This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mBr0Va3P9J9aK7yYwPKeCzdab0I.roa File: mBr0Va3P9J9aK7yYwPKeCzdab0I.roa (raw, json) Hash identifier: mGDb6EsifMvIRA3vFc7gC65oMBRCigoQ7NmqTS0VW5U= Subject key identifier: 98:1A:F4:55:AD:CF:F4:9F:5A:2B:BC:98:C0:F2:9E:0B:37:5A:6F:42 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791089CD169DF57A905A24AE84F71A23 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mBr0Va3P9J9aK7yYwPKeCzdab0I.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136796 IP address blocks: 194.163.80.0/22 maxlen: 24 195.180.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:89:cd:16:9d:f5:7a:90:5a:24:ae:84:f7:1a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=981af455adcff49f5a2bbc98c0f29e0b375a6f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:71:7a:43:4b:97:69:38:ec:bd:d1:ca:6d: c2:66:1b:58:49:1e:0b:a7:10:f3:7e:9a:43:e2:3e: 0f:5c:a2:63:69:b7:35:d2:9e:b5:af:7f:5e:ef:be: 2f:05:c7:9f:a6:e0:07:0d:5b:7d:93:26:f5:5a:e2: bb:fa:7d:01:6d:ef:16:a6:78:25:31:4c:82:50:85: 21:38:87:fc:80:37:46:de:e9:61:fc:eb:1b:2a:2c: 24:cb:05:32:06:54:ad:0a:17:75:21:b1:ae:d0:e5: af:f7:06:9b:2b:16:f1:32:27:b4:df:7f:ef:e9:99: 83:ed:26:7d:44:09:79:65:64:72:ee:71:cf:13:16: ad:9e:8d:78:82:5f:2b:04:76:a8:14:c4:ce:50:1f: 43:64:3a:c9:a4:08:2d:de:9e:a7:d7:e7:b1:b8:b8: fc:6a:0e:79:8d:fb:17:c9:85:c0:3d:53:e1:cf:fe: 5d:2d:16:45:b1:04:91:b7:2e:03:8d:8e:77:d1:12: d0:fa:83:09:fb:d9:ba:0d:94:49:8e:d2:3b:0c:f2: 82:f0:c2:a9:32:4a:f8:f1:8b:ee:31:b9:f0:53:d7: fd:6f:07:55:77:b6:d6:60:f4:ba:d5:64:0f:0e:b1: bf:1a:6d:b2:d6:2a:c2:9e:21:01:ee:1c:5f:8f:69: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1A:F4:55:AD:CF:F4:9F:5A:2B:BC:98:C0:F2:9E:0B:37:5A:6F:42 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mBr0Va3P9J9aK7yYwPKeCzdab0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.80.0/22 195.180.150.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:ac:fb:e4:e6:de:b9:66:e3:66:08:da:be:8b:1a:1f:7a:54: 1d:dd:12:33:3b:b2:a3:be:2b:de:e3:b0:d6:98:5e:a6:d8:27: 56:5d:c0:4f:10:bd:bf:df:de:d3:81:06:3a:af:e8:1a:59:a3: 8c:2c:ab:5c:c7:f1:0e:5e:68:61:cb:2e:9e:9f:23:57:d0:45: 9d:0d:9d:37:6f:1c:16:7f:41:3a:da:59:cc:0c:a0:fc:a6:f2: 05:25:29:ac:af:76:0b:c4:db:3c:e0:d5:b6:62:ce:c0:4a:6b: d8:68:e5:9c:9e:e5:20:1e:67:28:96:ad:7c:4b:4c:db:ba:92: e8:00:c2:3b:48:3c:28:21:83:72:91:5e:eb:ab:91:ca:83:99: 03:8b:dd:fa:c8:37:23:81:0a:f9:63:35:5e:7d:4a:ab:43:7f: 59:af:06:bc:5f:a0:82:7b:9d:c1:3c:5f:2a:50:9b:e6:44:3c: 1d:e6:7d:ec:ff:f6:da:a3:a0:c7:d6:03:0c:2b:cc:06:38:ec: 68:45:ce:11:06:cd:9e:26:f0:4f:88:24:1c:2f:4b:d5:42:e3: 1c:81:f3:16:27:a2:b1:27:c4:ed:0b:e4:a2:a9:ab:66:a5:35: 28:31:9a:43:8c:57:22:74:e6:28:15:3c:b5:86:e5:37:ed:a3: 6a:c9:aa:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EInNFp31epBaJK6E9xojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODFhZjQ1NWFkY2ZmNDlmNWEyYmJjOThjMGYyOWUwYjM3NWE2ZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy9xekNLl2k47L3Rym3CZhtYSR4L pxDzfppD4j4PXKJjabc10p61r39e774vBcefpuAHDVt9kyb1WuK7+n0Bbe8Wpngl MUyCUIUhOIf8gDdG3ulh/OsbKiwkywUyBlStChd1IbGu0OWv9wabKxbxMie033/v 6ZmD7SZ9RAl5ZWRy7nHPExatno14gl8rBHaoFMTOUB9DZDrJpAgt3p6n1+exuLj8 ag55jfsXyYXAPVPhz/5dLRZFsQSRty4DjY530RLQ+oMJ+9m6DZRJjtI7DPKC8MKp Mkr48YvuMbnwU9f9bwdVd7bWYPS61WQPDrG/Gm2y1irCniEB7hxfj2koXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJga9FWtz/SfWiu8mMDyngs3Wm9CMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvbUJyMFZhM1A5SjlhSzd5WXdQS2VDemRhYjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwqNQAwQB w7SWMA0GCSqGSIb3DQEBCwUAA4IBAQA/rPvk5t65ZuNmCNq+ixofelQd3RIzO7Kj vive47DWmF6m2CdWXcBPEL2/397TgQY6r+gaWaOMLKtcx/EOXmhhyy6enyNX0EWd DZ03bxwWf0E62lnMDKD8pvIFJSmsr3YLxNs84NW2Ys7ASmvYaOWcnuUgHmcolq18 S0zbupLoAMI7SDwoIYNykV7rq5HKg5kDi936yDcjgQr5YzVefUqrQ39Zrwa8X6CC e53BPF8qUJvmRDwd5n3s//bao6DH1gMMK8wGOOxoRc4RBs2eJvBPiCQcL0vVQuMc gfMWJ6KxJ8TtC+SiqatmpTUoMZpDjFcidOYoFTy1huU37aNqyap2 -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:54 2026 by rpki-client