This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/M16a-01DtEnUChbTQJhjr1Iefi0.roa File: M16a-01DtEnUChbTQJhjr1Iefi0.roa (raw, json) Hash identifier: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao= Subject key identifier: 33:5E:9A:FB:4D:43:B4:49:D4:0A:16:D3:40:98:63:AF:52:1E:7E:2D Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Certificate serial: 019B7EA51B1A2E5A8A651E8F023371CD4039 Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/M16a-01DtEnUChbTQJhjr1Iefi0.roa Signing time: Fri 02 Jan 2026 12:18:28 +0000 ROA not before: Fri 02 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58007 IP address blocks: 95.141.249.0/24 maxlen: 24 194.8.28.0/24 maxlen: 24 2a13:4380::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1b:1a:2e:5a:8a:65:1e:8f:02:33:71:cd:40:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Validity Not Before: Jan 2 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335e9afb4d43b449d40a16d3409863af521e7e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c6:6c:20:c0:b7:4d:17:52:9e:49:f1:d4:fc: 95:ec:0e:57:28:e6:0e:83:ea:7a:dd:0f:84:da:0b: 4b:d5:33:c2:00:18:38:40:3c:aa:a6:a8:63:86:84: 77:10:ac:53:10:11:ba:f8:5b:16:fe:c1:25:7f:65: 9d:c7:80:4e:03:f9:06:7a:7d:0f:27:e4:c6:4d:b8: 6e:26:87:5d:29:23:56:f9:a9:dd:4d:68:68:99:16: 3a:33:24:bb:e9:a1:69:67:2c:31:ff:ec:e4:75:05: f9:38:f3:07:74:cd:bf:ca:fb:c2:74:08:e0:14:47: 44:9e:13:02:b5:e8:70:75:f8:b3:7d:ec:0b:9a:74: 5b:c2:be:a2:cd:2a:34:3d:b5:2e:80:f3:09:fe:65: 09:06:8c:88:f6:93:66:80:ad:c5:71:47:0e:14:d3: 79:a2:ac:7d:50:7e:8b:61:84:80:60:48:9d:74:74: f2:57:1c:88:ab:7c:cb:97:32:70:f9:ed:69:6e:2c: ba:db:9d:4a:97:fc:be:9c:8f:80:65:03:5f:95:4a: b5:72:62:04:8d:ef:8c:77:db:24:72:4c:6a:d7:4d: e2:18:32:a5:bf:fc:ee:af:3a:cb:29:8c:45:53:50: 3e:aa:1b:d0:9d:a6:3e:77:85:ce:0e:7c:1d:f8:b1: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:9A:FB:4D:43:B4:49:D4:0A:16:D3:40:98:63:AF:52:1E:7E:2D X509v3 Authority Key Identifier: keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/M16a-01DtEnUChbTQJhjr1Iefi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.249.0/24 194.8.28.0/24 IPv6: 2a13:4380::/33 Signature Algorithm: sha256WithRSAEncryption 27:d9:fe:6b:80:f0:01:3a:46:28:94:ed:56:9b:f0:85:54:c6: 13:10:ad:69:40:a9:2b:87:36:6b:85:b5:bf:9a:52:bb:4d:39: 04:b7:dc:a7:31:70:5d:db:38:87:0b:97:9f:83:60:38:19:0c: e3:31:23:3e:28:41:79:fa:d4:4b:2c:48:17:a0:82:36:9d:15: a1:77:e3:f9:39:9d:42:bd:67:9e:c7:0b:44:95:45:03:6d:44: 43:c5:85:5f:13:43:77:55:33:30:46:a4:cd:7f:de:e0:15:dd: 9e:b8:49:2f:75:8b:fe:73:55:5d:60:02:91:16:f0:03:5e:59: 10:45:06:96:88:cf:fc:49:41:f6:f3:e8:0d:2c:c5:94:9c:f7: 7e:ee:d4:72:3a:f1:e8:da:f5:a5:0a:c6:55:d1:20:1a:21:63: d0:ac:59:0d:49:20:73:e1:6b:5b:59:3f:45:30:e8:63:bd:1e: 11:4f:0b:e3:09:6c:4e:af:e5:e9:2a:41:d9:25:7a:59:d7:a5: fe:60:ed:df:bf:42:c7:95:16:31:b8:b1:cc:21:c7:47:fb:a2: d8:e7:a2:c4:07:8f:6c:0a:6f:fb:71:ef:e5:00:04:0d:b2:58: b7:e4:da:32:c8:d2:22:cc:65:9b:8e:2f:92:6a:eb:1f:e7:ab: d2:a0:3b:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+pRsaLlqKZR6PAjNxzUA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl YzJkNjgwHhcNMjYwMTAyMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVlOWFmYjRkNDNiNDQ5ZDQwYTE2ZDM0MDk4NjNhZjUyMWU3ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cZsIMC3TRdSnknx1PyV7A5XKOYO g+p63Q+E2gtL1TPCABg4QDyqpqhjhoR3EKxTEBG6+FsW/sElf2Wdx4BOA/kGen0P J+TGTbhuJoddKSNW+andTWhomRY6MyS76aFpZywx/+zkdQX5OPMHdM2/yvvCdAjg FEdEnhMCtehwdfizfewLmnRbwr6izSo0PbUugPMJ/mUJBoyI9pNmgK3FcUcOFNN5 oqx9UH6LYYSAYEiddHTyVxyIq3zLlzJw+e1pbiy6251Kl/y+nI+AZQNflUq1cmIE je+Md9skckxq103iGDKlv/zurzrLKYxFU1A+qhvQnaY+d4XODnwd+LEltQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDNemvtNQ7RJ1AoW00CYY69SHn4tMB8GA1UdIwQY MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt NmJiYjI3MDgxZGUyLzEvTTE2YS0wMUR0RW5VQ2hiVFFKaGpyMUllZmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAX435AwQA wggcMA4EAgACMAgDBgcqE0OAADANBgkqhkiG9w0BAQsFAAOCAQEAJ9n+a4DwATpG KJTtVpvwhVTGExCtaUCpK4c2a4W1v5pSu005BLfcpzFwXds4hwuXn4NgOBkM4zEj PihBefrUSyxIF6CCNp0VoXfj+TmdQr1nnscLRJVFA21EQ8WFXxNDd1UzMEakzX/e 4BXdnrhJL3WL/nNVXWACkRbwA15ZEEUGlojP/ElB9vPoDSzFlJz3fu7Ucjrx6Nr1 pQrGVdEgGiFj0KxZDUkgc+FrW1k/RTDoY70eEU8L4wlsTq/l6SpB2SV6Wdel/mDt 379Cx5UWMbixzCHHR/ui2OeixAePbApv+3Hv5QAEDbJYt+TaMsjSIsxlm44vkmrr H+er0qA77A== -----END CERTIFICATE-----Generated at Fri Jan 2 18:20:07 2026 by rpki-client