This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/MAhA7gXCpIgcNBSezx0_LDNuYeE.roa File: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (raw, json) Hash identifier: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk= Subject key identifier: 30:08:40:EE:05:C2:A4:88:1C:34:14:9E:CF:1D:3F:2C:33:6E:61:E1 Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019B7834EFB9804B892CE5D346C25E74937A Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/MAhA7gXCpIgcNBSezx0_LDNuYeE.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202024 IP address blocks: 46.31.70.0/24 maxlen: 24 79.98.126.0/24 maxlen: 24 79.98.127.0/24 maxlen: 24 185.54.16.0/22 maxlen: 22 185.54.16.0/23 maxlen: 23 185.54.16.0/24 maxlen: 24 185.54.17.0/24 maxlen: 24 185.54.18.0/23 maxlen: 23 185.54.18.0/24 maxlen: 24 185.54.19.0/24 maxlen: 24 185.141.12.0/22 maxlen: 22 185.141.12.0/23 maxlen: 23 185.141.12.0/24 maxlen: 24 185.141.13.0/24 maxlen: 24 185.141.14.0/23 maxlen: 23 185.141.14.0/24 maxlen: 24 185.141.15.0/24 maxlen: 24 2a00:d30:16::/48 maxlen: 48 2a00:d30:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ef:b9:80:4b:89:2c:e5:d3:46:c2:5e:74:93:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=300840ee05c2a4881c34149ecf1d3f2c336e61e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:0b:06:02:1d:11:31:0e:c7:a1:60:61:a0: 91:4a:4e:e4:b8:9c:db:b3:55:36:1d:0a:eb:89:ac: 91:c3:fb:aa:6b:a8:11:db:cd:df:28:79:16:0e:08: c3:2d:0e:81:93:da:fe:7e:0d:97:cd:c3:4f:eb:82: d5:ef:58:3d:ae:bc:98:f0:b6:0c:24:08:ac:c0:0a: 5d:df:46:a1:ae:ff:18:62:63:97:ac:05:7a:aa:1c: 33:59:c4:ba:8c:2a:45:0a:fe:fc:1f:77:9d:ff:25: 39:09:38:9a:9d:63:ef:80:c5:1a:df:1d:90:78:6f: 2a:bf:86:04:63:90:ca:27:df:6f:cf:3a:0c:dc:16: a7:c8:2c:df:5f:96:6a:c9:f3:de:9d:1b:6c:df:49: d9:ba:29:86:b1:1e:ff:d3:d1:b8:e2:0a:18:98:0c: a4:32:fe:0f:42:f5:8f:5f:1e:29:35:c0:f0:9e:00: 50:82:fa:a2:93:8f:65:b2:f6:5c:51:22:1a:a6:bb: 48:2e:9a:19:0c:c5:5d:7d:cc:3f:30:70:a6:cb:d6: 7b:38:78:1d:17:35:1f:cd:2b:1e:e8:8a:73:f4:83: 8a:28:97:d3:1f:07:da:6a:93:53:ad:f6:5f:68:e7: 11:34:bc:59:6b:ec:c3:c4:9d:54:01:05:a2:2a:a1: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:08:40:EE:05:C2:A4:88:1C:34:14:9E:CF:1D:3F:2C:33:6E:61:E1 X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/MAhA7gXCpIgcNBSezx0_LDNuYeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.70.0/24 79.98.126.0/23 185.54.16.0/22 185.141.12.0/22 IPv6: 2a00:d30:16::/48 2a00:d30:18::/48 Signature Algorithm: sha256WithRSAEncryption c8:2b:3d:09:b6:35:e9:a1:f7:8e:17:50:7f:63:6f:6a:19:e8: 74:d0:18:30:1d:37:f7:10:2e:76:bf:62:f3:ad:10:31:ce:90: 27:70:6b:2e:7a:7e:7d:fe:15:21:8a:a3:2d:6d:3b:64:4b:53: ce:dd:99:33:fc:b3:b4:96:55:aa:42:05:be:c6:c7:4f:82:48: a7:45:0d:90:35:ad:83:d9:b7:58:72:0e:ff:0d:30:2c:34:d6: 54:f1:9a:49:5e:ff:b7:5a:d6:a0:67:ac:3a:ee:4d:b3:07:a2: 06:af:a1:db:5d:ef:58:2e:f7:14:31:9d:c2:85:96:38:14:a1: 7a:02:57:05:09:c0:bc:1d:c6:ef:2b:33:cb:b9:c2:29:35:04: bd:08:b4:38:58:24:56:c0:e5:12:07:93:70:c7:ac:0c:2b:6e: d5:88:fa:fa:f2:f2:b8:89:49:4c:94:13:c2:a4:11:48:f1:1a: 5a:8b:35:fd:00:53:80:39:ff:8e:a7:d0:88:7c:67:9f:4a:84: cb:9e:02:93:46:e0:0e:cf:50:cc:e9:b5:93:3e:42:b9:ad:05: 5e:66:65:27:7f:b3:a8:69:bb:e0:46:ed:4b:8a:31:f7:99:3c: a6:91:dd:c1:88:a7:c5:73:89:4c:04:36:81:11:49:3b:20:fb: 7e:17:53:6d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NO+5gEuJLOXTRsJedJN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDA4NDBlZTA1YzJhNDg4MWMzNDE0OWVjZjFkM2YyYzMzNmU2MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYsLBgIdETEOx6FgYaCRSk7kuJzb s1U2HQrriayRw/uqa6gR283fKHkWDgjDLQ6Bk9r+fg2XzcNP64LV71g9rryY8LYM JAiswApd30ahrv8YYmOXrAV6qhwzWcS6jCpFCv78H3ed/yU5CTianWPvgMUa3x2Q eG8qv4YEY5DKJ99vzzoM3BanyCzfX5ZqyfPenRts30nZuimGsR7/09G44goYmAyk Mv4PQvWPXx4pNcDwngBQgvqik49lsvZcUSIaprtILpoZDMVdfcw/MHCmy9Z7OHgd FzUfzSse6Ipz9IOKKJfTHwfaapNTrfZfaOcRNLxZa+zDxJ1UAQWiKqFA9wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFDAIQO4FwqSIHDQUns8dPywzbmHhMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvTUFoQTdnWENwSWdjTkJTZXp4MF9MRE51WWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQALh9GAwQB T2J+AwQCuTYQAwQCuY0MMBgEAgACMBIDBwAqAA0wABYDBwAqAA0wABgwDQYJKoZI hvcNAQELBQADggEBAMgrPQm2Nemh944XUH9jb2oZ6HTQGDAdN/cQLna/YvOtEDHO kCdway56fn3+FSGKoy1tO2RLU87dmTP8s7SWVapCBb7Gx0+CSKdFDZA1rYPZt1hy Dv8NMCw01lTxmkle/7da1qBnrDruTbMHogavodtd71gu9xQxncKFljgUoXoCVwUJ wLwdxu8rM8u5wik1BL0ItDhYJFbA5RIHk3DHrAwrbtWI+vry8riJSUyUE8KkEUjx GlqLNf0AU4A5/46n0Ih8Z59KhMueApNG4A7PUMzptZM+QrmtBV5mZSd/s6hpu+BG 7UuKMfeZPKaR3cGIp8VziUwENoERSTsg+34XU20= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:06 2026 by rpki-client