This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mCcNUVagzNjlFQKumHwQBZdVhtM.roa File: mCcNUVagzNjlFQKumHwQBZdVhtM.roa (raw, json) Hash identifier: bcIgUZpYTBaKqCjneADFVDWDLHLmZxYU/ataflBQJYE= Subject key identifier: 98:27:0D:51:56:A0:CC:D8:E5:15:02:AE:98:7C:10:05:97:55:86:D3 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53BFDA81075646B41CD645704D8C4 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mCcNUVagzNjlFQKumHwQBZdVhtM.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57705 IP address blocks: 83.228.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3b:fd:a8:10:75:64:6b:41:cd:64:57:04:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98270d5156a0ccd8e51502ae987c1005975586d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:a0:df:d5:79:47:03:24:bf:69:27:97:13: 30:b2:ea:7a:7f:7a:d6:3d:1f:3b:75:1a:dc:74:0c: 0c:f4:2f:9e:1c:88:c6:73:81:03:4c:94:2b:53:cc: b4:85:78:bb:cf:18:f8:ba:a6:54:d6:75:bd:09:66: d2:fa:ad:34:57:4b:66:c7:2b:02:5f:25:0a:b2:42: 6d:29:41:25:15:f1:c7:d8:8f:74:1c:3d:86:ef:0c: 30:20:dd:3f:5f:a7:12:f2:d1:13:28:7c:89:dc:b6: b4:ae:34:0c:78:e9:07:16:b6:7a:b7:bf:ce:cd:83: eb:06:a8:93:cc:d1:48:46:6b:13:90:fe:9c:cf:83: e5:b3:a0:00:35:1f:5d:fc:5e:84:09:31:e4:e0:dc: 51:62:fe:90:62:66:9b:d1:b7:17:a5:4d:ec:89:6e: 15:d3:d7:8a:fc:5c:ba:e6:d0:e6:c7:97:37:49:6d: 0f:67:aa:f2:1a:45:3f:20:a4:cd:4b:a6:8b:76:54: b3:95:ca:b6:7d:0a:25:ee:92:37:77:95:27:3f:4a: d0:02:d2:1c:c2:cb:d8:10:02:a4:d5:f9:a4:92:20: 2b:0c:18:25:34:2a:11:8c:2e:26:00:2c:bd:9a:d8: d9:06:c2:77:25:92:df:4a:60:de:aa:9c:87:26:f5: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:27:0D:51:56:A0:CC:D8:E5:15:02:AE:98:7C:10:05:97:55:86:D3 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mCcNUVagzNjlFQKumHwQBZdVhtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.228.102.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cb:d4:21:ad:56:07:45:7d:f3:f0:35:b6:f3:11:c4:a7:47: 52:43:ea:37:be:56:8b:99:ba:9d:8e:df:a0:d2:87:c5:71:75: 18:d6:d8:89:65:d1:bf:a6:a9:23:d1:04:11:55:a1:3a:77:ab: f2:cb:cd:08:ce:a6:40:0e:bb:ea:e8:56:98:16:1f:85:75:e5: e4:6d:b2:ea:d0:ce:88:b5:21:0d:e1:74:bf:7f:a6:43:85:89: 6c:c1:0a:08:b7:66:f4:6c:2d:77:f7:53:4a:76:66:81:ff:30: 7b:0c:80:3a:8c:78:8e:81:cc:b7:02:ab:9d:4a:90:e0:fa:27: f5:21:8b:7a:2e:19:eb:09:3c:f8:6d:0e:09:13:d8:a1:c3:8b: 07:2a:95:97:6f:93:be:7d:f7:11:da:81:71:51:fe:87:ca:cb: 5d:6e:b6:06:13:7a:c3:96:3a:d0:90:ab:fd:01:5d:4c:e9:8f: 5e:11:26:05:64:d1:c2:98:1c:e8:78:9e:e4:dc:94:0a:59:06: e7:7a:8b:73:33:01:6b:fe:ca:84:50:c6:de:92:bb:58:9c:8c: d6:a1:41:08:56:9c:63:85:37:a7:56:69:46:8c:a4:56:d8:31: 5c:a5:e2:9b:aa:37:ca:6a:8a:55:56:eb:d2:c4:af:2d:53:e8: b3:12:09:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTv9qBB1ZGtBzWRXBNjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODI3MGQ1MTU2YTBjY2Q4ZTUxNTAyYWU5ODdjMTAwNTk3NTU4NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oqg39V5RwMkv2knlxMwsup6f3rW PR87dRrcdAwM9C+eHIjGc4EDTJQrU8y0hXi7zxj4uqZU1nW9CWbS+q00V0tmxysC XyUKskJtKUElFfHH2I90HD2G7wwwIN0/X6cS8tETKHyJ3La0rjQMeOkHFrZ6t7/O zYPrBqiTzNFIRmsTkP6cz4Pls6AANR9d/F6ECTHk4NxRYv6QYmab0bcXpU3siW4V 09eK/Fy65tDmx5c3SW0PZ6ryGkU/IKTNS6aLdlSzlcq2fQol7pI3d5UnP0rQAtIc wsvYEAKk1fmkkiArDBglNCoRjC4mACy9mtjZBsJ3JZLfSmDeqpyHJvVmQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgnDVFWoMzY5RUCrph8EAWXVYbTMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvbUNjTlVWYWd6TmpsRlFLdW1Id1FCWmRWaHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+RmMA0G CSqGSIb3DQEBCwUAA4IBAQA6y9QhrVYHRX3z8DW28xHEp0dSQ+o3vlaLmbqdjt+g 0ofFcXUY1tiJZdG/pqkj0QQRVaE6d6vyy80IzqZADrvq6FaYFh+FdeXkbbLq0M6I tSEN4XS/f6ZDhYlswQoIt2b0bC1391NKdmaB/zB7DIA6jHiOgcy3AqudSpDg+if1 IYt6LhnrCTz4bQ4JE9ihw4sHKpWXb5O+ffcR2oFxUf6HystdbrYGE3rDljrQkKv9 AV1M6Y9eESYFZNHCmBzoeJ7k3JQKWQbneotzMwFr/sqEUMbekrtYnIzWoUEIVpxj hTenVmlGjKRW2DFcpeKbqjfKaopVVuvSxK8tU+izEgnE -----END CERTIFICATE-----Generated at Fri Jan 23 21:17:53 2026 by rpki-client