This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/maFeNnmxHgdtyiLMVbIatryOuEY.roa File: maFeNnmxHgdtyiLMVbIatryOuEY.roa (raw, json) Hash identifier: +FlVXu7wJeSmVDIQ5+iybimwI1+7uLPGIIW2dWirnE8= Subject key identifier: 99:A1:5E:36:79:B1:1E:07:6D:CA:22:CC:55:B2:1A:B6:BC:8E:B8:46 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15ECB1DC8BD70A222EB35EEAEE7396 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/maFeNnmxHgdtyiLMVbIatryOuEY.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 2.56.108.0/24 maxlen: 24 2.56.109.0/24 maxlen: 24 45.9.30.0/24 maxlen: 24 45.81.113.0/24 maxlen: 24 45.81.115.0/24 maxlen: 24 45.88.136.0/24 maxlen: 24 45.88.139.0/24 maxlen: 24 45.94.170.0/24 maxlen: 24 45.132.181.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 85.209.120.0/24 maxlen: 24 193.57.41.0/24 maxlen: 24 194.15.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:b1:dc:8b:d7:0a:22:2e:b3:5e:ea:ee:73:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a15e3679b11e076dca22cc55b21ab6bc8eb846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:c7:ea:a2:74:e7:cc:63:b7:58:b2:4a:b9: d6:45:d3:69:29:40:75:51:60:98:28:8a:68:33:2a: 0d:2f:9a:58:b6:ee:dc:27:a2:77:84:f4:3a:13:ce: ce:e4:ca:0d:19:54:96:0d:f2:47:2e:f6:a6:28:22: 9a:e4:2e:a6:2e:f3:9b:2c:5c:83:00:27:9b:c7:1e: 3a:56:7b:17:e9:07:8a:46:55:5f:8a:2e:a6:20:f9: a1:dc:5f:6c:ad:41:35:59:a0:3b:3b:aa:c6:68:56: e2:8d:6e:0a:23:49:87:cb:af:e2:73:f1:4a:07:64: f2:81:58:6b:98:49:e9:5c:c9:fe:16:67:b1:54:1a: c2:a5:05:cf:3a:f9:e6:ed:3f:b2:b9:01:da:36:9c: ea:a1:2b:7b:64:7e:66:af:7b:48:a9:63:c0:31:bc: f2:ba:6d:64:27:35:fe:f0:de:2a:76:50:87:7a:f7: 34:7f:98:04:a5:fe:67:fb:c0:45:88:4d:97:24:0f: c3:69:9a:b4:e2:49:4a:f0:fb:64:05:03:54:ad:a1: 54:a7:e5:ba:55:e3:e1:74:86:7f:39:92:7d:d4:5a: 79:82:ca:ca:bc:63:d7:af:bf:4c:cf:6a:4e:38:84: 15:ea:bb:22:14:cc:a5:8a:c6:d4:41:50:9e:08:9a: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:5E:36:79:B1:1E:07:6D:CA:22:CC:55:B2:1A:B6:BC:8E:B8:46 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/maFeNnmxHgdtyiLMVbIatryOuEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/23 45.9.30.0/24 45.81.113.0/24 45.81.115.0/24 45.88.136.0/24 45.88.139.0/24 45.94.170.0/24 45.132.181.0/24 77.83.37.0/24 85.209.120.0/24 193.57.41.0/24 194.15.52.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a0:30:0d:c9:50:2b:d1:be:49:1b:c6:a5:92:4b:32:22:04: a8:01:1f:9d:4d:d4:8f:f6:7a:6b:6a:1c:f9:70:c0:79:8c:e8: c9:e2:7e:a0:29:05:0f:b2:20:dd:b3:22:d9:12:ae:88:e7:9f: 62:94:82:85:cd:13:46:cf:82:03:e4:b0:77:ef:2b:f0:67:6a: 6d:4a:1b:6e:1a:57:92:7d:a6:4f:c8:81:80:c0:a3:26:a7:df: bc:a6:ac:17:a8:2a:5a:e3:73:98:8d:3d:e9:07:8e:e9:2b:c6: d5:b2:fd:34:cb:d4:62:5d:4a:f0:61:ad:84:81:0f:36:9f:8b: 92:a2:3b:bf:f6:42:cc:6c:10:aa:dd:67:a2:49:31:77:00:4e: 74:ee:36:a9:c9:32:c6:b3:cc:f8:fe:72:01:47:42:af:c7:e1: 14:11:c9:14:06:a0:64:0e:0d:9c:35:9f:7d:a9:62:20:86:14: c7:be:a3:99:dc:3b:56:ff:c6:d1:23:54:4a:6c:b6:7c:0c:d7: ca:4f:a8:50:65:74:65:5b:de:30:40:2a:bf:fe:5c:7f:c6:0a: c6:5c:5a:d5:e3:8f:f2:9f:74:51:59:05:bf:ae:25:b7:ba:f8: d0:01:ee:5b:75:2b:1c:11:7b:f1:26:8e:87:e9:94:85:9b:7f: 5a:08:5c:5d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/Feyx3IvXCiIus17q7nOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWExNWUzNjc5YjExZTA3NmRjYTIyY2M1NWIyMWFiNmJjOGViODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nHH6qJ058xjt1iySrnWRdNpKUB1 UWCYKIpoMyoNL5pYtu7cJ6J3hPQ6E87O5MoNGVSWDfJHLvamKCKa5C6mLvObLFyD ACebxx46VnsX6QeKRlVfii6mIPmh3F9srUE1WaA7O6rGaFbijW4KI0mHy6/ic/FK B2TygVhrmEnpXMn+FmexVBrCpQXPOvnm7T+yuQHaNpzqoSt7ZH5mr3tIqWPAMbzy um1kJzX+8N4qdlCHevc0f5gEpf5n+8BFiE2XJA/DaZq04klK8PtkBQNUraFUp+W6 VePhdIZ/OZJ91Fp5gsrKvGPXr79Mz2pOOIQV6rsiFMylisbUQVCeCJo7YwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJmhXjZ5sR4HbcoizFWyGra8jrhGMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvbWFGZU5ubXhIZ2R0eWlMTVZiSWF0cnlPdUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBAjhsAwQA LQkeAwQALVFxAwQALVFzAwQALViIAwQALViLAwQALV6qAwQALYS1AwQATVMlAwQA VdF4AwQAwTkpAwQAwg80MA0GCSqGSIb3DQEBCwUAA4IBAQAJoDANyVAr0b5JG8al kksyIgSoAR+dTdSP9nprahz5cMB5jOjJ4n6gKQUPsiDdsyLZEq6I559ilIKFzRNG z4ID5LB37yvwZ2ptShtuGleSfaZPyIGAwKMmp9+8pqwXqCpa43OYjT3pB47pK8bV sv00y9RiXUrwYa2EgQ82n4uSoju/9kLMbBCq3WeiSTF3AE507japyTLGs8z4/nIB R0Kvx+EUEckUBqBkDg2cNZ99qWIghhTHvqOZ3DtW/8bRI1RKbLZ8DNfKT6hQZXRl W94wQCq//lx/xgrGXFrV44/yn3RRWQW/riW3uvjQAe5bdSscEXvxJo6H6ZSFm39a CFxd -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:13 2026 by rpki-client