This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MaOHk2gP7cUQt2loZrif0X4VzaI.roa File: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (raw, json) Hash identifier: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE= Subject key identifier: 31:A3:87:93:68:0F:ED:C5:10:B7:69:68:66:B8:9F:D1:7E:15:CD:A2 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF192C6DDB5D68FE1742364E3EFE28D Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MaOHk2gP7cUQt2loZrif0X4VzaI.roa Signing time: Fri 02 Jan 2026 18:21:36 +0000 ROA not before: Fri 02 Jan 2026 18:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51280 IP address blocks: 212.80.25.0/24 maxlen: 24 212.80.26.0/23 maxlen: 24 212.80.26.0/24 maxlen: 24 212.80.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:92:c6:dd:b5:d6:8f:e1:74:23:64:e3:ef:e2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a38793680fedc510b7696866b89fd17e15cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:3e:85:f7:e4:77:f8:09:9c:bc:f7:7f:a9: fc:75:36:91:63:e3:cd:89:ea:2e:80:a0:80:4a:1f: 74:ec:68:fc:7f:a9:c1:64:f9:8b:ea:62:00:fe:08: 77:7c:50:b9:29:7f:38:1f:0b:c1:22:8e:1d:b0:f3: 56:48:a4:e9:e4:6a:27:70:d4:d8:60:2f:18:29:fe: 84:fd:a8:f2:81:87:55:27:f6:63:4b:64:28:f9:e9: 58:14:5f:ea:35:11:22:f4:bc:ca:03:69:aa:3b:43: 2c:1b:4e:a7:6f:98:fb:c6:74:60:39:ce:9c:64:f9: b2:90:4a:26:32:d7:aa:73:2e:9d:a1:af:9d:ab:d2: a1:f3:ff:8f:f7:da:b9:ae:47:94:d3:e9:f3:1c:9f: d7:df:5c:80:6b:3d:45:85:f6:83:f3:2a:96:a3:2c: 10:06:e1:6c:81:11:9e:13:14:12:2f:61:ef:8b:74: 27:ef:bd:74:d8:0a:32:dd:10:ef:fc:81:3d:19:6b: 57:29:ae:da:ba:0d:27:29:a7:38:77:8b:f9:82:f5: 1f:9f:ae:ee:70:6b:4d:81:d5:9e:19:cf:a0:fb:61: cf:2a:63:fc:93:a3:d1:db:73:2b:3b:15:61:12:29: 50:40:e4:d1:9a:10:b3:88:08:05:92:97:9c:af:56: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:87:93:68:0F:ED:C5:10:B7:69:68:66:B8:9F:D1:7E:15:CD:A2 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MaOHk2gP7cUQt2loZrif0X4VzaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.80.25.0-212.80.27.255 Signature Algorithm: sha256WithRSAEncryption 1c:ea:52:a9:a5:28:6c:68:44:af:58:40:45:76:3f:5d:19:ac: 64:46:80:07:20:a8:9f:89:62:e9:20:e8:71:c5:73:84:b5:76: 21:3b:47:65:b2:b0:5b:5d:c8:67:b0:bc:5f:ca:ae:b4:51:c1: c6:e7:cf:88:04:be:09:a9:cb:61:51:2a:5c:ff:d0:4c:d6:d2: ee:80:8d:b9:75:b1:ae:2e:fb:e2:64:db:a0:ef:c4:8d:06:e3: 09:c3:61:fe:f6:96:b6:69:10:e9:c8:e2:8d:c8:5d:b5:c5:ee: af:67:f1:42:03:fb:70:b9:34:45:2e:be:d8:9a:5b:2c:0b:c0: 63:d8:94:47:70:6f:f0:7e:d7:7a:c3:5d:e8:16:f6:da:61:25: 38:dd:1b:e8:c9:42:4e:a9:a6:71:61:c0:76:0f:86:78:c1:e4: 8e:7c:d1:b5:32:1e:eb:dd:68:38:7a:c0:90:1c:09:78:4d:1b: 0e:c4:e8:47:42:1d:79:8a:b7:19:2b:c5:60:37:c7:bd:0e:35: 77:8a:20:15:4d:10:51:e1:33:d0:d8:a4:5f:cc:72:f7:b1:a0: 08:d5:36:9b:4a:f6:78:80:ff:cd:a3:7c:69:12:6f:26:31:b7: c0:28:c3:8f:0a:1d:af:89:71:3e:95:15:ef:ac:b3:03:6a:0e: 3c:aa:fa:bf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8ZLG3bXWj+F0I2Tj7+KNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWEzODc5MzY4MGZlZGM1MTBiNzY5Njg2NmI4OWZkMTdlMTVjZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dE+hffkd/gJnLz3f6n8dTaRY+PN ieougKCASh907Gj8f6nBZPmL6mIA/gh3fFC5KX84HwvBIo4dsPNWSKTp5GoncNTY YC8YKf6E/ajygYdVJ/ZjS2Qo+elYFF/qNREi9LzKA2mqO0MsG06nb5j7xnRgOc6c ZPmykEomMteqcy6doa+dq9Kh8/+P99q5rkeU0+nzHJ/X31yAaz1FhfaD8yqWoywQ BuFsgRGeExQSL2Hvi3Qn77102Aoy3RDv/IE9GWtXKa7aug0nKac4d4v5gvUfn67u cGtNgdWeGc+g+2HPKmP8k6PR23MrOxVhEilQQOTRmhCziAgFkpecr1bwpQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDGjh5NoD+3FELdpaGa4n9F+Fc2iMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvTWFPSGsyZ1A3Y1VRdDJsb1pyaWYwWDRWemFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUUBkD BALUUBgwDQYJKoZIhvcNAQELBQADggEBABzqUqmlKGxoRK9YQEV2P10ZrGRGgAcg qJ+JYukg6HHFc4S1diE7R2WysFtdyGewvF/KrrRRwcbnz4gEvgmpy2FRKlz/0EzW 0u6Ajbl1sa4u++Jk26DvxI0G4wnDYf72lrZpEOnI4o3IXbXF7q9n8UID+3C5NEUu vtiaWywLwGPYlEdwb/B+13rDXegW9tphJTjdG+jJQk6ppnFhwHYPhnjB5I580bUy HuvdaDh6wJAcCXhNGw7E6EdCHXmKtxkrxWA3x70ONXeKIBVNEFHhM9DYpF/Mcvex oAjVNptK9niA/82jfGkSbyYxt8Aow48KHa+JcT6VFe+sswNqDjyq+r8= -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:00 2026 by rpki-client