This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/MqEYcGP28yZryUtdD_3wTNGTAVc.roa File: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (raw, json) Hash identifier: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM= Subject key identifier: 32:A1:18:70:63:F6:F3:26:6B:C9:4B:5D:0F:FD:F0:4C:D1:93:01:57 Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Certificate serial: 019B77C6FD3B80D0AF57BA0F4E0E2B9A772F Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/MqEYcGP28yZryUtdD_3wTNGTAVc.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 193.84.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fd:3b:80:d0:af:57:ba:0f:4e:0e:2b:9a:77:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32a1187063f6f3266bc94b5d0ffdf04cd1930157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:53:b3:e5:a0:71:0a:51:5a:16:e5:13:51: f7:79:70:73:5a:c5:25:2b:cd:ce:22:34:ac:fe:65: 66:ba:09:8a:d9:75:27:ae:fc:38:4c:68:43:88:0a: 18:93:99:31:18:3e:82:fc:41:cc:9a:60:65:21:a1: dd:c6:70:b4:f0:17:4d:23:76:73:93:d8:8e:a4:84: c7:ef:f5:44:3f:96:17:5d:90:5b:0c:5f:f4:7a:2a: b4:b8:10:a5:0a:d0:71:18:19:25:8d:7d:7c:8c:f1: 8c:54:ac:47:87:95:bd:69:09:2f:ce:71:28:c5:3b: d6:70:8f:fa:ec:4d:90:1a:60:3d:83:5d:a7:91:b0: 60:29:94:83:92:0d:4d:3e:7c:fc:a9:2d:2f:53:56: 96:2d:fb:71:74:b9:03:4e:52:fa:bf:70:49:26:bf: 1b:5a:86:a4:11:41:ae:8b:b6:2a:f3:e4:b4:6a:2b: 03:ae:73:3a:c8:6b:54:69:0f:53:c4:d1:3f:b0:92: fd:40:10:4a:eb:1a:2a:9d:da:0f:da:cc:83:52:b4: 78:8c:9d:dc:a1:ad:41:dc:3f:93:e0:90:bd:dc:0e: d4:1c:9f:7b:a8:20:84:30:dc:d2:93:56:86:43:70: ac:4f:44:f3:1b:ce:cb:f3:b0:ea:75:8a:8b:10:1f: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:18:70:63:F6:F3:26:6B:C9:4B:5D:0F:FD:F0:4C:D1:93:01:57 X509v3 Authority Key Identifier: keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/MqEYcGP28yZryUtdD_3wTNGTAVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.128.0/23 Signature Algorithm: sha256WithRSAEncryption 61:01:e6:20:bc:df:af:db:d0:45:fe:84:20:12:e0:1b:28:40: 77:30:20:f0:c9:2d:4a:0e:a6:e0:df:0f:89:3a:70:a1:01:35: 09:38:a8:ba:0d:97:45:aa:38:f1:63:8a:88:51:cd:f9:77:58: e5:96:bf:40:44:ab:1b:3f:d5:69:a4:8e:04:0d:b1:83:eb:84: c7:af:9a:65:4d:de:d8:0d:32:42:59:39:7c:d7:3a:d5:d5:2c: da:80:21:a5:1f:55:88:17:e4:1d:74:14:9d:c8:e3:0d:8a:98: 1b:28:ca:f8:c9:78:ca:48:57:3c:49:cc:cf:32:b3:15:71:d4: 95:37:fa:3b:5b:3d:32:bf:ed:52:b3:32:66:74:c2:5e:69:d7: cc:48:56:c2:f6:4c:e0:8f:12:55:1a:f0:f9:c2:be:c1:c5:f7: db:1b:be:d2:bc:dd:44:b4:b9:7c:a8:e4:e6:a2:ea:6f:f3:4e: 55:29:ed:fc:7f:ca:4c:6a:f1:c5:3c:9b:67:09:55:8d:df:49: da:b0:a3:f0:7d:d1:3c:54:0a:ab:be:4b:22:ce:b7:b5:f6:65: aa:5a:72:a0:36:80:b7:66:73:4c:e9:e6:62:85:3d:da:c6:a1: b8:7b:39:66:8f:fc:f9:ee:8e:2a:3b:71:e1:38:b5:47:8e:0c: 15:cc:31:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv07gNCvV7oPTg4rmncvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM0M2EzN2VjYWQyYmZiMmMzNWJkOWIyNmQ3ZjQ4YmNi NTc1MzcwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmExMTg3MDYzZjZmMzI2NmJjOTRiNWQwZmZkZjA0Y2QxOTMwMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypxTs+WgcQpRWhblE1H3eXBzWsUl K83OIjSs/mVmugmK2XUnrvw4TGhDiAoYk5kxGD6C/EHMmmBlIaHdxnC08BdNI3Zz k9iOpITH7/VEP5YXXZBbDF/0eiq0uBClCtBxGBkljX18jPGMVKxHh5W9aQkvznEo xTvWcI/67E2QGmA9g12nkbBgKZSDkg1NPnz8qS0vU1aWLftxdLkDTlL6v3BJJr8b WoakEUGui7Yq8+S0aisDrnM6yGtUaQ9TxNE/sJL9QBBK6xoqndoP2syDUrR4jJ3c oa1B3D+T4JC93A7UHJ97qCCEMNzSk1aGQ3CsT0TzG87L87DqdYqLEB8AwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKhGHBj9vMma8lLXQ/98EzRkwFXMB8GA1UdIwQY MBaAFNCjQ6N+ytK/ssNb2bJtf0i8tXU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYt YzdiMzZiOGEyNjg1LzEvTXFFWWNHUDI4eVpyeVV0ZERfM3dUTkdUQVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYtYzdiMzZiOGEyNjg1 LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwVSAMA0G CSqGSIb3DQEBCwUAA4IBAQBhAeYgvN+v29BF/oQgEuAbKEB3MCDwyS1KDqbg3w+J OnChATUJOKi6DZdFqjjxY4qIUc35d1jllr9ARKsbP9VppI4EDbGD64THr5plTd7Y DTJCWTl81zrV1SzagCGlH1WIF+QddBSdyOMNipgbKMr4yXjKSFc8SczPMrMVcdSV N/o7Wz0yv+1SszJmdMJeadfMSFbC9kzgjxJVGvD5wr7BxffbG77SvN1EtLl8qOTm oupv805VKe38f8pMavHFPJtnCVWN30nasKPwfdE8VAqrvksizre19mWqWnKgNoC3 ZnNM6eZihT3axqG4ezlmj/z57o4qO3HhOLVHjgwVzDHZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:51 2026 by rpki-client