This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/MDa6kjpECMXWe15W6-w-6g5-5AE.roa File: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (raw, json) Hash identifier: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8= Subject key identifier: 30:36:BA:92:3A:44:08:C5:D6:7B:5E:56:EB:EC:3E:EA:0E:7E:E4:01 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103ADF8642753736AE1CEB4BB9A2C3 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/MDa6kjpECMXWe15W6-w-6g5-5AE.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 195.216.181.0/24 maxlen: 24 195.216.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:df:86:42:75:37:36:ae:1c:eb:4b:b9:a2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3036ba923a4408c5d67b5e56ebec3eea0e7ee401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:90:8b:e1:05:ef:35:9a:dc:eb:00:fc:19: 11:70:ce:97:57:f4:69:32:61:7e:71:ab:0e:4e:58: c5:f3:b8:87:9b:fa:82:8e:80:c1:93:2b:4f:c6:2c: 73:76:52:20:b3:14:44:ce:b7:05:55:28:b8:6c:b3: 85:1f:10:f9:01:b5:d8:0c:28:94:ba:b2:01:76:5c: 68:4d:d9:28:7a:c8:08:48:dc:61:45:15:f3:66:b7: 62:4a:bb:56:8b:a5:9e:28:2d:50:86:09:f3:fb:f5: 34:19:a8:5d:50:43:7e:8a:8c:03:80:ad:3e:d8:8f: 73:2d:6d:f7:0f:c3:01:4d:6a:96:67:d9:ce:38:d6: 8a:c7:e1:80:7b:fe:49:b7:ad:08:92:32:4b:e4:36: ec:d1:4d:0c:e9:3b:9b:bd:ab:e3:6a:10:c6:cc:ed: b1:73:cf:a1:3e:26:41:9c:c7:a8:b6:68:6e:cd:f1: a0:60:58:54:15:88:d5:35:0e:f6:a3:59:c9:7f:ee: d6:74:4e:e0:7c:4e:c1:17:ce:0d:81:43:37:72:60: 21:d8:90:83:14:d6:b7:25:0d:18:e5:34:64:fa:de: 40:5f:4a:72:aa:62:eb:ea:aa:2f:75:3f:ac:d4:aa: e0:7b:29:5a:9c:ec:b2:15:b1:5a:37:ac:a3:1a:0d: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:BA:92:3A:44:08:C5:D6:7B:5E:56:EB:EC:3E:EA:0E:7E:E4:01 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/MDa6kjpECMXWe15W6-w-6g5-5AE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.181.0/24 195.216.189.0/24 Signature Algorithm: sha256WithRSAEncryption 50:6d:ed:56:22:4a:28:4f:22:76:8b:21:b3:82:6f:df:7f:e2: 5f:5b:17:48:98:bb:98:7a:ef:d7:66:f6:9d:18:e4:6f:79:43: bd:30:9f:7a:a2:60:11:50:d4:d4:68:fb:96:03:c2:8c:fe:0c: 5b:b0:02:ee:da:23:0e:2a:d4:e9:9d:b3:d3:d6:71:87:47:b1: 28:f8:ea:8a:7b:b1:3e:12:7a:b7:4c:14:f5:78:49:2b:cc:bf: 55:18:33:cc:30:63:33:0a:6f:a0:0b:05:9c:1a:78:87:a0:18: b7:1d:e0:d6:14:d4:12:c1:10:c7:fd:7c:92:6b:6c:b0:ad:96: 29:5f:c7:d4:b5:a5:0c:99:5b:7e:d6:74:28:2d:b7:6e:ea:fa: cb:a6:44:27:d3:b2:54:a8:1a:6c:eb:94:7d:f4:ac:64:e5:5b: af:37:10:8a:31:b0:92:d1:b8:f7:00:45:0d:be:21:dc:bd:23: a1:8b:83:18:3e:d9:34:ba:58:5f:30:ab:93:de:a4:33:25:e1: 39:45:35:c0:d4:d8:c8:5e:59:00:06:c7:ae:66:f5:fe:5c:b0: 99:ff:69:6c:c7:59:f8:54:e8:c0:87:2e:a0:24:3d:74:d8:6f: 5f:eb:9c:b0:76:80:9d:e1:c9:08:94:86:58:96:47:77:25:82: 9b:e4:ed:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDrfhkJ1NzauHOtLuaLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDM2YmE5MjNhNDQwOGM1ZDY3YjVlNTZlYmVjM2VlYTBlN2VlNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWaQi+EF7zWa3OsA/BkRcM6XV/Rp MmF+casOTljF87iHm/qCjoDBkytPxixzdlIgsxREzrcFVSi4bLOFHxD5AbXYDCiU urIBdlxoTdkoesgISNxhRRXzZrdiSrtWi6WeKC1Qhgnz+/U0GahdUEN+iowDgK0+ 2I9zLW33D8MBTWqWZ9nOONaKx+GAe/5Jt60IkjJL5Dbs0U0M6TubvavjahDGzO2x c8+hPiZBnMeotmhuzfGgYFhUFYjVNQ72o1nJf+7WdE7gfE7BF84NgUM3cmAh2JCD FNa3JQ0Y5TRk+t5AX0pyqmLr6qovdT+s1KrgeylanOyyFbFaN6yjGg1XZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDA2upI6RAjF1nteVuvsPuoOfuQBMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvTURhNmtqcEVDTVhXZTE1VzYtdy02ZzUtNUFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw9i1AwQA w9i9MA0GCSqGSIb3DQEBCwUAA4IBAQBQbe1WIkooTyJ2iyGzgm/ff+JfWxdImLuY eu/XZvadGORveUO9MJ96omARUNTUaPuWA8KM/gxbsALu2iMOKtTpnbPT1nGHR7Eo +OqKe7E+Enq3TBT1eEkrzL9VGDPMMGMzCm+gCwWcGniHoBi3HeDWFNQSwRDH/XyS a2ywrZYpX8fUtaUMmVt+1nQoLbdu6vrLpkQn07JUqBps65R99Kxk5VuvNxCKMbCS 0bj3AEUNviHcvSOhi4MYPtk0ulhfMKuT3qQzJeE5RTXA1NjIXlkABseuZvX+XLCZ /2lsx1n4VOjAhy6gJD102G9f65ywdoCd4ckIlIZYlkd3JYKb5O2o -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:51 2026 by rpki-client