This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa File: mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa (raw, json) Hash identifier: 76qYQmBj5fTGwqCZ0h8a/Bab0EeZxD7iG9TSaybvW9s= Subject key identifier: 98:DC:24:4B:5A:A2:D1:71:DB:08:EF:82:DD:F0:23:5D:E2:2E:41:2A Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Certificate serial: 019B7D5B0A160C34369B06C457F78ECCE485 Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33910 IP address blocks: 194.126.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0a:16:0c:34:36:9b:06:c4:57:f7:8e:cc:e4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98dc244b5aa2d171db08ef82ddf0235de22e412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:64:fa:cd:15:17:0b:0f:7f:fc:80:b7:46: fb:94:46:04:6c:94:16:42:fc:a2:e3:f9:c1:2d:40: 84:35:de:3f:0d:b1:8a:16:be:5d:a2:14:f2:41:63: df:58:3e:f5:13:fb:53:95:82:73:98:b5:9e:ac:bf: bb:fc:db:27:a5:2a:01:a2:78:5b:2b:f1:24:6d:d1: c1:ef:b1:3f:47:c0:85:88:ff:5b:64:2e:f9:0c:ad: df:25:70:cf:8c:7e:ef:f8:4a:a3:e4:56:e1:68:25: 52:db:11:fb:d6:0a:7a:a9:b2:79:48:9b:4f:1b:91: 3d:00:a9:33:06:ef:05:6c:71:15:ad:a3:fc:5d:16: b1:f6:fc:7a:ae:11:2a:12:9c:47:1e:7a:fd:63:a9: c6:81:7d:b6:40:50:74:88:b7:98:0b:b8:c1:49:0e: b2:7e:85:57:e6:7b:be:0d:b8:e9:cf:01:6d:65:d0: 7e:29:58:9b:70:43:c0:11:c4:d1:c0:80:42:72:a6: f6:9a:9f:0d:25:ac:76:b7:95:46:e8:3a:90:ae:e8: b8:c3:ff:9c:e6:72:7b:aa:ef:9b:83:01:be:de:26: e6:80:c2:36:7e:0b:38:74:e2:cd:3f:13:ad:98:16: fd:4e:18:29:13:58:ea:53:04:14:cf:09:3d:48:90: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DC:24:4B:5A:A2:D1:71:DB:08:EF:82:DD:F0:23:5D:E2:2E:41:2A X509v3 Authority Key Identifier: keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.230.0/24 Signature Algorithm: sha256WithRSAEncryption 63:5b:05:1b:c5:15:56:ce:15:c9:74:d3:33:fb:34:10:2a:2c: ad:93:e6:74:45:1a:77:d9:75:e2:08:2d:3e:f0:64:f5:fa:d6: 6c:9b:9f:ba:ff:ca:a1:64:22:0c:ec:25:03:81:47:7b:45:f3: 4a:d6:9d:ef:a2:60:d6:42:37:39:fb:86:b6:3f:a2:60:59:c0: da:69:fa:da:37:99:64:4d:11:9c:35:c9:bc:20:51:97:85:81: ad:e4:75:b6:d7:c0:bc:2c:99:83:e9:2d:1d:b4:93:ca:98:72: 6d:49:e0:22:a7:53:c6:3a:e0:90:f2:b2:3d:46:62:ca:b6:46: 23:c5:c8:c0:28:1d:3a:e1:7e:9e:4a:a0:a3:62:26:20:b2:1c: a7:e8:b5:3a:83:f3:b5:07:da:e7:b3:83:98:81:b7:8d:96:93: 13:ee:1b:1a:c5:90:32:ca:9f:b6:55:5e:86:fc:98:79:fe:69: e9:1c:96:70:67:06:f9:33:fc:fb:9c:41:e2:21:4f:53:93:ee: e8:8a:14:23:96:61:e1:44:4f:d7:6e:d5:16:3e:63:f7:69:a2: 17:31:e9:24:3c:8a:97:39:27:95:36:b2:d9:5c:04:ea:01:5a: d4:9e:f5:a8:9f:d1:71:bd:36:9a:20:4b:11:4a:8b:fb:f2:a1: ec:9d:55:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwoWDDQ2mwbEV/eOzOSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1 ZDUxMzIwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRjMjQ0YjVhYTJkMTcxZGIwOGVmODJkZGYwMjM1ZGUyMmU0MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyRk+s0VFwsPf/yAt0b7lEYEbJQW Qvyi4/nBLUCENd4/DbGKFr5dohTyQWPfWD71E/tTlYJzmLWerL+7/NsnpSoBonhb K/EkbdHB77E/R8CFiP9bZC75DK3fJXDPjH7v+Eqj5FbhaCVS2xH71gp6qbJ5SJtP G5E9AKkzBu8FbHEVraP8XRax9vx6rhEqEpxHHnr9Y6nGgX22QFB0iLeYC7jBSQ6y foVX5nu+DbjpzwFtZdB+KVibcEPAEcTRwIBCcqb2mp8NJax2t5VG6DqQrui4w/+c 5nJ7qu+bgwG+3ibmgMI2fgs4dOLNPxOtmBb9ThgpE1jqUwQUzwk9SJB2yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjcJEtaotFx2wjvgt3wI13iLkEqMB8GA1UdIwQY MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt OWJhODViZTNiZjA5LzEvbU53a1MxcWkwWEhiQ08tQzNmQWpYZUl1UVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5 LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7mMA0G CSqGSIb3DQEBCwUAA4IBAQBjWwUbxRVWzhXJdNMz+zQQKiytk+Z0RRp32XXiCC0+ 8GT1+tZsm5+6/8qhZCIM7CUDgUd7RfNK1p3vomDWQjc5+4a2P6JgWcDaafraN5lk TRGcNcm8IFGXhYGt5HW218C8LJmD6S0dtJPKmHJtSeAip1PGOuCQ8rI9RmLKtkYj xcjAKB064X6eSqCjYiYgshyn6LU6g/O1B9rns4OYgbeNlpMT7hsaxZAyyp+2VV6G /Jh5/mnpHJZwZwb5M/z7nEHiIU9Tk+7oihQjlmHhRE/XbtUWPmP3aaIXMekkPIqX OSeVNrLZXATqAVrUnvWon9FxvTaaIEsRSov78qHsnVU9 -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:50 2026 by rpki-client