This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/MAO8I-LZ9iHTC6WiehAybTQU_B4.roa File: MAO8I-LZ9iHTC6WiehAybTQU_B4.roa (raw, json) Hash identifier: 04HbiqGE+p2D11Yo0yq+6HVjeybJAO92Br5TbkWk9sA= Subject key identifier: 30:03:BC:23:E2:D9:F6:21:D3:0B:A5:A2:7A:10:32:6D:34:14:FC:1E Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Certificate serial: 019B7B36E68CBB10AB69FA68B418BA8BF850 Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/MAO8I-LZ9iHTC6WiehAybTQU_B4.roa Signing time: Thu 01 Jan 2026 20:19:14 +0000 ROA not before: Thu 01 Jan 2026 20:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43507 IP address blocks: 78.156.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e6:8c:bb:10:ab:69:fa:68:b4:18:ba:8b:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3003bc23e2d9f621d30ba5a27a10326d3414fc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:d6:a1:ff:0b:f1:38:df:c7:4d:ab:a7:c2: 0b:58:ac:25:7e:2f:80:6a:5d:4d:7e:37:1f:88:e7: 3f:b0:8d:ea:83:41:f3:6b:c3:02:c8:bc:20:10:cf: 98:43:33:53:d8:15:78:4e:c5:06:4e:b4:1b:6f:63: 72:3a:28:3b:e5:4b:60:c6:05:99:51:9f:8f:55:53: ac:7f:c2:ab:a9:38:ba:8d:62:9f:90:30:ec:5b:1d: 69:18:98:bc:0d:2f:6e:33:98:22:a2:cf:77:2f:a1: 7c:5c:c3:84:68:0c:d3:fd:f4:01:88:1c:59:dc:28: b6:c2:01:d9:c2:10:a0:6a:f5:31:fb:dc:3d:9c:09: ad:87:92:03:12:df:05:8d:3a:cf:24:76:a6:21:94: 39:65:17:6f:65:43:57:c3:27:08:5c:d7:db:59:21: d9:f7:0a:97:46:9a:11:3b:1c:da:47:e8:fd:01:5c: 59:dc:b0:6d:9d:d9:18:70:54:e6:91:24:ba:12:32: 36:d2:b3:2a:b6:63:d3:da:36:31:f9:06:41:a3:57: 08:b5:b3:8d:52:df:4b:e7:7f:74:71:40:4f:88:9c: 67:83:24:34:b4:c5:e6:48:18:39:04:62:06:7f:c5: be:da:29:58:b2:d9:34:83:d2:cf:d5:57:ed:cd:37: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:03:BC:23:E2:D9:F6:21:D3:0B:A5:A2:7A:10:32:6D:34:14:FC:1E X509v3 Authority Key Identifier: keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/MAO8I-LZ9iHTC6WiehAybTQU_B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.156.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:77:b1:3d:3b:97:b9:f2:85:de:94:09:4c:c0:d5:83:8b:5e: 9b:df:8d:9e:9c:ce:55:52:d0:91:55:9e:07:a1:24:3c:1d:10: 38:a9:26:0b:50:14:61:ce:88:4a:8b:2a:c0:96:70:7a:41:5f: 8a:a6:1c:08:73:ca:27:42:f7:83:80:ec:e4:88:03:28:2b:0f: 33:87:cb:7b:ae:eb:b1:da:81:4f:68:37:14:e9:29:2e:d8:74: 8c:a2:9f:3b:9b:f5:74:dc:fd:69:b7:44:1b:f4:74:9b:39:05: a2:01:2d:ee:01:4d:31:4d:aa:4c:df:ad:9d:78:51:d0:be:7b: f0:51:e9:bf:00:a1:dc:23:38:94:f7:6a:f3:54:c8:cb:97:03: 42:79:49:4c:ff:15:cb:a0:00:70:4d:45:42:5f:cb:2b:62:31: f0:b1:0b:45:cb:dc:32:4f:20:c4:25:1d:23:dc:b8:32:2f:e9: cb:2c:7f:d0:42:87:59:f8:c8:fc:15:b5:1d:96:4a:9a:d2:9a: ea:f4:98:1c:8f:6d:af:54:44:07:21:1e:56:30:0c:97:db:31: f7:5b:1d:fe:0b:b0:90:5e:fd:b1:8f:61:3d:0f:98:d7:9d:0d: 7b:1f:a9:57:73:02:22:85:80:62:8c:57:50:9d:05:90:48:c2: 12:90:fc:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NuaMuxCrafpotBi6i/hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3 ZDFlMTcwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDAzYmMyM2UyZDlmNjIxZDMwYmE1YTI3YTEwMzI2ZDM0MTRmYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4vWof8L8Tjfx02rp8ILWKwlfi+A al1NfjcfiOc/sI3qg0Hza8MCyLwgEM+YQzNT2BV4TsUGTrQbb2NyOig75UtgxgWZ UZ+PVVOsf8KrqTi6jWKfkDDsWx1pGJi8DS9uM5gios93L6F8XMOEaAzT/fQBiBxZ 3Ci2wgHZwhCgavUx+9w9nAmth5IDEt8FjTrPJHamIZQ5ZRdvZUNXwycIXNfbWSHZ 9wqXRpoROxzaR+j9AVxZ3LBtndkYcFTmkSS6EjI20rMqtmPT2jYx+QZBo1cItbON Ut9L5390cUBPiJxngyQ0tMXmSBg5BGIGf8W+2ilYstk0g9LP1VftzTfJ/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDADvCPi2fYh0wulonoQMm00FPweMB8GA1UdIwQY MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt M2Q3ZTRiNDk2YjIzLzEvTUFPOEktTFo5aUhUQzZXaWVoQXliVFFVX0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTpwgMA0G CSqGSIb3DQEBCwUAA4IBAQBdd7E9O5e58oXelAlMwNWDi16b342enM5VUtCRVZ4H oSQ8HRA4qSYLUBRhzohKiyrAlnB6QV+KphwIc8onQveDgOzkiAMoKw8zh8t7ruux 2oFPaDcU6Sku2HSMop87m/V03P1pt0Qb9HSbOQWiAS3uAU0xTapM362deFHQvnvw Uem/AKHcIziU92rzVMjLlwNCeUlM/xXLoABwTUVCX8srYjHwsQtFy9wyTyDEJR0j 3LgyL+nLLH/QQodZ+Mj8FbUdlkqa0prq9Jgcj22vVEQHIR5WMAyX2zH3Wx3+C7CQ Xv2xj2E9D5jXnQ17H6lXcwIihYBijFdQnQWQSMISkPyW -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:21 2026 by rpki-client