This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa File: MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa (raw, json) Hash identifier: ghyy8oG2hGKa4y9DRVajZ2XWsgYoOvFgJh6c1yjrEXg= Subject key identifier: 30:00:BB:EC:01:A2:C3:67:9A:02:83:D7:65:26:EE:61:0E:68:F4:27 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE75E8CD31972FDFCBD533E9CFE4C Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205800 IP address blocks: 185.239.177.0/24 maxlen: 24 185.239.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e7:5e:8c:d3:19:72:fd:fc:bd:53:3e:9c:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3000bbec01a2c3679a0283d76526ee610e68f427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:db:9e:b9:6e:a3:7b:1e:86:e3:bf:8a:1a:6a: 06:ae:bd:36:3f:c9:af:90:4e:c3:36:ef:cd:6f:6b: 3c:91:0f:9e:53:b6:07:dc:39:77:ac:bd:fc:85:37: 74:0f:10:a9:59:13:14:0b:2b:c1:8d:81:1d:27:05: 50:46:a0:28:e3:71:75:21:8c:ff:47:28:46:7d:69: 22:72:b5:14:5b:14:a0:e7:6d:f0:34:5e:c5:f7:b6: d1:b7:c0:84:ee:46:8f:16:90:1b:42:a1:4f:2f:f9: 41:d7:eb:44:22:a2:a9:1d:08:a9:64:ee:65:bc:8e: f5:8e:22:0c:4e:16:d0:dd:53:d9:ed:fa:c2:23:88: a7:0a:87:c6:64:7c:8e:6d:6a:34:40:6a:ff:5b:d7: 1a:d6:0e:2e:73:41:fd:d7:f7:61:ca:3a:d1:dc:02: cb:78:b1:3e:ec:1e:b5:87:86:a9:11:f1:e9:30:36: 87:68:5b:e4:af:b3:bf:95:b7:cb:b4:65:07:47:c8: a1:00:39:db:3b:51:00:48:93:36:4e:27:cb:28:b2: 16:57:01:45:59:83:81:0b:8c:25:b5:45:fd:ff:3f: 0f:44:b2:7c:17:f1:1a:2f:cd:4d:d1:b0:2d:a0:a2: 7a:50:01:31:5a:c1:f6:89:2c:d5:6b:00:e3:ee:6f: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:00:BB:EC:01:A2:C3:67:9A:02:83:D7:65:26:EE:61:0E:68:F4:27 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.177.0/24 185.239.179.0/24 Signature Algorithm: sha256WithRSAEncryption c3:16:0b:de:86:9e:dd:06:b4:87:b9:15:a7:4f:d7:a8:ad:ef: 21:02:9d:56:0f:dd:95:a0:6d:62:8e:a5:ed:8b:d7:dd:f2:10: ef:d6:cb:3b:21:98:92:9f:5f:bd:cb:6e:eb:2b:32:ec:00:8e: 2e:8a:cd:34:1f:59:ec:90:a4:43:3a:99:b7:d6:9c:27:cf:fc: f1:71:e2:9e:ed:08:d0:58:5c:e4:c1:dd:fa:0b:a7:20:18:d8: e0:bb:f8:dc:8c:a6:46:d7:15:3c:ec:16:b0:f4:54:51:73:c4: 0b:b8:3b:ac:79:0f:6e:b1:d2:ec:3c:85:60:33:42:7b:6e:2d: 63:e2:f0:89:6e:8c:a0:15:c8:71:b9:db:3d:f2:41:c3:cf:f8: 7d:b1:e7:f6:73:22:2e:10:5e:e7:89:17:f9:04:1e:7d:6a:e7: ab:7a:01:b8:67:36:98:0d:73:7e:38:8a:75:58:61:a2:ae:b4: ed:0a:56:db:40:e9:42:f7:32:c4:23:46:ae:db:51:2a:73:5f: d8:11:39:81:43:d5:10:3c:ec:4d:9e:a2:4b:15:cf:54:3d:3b: 88:0d:81:ed:64:59:64:b7:9f:40:bc:85:d3:7b:9d:4b:a2:68: a8:3d:ff:1b:92:ed:3a:f2:4a:5f:2a:69:47:e0:f5:e6:c1:5e: 11:5a:46:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87edejNMZcv38vVM+nP5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDAwYmJlYzAxYTJjMzY3OWEwMjgzZDc2NTI2ZWU2MTBlNjhmNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dueuW6jex6G47+KGmoGrr02P8mv kE7DNu/Nb2s8kQ+eU7YH3Dl3rL38hTd0DxCpWRMUCyvBjYEdJwVQRqAo43F1IYz/ RyhGfWkicrUUWxSg523wNF7F97bRt8CE7kaPFpAbQqFPL/lB1+tEIqKpHQipZO5l vI71jiIMThbQ3VPZ7frCI4inCofGZHyObWo0QGr/W9ca1g4uc0H91/dhyjrR3ALL eLE+7B61h4apEfHpMDaHaFvkr7O/lbfLtGUHR8ihADnbO1EASJM2TifLKLIWVwFF WYOBC4wltUX9/z8PRLJ8F/EaL81N0bAtoKJ6UAExWsH2iSzVawDj7m8jwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDAAu+wBosNnmgKD12Um7mEOaPQnMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvTUFDNzdBR2l3MmVhQW9QWFpTYnVZUTVvOUNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue+xAwQA ue+zMA0GCSqGSIb3DQEBCwUAA4IBAQDDFgvehp7dBrSHuRWnT9eore8hAp1WD92V oG1ijqXti9fd8hDv1ss7IZiSn1+9y27rKzLsAI4uis00H1nskKRDOpm31pwnz/zx ceKe7QjQWFzkwd36C6cgGNjgu/jcjKZG1xU87Baw9FRRc8QLuDuseQ9usdLsPIVg M0J7bi1j4vCJboygFchxuds98kHDz/h9sef2cyIuEF7niRf5BB59aueregG4ZzaY DXN+OIp1WGGirrTtClbbQOlC9zLEI0au21Eqc1/YETmBQ9UQPOxNnqJLFc9UPTuI DYHtZFlkt59AvIXTe51LomioPf8bku068kpfKmlH4PXmwV4RWkaq -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:10 2026 by rpki-client