This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/M_A3e3R8jmuhb-5C7iHURiY1mF4.roa File: M_A3e3R8jmuhb-5C7iHURiY1mF4.roa (raw, json) Hash identifier: pposJ11ASLS11U+yEHFg+J1Wl26KYyJ65Lb1yj0wnLk= Subject key identifier: 33:F0:37:7B:74:7C:8E:6B:A1:6F:EE:42:EE:21:D4:46:26:35:98:5E Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73 Certificate serial: 019B7C7EFDA502714DC05DFDBFC6DDA5ACA7 Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/M_A3e3R8jmuhb-5C7iHURiY1mF4.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6735 IP address blocks: 194.88.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fd:a5:02:71:4d:c0:5d:fd:bf:c6:dd:a5:ac:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33f0377b747c8e6ba16fee42ee21d4462635985e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:bb:bd:cf:e3:08:1f:46:83:ea:7b:7e:b2: 2b:68:1e:28:0c:65:60:d8:c3:60:01:dd:b4:73:bc: 69:9c:81:44:47:47:6e:71:81:0f:80:a4:47:03:1c: 59:85:b4:c5:c6:16:8c:9e:ca:97:b2:fc:8d:b3:ef: bb:b7:c6:28:4e:35:86:e3:9e:a2:54:ce:6a:4b:fc: 55:5a:69:98:24:ed:60:a8:9f:f9:e3:8a:62:d7:8c: d3:2d:60:c9:77:41:19:0b:b4:a1:dd:0c:91:63:13: da:a8:d8:da:8b:b0:13:c8:74:21:e5:20:0b:aa:f7: 3a:09:bf:dd:bb:73:73:a5:e5:c9:35:e1:f5:05:25: 7e:ea:53:fa:18:76:c0:52:0c:d3:58:1c:c3:9d:d8: ce:64:37:66:86:b9:28:34:e1:b8:a7:7a:37:2d:7d: 20:7b:f2:f3:f3:86:4a:b2:4f:99:5b:2e:71:84:24: 59:59:b8:63:ea:bc:15:1a:c4:25:fb:8f:1f:c7:44: e1:42:0c:f8:c0:0e:7a:61:5a:41:d0:18:f6:44:13: 51:74:ce:18:e8:f9:04:9e:46:10:79:68:ad:67:aa: cf:3d:7e:ae:53:4f:12:c9:25:b0:9f:31:dc:fc:21: 8d:dd:ef:fc:76:33:89:27:e9:21:e9:6e:be:5d:4f: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:37:7B:74:7C:8E:6B:A1:6F:EE:42:EE:21:D4:46:26:35:98:5E X509v3 Authority Key Identifier: keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/M_A3e3R8jmuhb-5C7iHURiY1mF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.160.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:5e:51:01:b1:7c:d5:d8:da:4a:39:69:b4:89:55:1a:46:b9: 44:1e:3c:eb:89:08:c4:8e:c4:8d:d5:a5:36:b5:b4:64:51:a4: 32:7f:25:eb:62:8e:23:e7:08:48:c8:6c:5a:82:df:da:b1:50: d5:15:4f:1e:29:c7:31:7e:c9:e5:e4:33:97:ce:71:3e:5e:dd: 93:48:e3:e8:b4:1e:d1:3a:a2:d7:fb:ca:cf:78:5b:95:bb:dc: c9:e8:4f:c5:28:00:65:2e:12:3c:84:e4:d1:b7:9c:2f:a7:0d: 45:75:7c:f6:6e:0a:8b:2e:87:6e:de:56:6b:ef:7a:b6:c4:4f: 96:57:2f:11:57:40:4d:13:78:12:e0:50:f1:34:49:ae:24:91: 2d:82:2d:e3:10:ce:7d:04:f6:47:80:4f:68:6c:92:93:ec:fd: 8d:d2:12:78:62:d3:78:b6:cc:0c:02:e4:5f:c3:38:27:8c:75: 5b:fb:78:a0:33:c9:ee:ba:3a:88:1c:18:17:fb:8a:de:6c:35: 3e:ff:1f:13:2e:a8:ec:87:cd:03:74:da:ec:a6:58:20:0b:c2: d3:6a:2b:8a:8b:7f:ee:d0:33:51:87:d6:b9:fb:7d:6c:0a:d4: ea:41:aa:c9:76:af:26:4d:ce:2a:d7:b9:5f:8e:98:91:4b:8f: 69:fc:3a:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fv2lAnFNwF39v8bdpaynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1M2U5NDUwMWYwZmQyY2RlYTNjMmU3YjQ2MzE4ZTZlN2Y1 MTVmNzMwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2YwMzc3Yjc0N2M4ZTZiYTE2ZmVlNDJlZTIxZDQ0NjI2MzU5ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrq7vc/jCB9Gg+p7frIraB4oDGVg 2MNgAd20c7xpnIFER0ducYEPgKRHAxxZhbTFxhaMnsqXsvyNs++7t8YoTjWG456i VM5qS/xVWmmYJO1gqJ/544pi14zTLWDJd0EZC7Sh3QyRYxPaqNjai7ATyHQh5SAL qvc6Cb/du3NzpeXJNeH1BSV+6lP6GHbAUgzTWBzDndjOZDdmhrkoNOG4p3o3LX0g e/Lz84ZKsk+ZWy5xhCRZWbhj6rwVGsQl+48fx0ThQgz4wA56YVpB0Bj2RBNRdM4Y 6PkEnkYQeWitZ6rPPX6uU08SySWwnzHc/CGN3e/8djOJJ+kh6W6+XU/htQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPwN3t0fI5roW/uQu4h1EYmNZheMB8GA1UdIwQY MBaAFAU+lFAfD9LN6jwue0Yxjm5/UV9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTIt NjFiNTI2Mzc5MjFiLzEvTV9BM2UzUjhqbXVoYi01QzdpSFVSaVkxbUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTItNjFiNTI2Mzc5MjFi LzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwligMA0G CSqGSIb3DQEBCwUAA4IBAQBMXlEBsXzV2NpKOWm0iVUaRrlEHjzriQjEjsSN1aU2 tbRkUaQyfyXrYo4j5whIyGxagt/asVDVFU8eKccxfsnl5DOXznE+Xt2TSOPotB7R OqLX+8rPeFuVu9zJ6E/FKABlLhI8hOTRt5wvpw1FdXz2bgqLLodu3lZr73q2xE+W Vy8RV0BNE3gS4FDxNEmuJJEtgi3jEM59BPZHgE9obJKT7P2N0hJ4YtN4tswMAuRf wzgnjHVb+3igM8nuujqIHBgX+4rebDU+/x8TLqjsh80DdNrsplggC8LTaiuKi3/u 0DNRh9a5+31sCtTqQarJdq8mTc4q17lfjpiRS49p/Dq0 -----END CERTIFICATE-----Generated at Mon Jan 26 14:27:31 2026 by rpki-client