This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/ma1O2DltnndXpH9aWxYN2FdTRIE.roa File: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (raw, json) Hash identifier: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ= Subject key identifier: 99:AD:4E:D8:39:6D:9E:77:57:A4:7F:5A:5B:16:0D:D8:57:53:44:81 Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Certificate serial: 019B7AC8858112307794CBC0E4A307B1B059 Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/ma1O2DltnndXpH9aWxYN2FdTRIE.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214232 IP address blocks: 193.93.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:85:81:12:30:77:94:cb:c0:e4:a3:07:b1:b0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99ad4ed8396d9e7757a47f5a5b160dd857534481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:a5:0f:e2:1d:7f:7c:78:8a:3b:33:c3:40: 48:b8:f5:7d:05:e3:d7:c3:69:c5:3f:b0:6b:60:64: d1:61:2d:49:17:c5:f7:f8:93:8b:d1:6e:38:83:6a: ce:07:c2:ae:6b:2b:76:3f:f5:c6:4f:88:cd:05:3b: c3:c8:fc:59:78:50:50:af:f1:a6:71:64:3e:ba:09: b1:60:e8:34:71:38:a4:4b:c1:d0:96:4c:dd:1a:65: 38:05:03:1b:88:50:e8:a0:14:86:21:40:66:9b:23: 40:70:fd:0f:1c:88:8d:fa:66:f6:2f:fe:10:6e:99: 17:35:d4:03:ff:76:29:27:cd:f1:4d:a2:7b:4b:33: 7e:bc:83:27:35:74:49:28:a6:f9:e2:b2:6c:c0:ea: 94:47:5c:12:eb:ea:c3:1d:ed:23:7f:94:a4:69:9e: 7c:f7:c1:0e:a1:0f:7b:a9:de:64:10:f7:ec:ed:18: 4d:11:36:3e:e7:b8:3f:32:5d:5f:6c:da:bb:58:14: ab:87:90:d7:25:9b:1f:02:d0:29:10:21:b5:fb:5e: 59:f5:14:6e:53:e2:86:ef:af:22:dc:d7:e0:42:13: 0b:47:75:ee:33:69:eb:dd:2b:f4:f8:f8:4a:1f:48: cc:b7:1f:e8:56:b3:67:dc:06:47:fb:58:6e:73:fc: 68:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:4E:D8:39:6D:9E:77:57:A4:7F:5A:5B:16:0D:D8:57:53:44:81 X509v3 Authority Key Identifier: keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/ma1O2DltnndXpH9aWxYN2FdTRIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.40.0/22 Signature Algorithm: sha256WithRSAEncryption b4:8a:8a:bc:63:78:c1:dc:82:86:90:d4:54:aa:4e:01:86:cb: a0:4d:87:e3:fb:72:f2:8b:59:ec:c4:4e:a0:af:09:29:2e:79: f8:28:c7:39:fd:b6:3f:dc:46:4e:36:50:18:ea:24:f0:19:39: b8:1c:a0:36:e8:9c:1c:e6:96:bb:30:f2:67:6b:1d:d8:68:64: a7:26:13:16:f1:c7:72:77:11:6d:85:fa:7f:7f:5c:fd:7c:b5: 7f:47:d7:05:3d:1a:7c:98:a7:64:47:8e:58:a9:8b:24:76:92: fb:58:ea:7b:6a:c9:6c:fb:b0:01:d4:e4:c9:91:96:fa:a7:e0: e5:f2:00:7c:9f:c0:69:4d:39:82:e0:1c:98:a8:8a:d1:c2:16: af:85:22:5d:ac:69:fc:e7:33:13:73:f8:3b:79:0a:76:22:ee: 91:30:06:6a:c9:07:64:53:b2:eb:ca:62:d1:8c:25:0e:6b:85: 8d:e6:38:c6:62:c0:66:c0:76:94:52:bf:c4:07:e6:d0:28:5a: a7:74:cb:bd:d9:22:29:77:e0:e0:29:9d:04:54:65:eb:e6:d0: 20:29:0e:16:ae:d3:9d:89:24:c5:59:e0:f6:58:ff:0b:c8:2e: 22:a1:48:f7:c7:d2:e2:31:d0:97:da:b6:be:8f:f7:f1:4f:ce: 90:9c:d3:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yIWBEjB3lMvA5KMHsbBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky NzE2NTIwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWFkNGVkODM5NmQ5ZTc3NTdhNDdmNWE1YjE2MGRkODU3NTM0NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY2lD+Idf3x4ijszw0BIuPV9BePX w2nFP7BrYGTRYS1JF8X3+JOL0W44g2rOB8Kuayt2P/XGT4jNBTvDyPxZeFBQr/Gm cWQ+ugmxYOg0cTikS8HQlkzdGmU4BQMbiFDooBSGIUBmmyNAcP0PHIiN+mb2L/4Q bpkXNdQD/3YpJ83xTaJ7SzN+vIMnNXRJKKb54rJswOqUR1wS6+rDHe0jf5SkaZ58 98EOoQ97qd5kEPfs7RhNETY+57g/Ml1fbNq7WBSrh5DXJZsfAtApECG1+15Z9RRu U+KG768i3NfgQhMLR3XuM2nr3Sv0+PhKH0jMtx/oVrNn3AZH+1huc/xoHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmtTtg5bZ53V6R/WlsWDdhXU0SBMB8GA1UdIwQY MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt NGZiNDA0ODVmZjdiLzEvbWExTzJEbHRubmRYcEg5YVd4WU4yRmRUUklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV0oMA0G CSqGSIb3DQEBCwUAA4IBAQC0ioq8Y3jB3IKGkNRUqk4BhsugTYfj+3Lyi1nsxE6g rwkpLnn4KMc5/bY/3EZONlAY6iTwGTm4HKA26Jwc5pa7MPJnax3YaGSnJhMW8cdy dxFthfp/f1z9fLV/R9cFPRp8mKdkR45YqYskdpL7WOp7asls+7AB1OTJkZb6p+Dl 8gB8n8BpTTmC4ByYqIrRwhavhSJdrGn85zMTc/g7eQp2Iu6RMAZqyQdkU7LrymLR jCUOa4WN5jjGYsBmwHaUUr/EB+bQKFqndMu92SIpd+DgKZ0EVGXr5tAgKQ4WrtOd iSTFWeD2WP8LyC4ioUj3x9LiMdCX2ra+j/fxT86QnNO2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:07 2026 by rpki-client