This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/maQFP1L89r9INXLVOxAPWnnI7P0.roa File: maQFP1L89r9INXLVOxAPWnnI7P0.roa (raw, json) Hash identifier: TGflq/BuRB1+kMmaB3MQmSVWZkRqOLhPKMAFseGCZ5c= Subject key identifier: 99:A4:05:3F:52:FC:F6:BF:48:35:72:D5:3B:10:0F:5A:79:C8:EC:FD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104BD46B81B76B86A544AA060ED7FB Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/maQFP1L89r9INXLVOxAPWnnI7P0.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 78.135.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4b:d4:6b:81:b7:6b:86:a5:44:aa:06:0e:d7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a4053f52fcf6bf483572d53b100f5a79c8ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:86:b3:6e:73:64:53:dc:07:12:a6:db:d2: 41:b6:bf:5b:c0:45:f8:b8:7b:f2:fd:0a:ff:57:45: 8e:84:3a:11:1d:ad:c8:c3:7e:2e:c9:0e:3d:fa:f4: bf:e9:34:d3:18:54:7b:86:2d:a4:41:cd:0b:ca:f7: b6:2f:6d:fc:de:de:51:50:77:b4:f4:04:0b:92:aa: fd:47:c4:15:5d:31:71:ce:12:82:09:45:be:10:c8: 62:18:91:f6:e7:2e:d5:d3:52:7f:42:24:cd:da:dd: 8c:5e:0e:5a:35:fd:89:90:cc:9f:1d:24:9e:ca:61: dd:f7:15:21:7f:16:b2:14:c7:92:f7:7b:60:91:6c: 49:c0:b9:0a:eb:f5:23:f5:9d:46:62:17:b9:12:a4: db:f8:4e:8c:8d:af:48:c5:57:c3:21:fd:ff:8b:13: b4:c8:8c:a4:bf:e0:6a:49:1d:0f:b8:4f:10:f4:58: 7f:ae:f5:72:a3:1a:f0:11:cc:a8:80:dc:4e:eb:0f: 07:8a:a8:ff:9b:90:6b:3e:cd:b9:0c:27:8c:a9:f5: 76:a2:f7:d4:76:32:cc:66:5d:b2:f5:4a:b9:b1:93: 00:1c:c6:2d:ee:59:60:21:2e:d8:3d:b5:70:e6:c9: f1:59:63:70:a5:e9:e2:84:a8:61:d0:91:b5:0e:cc: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:05:3F:52:FC:F6:BF:48:35:72:D5:3B:10:0F:5A:79:C8:EC:FD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/maQFP1L89r9INXLVOxAPWnnI7P0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.88.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ca:57:9c:f3:84:d7:85:49:ff:bb:7c:f8:33:d6:c7:80:3a: fd:80:18:92:b2:0e:e7:c3:99:41:0d:e8:18:ca:6b:c4:25:f4: 7d:ff:b1:7b:0d:4e:9e:a8:7c:10:24:27:03:8e:dc:c4:8f:f8: b9:58:51:1c:cd:af:8a:35:6f:d7:82:78:6d:e6:18:c6:a5:b5: 67:fe:42:24:9a:21:52:5c:d4:19:41:39:85:94:61:35:16:fc: 5e:25:ab:c9:51:e9:d2:37:54:56:81:dc:05:7d:67:de:bf:30: ec:61:82:be:63:41:7c:9a:69:20:ce:83:b5:f8:e6:d9:8a:58: 76:92:7b:d2:51:b6:88:82:eb:60:aa:c3:2e:54:dd:f6:5a:2c: 05:e1:75:18:02:30:1b:3c:0e:cd:a9:42:a3:62:d9:f5:67:a5: 0e:57:4a:a9:53:5c:80:09:f3:d5:c2:2c:c8:89:d7:ff:c5:f6: 37:5b:cb:b2:92:05:6c:fa:63:43:7b:e4:75:7e:6c:ef:06:3a: 14:98:ee:06:c2:92:95:8f:0c:12:75:ba:a9:8a:30:ce:12:e8: c1:7a:37:fb:af:3f:20:9d:86:0f:9e:ff:e3:b4:46:e3:a8:a1: a8:7a:e7:7b:04:bd:d6:25:bc:b8:93:43:ca:b5:49:9b:c8:15: 85:d5:c5:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEvUa4G3a4alRKoGDtf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWE0MDUzZjUyZmNmNmJmNDgzNTcyZDUzYjEwMGY1YTc5YzhlY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2Gs25zZFPcBxKm29JBtr9bwEX4 uHvy/Qr/V0WOhDoRHa3Iw34uyQ49+vS/6TTTGFR7hi2kQc0Lyve2L2383t5RUHe0 9AQLkqr9R8QVXTFxzhKCCUW+EMhiGJH25y7V01J/QiTN2t2MXg5aNf2JkMyfHSSe ymHd9xUhfxayFMeS93tgkWxJwLkK6/Uj9Z1GYhe5EqTb+E6Mja9IxVfDIf3/ixO0 yIykv+BqSR0PuE8Q9Fh/rvVyoxrwEcyogNxO6w8Hiqj/m5BrPs25DCeMqfV2ovfU djLMZl2y9Uq5sZMAHMYt7llgIS7YPbVw5snxWWNwpenihKhh0JG1DszmZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmkBT9S/Pa/SDVy1TsQD1p5yOz9MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvbWFRRlAxTDg5cjlJTlhMVk94QVBXbm5JN1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodYMA0G CSqGSIb3DQEBCwUAA4IBAQCoylec84TXhUn/u3z4M9bHgDr9gBiSsg7nw5lBDegY ymvEJfR9/7F7DU6eqHwQJCcDjtzEj/i5WFEcza+KNW/Xgnht5hjGpbVn/kIkmiFS XNQZQTmFlGE1FvxeJavJUenSN1RWgdwFfWfevzDsYYK+Y0F8mmkgzoO1+ObZilh2 knvSUbaIgutgqsMuVN32WiwF4XUYAjAbPA7NqUKjYtn1Z6UOV0qpU1yACfPVwizI idf/xfY3W8uykgVs+mNDe+R1fmzvBjoUmO4GwpKVjwwSdbqpijDOEujBejf7rz8g nYYPnv/jtEbjqKGoeud7BL3WJby4k0PKtUmbyBWF1cUD -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:47 2026 by rpki-client