This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa File: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (raw, json) Hash identifier: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY= Subject key identifier: 9C:C7:7E:5F:0E:03:0D:E3:4C:01:1B:03:99:3D:2D:9C:32:4E:20:A6 Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Certificate serial: 019B76EAF6ECB9FB33682DC4D73E6E8E71A6 Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1213 IP address blocks: 143.239.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:ec:b9:fb:33:68:2d:c4:d7:3e:6e:8e:71:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cc77e5f0e030de34c011b03993d2d9c324e20a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:88:c0:70:d4:24:79:8a:aa:41:08:4c:e9: 72:68:9c:89:9d:b9:8b:29:81:f7:b6:67:30:e6:2a: b6:b3:d4:25:5a:40:74:ab:71:72:c0:7a:2a:b7:0c: 58:ca:5d:b9:da:52:1c:77:de:ce:1d:e0:75:6d:e6: ae:6c:65:7c:6e:80:01:04:c3:4d:6d:f5:be:09:c1: cd:d4:94:70:30:a5:3a:86:52:0a:76:5a:1e:bf:80: 47:3b:fb:cb:9a:0c:14:61:5c:f4:c6:4d:86:f6:14: c3:90:a0:d6:da:77:67:5a:8d:5b:99:82:89:ec:3d: 35:f9:ca:1a:8c:4b:19:dd:0a:ba:c0:46:09:94:58: cf:3a:f0:da:13:d8:b4:14:5d:6e:64:2e:71:bf:4f: 4a:3a:52:8d:65:41:a7:ae:30:7b:6a:2e:27:4e:0f: ae:22:33:71:9b:e0:ef:2c:52:34:19:08:52:95:e8: 65:ca:7f:f0:a3:c5:9d:e9:18:10:ce:20:a5:42:c7: 0f:70:4c:58:6e:56:b8:db:55:8d:d2:d7:af:71:3b: fc:be:88:34:42:84:74:79:aa:e7:d4:d3:81:73:cb: 8f:e0:fc:12:ee:01:8b:ea:72:08:9f:04:8e:f0:d3: 50:30:30:17:90:eb:e3:f6:cb:a1:19:3d:dc:d4:fc: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C7:7E:5F:0E:03:0D:E3:4C:01:1B:03:99:3D:2D:9C:32:4E:20:A6 X509v3 Authority Key Identifier: keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.239.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:c1:88:ad:df:52:13:58:f5:45:a4:23:59:ed:51:23:d6:9e: e1:8e:bc:96:06:25:f2:62:8d:49:1c:c9:e4:a4:ac:d9:b6:e9: 15:fa:c2:ac:2d:fb:c9:f0:ae:47:f5:98:53:36:72:79:1a:45: b7:6a:6b:78:b6:4e:b4:e5:0f:1c:12:95:34:7d:2b:95:da:dd: 03:f3:fb:92:dd:76:a5:e5:c1:32:bb:e9:0d:71:06:f2:c0:f4: de:72:f6:0e:08:d3:5a:f2:a7:4c:30:95:3f:82:13:d3:2f:0c: c0:8e:17:de:7b:3d:1b:47:28:0b:96:85:4d:d1:b9:07:d8:55: e2:ab:c5:56:3d:9f:0d:33:2b:6c:27:4f:4d:af:95:e6:66:fd: 2d:ed:27:c5:b7:a1:83:f2:d5:0d:96:77:86:f7:c3:a4:52:81: 24:ad:3f:20:b3:f7:12:bf:6a:44:d4:4e:80:e8:b5:07:a0:4a: 7c:80:8b:fa:43:ef:5c:a2:34:bf:c3:a1:6c:bb:34:e1:12:ae: d3:2b:be:42:e2:c1:d3:18:33:57:6d:5f:22:f2:a1:cb:b1:eb: d1:83:18:fb:e2:62:b5:af:89:2b:7c:37:d0:9e:5a:d4:38:37: 1f:b5:b8:e6:b1:47:60:8f:b5:d8:66:92:b7:13:6b:85:f0:a9: 0e:79:85:56 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt26vbsufszaC3E1z5ujnGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj ODQ5MjcwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2M3N2U1ZjBlMDMwZGUzNGMwMTFiMDM5OTNkMmQ5YzMyNGUyMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmIwHDUJHmKqkEITOlyaJyJnbmL KYH3tmcw5iq2s9QlWkB0q3FywHoqtwxYyl252lIcd97OHeB1beaubGV8boABBMNN bfW+CcHN1JRwMKU6hlIKdloev4BHO/vLmgwUYVz0xk2G9hTDkKDW2ndnWo1bmYKJ 7D01+coajEsZ3Qq6wEYJlFjPOvDaE9i0FF1uZC5xv09KOlKNZUGnrjB7ai4nTg+u IjNxm+DvLFI0GQhSlehlyn/wo8Wd6RgQziClQscPcExYbla421WN0tevcTv8vog0 QoR0earn1NOBc8uP4PwS7gGL6nIInwSO8NNQMDAXkOvj9suhGT3c1PxMAwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJzHfl8OAw3jTAEbA5k9LZwyTiCmMB8GA1UdIwQY MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt ZDM1YjQzMGFmMjZkLzEvbk1kLVh3NEREZU5NQVJzRG1UMHRuREpPSUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj+8wDQYJ KoZIhvcNAQELBQADggEBAB3BiK3fUhNY9UWkI1ntUSPWnuGOvJYGJfJijUkcyeSk rNm26RX6wqwt+8nwrkf1mFM2cnkaRbdqa3i2TrTlDxwSlTR9K5Xa3QPz+5LddqXl wTK76Q1xBvLA9N5y9g4I01ryp0wwlT+CE9MvDMCOF957PRtHKAuWhU3RuQfYVeKr xVY9nw0zK2wnT02vleZm/S3tJ8W3oYPy1Q2Wd4b3w6RSgSStPyCz9xK/akTUToDo tQegSnyAi/pD71yiNL/DoWy7NOESrtMrvkLiwdMYM1dtXyLyocux69GDGPviYrWv iSt8N9CeWtQ4Nx+1uOaxR2CPtdhmkrcTa4XwqQ55hVY= -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:46 2026 by rpki-client