This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/m4kYecQvosDEbgzFUfKOmbMpQHc.roa File: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (raw, json) Hash identifier: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o= Subject key identifier: 9B:89:18:79:C4:2F:A2:C0:C4:6E:0C:C5:51:F2:8E:99:B3:29:40:77 Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4 Certificate serial: 019B7A5B19238E5C672CE75C4095074645C7 Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/m4kYecQvosDEbgzFUfKOmbMpQHc.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31319 IP address blocks: 193.43.106.0/24 maxlen: 24 193.43.107.0/24 maxlen: 24 193.43.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:23:8e:5c:67:2c:e7:5c:40:95:07:46:45:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b891879c42fa2c0c46e0cc551f28e99b3294077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:8a:b1:6b:69:46:3b:44:f5:47:af:4a:7e: 57:71:f5:69:00:4a:fc:80:e3:a4:80:81:1d:8e:4b: 14:3b:46:d1:5e:59:0c:e5:a0:8c:a1:fa:5a:e4:45: 31:3e:25:38:26:de:2a:ea:7e:a7:53:4e:ad:43:f8: 8b:4a:37:c6:31:1f:83:42:e4:bf:5c:e9:09:18:1c: 32:5d:d5:22:9d:2e:68:c4:af:8f:fb:74:58:09:ba: e8:73:81:26:60:4f:89:7c:83:e5:55:53:43:76:ad: 01:c1:cb:27:39:3e:c7:44:0b:8a:bc:00:3b:99:4d: 80:af:de:dc:a0:be:66:45:6d:38:e5:bf:78:5b:f6: de:42:07:46:ef:dd:2f:eb:f7:2c:9d:20:8b:30:d9: f9:5f:2f:e7:17:50:64:4a:47:66:21:3c:8e:ec:0f: a4:79:e6:9a:77:86:5e:0e:46:9a:bf:7c:e8:bf:eb: c5:8b:ff:a9:d1:ad:95:63:0c:7d:03:2d:1a:88:b0: 4b:d7:c6:9b:44:f8:cd:42:c7:2a:b8:8d:a8:d2:17: 81:f9:04:0d:21:b9:5b:da:7a:d2:eb:c5:00:13:a6: 49:cf:8e:6c:7d:0c:3f:5d:19:a0:fe:a7:f6:dd:3f: 52:9b:47:86:9b:71:1e:d1:63:98:de:d1:21:2e:09: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:89:18:79:C4:2F:A2:C0:C4:6E:0C:C5:51:F2:8E:99:B3:29:40:77 X509v3 Authority Key Identifier: keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/m4kYecQvosDEbgzFUfKOmbMpQHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.106.0-193.43.108.255 Signature Algorithm: sha256WithRSAEncryption 1e:7e:77:31:9c:c1:17:d5:a8:a5:51:99:55:4b:a2:b1:8c:c2: fe:c0:37:f2:85:c9:73:6d:8f:5c:43:e9:4a:8d:a9:d4:4f:2f: df:9c:51:a5:ef:5b:32:01:ad:82:3c:65:e6:7a:85:27:7c:84: 39:86:5c:0b:3d:90:94:18:07:2f:36:cd:96:1b:39:7b:7a:70: 69:24:65:ee:ab:5e:2a:22:53:28:18:83:00:da:86:1a:09:0b: dd:b1:14:57:2c:cf:db:e7:34:7e:d7:d8:f4:75:1d:48:b3:57: 94:21:ae:25:58:fb:83:25:9f:7d:75:fb:f6:a9:80:0f:46:8e: b8:2f:33:04:ca:7e:a9:4c:13:04:9a:e2:a6:be:fb:2a:8d:14: ca:c8:94:46:2b:54:1f:70:d2:80:22:a4:6b:7d:44:aa:90:c3: 9a:c5:9f:3e:61:2c:1f:f0:58:26:08:e9:8b:e5:02:9b:25:26: 0b:af:5d:37:35:e7:bf:f1:37:c6:5e:a5:3f:c0:59:41:ea:e9: 68:7d:b3:2a:df:58:10:65:09:19:86:5f:40:8f:18:36:a6:a4: bd:51:46:76:d1:94:df:94:b6:04:8b:60:97:ff:cf:8f:5f:aa: 11:bc:39:19:27:f7:3e:78:f1:75:f2:b7:3e:32:e3:e0:be:dc: 71:f0:eb:a0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WxkjjlxnLOdcQJUHRkXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz MDM5YTQwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjg5MTg3OWM0MmZhMmMwYzQ2ZTBjYzU1MWYyOGU5OWIzMjk0MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1yKsWtpRjtE9UevSn5XcfVpAEr8 gOOkgIEdjksUO0bRXlkM5aCMofpa5EUxPiU4Jt4q6n6nU06tQ/iLSjfGMR+DQuS/ XOkJGBwyXdUinS5oxK+P+3RYCbroc4EmYE+JfIPlVVNDdq0BwcsnOT7HRAuKvAA7 mU2Ar97coL5mRW045b94W/beQgdG790v6/csnSCLMNn5Xy/nF1BkSkdmITyO7A+k eeaad4ZeDkaav3zov+vFi/+p0a2VYwx9Ay0aiLBL18abRPjNQscquI2o0heB+QQN Iblb2nrS68UAE6ZJz45sfQw/XRmg/qf23T9Sm0eGm3Ee0WOY3tEhLglVjQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJuJGHnEL6LAxG4MxVHyjpmzKUB3MB8GA1UdIwQY MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt ZWQ4NWNlMDk0YTg3LzEvbTRrWWVjUXZvc0RFYmd6RlVmS09tYk1wUUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3 LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHBK2oD BADBK2wwDQYJKoZIhvcNAQELBQADggEBAB5+dzGcwRfVqKVRmVVLorGMwv7AN/KF yXNtj1xD6UqNqdRPL9+cUaXvWzIBrYI8ZeZ6hSd8hDmGXAs9kJQYBy82zZYbOXt6 cGkkZe6rXioiUygYgwDahhoJC92xFFcsz9vnNH7X2PR1HUizV5QhriVY+4Mln311 +/apgA9GjrgvMwTKfqlMEwSa4qa++yqNFMrIlEYrVB9w0oAipGt9RKqQw5rFnz5h LB/wWCYI6YvlApslJguvXTc157/xN8ZepT/AWUHq6Wh9syrfWBBlCRmGX0CPGDam pL1RRnbRlN+UtgSLYJf/z49fqhG8ORkn9z548XXytz4y4+C+3HHw66A= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:50 2026 by rpki-client