This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa File: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (raw, json) Hash identifier: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA= Subject key identifier: 99:AF:A0:19:26:FC:51:C3:01:DE:39:CE:83:12:A4:DD:79:B1:FF:11 Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91 Certificate serial: 019B7A5B74E465EB474A97BECDC9329DB006 Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.235.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:74:e4:65:eb:47:4a:97:be:cd:c9:32:9d:b0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99afa01926fc51c301de39ce8312a4dd79b1ff11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:ec:11:06:98:f2:69:0e:31:f2:76:87:37: 50:d1:41:a5:93:ef:cc:39:3b:aa:eb:c0:84:d2:9d: 38:23:fd:de:b6:e7:48:89:db:b4:b7:ac:9c:df:a8: 40:ce:b4:0a:56:5e:24:d0:e6:c8:26:17:64:e2:cd: f9:f0:e1:f2:22:c7:e9:bf:d4:7d:e7:7a:37:bc:34: 97:68:1c:60:45:55:54:0f:ce:19:46:8d:52:0f:5f: 14:f8:ce:6c:6e:22:44:48:4e:9f:49:a7:db:b0:cb: 54:8b:0f:f1:70:3e:3e:bb:cf:8d:1a:ca:dd:1b:3a: d3:fc:58:6b:2b:e6:46:c8:fb:98:90:ca:7b:ca:0b: 24:47:bb:fa:08:b6:6a:32:de:48:ac:8d:48:92:a8: e2:37:68:4d:84:83:ca:19:51:83:84:3b:10:8a:3e: c2:53:96:fe:f3:59:d6:6f:af:66:87:21:4d:d2:1b: 3c:c6:e5:80:e8:73:64:46:7b:56:72:59:0e:c9:4f: d4:08:11:a0:4f:16:d3:4f:ad:6f:d4:8c:16:30:11: e6:b6:05:3a:d3:b9:a0:a1:6c:e3:1f:f8:7b:08:19: a6:b1:75:2c:3d:5a:bc:06:50:4a:d0:7b:58:dd:98: 65:31:08:62:13:79:3f:25:d5:6a:b3:2f:27:0a:df: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:A0:19:26:FC:51:C3:01:DE:39:CE:83:12:A4:DD:79:B1:FF:11 X509v3 Authority Key Identifier: keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.199.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:37:7b:92:8c:0c:6d:8e:54:d3:6d:ea:90:74:76:a0:a2:c4: 83:11:b5:85:b4:79:84:21:e3:4f:88:84:5c:c8:0f:26:3f:82: de:94:ea:17:26:b2:89:90:e0:0e:0d:02:b0:23:99:2c:ca:d1: a8:5b:f8:25:6f:22:8a:00:88:b1:c4:f1:ca:01:f0:1e:5b:1b: 8e:e6:b8:b3:b1:7e:ae:51:2e:0b:0d:6a:49:9c:02:de:7a:97: 38:b5:b2:5f:8b:cd:84:0d:33:0c:39:20:15:cf:dc:52:28:f6: f1:96:d9:78:13:9e:24:e8:5c:de:95:62:ff:75:88:74:44:84: 95:6f:55:5b:f6:cb:0e:a1:42:d2:ee:49:5d:52:63:8f:2d:a7: ed:48:dd:f0:f3:da:68:63:94:f2:15:00:1e:9f:3f:5d:58:74: c8:6c:ec:90:d3:cd:22:67:c3:1b:06:22:b4:d6:e8:6d:56:fc: fa:76:09:e9:43:ec:6f:f4:1b:e3:af:92:3e:d2:89:96:27:17: 65:97:23:6a:17:06:5b:6e:7c:63:e4:8c:8a:69:a2:d3:6a:cb: 74:27:4f:2b:73:ce:6b:95:8c:00:33:5d:94:e1:20:5e:8e:5e: 60:a0:39:f8:d0:9c:7d:6f:6e:f7:27:22:e1:ab:73:18:e8:1e: 1b:07:87:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3TkZetHSpe+zckynbAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYmU5MWViNjNhNDRmMWU5ZjFhODNlZGQyMThhMWVjNzVj MjVlOTEwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWFmYTAxOTI2ZmM1MWMzMDFkZTM5Y2U4MzEyYTRkZDc5YjFmZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3vsEQaY8mkOMfJ2hzdQ0UGlk+/M OTuq68CE0p04I/3etudIidu0t6yc36hAzrQKVl4k0ObIJhdk4s358OHyIsfpv9R9 53o3vDSXaBxgRVVUD84ZRo1SD18U+M5sbiJESE6fSafbsMtUiw/xcD4+u8+NGsrd GzrT/FhrK+ZGyPuYkMp7ygskR7v6CLZqMt5IrI1IkqjiN2hNhIPKGVGDhDsQij7C U5b+81nWb69mhyFN0hs8xuWA6HNkRntWclkOyU/UCBGgTxbTT61v1IwWMBHmtgU6 07mgoWzjH/h7CBmmsXUsPVq8BlBK0HtY3ZhlMQhiE3k/JdVqsy8nCt+e9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmvoBkm/FHDAd45zoMSpN15sf8RMB8GA1UdIwQY MBaAFAy+ketjpE8enxqD7dIYoex1wl6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAt YmRjNWFlOGFiZGIxLzEvbWEtZ0dTYjhVY01CM2puT2d4S2szWG14X3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAtYmRjNWFlOGFiZGIx LzEvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0G CSqGSIb3DQEBCwUAA4IBAQCLN3uSjAxtjlTTbeqQdHagosSDEbWFtHmEIeNPiIRc yA8mP4LelOoXJrKJkOAODQKwI5ksytGoW/glbyKKAIixxPHKAfAeWxuO5rizsX6u US4LDWpJnALeepc4tbJfi82EDTMMOSAVz9xSKPbxltl4E54k6FzelWL/dYh0RISV b1Vb9ssOoULS7kldUmOPLaftSN3w89poY5TyFQAenz9dWHTIbOyQ080iZ8MbBiK0 1uhtVvz6dgnpQ+xv9Bvjr5I+0omWJxdllyNqFwZbbnxj5IyKaaLTast0J08rc85r lYwAM12U4SBejl5goDn40Jx9b273JyLhq3MY6B4bB4dD -----END CERTIFICATE-----Generated at Sat Jan 3 01:33:20 2026 by rpki-client