This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa File: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (raw, json) Hash identifier: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ= Subject key identifier: 8C:C6:D4:6A:D3:AF:DD:70:2C:AF:F2:AB:54:45:F5:98:F3:13:F4:C8 Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac Certificate serial: 019B78A291636BBEFF9FD4A2D948C5D9037A Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa Signing time: Thu 01 Jan 2026 08:17:58 +0000 ROA not before: Thu 01 Jan 2026 08:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215928 IP address blocks: 193.57.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:91:63:6b:be:ff:9f:d4:a2:d9:48:c5:d9:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac Validity Not Before: Jan 1 08:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cc6d46ad3afdd702caff2ab5445f598f313f4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:c1:c4:eb:a8:f8:5c:2c:14:de:3e:70:f2: 6a:de:22:fe:bc:59:ce:4d:2d:b9:1a:0b:c7:81:3c: de:53:dd:bb:ce:38:ba:4e:6f:18:57:67:04:b3:7f: a1:05:8b:c6:93:c6:c0:8d:07:4e:e3:42:f3:d5:71: b6:55:cf:54:70:12:13:f5:be:c4:5b:e9:fe:aa:29: 4e:2e:c1:50:80:37:54:fa:4d:4a:ba:98:34:5c:10: b9:31:e5:71:20:ea:36:dd:22:89:87:75:50:ed:61: df:3e:94:7d:a9:cd:41:a5:f5:56:30:3f:62:71:bb: 9e:f6:83:04:86:9d:86:ab:bf:1c:e4:a7:4b:49:ba: e8:e0:20:c5:eb:96:8b:b8:e5:93:52:fc:80:f8:97: ab:8a:d1:97:e3:d6:9a:00:ea:8e:2e:29:97:32:78: cf:6d:8d:f9:fc:f1:76:9a:5b:8c:25:39:30:03:82: e8:3c:0c:49:76:3e:cc:7a:7d:80:37:6f:29:1d:44: 27:c6:ac:fa:c4:b2:81:d1:5c:d1:13:6f:f5:22:02: 85:85:51:ac:46:9d:8b:8f:ae:06:74:2b:2e:16:61: 8f:e2:f7:e3:6f:95:25:f6:8e:2b:31:31:0c:77:b5: 21:71:7b:1d:e8:4d:84:19:dd:11:b6:ce:8b:dd:d9: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C6:D4:6A:D3:AF:DD:70:2C:AF:F2:AB:54:45:F5:98:F3:13:F4:C8 X509v3 Authority Key Identifier: keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.201.0/24 Signature Algorithm: sha256WithRSAEncryption 48:3b:f0:14:61:ba:9f:b5:05:e1:50:90:52:13:1f:57:45:5d: dc:95:fb:06:1e:20:05:21:5a:d5:d6:64:e9:c6:7f:1a:6c:e9: a0:1b:dc:fa:6d:c0:fc:02:04:35:95:92:83:92:cb:3c:cd:a2: 14:fd:ae:39:ba:3d:17:a1:b6:c2:66:ea:1f:f3:35:55:9c:e4: b3:aa:75:e9:84:e4:4d:1e:55:d7:fc:52:58:6c:1b:11:8d:02: 78:f9:28:11:a2:71:fb:3f:ca:ff:5c:28:49:1e:4f:ab:63:35: 6a:0c:11:ab:e6:2c:09:f4:f9:dc:3e:97:b2:92:78:11:09:4b: d0:4d:27:1e:95:b3:81:7d:46:cb:cc:ca:20:df:34:9c:4b:72: 20:49:f7:26:bd:be:8e:7f:15:b4:5e:14:6a:57:cf:e2:98:73: 7d:36:a3:84:b1:16:aa:d9:9d:2e:16:e3:e5:43:a1:83:9d:d6: 88:dc:32:a2:f0:f8:97:4e:01:74:7e:d6:89:b5:a0:fb:9a:b5: f8:bd:e5:4a:b4:e8:a9:87:cf:49:1a:fe:26:92:1d:cb:74:3a: 91:20:a0:2a:86:15:26:4a:9b:86:f0:ce:4c:d4:cb:ca:9f:74: 35:04:cd:c6:87:d3:e5:9e:2a:56:cc:12:ae:f5:0f:fb:31:1d: e1:82:0e:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4opFja77/n9Si2UjF2QN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3 N2JhYWMwHhcNMjYwMTAxMDgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2M2ZDQ2YWQzYWZkZDcwMmNhZmYyYWI1NDQ1ZjU5OGYzMTNmNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy27BxOuo+FwsFN4+cPJq3iL+vFnO TS25GgvHgTzeU927zji6Tm8YV2cEs3+hBYvGk8bAjQdO40Lz1XG2Vc9UcBIT9b7E W+n+qilOLsFQgDdU+k1Kupg0XBC5MeVxIOo23SKJh3VQ7WHfPpR9qc1BpfVWMD9i cbue9oMEhp2Gq78c5KdLSbro4CDF65aLuOWTUvyA+JeritGX49aaAOqOLimXMnjP bY35/PF2mluMJTkwA4LoPAxJdj7Men2AN28pHUQnxqz6xLKB0VzRE2/1IgKFhVGs Rp2Lj64GdCsuFmGP4vfjb5Ul9o4rMTEMd7UhcXsd6E2EGd0Rts6L3dnjBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzG1GrTr91wLK/yq1RF9ZjzE/TIMB8GA1UdIwQY MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt M2E3M2MzMzNlN2U3LzEvak1iVWF0T3YzWEFzcl9LclZFWDFtUE1UOU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3 LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTnJMA0G CSqGSIb3DQEBCwUAA4IBAQBIO/AUYbqftQXhUJBSEx9XRV3clfsGHiAFIVrV1mTp xn8abOmgG9z6bcD8AgQ1lZKDkss8zaIU/a45uj0XobbCZuof8zVVnOSzqnXphORN HlXX/FJYbBsRjQJ4+SgRonH7P8r/XChJHk+rYzVqDBGr5iwJ9PncPpeykngRCUvQ TScelbOBfUbLzMog3zScS3IgSfcmvb6OfxW0XhRqV8/imHN9NqOEsRaq2Z0uFuPl Q6GDndaI3DKi8PiXTgF0ftaJtaD7mrX4veVKtOiph89JGv4mkh3LdDqRIKAqhhUm SpuG8M5M1MvKn3Q1BM3Gh9PlnipWzBKu9Q/7MR3hgg7y -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:53 2026 by rpki-client