This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MP6MyJ6JGT0Qd4fuNuAz8iDFiNo.roa File: MP6MyJ6JGT0Qd4fuNuAz8iDFiNo.roa (raw, json) Hash identifier: JCKZg5aviqvu7Z76Faoxn9dtcsunUKEMHmwZGg/KRw0= Subject key identifier: 30:FE:8C:C8:9E:89:19:3D:10:77:87:EE:36:E0:33:F2:20:C5:88:DA Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB8458F694B9920DD4D454C4BA4FD9 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MP6MyJ6JGT0Qd4fuNuAz8iDFiNo.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49150 IP address blocks: 93.174.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:84:58:f6:94:b9:92:0d:d4:d4:54:c4:ba:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30fe8cc89e89193d107787ee36e033f220c588da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:aa:37:2f:f9:9e:99:38:b3:79:d3:c6:6e: 20:cf:ed:6c:99:88:8f:57:bf:2d:1e:71:96:c5:4f: 35:5b:4b:c2:f4:a1:ef:3c:36:d2:57:b0:2d:cc:b2: 11:91:b4:7b:07:d2:05:c1:4e:d9:6b:a8:60:b1:6c: 02:a8:1a:5e:8e:52:e8:3e:82:ef:f1:2f:9e:01:4e: 86:09:32:6f:2a:b6:55:e6:e3:a3:fd:a7:9c:12:4a: 3b:33:03:84:91:77:be:fc:63:37:78:47:9b:2e:1d: ba:0a:c0:c4:34:6b:f4:26:d0:e0:a4:af:30:16:48: 81:31:2b:d1:95:78:3d:c8:10:b4:1d:8a:9a:ed:d5: 94:da:d0:20:f1:03:4b:9d:dd:22:ed:f6:cc:75:b6: df:45:1e:32:80:8c:c8:24:00:df:b8:64:60:f4:c3: 92:30:96:68:2f:b5:fa:22:11:5c:bc:33:d1:a7:51: 61:a2:28:d2:7b:6c:b2:fc:95:33:9e:04:63:44:44: 1c:51:cb:73:61:69:d7:8e:a5:05:71:ea:f3:f7:b7: 98:41:34:3c:7d:e1:0d:e5:75:96:bb:a4:7a:48:65: 50:d8:a8:ca:8b:10:fe:2c:fe:1b:27:5f:c1:10:d1: ad:c8:0c:26:fe:4b:42:af:5a:eb:a4:63:9f:a9:f5: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FE:8C:C8:9E:89:19:3D:10:77:87:EE:36:E0:33:F2:20:C5:88:DA X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MP6MyJ6JGT0Qd4fuNuAz8iDFiNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.161.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:7e:b5:75:db:24:8f:ee:bd:64:47:92:51:b5:18:a3:c8:19: 67:4d:03:de:02:4f:d8:11:96:11:9c:18:12:b0:67:85:c1:5d: 15:03:fe:ef:c3:0b:b8:56:a8:28:26:b8:31:78:93:16:58:cc: bb:76:94:c2:db:53:33:0b:4f:d4:a5:b8:69:83:30:6e:b3:79: e1:a3:ad:63:03:db:a8:fa:0a:3d:69:5e:c2:c3:e3:4e:11:c4: 6f:f6:a0:35:9d:1b:65:88:2e:f8:2c:18:03:f7:b2:33:96:c2: cb:77:7a:63:10:0c:2c:7c:b8:5e:b4:78:d1:e7:b5:93:88:5f: 42:8d:5a:af:12:79:01:47:c1:c8:8a:db:d0:58:c0:8c:ce:a0: d6:81:cc:67:05:e7:69:2f:7b:f2:a6:b9:eb:a6:a7:9a:34:d8: 8c:8b:1e:94:f1:ae:51:57:da:6f:1e:c9:d1:53:d4:e9:40:e7: e4:d8:ef:01:69:09:2a:fa:09:e5:dd:91:09:da:9c:43:c3:88: cc:61:f9:41:c7:f4:61:4c:aa:80:6b:90:39:1d:7f:5a:52:68: 41:ac:36:22:b0:2a:95:d2:8e:99:ae:45:74:eb:ab:0c:81:38: 8b:ab:71:f4:63:51:03:2c:e3:c6:07:35:32:23:51:a3:20:8c: 87:6f:5a:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264RY9pS5kg3U1FTEuk/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGZlOGNjODllODkxOTNkMTA3Nzg3ZWUzNmUwMzNmMjIwYzU4OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8KqNy/5npk4s3nTxm4gz+1smYiP V78tHnGWxU81W0vC9KHvPDbSV7AtzLIRkbR7B9IFwU7Za6hgsWwCqBpejlLoPoLv 8S+eAU6GCTJvKrZV5uOj/aecEko7MwOEkXe+/GM3eEebLh26CsDENGv0JtDgpK8w FkiBMSvRlXg9yBC0HYqa7dWU2tAg8QNLnd0i7fbMdbbfRR4ygIzIJADfuGRg9MOS MJZoL7X6IhFcvDPRp1FhoijSe2yy/JUzngRjREQcUctzYWnXjqUFcerz97eYQTQ8 feEN5XWWu6R6SGVQ2KjKixD+LP4bJ1/BENGtyAwm/ktCr1rrpGOfqfUw2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDD+jMieiRk9EHeH7jbgM/IgxYjaMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvTVA2TXlKNkpHVDBRZDRmdU51QXo4aURGaU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa6hMA0G CSqGSIb3DQEBCwUAA4IBAQAefrV12ySP7r1kR5JRtRijyBlnTQPeAk/YEZYRnBgS sGeFwV0VA/7vwwu4VqgoJrgxeJMWWMy7dpTC21MzC0/UpbhpgzBus3nho61jA9uo +go9aV7Cw+NOEcRv9qA1nRtliC74LBgD97IzlsLLd3pjEAwsfLhetHjR57WTiF9C jVqvEnkBR8HIitvQWMCMzqDWgcxnBedpL3vyprnrpqeaNNiMix6U8a5RV9pvHsnR U9TpQOfk2O8BaQkq+gnl3ZEJ2pxDw4jMYflBx/RhTKqAa5A5HX9aUmhBrDYisCqV 0o6ZrkV066sMgTiLq3H0Y1EDLOPGBzUyI1GjIIyHb1qp -----END CERTIFICATE-----Generated at Wed Jan 21 11:06:51 2026 by rpki-client