This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/M16NJT8ocHcFhdxLajdl5OmYfWg.roa File: M16NJT8ocHcFhdxLajdl5OmYfWg.roa (raw, json) Hash identifier: OCbF5Tgm3E71OlvzY1cYnxinuqaWID2lU/O06sRIcAE= Subject key identifier: 33:5E:8D:25:3F:28:70:77:05:85:DC:4B:6A:37:65:E4:E9:98:7D:68 Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Certificate serial: 019B78342F9346A626FD4CC6D6AFA3AB1BD4 Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/M16NJT8ocHcFhdxLajdl5OmYfWg.roa Signing time: Thu 01 Jan 2026 06:17:24 +0000 ROA not before: Thu 01 Jan 2026 06:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 194.102.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:2f:93:46:a6:26:fd:4c:c6:d6:af:a3:ab:1b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335e8d253f2870770585dc4b6a3765e4e9987d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:13:19:dd:df:05:58:93:8c:f9:47:98:3f: 21:41:46:85:60:c1:c0:95:d5:d6:49:7e:a6:7d:da: 80:2a:69:90:84:19:86:25:d9:5b:21:4b:a9:b7:05: 51:2a:9a:01:ec:5e:32:08:6c:21:73:34:2a:5c:7f: 9d:16:96:ea:b3:4d:d7:e2:90:ed:97:ef:4a:e9:cf: c1:6c:10:f6:9e:b2:81:ef:74:a7:44:61:4e:ad:93: a4:84:c4:c6:90:48:6a:9a:d4:a7:53:c2:47:c9:f8: a8:c1:2a:c5:34:2b:a1:37:03:bc:6a:1e:cf:b1:10: b0:2f:81:96:d9:87:ea:31:5d:6e:f6:9b:a5:bf:51: 34:4b:de:c1:78:a1:a7:cb:9a:d5:25:6f:10:98:40: 45:54:03:1f:69:34:c3:13:22:93:51:92:54:ce:33: de:95:b0:e8:9a:43:c1:a9:56:18:c0:0a:75:e9:78: a5:ce:a7:76:e2:33:c8:7b:61:78:e6:93:9c:73:b7: 74:8f:10:da:5e:a1:ca:69:b6:5b:d7:b0:0a:47:06: f7:23:48:97:e0:88:89:12:a8:c7:bb:c5:4e:14:15: 15:7d:04:21:aa:5f:6d:20:a2:f6:a7:dd:de:f2:17: c8:7c:88:7b:71:ed:85:6f:7d:2e:84:8b:20:f9:bb: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:8D:25:3F:28:70:77:05:85:DC:4B:6A:37:65:E4:E9:98:7D:68 X509v3 Authority Key Identifier: keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/M16NJT8ocHcFhdxLajdl5OmYfWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.129.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:42:29:8a:e1:01:55:af:9e:7a:ba:6a:49:0e:fb:16:16:40: 55:74:a7:79:dd:ac:0e:c4:80:61:26:3f:db:54:f5:1f:c9:ae: c7:ef:2d:41:aa:00:5e:ab:f3:f4:bc:ce:ef:ed:4a:f3:94:5e: 10:bb:f7:ab:5c:5d:31:e3:56:ee:e0:80:ca:cb:9d:40:71:55: e1:0a:f2:73:3b:57:9f:8e:56:2c:51:97:9b:d7:3b:1e:57:7a: b6:c1:5f:90:48:ea:83:2f:63:3b:94:3d:63:e3:1a:15:7b:17: e5:e9:d6:75:35:81:1b:1b:52:f4:9b:85:21:a6:ec:31:a1:64: 3a:5d:71:d8:a0:ed:f7:bc:7b:66:3d:2c:87:72:89:80:df:da: 43:4b:60:a7:c0:ac:1b:aa:d5:48:a1:b4:e1:d2:a1:22:42:3c: e5:ac:de:1f:54:59:7c:5e:c6:68:af:b2:42:a9:7f:bf:fa:89: b9:af:ca:25:62:6f:f3:cc:52:f8:b8:a5:a7:ec:3b:5b:9c:53: 7c:7f:a9:a3:98:0a:85:72:a4:f1:1a:57:1a:8f:1e:a0:57:88: 5c:77:c1:68:2e:17:0b:8c:36:9e:08:03:11:e4:95:86:86:bb: 19:a8:d0:93:57:b2:32:84:95:e2:56:9f:88:c0:13:e5:ee:40: b9:59:38:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NC+TRqYm/UzG1q+jqxvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy Njg2YmYwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVlOGQyNTNmMjg3MDc3MDU4NWRjNGI2YTM3NjVlNGU5OTg3ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhUTGd3fBViTjPlHmD8hQUaFYMHA ldXWSX6mfdqAKmmQhBmGJdlbIUuptwVRKpoB7F4yCGwhczQqXH+dFpbqs03X4pDt l+9K6c/BbBD2nrKB73SnRGFOrZOkhMTGkEhqmtSnU8JHyfiowSrFNCuhNwO8ah7P sRCwL4GW2YfqMV1u9pulv1E0S97BeKGny5rVJW8QmEBFVAMfaTTDEyKTUZJUzjPe lbDomkPBqVYYwAp16Xilzqd24jPIe2F45pOcc7d0jxDaXqHKabZb17AKRwb3I0iX 4IiJEqjHu8VOFBUVfQQhql9tIKL2p93e8hfIfIh7ce2Fb30uhIsg+bt7QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNejSU/KHB3BYXcS2o3ZeTpmH1oMB8GA1UdIwQY MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt ODlhOTAyMzI2MWYxLzEvTTE2TkpUOG9jSGNGaGR4TGFqZGw1T21ZZldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmaBMA0G CSqGSIb3DQEBCwUAA4IBAQCcQimK4QFVr556umpJDvsWFkBVdKd53awOxIBhJj/b VPUfya7H7y1BqgBeq/P0vM7v7UrzlF4Qu/erXF0x41bu4IDKy51AcVXhCvJzO1ef jlYsUZeb1zseV3q2wV+QSOqDL2M7lD1j4xoVexfl6dZ1NYEbG1L0m4UhpuwxoWQ6 XXHYoO33vHtmPSyHcomA39pDS2CnwKwbqtVIobTh0qEiQjzlrN4fVFl8XsZor7JC qX+/+om5r8olYm/zzFL4uKWn7DtbnFN8f6mjmAqFcqTxGlcajx6gV4hcd8FoLhcL jDaeCAMR5JWGhrsZqNCTV7IyhJXiVp+IwBPl7kC5WTg9 -----END CERTIFICATE-----Generated at Mon Jan 26 14:13:00 2026 by rpki-client