This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/RMb8Tr40WGqktnRvQ9k7HNh5paw.roa File: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (raw, json) Hash identifier: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI= Subject key identifier: 44:C6:FC:4E:BE:34:58:6A:A4:B6:74:6F:43:D9:3B:1C:D8:79:A5:AC Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019B78A3421D9D23982073E1F480A0B70719 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/RMb8Tr40WGqktnRvQ9k7HNh5paw.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210421 IP address blocks: 91.193.167.0/24 maxlen: 24 94.45.129.0/24 maxlen: 24 94.45.136.0/24 maxlen: 24 94.45.139.0/24 maxlen: 24 94.45.146.0/23 maxlen: 24 94.45.146.0/24 maxlen: 24 94.45.147.0/24 maxlen: 24 94.45.148.0/23 maxlen: 24 94.45.148.0/24 maxlen: 24 94.45.149.0/24 maxlen: 24 94.45.152.0/22 maxlen: 24 94.45.152.0/24 maxlen: 24 94.45.153.0/24 maxlen: 24 94.45.154.0/24 maxlen: 24 94.45.155.0/24 maxlen: 24 94.45.156.0/23 maxlen: 24 94.45.156.0/24 maxlen: 24 94.45.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:42:1d:9d:23:98:20:73:e1:f4:80:a0:b7:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c6fc4ebe34586aa4b6746f43d93b1cd879a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:25:3f:78:61:05:c5:04:8e:09:25:c8:74: 3f:b2:72:f5:8f:7b:4f:f2:4f:1d:b9:d3:7d:c6:b7: c4:a1:e5:4e:d1:10:50:cf:ec:09:33:d0:52:b0:14: b5:55:d2:e6:2c:62:be:f2:01:c8:79:02:78:0d:a9: 44:93:44:e4:a5:08:29:e6:c5:01:19:f1:65:00:5b: e5:ac:ca:23:34:47:3a:82:88:43:5e:99:93:4a:35: 31:37:91:91:dd:82:d4:c0:5a:6e:e1:2d:9c:0f:0f: 10:a1:d5:40:5a:21:7f:59:cf:77:ee:92:98:55:d8: 4d:fe:da:2c:8a:a4:af:3a:1f:a7:3b:87:2c:54:0e: 61:7c:c9:4e:88:96:15:21:11:78:ca:96:e8:62:25: 58:50:75:1c:ad:74:16:bc:87:98:d3:31:da:9e:52: 9f:38:8f:f0:f0:53:83:53:7e:5c:ae:1b:2d:9c:d8: e9:f3:46:8b:96:5e:5d:1f:ca:4c:a9:84:c4:80:da: 26:64:11:42:c6:15:da:36:a3:97:a5:c9:45:9b:05: d6:c5:62:21:8f:04:36:45:f8:5d:66:03:a0:97:c5: 0c:01:66:0e:33:0b:6b:b6:1e:2e:07:79:67:8f:6b: 55:6f:c5:9a:47:12:d4:9d:8d:d2:ec:e1:69:7a:5a: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:FC:4E:BE:34:58:6A:A4:B6:74:6F:43:D9:3B:1C:D8:79:A5:AC X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/RMb8Tr40WGqktnRvQ9k7HNh5paw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.167.0/24 94.45.129.0/24 94.45.136.0/24 94.45.139.0/24 94.45.146.0-94.45.149.255 94.45.152.0-94.45.157.255 Signature Algorithm: sha256WithRSAEncryption 58:a8:8e:f5:c2:6f:68:41:b4:03:d0:22:8c:d9:f3:b9:cd:15: 91:67:07:d4:90:16:22:8a:fc:03:71:bb:95:80:cd:f7:f0:69: 51:79:24:4c:bc:0f:34:bf:17:0b:19:e4:4c:83:9b:cd:46:af: 40:61:b3:2c:7e:fb:a9:54:30:76:17:a1:47:f0:98:64:64:24: 7c:1c:04:00:7d:cb:8f:9d:16:8f:b4:93:21:b6:7d:b2:53:57: a2:47:87:0c:36:ac:a8:b5:af:b7:fe:f2:3c:bb:65:7e:8f:6a: 32:07:ba:d2:a1:f1:a7:d9:c9:6e:a4:e1:20:31:2e:74:f2:38: 21:c1:a2:93:0a:94:cd:95:d6:b6:b8:33:08:2e:d7:7c:70:00: 6c:63:58:6d:a2:d0:ac:c5:2a:9a:aa:d4:43:ea:5a:a9:a8:90: a7:80:99:ab:5e:9a:71:88:07:ea:7d:5f:cb:27:4d:37:e5:3b: e4:63:78:3f:63:f4:97:67:11:fe:d7:3a:38:ac:b0:e5:81:b4: 8f:4a:ab:6d:75:41:25:3a:ae:ec:d4:a3:cf:0a:39:d5:df:35: c7:4c:78:96:22:68:c5:d1:49:89:d0:a7:79:c2:11:3d:12:29: 93:aa:55:b2:ca:fe:f4:8d:32:12:97:7d:4b:8a:46:d7:25:ad: 9c:04:2c:86 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt4o0IdnSOYIHPh9ICgtwcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGM2ZmM0ZWJlMzQ1ODZhYTRiNjc0NmY0M2Q5M2IxY2Q4NzlhNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwolP3hhBcUEjgklyHQ/snL1j3tP 8k8dudN9xrfEoeVO0RBQz+wJM9BSsBS1VdLmLGK+8gHIeQJ4DalEk0TkpQgp5sUB GfFlAFvlrMojNEc6gohDXpmTSjUxN5GR3YLUwFpu4S2cDw8QodVAWiF/Wc937pKY VdhN/tosiqSvOh+nO4csVA5hfMlOiJYVIRF4ypboYiVYUHUcrXQWvIeY0zHanlKf OI/w8FODU35crhstnNjp80aLll5dH8pMqYTEgNomZBFCxhXaNqOXpclFmwXWxWIh jwQ2RfhdZgOgl8UMAWYOMwtrth4uB3lnj2tVb8WaRxLUnY3S7OFpelpHfwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFETG/E6+NFhqpLZ0b0PZOxzYeaWsMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvUk1iOFRyNDBXR3FrdG5SdlE5azdITmg1cGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAW8GnAwQA Xi2BAwQAXi2IAwQAXi2LMAwDBAFeLZIDBAFeLZQwDAMEA14tmAMEAV4tnDANBgkq hkiG9w0BAQsFAAOCAQEAWKiO9cJvaEG0A9AijNnzuc0VkWcH1JAWIor8A3G7lYDN 9/BpUXkkTLwPNL8XCxnkTIObzUavQGGzLH77qVQwdhehR/CYZGQkfBwEAH3Lj50W j7STIbZ9slNXokeHDDasqLWvt/7yPLtlfo9qMge60qHxp9nJbqThIDEudPI4IcGi kwqUzZXWtrgzCC7XfHAAbGNYbaLQrMUqmqrUQ+paqaiQp4CZq16acYgH6n1fyydN N+U75GN4P2P0l2cR/tc6OKyw5YG0j0qrbXVBJTqu7NSjzwo51d81x0x4liJoxdFJ idCnecIRPRIpk6pVssr+9I0yEpd9S4pG1yWtnAQshg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:59 2026 by rpki-client