This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/MF5bEoN5sg-nawNjAIcgKbPLo2w.roa File: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (raw, json) Hash identifier: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4= Subject key identifier: 30:5E:5B:12:83:79:B2:0F:A7:6B:03:63:00:87:20:29:B3:CB:A3:6C Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Certificate serial: 019B7AC815E17615FC05FEF4C15C2C08F163 Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/MF5bEoN5sg-nawNjAIcgKbPLo2w.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.228.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:15:e1:76:15:fc:05:fe:f4:c1:5c:2c:08:f1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305e5b128379b20fa76b036300872029b3cba36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:8f:19:63:87:03:d9:b3:90:27:86:94:97: fb:ef:c7:bc:2b:e2:5b:f6:ed:0a:88:db:c7:b8:a9: 52:43:5e:4b:48:ad:62:cb:65:66:50:b7:5a:2f:22: 87:80:d3:a3:81:1a:18:65:df:da:f0:33:d2:0b:70: 05:6e:44:e0:1e:32:47:de:04:ae:31:b4:53:45:51: 4f:01:50:d3:59:ad:6f:ae:9d:f6:f6:f7:9d:e8:40: c7:8a:9c:0c:c4:9a:55:56:94:11:48:40:44:41:bd: 27:2a:b1:79:62:d0:d3:16:03:78:c1:76:b3:f2:f2: fd:27:a1:9a:b9:ab:5a:66:a2:92:67:d1:e8:f9:d1: ac:16:87:23:58:80:03:43:97:64:34:f6:b2:50:fd: b3:37:4e:dd:bb:de:0c:a6:dd:0b:7c:eb:40:26:79: d5:d9:9f:67:85:a4:67:b7:c3:2c:be:f1:2c:32:01: 91:6c:27:ed:37:63:cb:55:01:b9:51:c7:95:9b:44: cf:d5:1f:16:a2:06:3b:3a:c5:7e:be:b0:56:b1:1b: 73:75:13:68:5c:72:26:68:c2:60:48:7b:1b:ff:4a: 1a:6e:96:e7:85:87:6a:e7:9e:c6:34:fa:ae:7e:ae: 3a:2b:59:00:fb:65:38:b7:29:2d:67:81:ce:ca:19: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:5B:12:83:79:B2:0F:A7:6B:03:63:00:87:20:29:B3:CB:A3:6C X509v3 Authority Key Identifier: keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/MF5bEoN5sg-nawNjAIcgKbPLo2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.0.0/24 Signature Algorithm: sha256WithRSAEncryption 12:4c:53:52:b5:34:0e:f1:e2:c1:3b:eb:4b:9c:a4:7a:ef:fa: 09:5a:20:73:c2:60:3c:ed:d7:38:23:3e:92:8b:d3:db:07:84: 45:59:e6:bc:4e:98:f9:4a:83:04:88:9c:2e:e4:8f:e9:0a:b1: d8:65:ed:e1:b0:ec:ec:43:d2:7d:36:ef:9a:e7:c7:0e:24:64: b4:89:c2:33:9a:6b:e8:09:be:9b:72:e4:75:d4:02:28:63:ec: 3a:d5:b8:a0:df:76:83:ea:2e:d8:0e:6e:d2:06:36:68:6f:c2: 86:93:76:0e:80:7c:57:75:39:99:fc:ee:26:a1:bf:01:83:b4: 75:65:25:94:e7:6e:13:ff:da:14:42:52:23:4b:d3:03:f4:12: 48:14:4e:9b:f7:9e:5c:aa:1e:04:72:d7:52:04:ac:fe:ff:ed: 13:9c:23:0b:90:36:23:ec:db:17:27:3f:9c:5d:a4:9f:68:a1: d1:df:20:62:d9:38:ae:e6:a2:9f:4c:80:46:79:a4:55:20:5a: 50:bd:8e:5f:2d:66:09:d0:dd:53:55:26:16:9d:c5:13:77:c0: ca:f8:d7:d1:55:81:52:fe:f1:09:cf:eb:c9:49:4d:46:a8:db: e6:ee:bc:8a:04:2c:67:b2:64:c8:f7:8c:68:87:8b:dc:c3:12: 20:2f:03:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBXhdhX8Bf70wVwsCPFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmMzM2ZkMDExNzhhZTJmOTc0ZWVlZDVkY2RjZDNjMTc1 ZTE2YTcwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDVlNWIxMjgzNzliMjBmYTc2YjAzNjMwMDg3MjAyOWIzY2JhMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZKPGWOHA9mzkCeGlJf778e8K+Jb 9u0KiNvHuKlSQ15LSK1iy2VmULdaLyKHgNOjgRoYZd/a8DPSC3AFbkTgHjJH3gSu MbRTRVFPAVDTWa1vrp329ved6EDHipwMxJpVVpQRSEBEQb0nKrF5YtDTFgN4wXaz 8vL9J6GauataZqKSZ9Ho+dGsFocjWIADQ5dkNPayUP2zN07du94Mpt0LfOtAJnnV 2Z9nhaRnt8MsvvEsMgGRbCftN2PLVQG5UceVm0TP1R8WogY7OsV+vrBWsRtzdRNo XHImaMJgSHsb/0oabpbnhYdq557GNPqufq46K1kA+2U4tyktZ4HOyhmJ0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBeWxKDebIPp2sDYwCHICmzy6NsMB8GA1UdIwQY MBaAFOy8M/0BF4ri+XTu7V3NzTwXXhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMt M2UwNWIzN2UxMzhiLzEvTUY1YkVvTjVzZy1uYXdOakFJY2dLYlBMbzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMtM2UwNWIzN2UxMzhi LzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweQAMA0G CSqGSIb3DQEBCwUAA4IBAQASTFNStTQO8eLBO+tLnKR67/oJWiBzwmA87dc4Iz6S i9PbB4RFWea8Tpj5SoMEiJwu5I/pCrHYZe3hsOzsQ9J9Nu+a58cOJGS0icIzmmvo Cb6bcuR11AIoY+w61big33aD6i7YDm7SBjZob8KGk3YOgHxXdTmZ/O4mob8Bg7R1 ZSWU524T/9oUQlIjS9MD9BJIFE6b955cqh4EctdSBKz+/+0TnCMLkDYj7NsXJz+c XaSfaKHR3yBi2Tiu5qKfTIBGeaRVIFpQvY5fLWYJ0N1TVSYWncUTd8DK+NfRVYFS /vEJz+vJSU1GqNvm7ryKBCxnsmTI94xoh4vcwxIgLwOr -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:51 2026 by rpki-client