This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/mVapMmHRdrNnHP7qEe61fUd9MJ4.roa File: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (raw, json) Hash identifier: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54= Subject key identifier: 99:56:A9:32:61:D1:76:B3:67:1C:FE:EA:11:EE:B5:7D:47:7D:30:9E Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019B77C68E47AC52F4FD631F959783CA77D4 Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/mVapMmHRdrNnHP7qEe61fUd9MJ4.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 193.53.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:47:ac:52:f4:fd:63:1f:95:97:83:ca:77:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9956a93261d176b3671cfeea11eeb57d477d309e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:39:a2:df:9b:c4:e5:30:98:50:29:ad:b2: ff:bc:d3:48:73:2b:42:3f:70:d9:e6:d6:29:f0:e3: fe:a3:b7:6f:7e:a3:a7:d8:bd:87:a3:bd:48:b9:0f: d6:ff:a3:62:ed:67:39:6e:87:17:7c:72:e9:a6:07: 6f:71:2d:1b:ff:66:13:c7:eb:ef:5a:46:fb:e4:fd: e8:0e:aa:e4:ab:9a:f4:62:b9:e3:30:f7:2b:f9:6f: 57:c8:fc:6e:33:f5:8c:45:18:ab:85:93:16:db:8a: aa:13:56:a6:20:96:f3:1f:27:4f:a2:13:25:11:80: b0:0b:17:6e:51:d9:81:cd:d8:0f:e9:76:fe:a2:35: 6d:0b:40:09:14:9f:05:f4:d6:fe:22:45:a3:6b:02: 81:e6:72:d7:83:eb:d1:bb:66:ae:e9:7f:71:f0:86: cd:96:c3:7f:1c:25:ba:db:31:ec:40:2a:d6:38:40: 70:21:f9:f1:7b:dd:2c:a8:87:42:4e:5c:11:d2:30: 5b:0d:cf:34:3e:2e:6b:7c:fd:84:2a:b6:f4:3d:40: 7f:bb:bc:77:1b:ca:54:34:11:87:69:5b:84:3c:95: 35:9e:59:df:36:f7:b2:cb:40:07:e6:6f:2f:b4:e3: 23:f8:26:67:1a:22:ba:fe:37:e7:16:d1:ba:1f:89: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:A9:32:61:D1:76:B3:67:1C:FE:EA:11:EE:B5:7D:47:7D:30:9E X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/mVapMmHRdrNnHP7qEe61fUd9MJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.88.0/24 Signature Algorithm: sha256WithRSAEncryption 68:f3:ba:dc:c1:a4:35:e1:35:d4:43:26:ae:4e:a7:51:47:1c: b8:23:e1:38:8a:d1:be:cb:90:67:6e:3d:4e:e0:17:af:9e:40: 8b:4d:9c:eb:64:4e:d6:de:a0:17:30:65:25:2e:9d:c6:7d:c3: bd:8d:39:a3:93:06:68:02:4a:9c:0a:66:bb:a4:aa:fd:06:7b: 5d:1d:64:4f:58:93:39:f3:93:af:00:01:d2:cc:b9:ba:63:57: 79:13:f6:f0:56:d2:e8:b1:0b:68:f3:12:de:32:0e:25:37:b1: 6f:ab:74:b4:36:e9:e1:4e:5e:e8:b3:fa:b4:2d:f1:44:b5:ba: 66:b2:6a:44:09:44:88:a0:c7:fd:44:9c:15:10:5c:78:37:34: 18:0f:cd:e4:2e:03:29:ad:2c:45:a1:87:a6:6b:76:66:d5:6d: 30:08:01:ac:f6:e0:2c:2a:4f:47:cf:62:cf:bc:4e:22:ad:e9: a1:39:14:c8:01:98:b0:8c:84:6b:40:03:2a:c3:95:d8:ce:91: ed:7c:b7:e5:34:ec:3b:5a:2a:21:32:5c:42:1d:d1:99:7c:5a: 66:50:a1:b2:9d:a0:56:cf:6e:d1:da:11:50:ec:de:b0:73:c0: b1:36:e2:c1:11:94:a4:61:59:db:31:9b:b7:94:37:42:84:d1: a3:4f:8c:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo5HrFL0/WMflZeDynfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTU2YTkzMjYxZDE3NmIzNjcxY2ZlZWExMWVlYjU3ZDQ3N2QzMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI45ot+bxOUwmFAprbL/vNNIcytC P3DZ5tYp8OP+o7dvfqOn2L2Ho71IuQ/W/6Ni7Wc5bocXfHLppgdvcS0b/2YTx+vv Wkb75P3oDqrkq5r0YrnjMPcr+W9XyPxuM/WMRRirhZMW24qqE1amIJbzHydPohMl EYCwCxduUdmBzdgP6Xb+ojVtC0AJFJ8F9Nb+IkWjawKB5nLXg+vRu2au6X9x8IbN lsN/HCW62zHsQCrWOEBwIfnxe90sqIdCTlwR0jBbDc80Pi5rfP2EKrb0PUB/u7x3 G8pUNBGHaVuEPJU1nlnfNveyy0AH5m8vtOMj+CZnGiK6/jfnFtG6H4nQgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlWqTJh0XazZxz+6hHutX1HfTCeMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvbVZhcE1tSFJkck5uSFA3cUVlNjFmVWQ5TUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTVYMA0G CSqGSIb3DQEBCwUAA4IBAQBo87rcwaQ14TXUQyauTqdRRxy4I+E4itG+y5Bnbj1O 4BevnkCLTZzrZE7W3qAXMGUlLp3GfcO9jTmjkwZoAkqcCma7pKr9BntdHWRPWJM5 85OvAAHSzLm6Y1d5E/bwVtLosQto8xLeMg4lN7Fvq3S0NunhTl7os/q0LfFEtbpm smpECUSIoMf9RJwVEFx4NzQYD83kLgMprSxFoYema3Zm1W0wCAGs9uAsKk9Hz2LP vE4iremhORTIAZiwjIRrQAMqw5XYzpHtfLflNOw7WiohMlxCHdGZfFpmUKGynaBW z27R2hFQ7N6wc8CxNuLBEZSkYVnbMZu3lDdChNGjT4w5 -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:21 2026 by rpki-client