This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mcbKi4lDnAUHKM9efssIr5TL5H4.roa File: mcbKi4lDnAUHKM9efssIr5TL5H4.roa (raw, json) Hash identifier: oc5Iq9Xl3lR4d7TtMBW4cymDrEzevcv7t6neiose87I= Subject key identifier: 99:C6:CA:8B:89:43:9C:05:07:28:CF:5E:7E:CB:08:AF:94:CB:E4:7E Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF1FFEDE76D1463F2DEF3057D85E1 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mcbKi4lDnAUHKM9efssIr5TL5H4.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58232 IP address blocks: 188.253.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f1:ff:ed:e7:6d:14:63:f2:de:f3:05:7d:85:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c6ca8b89439c050728cf5e7ecb08af94cbe47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:8a:6e:31:46:07:be:ee:3d:dd:a1:21:20: 83:84:3c:17:a7:aa:6c:6c:46:42:a8:05:a3:5b:78: 23:d1:ee:f0:58:d6:27:64:71:69:99:13:4a:f0:95: 71:1a:56:14:8e:98:b1:6b:44:61:41:11:ab:b0:de: 59:51:25:62:69:b0:24:b1:ee:c2:cf:b2:cb:71:74: 72:f1:92:f7:ed:74:e8:4f:0e:57:7d:48:f8:19:f1: 0f:d2:19:e2:97:70:f2:e5:64:47:ee:a5:bb:7d:df: ad:4a:ca:8c:42:06:3d:52:46:b1:31:6f:25:d5:79: e6:26:d2:19:f2:58:72:6b:55:9d:be:b8:6b:1e:73: d0:cf:70:0d:44:f2:42:d8:ab:c1:ce:f0:80:6f:72: 5b:40:0c:12:37:4d:38:1f:22:75:54:33:1e:ba:98: c4:88:9c:4f:57:24:5c:f7:3a:ff:3b:1e:b0:0a:3a: 20:d9:7b:79:18:9a:b7:27:b6:8a:fc:9e:54:d9:47: ec:f0:3e:e0:40:9a:8b:23:a3:c1:7c:8f:3b:cb:00: ff:41:14:90:41:d5:b4:a2:15:16:79:30:dc:f4:dd: c0:c1:fb:c2:1d:2a:26:49:19:66:14:5f:d0:4c:fc: 66:38:80:1a:3c:a4:9c:58:f0:be:ad:7e:5e:ff:9e: eb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:CA:8B:89:43:9C:05:07:28:CF:5E:7E:CB:08:AF:94:CB:E4:7E X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mcbKi4lDnAUHKM9efssIr5TL5H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.253.1.0/24 Signature Algorithm: sha256WithRSAEncryption a7:08:c6:fb:6c:2c:92:fe:85:ba:33:43:eb:64:16:20:78:cc: a5:44:17:ad:88:07:c6:cc:6f:77:d9:6e:e9:45:b7:d7:d7:a7: f8:7c:bf:17:98:da:4e:65:9f:af:b2:09:78:25:17:5a:24:fd: d5:77:37:95:c2:85:eb:57:85:d0:1e:2e:77:ac:ef:95:cb:42: 04:22:fe:49:68:88:e9:77:c3:d7:31:f9:ad:fb:f7:bc:ac:65: 92:14:5e:d1:23:8e:91:f5:ab:98:05:56:b2:ee:ab:99:75:a0: fe:2a:25:1a:79:b9:34:31:06:79:0d:64:d8:a9:9c:e2:f7:4c: 76:77:b5:af:fa:0f:d5:31:54:45:35:0c:b9:01:15:25:7b:ae: 53:e3:59:9e:3e:a9:56:20:36:c1:13:80:e6:f2:93:f9:84:52: 8e:85:35:a1:a6:2d:98:56:8a:61:1e:d2:55:21:73:13:77:bb: 59:73:90:65:cd:99:31:36:8c:72:cc:9b:56:45:87:9c:cd:01: 48:b8:d5:e9:4f:ee:78:28:c0:8f:b8:88:ed:5d:b3:95:8a:11: 8e:c8:f7:a0:7d:ac:e6:a5:b9:eb:0c:24:e8:6d:5d:20:1d:2c: 7c:27:69:57:aa:95:6f:08:d1:8d:16:09:ad:6a:cb:95:09:d3: 17:da:c7:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vH/7edtFGPy3vMFfYXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM2Y2E4Yjg5NDM5YzA1MDcyOGNmNWU3ZWNiMDhhZjk0Y2JlNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f+KbjFGB77uPd2hISCDhDwXp6ps bEZCqAWjW3gj0e7wWNYnZHFpmRNK8JVxGlYUjpixa0RhQRGrsN5ZUSViabAkse7C z7LLcXRy8ZL37XToTw5XfUj4GfEP0hnil3Dy5WRH7qW7fd+tSsqMQgY9UkaxMW8l 1XnmJtIZ8lhya1WdvrhrHnPQz3ANRPJC2KvBzvCAb3JbQAwSN004HyJ1VDMeupjE iJxPVyRc9zr/Ox6wCjog2Xt5GJq3J7aK/J5U2Ufs8D7gQJqLI6PBfI87ywD/QRSQ QdW0ohUWeTDc9N3AwfvCHSomSRlmFF/QTPxmOIAaPKScWPC+rX5e/57rqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnGyouJQ5wFByjPXn7LCK+Uy+R+MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvbWNiS2k0bERuQVVIS005ZWZzc0lyNVRMNUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP0BMA0G CSqGSIb3DQEBCwUAA4IBAQCnCMb7bCyS/oW6M0PrZBYgeMylRBetiAfGzG932W7p RbfX16f4fL8XmNpOZZ+vsgl4JRdaJP3VdzeVwoXrV4XQHi53rO+Vy0IEIv5JaIjp d8PXMfmt+/e8rGWSFF7RI46R9auYBVay7quZdaD+KiUaebk0MQZ5DWTYqZzi90x2 d7Wv+g/VMVRFNQy5ARUle65T41mePqlWIDbBE4Dm8pP5hFKOhTWhpi2YVophHtJV IXMTd7tZc5BlzZkxNoxyzJtWRYeczQFIuNXpT+54KMCPuIjtXbOVihGOyPegfazm pbnrDCTobV0gHSx8J2lXqpVvCNGNFgmtasuVCdMX2seC -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:54 2026 by rpki-client