This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/m2FMOoTxZveGA6bTxjKN43F-L0I.roa File: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (raw, json) Hash identifier: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4= Subject key identifier: 9B:61:4C:3A:84:F1:66:F7:86:03:A6:D3:C6:32:8D:E3:71:7E:2F:42 Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963 Certificate serial: 019B7F14DAA43D781B98BD7FDC5325B7ADFD Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/m2FMOoTxZveGA6bTxjKN43F-L0I.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12731 IP address blocks: 193.41.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:da:a4:3d:78:1b:98:bd:7f:dc:53:25:b7:ad:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b614c3a84f166f78603a6d3c6328de3717e2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:a1:91:02:b6:c0:f3:0c:1b:95:9c:6e:95: 3f:dc:97:22:2a:51:42:7e:d2:39:d4:2f:e4:7c:7a: 98:ef:e0:cb:3c:6e:e0:f8:58:ea:53:95:7c:fa:2f: fe:09:1d:fe:de:33:2b:83:b6:84:9f:5c:74:d1:e3: b2:d2:a0:1f:9e:f2:0e:6a:d8:9b:e1:0d:15:28:53: b7:c3:2c:ae:65:12:cf:40:37:c5:2f:1d:ce:1f:ad: 43:d4:bc:93:25:aa:da:1d:fd:d0:48:e0:06:72:f9: de:dd:a1:04:6b:c4:5d:a3:a4:d5:bf:e0:f1:95:8a: 75:8a:47:d2:68:e2:c5:56:20:38:a9:83:25:2c:3e: 6d:b6:9c:03:41:bb:9e:4d:dc:5c:66:da:6d:60:dc: 4e:e4:e3:3a:1d:f3:c0:a2:db:7c:fd:ca:dd:5e:c6: fb:da:9f:bb:2a:17:51:0a:23:63:15:a1:e5:1e:cb: 7d:9d:77:31:3b:ff:fe:25:c0:5b:bb:db:2a:00:cc: 40:bb:5c:c1:d3:d9:c1:6a:64:6d:1f:87:2d:d5:83: 98:1a:b9:5e:af:06:a3:2b:e9:53:95:ac:23:e1:80: cf:55:56:8b:fc:ba:1b:10:69:66:c4:1d:e0:6d:b7: 52:da:54:0a:15:f9:a6:32:91:ba:55:0c:b4:90:f6: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:4C:3A:84:F1:66:F7:86:03:A6:D3:C6:32:8D:E3:71:7E:2F:42 X509v3 Authority Key Identifier: keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/m2FMOoTxZveGA6bTxjKN43F-L0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.8.0/23 Signature Algorithm: sha256WithRSAEncryption 17:44:95:80:c9:23:70:f0:53:07:e5:62:73:79:36:88:b0:d5: f5:41:0a:e2:b7:54:32:ed:28:de:82:1d:a0:6c:5a:ea:c2:6b: 83:9c:09:71:28:6f:fe:b8:13:bf:a1:e1:73:e3:9c:6d:91:e5: ce:b9:6e:d5:a1:fb:4c:5b:e5:75:9e:0c:1b:80:42:26:df:da: b8:a0:7d:0a:c6:f8:95:80:c3:1b:65:68:e5:db:42:85:02:3d: eb:71:a1:5d:fd:13:74:ae:65:88:02:dd:16:7a:62:29:5f:c4: d8:b5:81:1d:4e:5c:9e:b1:ac:42:81:df:e5:90:e9:2e:2f:20: 8e:79:56:a3:5c:3f:e8:d3:55:c6:52:eb:3f:27:c1:a6:83:16: c2:b5:f2:24:92:63:08:44:af:6a:fb:a4:c0:e3:d5:6d:e9:62: 5b:e3:bd:53:7f:c0:42:17:41:8f:6c:7d:85:19:ee:84:6c:0a: a2:e6:77:c7:1a:e0:27:54:a9:33:e6:7b:c4:4c:d3:91:9e:de: 56:f7:b8:bd:ae:47:c4:f6:42:f9:97:22:41:94:41:51:0d:d8: 3a:88:7f:26:05:09:9b:48:20:c6:33:c1:c2:ad:a1:d2:3a:04: 05:b9:73:17:9c:fb:f9:20:50:90:1e:b8:11:f0:33:17:a4:b4: 44:fe:03:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNqkPXgbmL1/3FMlt639MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDM0NTM5NTU4NDY3NzNiNTI1NmU0Mjc5YTAzZDVhM2Iy YjU5NjMwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjYxNGMzYTg0ZjE2NmY3ODYwM2E2ZDNjNjMyOGRlMzcxN2UyZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPqhkQK2wPMMG5WcbpU/3JciKlFC ftI51C/kfHqY7+DLPG7g+FjqU5V8+i/+CR3+3jMrg7aEn1x00eOy0qAfnvIOatib 4Q0VKFO3wyyuZRLPQDfFLx3OH61D1LyTJaraHf3QSOAGcvne3aEEa8Rdo6TVv+Dx lYp1ikfSaOLFViA4qYMlLD5ttpwDQbueTdxcZtptYNxO5OM6HfPAott8/crdXsb7 2p+7KhdRCiNjFaHlHst9nXcxO//+JcBbu9sqAMxAu1zB09nBamRtH4ct1YOYGrle rwajK+lTlawj4YDPVVaL/LobEGlmxB3gbbdS2lQKFfmmMpG6VQy0kPaL+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJthTDqE8Wb3hgOm08YyjeNxfi9CMB8GA1UdIwQY MBaAFB1DRTlVhGdztSVuQnmgPVo7K1ljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWIt YzJjOThkMmI2YTY1LzEvbTJGTU9vVHhadmVHQTZiVHhqS040M0YtTDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWItYzJjOThkMmI2YTY1 LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSkIMA0G CSqGSIb3DQEBCwUAA4IBAQAXRJWAySNw8FMH5WJzeTaIsNX1QQrit1Qy7Sjegh2g bFrqwmuDnAlxKG/+uBO/oeFz45xtkeXOuW7VoftMW+V1ngwbgEIm39q4oH0KxviV gMMbZWjl20KFAj3rcaFd/RN0rmWIAt0WemIpX8TYtYEdTlyesaxCgd/lkOkuLyCO eVajXD/o01XGUus/J8GmgxbCtfIkkmMIRK9q+6TA49Vt6WJb471Tf8BCF0GPbH2F Ge6EbAqi5nfHGuAnVKkz5nvETNORnt5W97i9rkfE9kL5lyJBlEFRDdg6iH8mBQmb SCDGM8HCraHSOgQFuXMXnPv5IFCQHrgR8DMXpLRE/gN4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:34 2026 by rpki-client