This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mkAVPuJI8QOGwHX046ylOVj6YeQ.roa File: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (raw, json) Hash identifier: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ= Subject key identifier: 9A:40:15:3E:E2:48:F1:03:86:C0:75:F4:E3:AC:A5:39:58:FA:61:E4 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15D295664C86FCB4E0F1FC08D4B1E9 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mkAVPuJI8QOGwHX046ylOVj6YeQ.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 193.38.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d2:95:66:4c:86:fc:b4:e0:f1:fc:08:d4:b1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a40153ee248f10386c075f4e3aca53958fa61e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:26:3d:45:c9:7e:af:f7:fd:93:42:e8:9c: 01:65:76:16:ad:17:1a:ed:a1:f6:85:aa:e8:46:88: 83:41:6f:55:a7:7d:08:7a:64:9d:0b:41:1a:75:41: b3:54:5d:57:4a:a4:23:23:a8:95:3b:5a:92:10:ef: 2f:dd:ed:22:ee:9a:57:e9:bb:c0:53:85:b5:d7:05: 6f:c8:3b:98:d5:0d:cf:60:b1:79:95:14:6f:c3:40: 93:1b:23:ed:64:30:d4:97:94:cc:9d:97:f7:a6:c1: 82:25:0a:27:e8:7f:13:49:5a:53:41:d0:c6:e7:10: 37:60:68:0a:6f:e1:c8:c9:ea:59:23:db:38:ae:b5: 28:5a:41:68:0b:88:67:9d:c7:ce:62:5d:f1:b1:12: 7b:d1:83:c2:ef:dc:ba:02:39:72:d8:db:f3:ae:09: 4b:29:c4:b8:03:b1:e8:04:ba:0d:f4:9d:8a:bd:74: d2:9e:10:ab:a3:01:21:29:2f:c8:de:8a:44:09:cc: c9:76:d8:70:9a:14:67:23:c6:d2:94:7e:06:37:3d: 47:b2:5f:84:ad:68:46:06:5d:47:1d:f8:2a:3e:07: 0b:1d:58:ec:a6:cc:0a:fb:25:36:4a:26:c0:d1:8b: bb:de:57:7f:7e:2a:71:66:56:8b:69:f4:12:0b:bb: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:40:15:3E:E2:48:F1:03:86:C0:75:F4:E3:AC:A5:39:58:FA:61:E4 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mkAVPuJI8QOGwHX046ylOVj6YeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:fa:86:cd:93:25:45:a0:36:58:3c:78:76:44:c9:40:92:51: b5:33:74:82:6e:42:bb:99:a8:5c:1d:bf:ec:f6:fe:83:a9:87: 0f:55:32:07:fc:f9:be:60:0c:02:ac:d7:56:37:f1:03:da:88: 44:7c:12:a5:87:7e:93:6e:01:c3:78:e1:66:68:54:59:d8:3e: 05:74:fc:22:e6:b5:4c:c9:a6:4b:d4:9e:e3:54:59:9c:d4:a1: 03:27:87:a1:fa:99:4c:f1:b0:90:6f:60:2a:bf:e4:30:87:a3: fa:7e:2e:49:3a:57:c6:7b:ca:fc:de:c0:c0:13:41:0e:47:b4: 4d:7c:ad:1a:f5:1b:1f:8d:94:d0:10:43:3f:91:f2:18:cc:ab: 87:8d:6e:08:10:42:62:e9:32:7c:2a:9b:ba:f9:84:d1:17:60: d3:06:75:3e:c3:98:2f:19:6a:ce:2a:e3:dc:0f:f4:53:f3:ee: 7d:94:7d:dd:55:61:27:34:ee:e9:42:1f:fe:9d:32:22:2d:f7: 8c:77:45:f1:ca:51:dc:37:7b:19:ee:b8:eb:87:c1:99:a4:d1: d7:3f:1c:1b:3a:a6:32:c4:90:61:db:67:99:f9:e0:67:99:5c: de:32:9a:86:5e:a9:ae:99:6e:0b:8c:f4:b6:65:cf:16:25:23: 94:1b:71:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdKVZkyG/LTg8fwI1LHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQwMTUzZWUyNDhmMTAzODZjMDc1ZjRlM2FjYTUzOTU4ZmE2MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu58mPUXJfq/3/ZNC6JwBZXYWrRca 7aH2haroRoiDQW9Vp30IemSdC0EadUGzVF1XSqQjI6iVO1qSEO8v3e0i7ppX6bvA U4W11wVvyDuY1Q3PYLF5lRRvw0CTGyPtZDDUl5TMnZf3psGCJQon6H8TSVpTQdDG 5xA3YGgKb+HIyepZI9s4rrUoWkFoC4hnncfOYl3xsRJ70YPC79y6Ajly2NvzrglL KcS4A7HoBLoN9J2KvXTSnhCrowEhKS/I3opECczJdthwmhRnI8bSlH4GNz1Hsl+E rWhGBl1HHfgqPgcLHVjspswK+yU2SibA0Yu73ld/fipxZlaLafQSC7s/JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpAFT7iSPEDhsB19OOspTlY+mHkMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvbWtBVlB1Skk4UU9Hd0hYMDQ2eWxPVmo2WWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb5MA0G CSqGSIb3DQEBCwUAA4IBAQCK+obNkyVFoDZYPHh2RMlAklG1M3SCbkK7mahcHb/s 9v6DqYcPVTIH/Pm+YAwCrNdWN/ED2ohEfBKlh36TbgHDeOFmaFRZ2D4FdPwi5rVM yaZL1J7jVFmc1KEDJ4eh+plM8bCQb2Aqv+Qwh6P6fi5JOlfGe8r83sDAE0EOR7RN fK0a9RsfjZTQEEM/kfIYzKuHjW4IEEJi6TJ8Kpu6+YTRF2DTBnU+w5gvGWrOKuPc D/RT8+59lH3dVWEnNO7pQh/+nTIiLfeMd0XxylHcN3sZ7rjrh8GZpNHXPxwbOqYy xJBh22eZ+eBnmVzeMpqGXqmumW4LjPS2Zc8WJSOUG3G4 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:19 2026 by rpki-client