This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maLdmLNKWbUPBMBC-VqFcKWDpWM.roa File: maLdmLNKWbUPBMBC-VqFcKWDpWM.roa (raw, json) Hash identifier: 7AuCRTbI7q3G4MtNxM8U1eZ6uX6rj3McQQtPy5Mv2zI= Subject key identifier: 99:A2:DD:98:B3:4A:59:B5:0F:04:C0:42:F9:5A:85:70:A5:83:A5:63 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BE1CFD1BAD4916E83097761AEB7CCB8B8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maLdmLNKWbUPBMBC-VqFcKWDpWM.roa Signing time: Wed 21 Jan 2026 18:27:31 +0000 ROA not before: Wed 21 Jan 2026 18:27:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 151.243.105.0/24 maxlen: 24 151.244.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:cf:d1:ba:d4:91:6e:83:09:77:61:ae:b7:cc:b8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 18:27:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a2dd98b34a59b50f04c042f95a8570a583a563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:e5:0a:96:6f:74:7e:ef:7f:d7:7a:87:74: d8:f4:fa:63:50:46:61:d6:7f:17:60:18:dc:02:10: 81:b2:08:ad:0a:c4:e1:c0:a5:fe:a7:5f:1a:e5:4f: bc:a4:96:2b:8d:a0:98:c7:71:57:85:c0:c4:03:2d: ee:bf:22:f3:4c:74:ff:5c:e8:9d:72:d1:ee:9e:83: ef:99:77:cf:1f:62:8f:6d:58:75:97:b3:df:86:1f: ab:d2:8c:8a:7e:e6:76:84:b4:a0:41:f0:2b:c9:89: 7b:c1:9d:7e:bf:be:f0:ae:e6:bc:06:3d:85:04:61: cf:82:fe:64:d3:c6:7c:cb:d2:25:ab:d0:b5:fc:fe: 0c:ce:41:84:b5:ca:73:ae:49:83:49:d0:35:0f:4e: de:c9:b2:bc:d5:63:5a:91:af:21:0f:b2:6b:de:f9: a5:ec:97:58:e2:ef:c8:6b:c2:97:3c:9a:0a:33:89: 71:76:7f:ba:51:7e:4e:55:17:04:3d:8c:83:36:e0: 68:f7:c0:5b:14:16:0b:6a:ce:64:00:ec:f1:ab:ff: df:b3:18:9f:e6:28:59:ee:8b:ac:c5:1e:a6:6c:b5: 27:35:f7:65:9b:be:64:90:96:84:eb:43:e4:2f:16: 95:b5:2f:04:16:9a:0b:40:a6:11:8c:69:8e:46:a1: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:DD:98:B3:4A:59:B5:0F:04:C0:42:F9:5A:85:70:A5:83:A5:63 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maLdmLNKWbUPBMBC-VqFcKWDpWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.105.0/24 151.244.131.0/24 Signature Algorithm: sha256WithRSAEncryption 34:99:a9:67:2a:f3:f4:b5:7a:3e:10:b3:c6:5f:d2:23:76:2d: af:72:4f:df:e4:a3:7e:2d:7c:8e:da:17:a1:76:37:31:38:06: ff:55:4d:f1:60:02:ed:6e:46:c8:12:06:8c:30:69:51:a3:28: 6c:4c:09:f3:eb:6c:64:ae:f3:11:f3:b7:b2:f6:ef:7c:ab:5d: 71:49:0b:b0:82:1c:87:21:7a:03:c9:01:75:95:df:5d:62:27: 7d:ce:38:70:90:a3:6d:94:4a:34:ed:7b:2f:80:29:bb:f6:4a: 07:d8:dd:2f:26:bf:ce:db:c9:a0:88:d9:de:9f:d6:d8:13:cc: 1a:8b:0e:81:b1:71:dc:2a:fe:56:9a:4b:ed:be:57:69:cd:56: 88:24:93:5c:b5:71:df:15:90:33:4e:f7:92:cd:32:03:ce:12: ed:ec:8c:b7:4b:1b:22:32:07:b6:f0:e2:b8:7e:cf:69:fc:71: af:23:7b:29:8a:ff:58:e1:20:ed:7b:4c:55:2f:1a:42:16:c2: d9:58:70:d2:1c:6b:7f:0d:b0:86:2b:e6:7a:b2:62:37:4a:b5: ef:ce:e1:80:b1:32:3f:80:f3:58:c3:7f:37:d7:cd:c8:a7:74: c1:c5:5d:da:c1:a1:9f:d5:bb:67:62:69:fe:c0:5c:90:87:f1: e9:e6:6b:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvhz9G61JFugwl3Ya63zLi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMTgyNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWEyZGQ5OGIzNGE1OWI1MGYwNGMwNDJmOTVhODU3MGE1ODNhNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bPlCpZvdH7vf9d6h3TY9PpjUEZh 1n8XYBjcAhCBsgitCsThwKX+p18a5U+8pJYrjaCYx3FXhcDEAy3uvyLzTHT/XOid ctHunoPvmXfPH2KPbVh1l7Pfhh+r0oyKfuZ2hLSgQfAryYl7wZ1+v77wrua8Bj2F BGHPgv5k08Z8y9Ilq9C1/P4MzkGEtcpzrkmDSdA1D07eybK81WNaka8hD7Jr3vml 7JdY4u/Ia8KXPJoKM4lxdn+6UX5OVRcEPYyDNuBo98BbFBYLas5kAOzxq//fsxif 5ihZ7ousxR6mbLUnNfdlm75kkJaE60PkLxaVtS8EFpoLQKYRjGmORqE8nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJmi3ZizSlm1DwTAQvlahXClg6VjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbWFMZG1MTktXYlVQQk1CQy1WcUZjS1dEcFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/NpAwQA l/SDMA0GCSqGSIb3DQEBCwUAA4IBAQA0malnKvP0tXo+ELPGX9Ijdi2vck/f5KN+ LXyO2hehdjcxOAb/VU3xYALtbkbIEgaMMGlRoyhsTAnz62xkrvMR87ey9u98q11x SQuwghyHIXoDyQF1ld9dYid9zjhwkKNtlEo07XsvgCm79koH2N0vJr/O28mgiNne n9bYE8waiw6BsXHcKv5WmkvtvldpzVaIJJNctXHfFZAzTveSzTIDzhLt7Iy3Sxsi Mge28OK4fs9p/HGvI3spiv9Y4SDte0xVLxpCFsLZWHDSHGt/DbCGK+Z6smI3SrXv zuGAsTI/gPNYw383183Ip3TBxV3awaGf1btnYmn+wFyQh/Hp5muS -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:27 2026 by rpki-client