This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa File: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (raw, json) Hash identifier: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk= Subject key identifier: 9A:9F:32:10:C6:15:75:B7:73:2C:4A:0F:6D:17:4A:6E:ED:99:9D:26 Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019B78A35A4FFC0A93C29A27F8049AE64B22 Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.107.46.0/24 maxlen: 24 2a13:7f00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5a:4f:fc:0a:93:c2:9a:27:f8:04:9a:e6:4b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a9f3210c61575b7732c4a0f6d174a6eed999d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:4f:35:8f:07:c8:bf:91:44:8e:ae:14:a3: f7:96:96:9f:a7:96:b6:97:a0:c3:a2:8c:4c:ad:de: 09:e1:23:58:f3:2b:9d:11:80:82:24:e9:c1:5b:9f: ba:fa:b1:89:48:d6:78:aa:79:eb:82:a0:17:ac:86: 12:32:1f:83:76:38:af:df:62:0e:d5:fc:f1:16:5a: 70:1e:41:cc:6c:f8:f5:2b:1c:d9:43:76:19:f1:ee: 89:a2:4d:8b:f9:c7:ea:1c:96:bc:07:73:28:41:64: 19:48:e6:2a:c5:bb:8e:73:74:48:52:0a:8a:ef:7f: d3:ef:42:5f:d5:54:0d:22:2f:50:36:1a:d6:49:10: 66:ab:e0:2e:8b:32:0a:ea:fb:26:0b:37:4e:7d:73: 33:e5:32:d1:d9:d5:a1:e4:da:e2:88:a1:31:98:dd: 94:5b:b4:0b:5f:73:62:1b:48:ae:65:a5:d9:fa:fe: 35:3c:da:0c:9a:f8:07:d1:b9:ce:c4:cf:46:b4:25: 0f:44:a0:2c:49:07:88:cf:84:fd:92:86:bf:d3:30: 57:7e:b7:f5:2e:4d:53:48:45:b4:16:ae:3c:36:db: f1:bb:72:c3:00:b1:75:33:b0:c0:4f:fc:03:f9:3a: 40:63:10:a3:b4:3b:d2:66:14:e6:5b:29:16:55:23: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:32:10:C6:15:75:B7:73:2C:4A:0F:6D:17:4A:6E:ED:99:9D:26 X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.46.0/24 IPv6: 2a13:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 27:40:e4:72:98:c5:0d:e6:18:fe:86:c2:bd:fa:9c:1f:9d:54: 89:03:72:a9:5e:cd:1a:95:48:29:62:c4:fb:f5:62:ea:aa:a8: e3:7d:da:7f:60:fa:3e:d5:2d:c6:ce:cf:a2:05:3e:23:01:46: 1f:77:b2:90:1b:28:7d:b2:46:8a:4a:d6:8e:53:3e:91:a2:6d: 27:2e:cb:e1:c7:f9:54:02:53:d8:e6:ea:53:ba:29:c7:78:fe: e2:b8:ca:09:8f:bd:32:5e:29:a4:79:d0:e5:23:84:c7:b2:04: f0:63:38:c1:73:ed:84:f3:2c:88:11:0e:8e:47:f4:ce:bf:3b: 47:89:20:c1:f8:8c:e5:f8:4f:58:22:ff:37:ec:f3:bb:5e:62: 65:a5:1d:53:d3:16:a0:8e:f9:c6:d8:37:dd:b7:f7:d7:af:49: 97:bf:32:c7:de:79:31:68:7f:de:ad:3f:a2:f3:4c:32:74:53: 70:e8:a5:9f:6d:76:20:09:9f:b7:1a:c1:86:1d:ad:d5:5e:53: 90:af:60:d0:0d:af:fd:6a:52:fa:c0:af:62:a3:40:e2:53:0c: b9:09:3c:b6:e8:a7:3f:da:08:4d:70:4a:e4:44:1e:23:e2:c9: 3d:3f:dd:e8:ed:b7:f2:f5:07:33:4d:24:cc:8a:3b:bd:75:f1: c4:70:10:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o1pP/AqTwpon+ASa5ksiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTlmMzIxMGM2MTU3NWI3NzMyYzRhMGY2ZDE3NGE2ZWVkOTk5ZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunFPNY8HyL+RRI6uFKP3lpafp5a2 l6DDooxMrd4J4SNY8yudEYCCJOnBW5+6+rGJSNZ4qnnrgqAXrIYSMh+Ddjiv32IO 1fzxFlpwHkHMbPj1KxzZQ3YZ8e6Jok2L+cfqHJa8B3MoQWQZSOYqxbuOc3RIUgqK 73/T70Jf1VQNIi9QNhrWSRBmq+AuizIK6vsmCzdOfXMz5TLR2dWh5NriiKExmN2U W7QLX3NiG0iuZaXZ+v41PNoMmvgH0bnOxM9GtCUPRKAsSQeIz4T9koa/0zBXfrf1 Lk1TSEW0Fq48Ntvxu3LDALF1M7DAT/wD+TpAYxCjtDvSZhTmWykWVSNJ1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJqfMhDGFXW3cyxKD20XSm7tmZ0mMB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvbXA4eUVNWVZkYmR6TEVvUGJSZEtidTJablNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWsuMA0E AgACMAcDBQAqE38AMA0GCSqGSIb3DQEBCwUAA4IBAQAnQORymMUN5hj+hsK9+pwf nVSJA3KpXs0alUgpYsT79WLqqqjjfdp/YPo+1S3Gzs+iBT4jAUYfd7KQGyh9skaK StaOUz6Rom0nLsvhx/lUAlPY5upTuinHeP7iuMoJj70yXimkedDlI4THsgTwYzjB c+2E8yyIEQ6OR/TOvztHiSDB+Izl+E9YIv837PO7XmJlpR1T0xagjvnG2Dfdt/fX r0mXvzLH3nkxaH/erT+i80wydFNw6KWfbXYgCZ+3GsGGHa3VXlOQr2DQDa/9alL6 wK9io0DiUwy5CTy26Kc/2ghNcErkRB4j4sk9P93o7bfy9QczTSTMiju9dfHEcBAq -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client