This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MA8h3Q5y2qfLsDzfPk-k9WuC0eg.roa File: MA8h3Q5y2qfLsDzfPk-k9WuC0eg.roa (raw, json) Hash identifier: yCeo2CaM/0Jo7aAuGUCZVmZcXP6mC7G5xVERH6OwtTQ= Subject key identifier: 30:0F:21:DD:0E:72:DA:A7:CB:B0:3C:DF:3E:4F:A4:F5:6B:82:D1:E8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9487AE52C89CE67F176C045F4172 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MA8h3Q5y2qfLsDzfPk-k9WuC0eg.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 109.176.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:94:87:ae:52:c8:9c:e6:7f:17:6c:04:5f:41:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=300f21dd0e72daa7cbb03cdf3e4fa4f56b82d1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:cd:64:33:5c:79:7a:6a:cc:4e:e8:f2:72: f9:ba:84:2c:82:0a:9b:2c:7e:d0:b5:ec:11:85:20: d2:a7:e5:c3:3f:73:fc:d7:1a:72:0a:d4:bf:ec:57: b8:25:80:be:66:1c:80:07:c7:c7:0e:61:ef:8d:30: e7:f3:69:8a:42:a6:3f:4a:8a:05:19:c1:f3:14:d6: 50:84:19:32:a9:e4:7a:7d:1b:01:76:4d:2f:b3:55: 8d:5a:36:d2:31:31:23:f4:85:86:30:5b:38:94:ba: f9:5b:90:5e:c1:97:5e:ec:08:28:2d:4a:14:ac:83: 86:15:e7:90:0a:74:02:4f:54:b2:12:e9:75:4d:fd: 36:19:b9:d4:11:23:cf:fb:cf:28:6c:e2:9a:1c:16: 31:ad:4e:fd:53:84:fc:3c:26:d4:12:37:49:6c:53: ac:59:61:37:6e:f8:57:47:a2:8d:01:c3:a7:06:73: 09:cf:10:a7:4a:2e:70:80:af:a7:d2:dc:37:74:a4: eb:67:d4:44:1c:22:b4:57:c6:f9:13:4d:fb:10:25: 29:0d:9b:83:9d:fc:71:35:1e:1d:57:1d:6d:61:a7: 99:ff:8d:08:02:f6:e6:53:b3:b5:6b:f6:40:f2:b5: 72:70:12:ab:fd:d1:d9:7b:56:39:11:12:45:d9:9b: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:21:DD:0E:72:DA:A7:CB:B0:3C:DF:3E:4F:A4:F5:6B:82:D1:E8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MA8h3Q5y2qfLsDzfPk-k9WuC0eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.15.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a1:ea:21:05:81:56:a6:30:d5:5f:80:af:1a:9e:b7:76:6b: 91:19:8b:5f:56:eb:11:11:2c:ab:e4:22:8e:24:2d:e0:51:84: 15:75:33:d0:ea:75:01:e8:f2:88:84:71:33:6c:97:6b:62:41: 4f:e4:12:d8:af:1a:e2:a0:60:98:15:16:d7:ee:a1:8a:a7:b6: b8:41:70:8c:de:c3:95:de:4b:07:a4:65:fb:7e:c3:86:32:57: 20:a1:e3:c5:82:b5:cd:d7:83:98:0e:19:7c:7d:12:19:6c:a8: f1:50:f9:78:d7:28:b8:14:56:b3:a9:2b:a5:11:ec:3e:10:a3: d7:29:b5:5d:5f:52:ba:0b:00:a7:4b:2f:cd:7c:01:65:75:31: 6c:57:52:ba:db:ea:8c:d9:74:e0:68:cb:0b:d0:11:dc:6a:5f: 37:ce:81:fc:4e:46:ba:32:98:21:19:14:3b:83:a7:d1:89:80: 5c:04:d7:53:03:75:c9:fb:06:2d:ff:14:c1:cc:45:cf:1d:32: bb:a0:8c:ec:32:ad:50:74:b4:14:a8:ca:2d:f2:0d:36:d7:88: 4b:16:55:52:d9:6a:1f:40:f4:a5:66:28:1b:bd:75:bf:19:c9: a5:41:a5:3b:66:db:9d:68:cc:28:56:58:e0:db:2e:53:8c:21: 0a:f2:69:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpSHrlLInOZ/F2wEX0FyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDBmMjFkZDBlNzJkYWE3Y2JiMDNjZGYzZTRmYTRmNTZiODJkMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8DNZDNceXpqzE7o8nL5uoQsggqb LH7QtewRhSDSp+XDP3P81xpyCtS/7Fe4JYC+ZhyAB8fHDmHvjTDn82mKQqY/SooF GcHzFNZQhBkyqeR6fRsBdk0vs1WNWjbSMTEj9IWGMFs4lLr5W5BewZde7AgoLUoU rIOGFeeQCnQCT1SyEul1Tf02GbnUESPP+88obOKaHBYxrU79U4T8PCbUEjdJbFOs WWE3bvhXR6KNAcOnBnMJzxCnSi5wgK+n0tw3dKTrZ9REHCK0V8b5E037ECUpDZuD nfxxNR4dVx1tYaeZ/40IAvbmU7O1a/ZA8rVycBKr/dHZe1Y5ERJF2ZvPrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDAPId0Octqny7A83z5PpPVrgtHoMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvTUE4aDNRNXkycWZMc0R6ZlBrLWs5V3VDMGVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAPMA0G CSqGSIb3DQEBCwUAA4IBAQCAoeohBYFWpjDVX4CvGp63dmuRGYtfVusRESyr5CKO JC3gUYQVdTPQ6nUB6PKIhHEzbJdrYkFP5BLYrxrioGCYFRbX7qGKp7a4QXCM3sOV 3ksHpGX7fsOGMlcgoePFgrXN14OYDhl8fRIZbKjxUPl41yi4FFazqSulEew+EKPX KbVdX1K6CwCnSy/NfAFldTFsV1K62+qM2XTgaMsL0BHcal83zoH8Tka6MpghGRQ7 g6fRiYBcBNdTA3XJ+wYt/xTBzEXPHTK7oIzsMq1QdLQUqMot8g0214hLFlVS2Wof QPSlZigbvXW/GcmlQaU7ZtudaMwoVljg2y5TjCEK8mm+ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:02 2026 by rpki-client