1:d1:dc:a9:15:54: 9d:3d:75:17:6d:55:71:ce:f6:db:43:3f:06:2e:84:f1:55:88: 69:66:b2:12:c6:59:52:c3:f5:11:ef:c7:42:f5:ec:61:89:30: 68:ec:f0:59:07:68:14:c9:ed:ca:88:49:77:ae:ed:7b:cd:36: 98:cc:88:4c:5c:50:1e:e2:87:b2:c5:94:7f:e1:aa:2a:16:74: df:78:1c:aa:10:72:e5:f8:95:16:1b:37:4e:0a:f4:d3:cc:c4: 0c:1c:31:d9:e8:b0:6f:1b:de:8c:99:7a:05:78:42:2e:54:de: a5:1c:a5:1c:27:3a:df:7f:59:59:a9:eb:07:e6:38:52:70:6f: 34:b7:d1:93 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fdSr8EcJIWVBIcve0pv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM2OWNmMTc3NWE0MmVlNjRmNjI4ZWJmNjAzZGRhY2I2M2YxMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSa3ECdSVtpKLrUZmuLSuVGCM1Fs rvWbgiaMny4yIjFe464jNoC90139kqBg3ffC6pvW5IFmiAng/JLN0uIvgkNHNXrS 7ZUYQuHxcKHwXf6oUvjzXwIFQ8GGLXvu2GdB7VsNlXppUbR3QkGRaChiXn0AHHfQ HwyBq/MagQ/vNIdkazgYsxw2y0X9agkZ96q7sDoYOP1iVFrMxmF34LIxiyGTOl5x Zh49Cz1OPBdQIP5CPV8wUTrr4zuEKg52mqOk1QUNlj4L+apVCqBge+jS7b8/o7eb 7t2dEnbIegKFcs2fLIGbYUbNnMqoOYavVcT6J5IYasjvj9xT1hRsz2ypzwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJnGnPF3WkLuZPYo6/YD3ay2PxG9MB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvbWNhYzhYZGFRdTVrOWlqcjlnUGRyTFlfRWIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUF2qAwQB wpb8MA0EAgACMAcDBQAqABqQMA0GCSqGSIb3DQEBCwUAA4IBAQCltIzemWgBs0ka rRrg+cw1ASEWoc0EId/fEVZ8oJaSU3Az26qbxJdKSWKevYH2kLd7QvMd3hLhU9he +bvgQ+YvqVIi4OlOL/CLIAw2F9oxO2banCuJipRBILLKLQHQL/e3J1Z9WWeTpkly 7JgbmcBet4F7FYkuMJux0dypFVSdPXUXbVVxzvbbQz8GLoTxVYhpZrISxllSw/UR 78dC9exhiTBo7PBZB2gUye3KiEl3ru17zTaYzIhMXFAe4oeyxZR/4aoqFnTfeByq EHLl+JUWGzdOCvTTzMQMHDHZ6LBvG96MmXoFeEIuVN6lHKUcJzrff1lZqesH5jhS cG80t9GT -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:00 2026 by rpki-client