This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pMRzd49PJuC_a8isaKVdx-y6R6E.roa File: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (raw, json) Hash identifier: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA= Subject key identifier: A4:C4:73:77:8F:4F:26:E0:BF:6B:C8:AC:68:A5:5D:C7:EC:BA:47:A1 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019B79102EBDCAE404694811B7BECACA8106 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pMRzd49PJuC_a8isaKVdx-y6R6E.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198510 IP address blocks: 80.246.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2e:bd:ca:e4:04:69:48:11:b7:be:ca:ca:81:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c473778f4f26e0bf6bc8ac68a55dc7ecba47a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:76:c0:62:63:12:8d:f0:e0:f4:51:28:e0: db:fd:32:5d:7d:00:ca:0c:f0:0e:c3:19:c0:f9:b9: c0:e3:d0:b8:22:ba:b7:6f:e9:64:02:51:6e:74:76: 93:80:19:37:6c:b4:6c:87:b4:ef:25:c9:60:a9:64: 42:bc:ca:a7:94:2e:f1:51:5e:6a:9e:c7:aa:ba:e2: 5f:a6:ba:59:df:4f:6d:01:cf:d6:1b:20:53:3c:b5: 1e:ab:da:38:3f:30:8f:93:1f:91:36:19:67:74:79: d5:38:f5:8a:db:39:f9:c0:c1:de:51:08:e6:4b:01: 6e:a1:95:42:d3:91:27:61:86:e1:82:4d:0a:a8:e1: f2:6a:06:b2:1c:98:63:50:72:4c:b5:42:8a:64:74: 48:ab:26:96:77:04:49:8f:2f:38:bd:b6:85:03:b9: 43:a9:63:36:9e:f7:80:d0:69:89:cc:b1:59:7e:9e: f7:e6:dc:6b:f9:58:e5:fd:4b:3c:de:9b:74:84:17: 84:b1:30:04:d8:bf:2c:3c:6f:f0:a4:dc:61:11:20: 7b:de:fd:49:c2:0e:34:40:d5:cf:dc:44:89:c6:ca: 69:ef:73:94:6e:da:29:20:cd:10:bf:11:40:f7:88: 4b:fd:ba:57:07:c7:36:55:a4:6d:65:ea:88:dd:19: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C4:73:77:8F:4F:26:E0:BF:6B:C8:AC:68:A5:5D:C7:EC:BA:47:A1 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/pMRzd49PJuC_a8isaKVdx-y6R6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.224.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b0:02:f9:4d:f4:52:cc:35:42:4a:f5:c5:ab:d2:ce:39:08: d7:9c:e8:a4:21:a5:99:86:e9:4a:0f:1b:67:f1:b8:db:35:97: 87:d9:8d:d3:c6:73:d9:02:f8:ba:15:77:9a:67:b5:04:b6:0d: da:e9:82:16:26:fa:e6:31:7c:ca:75:d6:3d:84:a9:74:e9:12: d0:4e:e8:c7:7d:39:d5:3b:92:6c:8f:31:a8:ea:e7:b1:5f:f5: 5c:48:25:d9:68:93:32:3f:91:8d:70:d3:04:92:b5:44:01:6f: e2:ef:91:70:04:de:0d:9b:6f:8a:2b:5a:d2:e3:50:09:cd:78: 0b:19:7a:76:b4:b2:00:17:c6:fc:6f:72:e5:49:44:98:b4:e1: 9a:a6:b3:5b:a5:34:92:e3:ed:02:bb:92:c9:81:a0:0b:bf:9a: 28:ce:6a:24:2d:95:20:20:59:09:0d:be:2a:a9:23:d6:17:c7: f8:6e:3b:bc:96:37:bd:84:c3:f3:8d:16:dc:ab:3c:e2:eb:07: f0:f1:73:d4:8f:c0:53:46:49:f0:5b:aa:60:6d:1e:5d:d5:45: 12:f3:65:e6:b0:ef:8b:b2:9f:41:0a:f4:4a:41:5e:1f:b6:16: 02:e5:a5:fa:5a:99:56:aa:ee:5b:6c:a7:4f:28:60:e6:e6:bc: 1d:d0:2d:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EC69yuQEaUgRt77KyoEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGM0NzM3NzhmNGYyNmUwYmY2YmM4YWM2OGE1NWRjN2VjYmE0N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbh2wGJjEo3w4PRRKODb/TJdfQDK DPAOwxnA+bnA49C4Irq3b+lkAlFudHaTgBk3bLRsh7TvJclgqWRCvMqnlC7xUV5q nsequuJfprpZ309tAc/WGyBTPLUeq9o4PzCPkx+RNhlndHnVOPWK2zn5wMHeUQjm SwFuoZVC05EnYYbhgk0KqOHyagayHJhjUHJMtUKKZHRIqyaWdwRJjy84vbaFA7lD qWM2nveA0GmJzLFZfp735txr+Vjl/Us83pt0hBeEsTAE2L8sPG/wpNxhESB73v1J wg40QNXP3ESJxspp73OUbtopIM0QvxFA94hL/bpXB8c2VaRtZeqI3RkkCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTEc3ePTybgv2vIrGilXcfsukehMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvcE1SemQ0OVBKdUNfYThpc2FLVmR4LXk2UjZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbgMA0G CSqGSIb3DQEBCwUAA4IBAQBUsAL5TfRSzDVCSvXFq9LOOQjXnOikIaWZhulKDxtn 8bjbNZeH2Y3TxnPZAvi6FXeaZ7UEtg3a6YIWJvrmMXzKddY9hKl06RLQTujHfTnV O5JsjzGo6uexX/VcSCXZaJMyP5GNcNMEkrVEAW/i75FwBN4Nm2+KK1rS41AJzXgL GXp2tLIAF8b8b3LlSUSYtOGaprNbpTSS4+0Cu5LJgaALv5oozmokLZUgIFkJDb4q qSPWF8f4bju8lje9hMPzjRbcqzzi6wfw8XPUj8BTRknwW6pgbR5d1UUS82XmsO+L sp9BCvRKQV4fthYC5aX6WplWqu5bbKdPKGDm5rwd0C3o -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:05 2026 by rpki-client