This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/MaB_rXpzhAyK75pCzc-H2Yn52T8.roa File: MaB_rXpzhAyK75pCzc-H2Yn52T8.roa (raw, json) Hash identifier: NmyWTJHW0rrkG+3kVc+6cGCMRvWS4rg9K0M2GxNuGx0= Subject key identifier: 31:A0:7F:AD:7A:73:84:0C:8A:EF:9A:42:CD:CF:87:D9:89:F9:D9:3F Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Certificate serial: 019B7FF184DDB044494390170A4C1358815C Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/MaB_rXpzhAyK75pCzc-H2Yn52T8.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41004 IP address blocks: 79.171.0.0/22 maxlen: 22 193.32.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:84:dd:b0:44:49:43:90:17:0a:4c:13:58:81:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a07fad7a73840c8aef9a42cdcf87d989f9d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:e9:d8:45:64:c8:75:b1:31:5a:5d:f2:37: a4:0f:9e:12:38:2f:61:c8:9c:b9:8b:49:57:b4:8a: 4e:17:77:c7:ec:61:1e:01:90:dc:15:d0:8c:09:db: 40:a2:b8:23:6d:85:65:1c:14:17:e3:d5:7f:9d:46: 6a:f7:00:e8:88:bb:c5:6c:fe:b5:75:f5:67:50:3f: ab:b2:7d:44:1e:74:37:a3:e5:1f:a8:fd:65:e7:3e: 23:20:c0:7c:7b:13:2f:bb:53:77:fb:bd:45:5b:ac: 2e:bc:fd:c9:bb:eb:74:9a:2f:2c:9f:bd:48:34:fd: 38:d1:57:3d:f2:6e:54:63:59:10:18:bf:dc:3b:6f: 94:16:ec:f8:8c:65:d1:ac:bf:27:99:e0:35:81:0c: 7c:56:9e:fb:7a:20:4f:62:8d:d0:dd:e4:da:7d:51: e3:9b:74:e8:33:c4:87:cb:d6:58:f4:8c:e7:68:16: 01:29:38:36:ff:3b:a2:7e:a3:c5:39:3e:e8:62:b9: d5:23:72:1b:5a:2b:dc:6e:c4:e3:fc:57:ea:f5:3b: 26:36:68:d7:73:c5:a6:50:fa:2c:0f:d9:1d:d5:5b: 86:36:05:9f:ef:b9:0d:8d:2a:33:3a:91:19:aa:36: 03:e5:0c:3e:f4:e5:03:b5:bd:07:9c:1b:16:17:12: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:7F:AD:7A:73:84:0C:8A:EF:9A:42:CD:CF:87:D9:89:F9:D9:3F X509v3 Authority Key Identifier: keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/MaB_rXpzhAyK75pCzc-H2Yn52T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.0.0/22 193.32.37.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e6:99:79:9b:18:18:67:3b:58:ee:a9:dc:15:37:88:82:6c: 30:f3:5f:08:31:e7:cd:98:20:03:70:f9:6c:5a:a7:02:b7:d1: 9f:79:d2:ee:a2:f3:f5:11:93:1d:a4:f8:dd:13:44:b0:2a:49: 86:58:27:ef:2a:61:2a:62:a5:c2:49:19:d1:18:87:da:17:c4: 26:8f:a2:fa:2a:96:ff:84:cd:e8:29:70:91:af:17:f1:b8:23: ae:bb:51:3b:3b:fc:85:2e:e6:f5:41:16:7f:db:44:51:34:c2: 96:f8:75:d9:25:2d:74:b7:31:88:c7:71:b8:94:f6:7a:d8:93: 36:f7:92:f7:f0:28:a1:39:b9:16:72:ff:21:80:ff:ef:a3:8d: 14:b6:dd:c5:11:17:fc:3e:8f:22:a8:2c:93:2b:f1:b6:c7:c0: ce:d6:45:82:58:59:cc:64:92:ef:d6:85:59:cd:af:4f:65:4c: b3:eb:31:a8:22:62:ae:fa:f9:cf:97:3e:41:f3:7f:76:96:cc: 42:0f:43:8c:f7:d8:c0:74:bf:e9:1f:4b:9c:94:96:d0:18:89: ad:33:ec:dc:48:ec:44:be:f7:50:fb:11:d3:30:cf:7e:d6:cd: 56:89:1d:f0:68:28:9e:7f:95:12:26:a7:36:0a:15:99:e1:43: 55:47:44:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8YTdsERJQ5AXCkwTWIFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDVkMTc0Y2JiNDZhYWY4NjU1NWI4MGUxNzczMzMxYjg3 MGI1NjgwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWEwN2ZhZDdhNzM4NDBjOGFlZjlhNDJjZGNmODdkOTg5ZjlkOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofnp2EVkyHWxMVpd8jekD54SOC9h yJy5i0lXtIpOF3fH7GEeAZDcFdCMCdtAorgjbYVlHBQX49V/nUZq9wDoiLvFbP61 dfVnUD+rsn1EHnQ3o+UfqP1l5z4jIMB8exMvu1N3+71FW6wuvP3Ju+t0mi8sn71I NP040Vc98m5UY1kQGL/cO2+UFuz4jGXRrL8nmeA1gQx8Vp77eiBPYo3Q3eTafVHj m3ToM8SHy9ZY9IznaBYBKTg2/zuifqPFOT7oYrnVI3IbWivcbsTj/Ffq9TsmNmjX c8WmUPosD9kd1VuGNgWf77kNjSozOpEZqjYD5Qw+9OUDtb0HnBsWFxJgBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDGgf616c4QMiu+aQs3Ph9mJ+dk/MB8GA1UdIwQY MBaAFBrV0XTLtGqvhlVbgOF3MzG4cLVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAt NzM5YzE5OGM1MTNmLzEvTWFCX3JYcHpoQXlLNzVwQ3pjLUgyWW41MlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAtNzM5YzE5OGM1MTNm LzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCT6sAAwQA wSAlMA0GCSqGSIb3DQEBCwUAA4IBAQCR5pl5mxgYZztY7qncFTeIgmww818IMefN mCADcPlsWqcCt9GfedLuovP1EZMdpPjdE0SwKkmGWCfvKmEqYqXCSRnRGIfaF8Qm j6L6Kpb/hM3oKXCRrxfxuCOuu1E7O/yFLub1QRZ/20RRNMKW+HXZJS10tzGIx3G4 lPZ62JM295L38CihObkWcv8hgP/vo40Utt3FERf8Po8iqCyTK/G2x8DO1kWCWFnM ZJLv1oVZza9PZUyz6zGoImKu+vnPlz5B8392lsxCD0OM99jAdL/pH0uclJbQGImt M+zcSOxEvvdQ+xHTMM9+1s1WiR3waCief5USJqc2ChWZ4UNVR0RE -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:03 2026 by rpki-client