This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdmbw4VHqhHJ0e1V2lCtIsSDThE.roa File: Mdmbw4VHqhHJ0e1V2lCtIsSDThE.roa (raw, json) Hash identifier: OJ12StfgEw8rwADrWVHf5+AAfKF1iU6ommk/zgoi9lQ= Subject key identifier: 31:D9:9B:C3:85:47:AA:11:C9:D1:ED:55:DA:50:AD:22:C4:83:4E:11 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BBB993C5A2AF3C58E99B4841895605CF0 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdmbw4VHqhHJ0e1V2lCtIsSDThE.roa Signing time: Wed 14 Jan 2026 08:22:20 +0000 ROA not before: Wed 14 Jan 2026 08:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 213.218.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:99:3c:5a:2a:f3:c5:8e:99:b4:84:18:95:60:5c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 14 08:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d99bc38547aa11c9d1ed55da50ad22c4834e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:49:dd:89:72:50:a2:0a:75:38:74:da:61: 3c:f1:61:93:75:33:be:c1:ce:0c:2c:cb:f2:ad:f4: 5e:9d:41:c7:d4:f5:84:2b:5b:30:f0:27:ec:6a:0e: 80:38:8d:97:dd:81:98:b4:b2:f1:a3:f7:63:d4:ff: d2:60:bc:a0:62:30:90:42:86:86:74:dd:ca:42:65: 2a:6d:43:4a:59:0f:b7:d2:b5:2c:e1:13:cb:4c:32: 77:24:7f:a7:24:14:df:74:cb:15:eb:df:5e:f9:33: 77:94:47:28:c4:46:67:62:cc:a1:48:c6:93:47:48: 97:a7:57:c5:57:73:17:43:f0:7d:5e:a6:40:9f:5c: 27:05:96:81:a9:e0:c6:50:cc:c3:a0:ac:0b:46:a4: d5:79:c2:5e:e6:fd:46:d9:fc:c7:b4:7a:bf:d3:af: ee:01:be:71:2e:45:99:b5:72:16:5c:99:61:88:33: 6b:63:5e:42:69:58:88:ea:24:b3:65:b0:f9:e3:0c: 7e:7e:1e:76:38:09:4e:14:81:86:80:c3:f2:08:dd: 8b:71:27:f3:6d:29:a6:04:a9:11:61:bb:fc:a5:a9: 95:44:50:f3:6e:51:ef:f5:27:1f:71:d7:2d:e4:f1: 2d:c9:58:3b:0a:4b:44:24:de:7c:61:c8:d6:59:76: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:9B:C3:85:47:AA:11:C9:D1:ED:55:DA:50:AD:22:C4:83:4E:11 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Mdmbw4VHqhHJ0e1V2lCtIsSDThE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.218.209.0/24 Signature Algorithm: sha256WithRSAEncryption 99:00:b5:30:a6:5d:97:79:17:2c:1b:ea:0f:ce:90:9e:99:7d: e5:24:53:6e:a6:1d:30:86:0f:e0:85:47:9c:a4:73:de:65:1f: 89:36:53:2a:84:ce:04:19:e1:6a:3a:49:3e:6d:28:ec:9a:2a: c7:c3:e6:ac:5b:f4:27:d0:75:07:a0:9a:09:47:7c:d8:d6:8e: e1:db:66:77:07:9f:12:60:e6:f6:ed:0c:33:d8:68:1e:d9:61: 29:26:5a:42:9a:32:9a:45:3a:d4:ac:c0:28:48:df:23:ba:2d: 03:86:cf:ab:a7:83:b7:b8:b8:5b:d9:3e:c7:18:74:66:27:e5: a1:a2:22:80:0a:fe:01:e2:f1:5a:36:e5:be:83:f9:85:47:45: ef:a4:fa:cc:68:ac:02:09:81:3e:7b:44:a7:d7:c3:4b:4e:ce: 48:05:38:26:89:8a:92:5e:69:4d:59:53:10:2a:a3:0e:f0:0e: 40:30:f9:cc:a7:cc:52:91:0f:14:10:b0:ad:3d:18:ff:fc:79: 63:22:b1:f4:5b:eb:79:5f:b5:d1:db:19:2a:0e:96:34:9a:b7: d3:68:cd:e4:54:24:f8:95:ac:e3:b1:34:25:53:57:de:06:a9: 48:ae:39:45:ef:3a:6b:39:1f:78:6d:f7:da:31:da:5d:44:4c: bd:7c:92:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu7mTxaKvPFjpm0hBiVYFzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE0MDgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ5OWJjMzg1NDdhYTExYzlkMWVkNTVkYTUwYWQyMmM0ODM0ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucpJ3YlyUKIKdTh02mE88WGTdTO+ wc4MLMvyrfRenUHH1PWEK1sw8Cfsag6AOI2X3YGYtLLxo/dj1P/SYLygYjCQQoaG dN3KQmUqbUNKWQ+30rUs4RPLTDJ3JH+nJBTfdMsV699e+TN3lEcoxEZnYsyhSMaT R0iXp1fFV3MXQ/B9XqZAn1wnBZaBqeDGUMzDoKwLRqTVecJe5v1G2fzHtHq/06/u Ab5xLkWZtXIWXJlhiDNrY15CaViI6iSzZbD54wx+fh52OAlOFIGGgMPyCN2LcSfz bSmmBKkRYbv8pamVRFDzblHv9Scfcdct5PEtyVg7CktEJN58YcjWWXYHkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHZm8OFR6oRydHtVdpQrSLEg04RMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvTWRtYnc0VkhxaEhKMGUxVjJsQ3RJc1NEVGhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drRMA0G CSqGSIb3DQEBCwUAA4IBAQCZALUwpl2XeRcsG+oPzpCemX3lJFNuph0whg/ghUec pHPeZR+JNlMqhM4EGeFqOkk+bSjsmirHw+asW/Qn0HUHoJoJR3zY1o7h22Z3B58S YOb27Qwz2Gge2WEpJlpCmjKaRTrUrMAoSN8jui0Dhs+rp4O3uLhb2T7HGHRmJ+Wh oiKACv4B4vFaNuW+g/mFR0XvpPrMaKwCCYE+e0Sn18NLTs5IBTgmiYqSXmlNWVMQ KqMO8A5AMPnMp8xSkQ8UELCtPRj//HljIrH0W+t5X7XR2xkqDpY0mrfTaM3kVCT4 lazjsTQlU1feBqlIrjlF7zprOR94bffaMdpdREy9fJLg -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client