This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mAaYDkUBzxkLRlZm4FFmcAZWHf8.roa File: mAaYDkUBzxkLRlZm4FFmcAZWHf8.roa (raw, json) Hash identifier: 78tbceXW86xfZrAJqQkvvgPKID5c6tyGV4DB0T4J26o= Subject key identifier: 98:06:98:0E:45:01:CF:19:0B:46:56:66:E0:51:66:70:06:56:1D:FF Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105EB271889F1895C781045643E0A4 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mAaYDkUBzxkLRlZm4FFmcAZWHf8.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 188.132.193.0/24 maxlen: 24 188.132.206.0/24 maxlen: 24 188.132.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:b2:71:88:9f:18:95:c7:81:04:56:43:e0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9806980e4501cf190b465666e051667006561dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:1f:c0:12:b4:5d:2e:81:75:81:ff:d0:f1: f0:6e:ea:da:ee:82:90:b4:33:53:d5:5c:27:3f:26: ed:3b:45:2c:88:b0:5e:a4:0a:5f:d4:4e:fb:bf:52: c2:3c:5e:9a:b4:1d:76:5b:ca:e6:f3:c3:08:55:89: b8:ba:10:f1:59:8c:60:07:92:e9:40:08:50:46:41: 13:32:b4:b4:eb:15:5f:07:e6:07:21:68:be:1f:38: ef:ba:d5:ce:2d:55:6d:8d:46:bc:06:9b:72:af:a0: d8:c6:d4:8b:0e:25:0a:de:e3:95:03:34:44:03:c1: 65:4c:33:a5:b4:2f:37:d5:15:46:3a:4a:60:1e:a8: 8f:96:ce:4e:b0:25:5a:ba:ba:42:da:fd:2b:81:cf: 2b:c3:b7:c6:0b:e2:b1:5d:e5:ab:40:73:41:9d:6d: 09:91:d8:cf:05:8a:74:13:59:f4:0b:d7:88:6b:64: 20:1a:3b:70:d0:ed:35:a0:32:47:63:df:f5:23:a1: c0:7b:c6:29:4d:dc:ef:b9:62:c4:71:ed:ed:60:7e: fa:76:f7:7d:e2:ad:ad:64:89:1a:37:92:a3:22:9f: 33:46:1c:c6:6c:cf:ff:dc:4e:22:dd:d6:75:81:cc: db:ce:39:e1:08:6d:b0:28:b7:7b:d7:2d:30:f8:02: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:98:0E:45:01:CF:19:0B:46:56:66:E0:51:66:70:06:56:1D:FF X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mAaYDkUBzxkLRlZm4FFmcAZWHf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.193.0/24 188.132.206.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:f5:fb:96:07:18:1a:84:de:17:59:f2:ac:64:45:30:16:7a: 5e:83:65:28:48:ef:60:8e:5c:6e:04:1d:62:56:e5:87:74:95: 3e:bb:10:54:c1:67:f5:6a:41:60:81:30:3b:39:ce:05:28:bc: 91:83:9c:e9:6c:be:8b:c9:d5:85:38:31:c1:0a:b9:be:54:ba: 66:84:2c:5f:7d:0a:d3:df:9e:37:85:6f:c7:84:49:3b:fa:59: c5:84:e0:f2:15:4d:53:a6:8a:f1:0f:09:d1:7b:9c:39:dc:44: d6:bf:2e:40:99:ac:31:95:6f:7e:d6:ca:cb:90:a9:c9:94:dc: 34:10:ad:5a:b7:9a:7b:b9:e2:9d:5e:50:eb:ae:6e:06:87:78: 9e:82:be:f1:d4:67:8b:2a:86:cf:5e:55:5f:2f:b2:59:a6:37: 44:d3:51:7c:5d:cd:71:b1:05:40:3c:b7:46:ca:32:94:c5:e6: c6:d3:85:9c:27:e3:ac:b0:20:ed:0d:b8:cf:37:6d:7c:a9:3c: 48:45:c9:a9:92:e6:bf:76:e8:17:5c:40:79:2c:35:2e:1b:8e: 76:3c:93:28:bd:65:a9:83:f9:03:b7:9c:5e:8b:9e:87:fc:d9: 4d:04:61:da:b8:a5:e2:eb:7d:1c:ec:3a:f8:99:54:26:f5:1a: 75:af:2b:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EF6ycYifGJXHgQRWQ+CkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODA2OTgwZTQ1MDFjZjE5MGI0NjU2NjZlMDUxNjY3MDA2NTYxZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfsfwBK0XS6BdYH/0PHwbura7oKQ tDNT1VwnPybtO0UsiLBepApf1E77v1LCPF6atB12W8rm88MIVYm4uhDxWYxgB5Lp QAhQRkETMrS06xVfB+YHIWi+HzjvutXOLVVtjUa8Bptyr6DYxtSLDiUK3uOVAzRE A8FlTDOltC831RVGOkpgHqiPls5OsCVaurpC2v0rgc8rw7fGC+KxXeWrQHNBnW0J kdjPBYp0E1n0C9eIa2QgGjtw0O01oDJHY9/1I6HAe8YpTdzvuWLEce3tYH76dvd9 4q2tZIkaN5KjIp8zRhzGbM//3E4i3dZ1gczbzjnhCG2wKLd71y0w+AIjvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJgGmA5FAc8ZC0ZWZuBRZnAGVh3/MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvbUFhWURrVUJ6eGtMUmxabTRGRm1jQVpXSGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvITBAwQB vITOMA0GCSqGSIb3DQEBCwUAA4IBAQA89fuWBxgahN4XWfKsZEUwFnpeg2UoSO9g jlxuBB1iVuWHdJU+uxBUwWf1akFggTA7Oc4FKLyRg5zpbL6LydWFODHBCrm+VLpm hCxffQrT3543hW/HhEk7+lnFhODyFU1TporxDwnRe5w53ETWvy5AmawxlW9+1srL kKnJlNw0EK1at5p7ueKdXlDrrm4Gh3iegr7x1GeLKobPXlVfL7JZpjdE01F8Xc1x sQVAPLdGyjKUxebG04WcJ+OssCDtDbjPN218qTxIRcmpkua/dugXXEB5LDUuG452 PJMovWWpg/kDt5xei56H/NlNBGHauKXi630c7Dr4mVQm9Rp1ryuZ -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:55 2026 by rpki-client