This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa File: MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa (raw, json) Hash identifier: PycaTW4K59wW80aiPDoqRYwdmZTOHKaA4NMu7/9B2n0= Subject key identifier: 31:A3:1B:47:94:06:F0:99:73:C5:92:4F:F4:8D:6C:5D:53:63:1C:D3 Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Certificate serial: 019B7D5C87C76024331933C81A843FBA576A Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa Signing time: Fri 02 Jan 2026 06:19:34 +0000 ROA not before: Fri 02 Jan 2026 06:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207522 IP address blocks: 192.145.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:87:c7:60:24:33:19:33:c8:1a:84:3f:ba:57:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a31b479406f09973c5924ff48d6c5d53631cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:07:37:80:b7:0e:8b:6b:bd:68:8e:29:a3: 2f:37:07:96:af:9b:da:4d:e5:61:a4:2f:90:a3:33: fa:d1:9f:6d:6a:e3:62:19:82:36:aa:db:3c:ec:64: ac:96:10:1e:50:c9:98:37:bc:6d:de:ba:ad:aa:dd: 4e:6b:21:57:a6:5b:a3:f0:02:e7:11:fa:c5:a7:fa: 45:97:04:9a:a1:81:f9:e8:30:1c:84:df:42:b9:69: 32:5d:4e:76:9b:e6:b8:cc:c7:7e:8d:df:1c:61:89: d0:27:7b:50:03:88:3c:65:53:09:3b:52:99:a7:b5: bd:44:9e:38:a4:a0:28:81:8e:dd:c9:f9:ac:91:de: a3:f4:01:bb:97:1f:5c:9a:3b:42:ef:a3:b0:a1:1a: a5:4e:3f:d7:0f:37:a5:0e:a2:71:07:58:7c:f5:a0: 44:ca:38:43:82:ae:64:04:32:53:1d:23:c5:25:a3: 59:e1:25:15:8b:59:4b:78:e3:19:e2:3e:ae:38:6c: 99:c2:0e:71:d2:4e:ea:b6:95:ec:dc:55:af:45:88: 3e:3c:cf:e3:fe:a7:4a:86:dc:ef:a0:79:4b:2f:c2: 7b:35:5f:4f:22:3d:cb:46:d2:22:34:d7:09:c0:20: 5a:1f:2f:8e:5c:31:08:53:ff:5d:2a:a7:82:6d:33: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:1B:47:94:06:F0:99:73:C5:92:4F:F4:8D:6C:5D:53:63:1C:D3 X509v3 Authority Key Identifier: keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.111.0/24 Signature Algorithm: sha256WithRSAEncryption b0:d7:9e:50:ef:5d:b9:f7:b4:34:2e:2c:2b:fe:b9:50:ba:d9: 19:64:36:84:a1:dd:dd:b9:47:b9:2f:c2:4a:8f:2d:e0:a0:9a: 6c:26:a0:1e:68:39:27:d0:41:b6:3e:4b:a2:15:88:81:f7:f6: c8:af:d3:87:c6:f4:6e:6d:39:1b:bd:1d:01:a8:3d:85:4e:44: 1c:9f:5d:63:b3:59:36:4d:93:df:57:30:46:2c:aa:e9:25:0e: ef:4a:a8:e1:21:7f:5b:3e:b7:c4:af:b9:01:74:40:2e:8c:2e: d3:18:7a:ee:68:2e:f3:a9:6e:eb:9f:4e:61:f5:a5:43:5d:bf: 05:82:4d:a4:c0:75:79:ee:84:8d:1f:da:06:b2:d3:e9:38:bc: 1f:dd:8d:98:c2:76:a8:b1:ca:bd:0b:c1:91:2d:73:42:44:2f: 11:81:aa:1b:e5:ca:ff:4c:75:67:8a:e0:6f:03:38:9f:9c:4d: 40:2f:ec:82:a7:82:3b:68:72:0b:59:b5:00:6f:0c:97:19:5a: 31:ac:7e:c7:fc:be:d4:d8:3c:bc:bd:b5:17:40:a9:70:91:e9: ec:88:f4:89:05:5d:fa:bf:dd:1e:a8:03:10:8a:40:2e:f2:ac: 73:61:38:49:81:7a:fc:5a:ac:11:a3:3d:5a:d3:b3:dd:b3:0d: 16:4a:92:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XIfHYCQzGTPIGoQ/uldqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMjJhNzhhODA3MWIwMmEzNjJhOGRiMzNlOGYzZjcy ZGQzNDgwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWEzMWI0Nzk0MDZmMDk5NzNjNTkyNGZmNDhkNmM1ZDUzNjMxY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd8HN4C3DotrvWiOKaMvNweWr5va TeVhpC+QozP60Z9tauNiGYI2qts87GSslhAeUMmYN7xt3rqtqt1OayFXpluj8ALn EfrFp/pFlwSaoYH56DAchN9CuWkyXU52m+a4zMd+jd8cYYnQJ3tQA4g8ZVMJO1KZ p7W9RJ44pKAogY7dyfmskd6j9AG7lx9cmjtC76OwoRqlTj/XDzelDqJxB1h89aBE yjhDgq5kBDJTHSPFJaNZ4SUVi1lLeOMZ4j6uOGyZwg5x0k7qtpXs3FWvRYg+PM/j /qdKhtzvoHlLL8J7NV9PIj3LRtIiNNcJwCBaHy+OXDEIU/9dKqeCbTOfiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDGjG0eUBvCZc8WST/SNbF1TYxzTMB8GA1UdIwQY MBaAFHGS8ip4qAcbAqNiqNsz6PP3LdNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2Ut MGU4YmM4ZTgxMmVlLzEvTWFNYlI1UUc4Smx6eFpKUDlJMXNYVk5qSE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2UtMGU4YmM4ZTgxMmVl LzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFvMA0G CSqGSIb3DQEBCwUAA4IBAQCw155Q712597Q0Liwr/rlQutkZZDaEod3duUe5L8JK jy3goJpsJqAeaDkn0EG2PkuiFYiB9/bIr9OHxvRubTkbvR0BqD2FTkQcn11js1k2 TZPfVzBGLKrpJQ7vSqjhIX9bPrfEr7kBdEAujC7TGHruaC7zqW7rn05h9aVDXb8F gk2kwHV57oSNH9oGstPpOLwf3Y2Ywnaoscq9C8GRLXNCRC8Rgaob5cr/THVniuBv AzifnE1AL+yCp4I7aHILWbUAbwyXGVoxrH7H/L7U2Dy8vbUXQKlwkensiPSJBV36 v90eqAMQikAu8qxzYThJgXr8WqwRoz1a07Pdsw0WSpI2 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:00 2026 by rpki-client