This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa File: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (raw, json) Hash identifier: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY= Subject key identifier: 99:23:9B:F2:82:F6:C9:AC:52:69:20:2A:05:6B:39:36:C7:B5:33:AA Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62 Certificate serial: 019B791053CD7A6F31DEA7F37634AA36726A Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.134.148.0/24 maxlen: 24 193.134.149.0/24 maxlen: 24 193.134.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:53:cd:7a:6f:31:de:a7:f3:76:34:aa:36:72:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99239bf282f6c9ac5269202a056b3936c7b533aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:d0:de:28:6e:96:f1:78:31:32:da:f7:b3: 30:85:38:cc:68:db:27:73:5e:0c:f0:4c:f1:af:da: e9:db:37:99:50:67:5b:04:7e:c6:17:3d:26:f7:25: 30:e4:6e:71:60:23:f4:ef:10:67:02:f2:74:97:f6: e5:f4:ce:70:ba:3d:cc:90:98:cb:8b:60:8f:a5:02: d4:24:03:46:6f:dd:49:12:64:c0:41:b0:bc:53:d5: f6:45:66:48:84:c5:ab:80:fd:bf:8d:39:78:23:43: da:8b:3d:ce:5c:9b:1c:18:5c:93:a5:a0:85:64:93: de:77:c5:fb:08:77:10:67:b6:a4:a3:3f:e4:35:8e: 24:b9:69:4a:21:a4:8f:8a:64:28:93:69:aa:b6:ec: d1:8e:40:b7:41:c1:d5:29:f0:c3:81:de:df:5b:ad: 32:17:c1:3d:6a:29:e7:30:4e:a2:4a:ee:d9:95:8e: 88:ca:91:29:43:9e:e6:41:51:6a:05:74:0d:0b:30: fd:90:37:b4:34:52:70:0f:7b:f5:61:fa:00:ff:05: ff:81:34:7d:aa:f3:7a:d8:2b:48:88:40:eb:75:aa: 65:5a:7e:8c:d2:c6:94:5c:b3:51:40:e9:e2:c8:fd: 2d:7c:de:07:39:07:04:d0:fc:12:4c:d4:5e:4a:af: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:9B:F2:82:F6:C9:AC:52:69:20:2A:05:6B:39:36:C7:B5:33:AA X509v3 Authority Key Identifier: keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.148.0-193.134.150.255 Signature Algorithm: sha256WithRSAEncryption 29:b2:cd:ff:58:63:06:e1:a0:54:54:65:16:7c:67:ea:06:41: bb:58:1b:4b:70:6d:82:d2:d5:d1:7a:3c:a1:ff:f6:2f:2a:58: 77:e4:22:76:58:3d:f8:b3:74:10:27:15:1a:eb:0f:d3:fb:e9: 87:7d:58:c1:0a:7c:fd:11:1f:6d:e8:3b:55:96:c7:95:67:b1: a2:d9:d5:53:15:b4:6c:5f:1a:b2:78:40:09:f5:6f:54:af:0a: 74:70:a2:b0:27:93:21:5b:92:9a:a1:12:6f:01:da:62:6a:49: 1c:cb:9b:04:bb:7b:eb:e1:4d:36:76:14:88:b0:bb:4b:94:12: 61:07:b4:ac:0f:9f:61:aa:70:c3:87:c6:b9:89:b2:c4:8d:d6: ad:b2:8d:1f:46:be:c5:71:ec:69:dc:70:a9:72:9d:ca:5f:17: 3a:05:cf:89:8d:c4:b5:9a:d1:46:cf:5c:46:f1:4a:38:b9:e0: a5:c5:04:53:91:11:2d:63:a0:eb:9d:2e:69:ab:6e:e6:46:60: dd:91:b4:cb:bb:39:9c:17:d6:d7:90:5d:0b:4f:63:19:dd:05: 7d:75:7a:cc:4e:4a:be:ae:d7:24:47:71:ba:cf:2f:a3:40:0d: 1a:f3:4a:67:db:41:a3:1e:b6:60:06:d0:7c:bf:73:fa:f6:d1: 22:3b:80:a8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EFPNem8x3qfzdjSqNnJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOTg3MDM5YjNmM2IyZGI5YjI5OGFlMGQ4ZDBlYjM0ODk2 OWFkNjIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTIzOWJmMjgyZjZjOWFjNTI2OTIwMmEwNTZiMzkzNmM3YjUzM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJXQ3ihulvF4MTLa97MwhTjMaNsn c14M8Ezxr9rp2zeZUGdbBH7GFz0m9yUw5G5xYCP07xBnAvJ0l/bl9M5wuj3MkJjL i2CPpQLUJANGb91JEmTAQbC8U9X2RWZIhMWrgP2/jTl4I0Paiz3OXJscGFyTpaCF ZJPed8X7CHcQZ7akoz/kNY4kuWlKIaSPimQok2mqtuzRjkC3QcHVKfDDgd7fW60y F8E9ainnME6iSu7ZlY6IypEpQ57mQVFqBXQNCzD9kDe0NFJwD3v1YfoA/wX/gTR9 qvN62CtIiEDrdaplWn6M0saUXLNRQOniyP0tfN4HOQcE0PwSTNReSq/HuQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJkjm/KC9smsUmkgKgVrOTbHtTOqMB8GA1UdIwQY MBaAFI6YcDmz87LbmymK4NjQ6zSJaa1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQt NTYzNjAwMzE5YTFmLzEvbVNPYjhvTDJ5YXhTYVNBcUJXczVOc2UxTTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQtNTYzNjAwMzE5YTFm LzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALBhpQD BADBhpYwDQYJKoZIhvcNAQELBQADggEBACmyzf9YYwbhoFRUZRZ8Z+oGQbtYG0tw bYLS1dF6PKH/9i8qWHfkInZYPfizdBAnFRrrD9P76Yd9WMEKfP0RH23oO1WWx5Vn saLZ1VMVtGxfGrJ4QAn1b1SvCnRworAnkyFbkpqhEm8B2mJqSRzLmwS7e+vhTTZ2 FIiwu0uUEmEHtKwPn2GqcMOHxrmJssSN1q2yjR9GvsVx7GnccKlyncpfFzoFz4mN xLWa0UbPXEbxSji54KXFBFORES1joOudLmmrbuZGYN2RtMu7OZwX1teQXQtPYxnd BX11esxOSr6u1yRHcbrPL6NADRrzSmfbQaMetmAG0Hy/c/r20SI7gKg= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client