This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/MH4I9xav4LfVDq-8qLH2rQsIB04.roa File: MH4I9xav4LfVDq-8qLH2rQsIB04.roa (raw, json) Hash identifier: 4P+chNkfen2A5zyoEceMZTNyTkw02ot82WeO0g5JC48= Subject key identifier: 30:7E:08:F7:16:AF:E0:B7:D5:0E:AF:BC:A8:B1:F6:AD:0B:08:07:4E Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b Certificate serial: 019B7AC7F56D0E9A6F6DC3B61CB299571267 Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/MH4I9xav4LfVDq-8qLH2rQsIB04.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200336 IP address blocks: 194.56.194.0/24 maxlen: 24 194.56.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f5:6d:0e:9a:6f:6d:c3:b6:1c:b2:99:57:12:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6376c252db09be817b872a717a959edcac44266b Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=307e08f716afe0b7d50eafbca8b1f6ad0b08074e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:db:89:74:c9:f0:f5:01:db:92:0b:89:7d:0a: 67:64:17:44:61:4d:5a:39:a8:9d:47:0b:90:ab:6b: e0:5f:30:c7:ba:be:b9:27:bc:d3:c9:63:bb:03:43: f4:b8:5b:f6:97:dc:69:b7:b0:29:c6:da:64:e8:af: 6f:45:34:4c:22:7a:2c:bf:2b:87:ee:7e:c5:08:76: 11:8a:2b:23:39:74:05:fa:43:6e:ce:9d:bc:3f:a5: 62:60:4f:ab:f2:0a:3c:99:dc:cb:8a:d5:0e:ea:95: 37:76:3e:4f:8f:db:d0:9e:43:e4:80:9e:c0:ea:34: 4c:26:a8:56:65:17:fc:f4:d2:04:07:79:b5:76:09: 78:4b:e0:af:f2:25:94:43:49:ad:af:e8:a3:90:8b: 66:ca:1c:65:4d:63:80:c8:0e:38:d8:49:69:d9:19: b8:d3:20:c2:67:5f:2a:20:fb:3f:78:6c:c7:0c:77: 68:8c:ff:80:c1:b1:93:3e:65:cb:3d:26:c4:56:d0: f4:06:55:b1:16:5f:5f:be:61:d8:f4:a8:ed:3e:73: db:6b:0e:27:59:b2:ab:71:10:17:3a:10:4d:87:cd: 70:6f:ad:49:80:b4:25:a4:5c:76:ce:3e:5c:2b:8f: 0a:83:bb:9c:ea:af:47:b2:d6:c5:33:b1:85:ce:3c: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7E:08:F7:16:AF:E0:B7:D5:0E:AF:BC:A8:B1:F6:AD:0B:08:07:4E X509v3 Authority Key Identifier: keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/MH4I9xav4LfVDq-8qLH2rQsIB04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.194.0/23 Signature Algorithm: sha256WithRSAEncryption 62:a1:4f:aa:dc:be:58:97:6b:d3:55:db:6f:46:de:c3:a3:7d: 0c:52:7c:75:ee:46:8b:12:f4:1e:19:cc:5a:30:f0:61:84:26: f6:bd:e8:e3:77:a8:2d:5d:f5:2c:83:fe:03:ba:22:88:3f:62: 87:9b:75:8c:78:8b:b7:5d:37:ff:c8:b6:0b:0d:f0:7d:32:85: 83:c1:e4:81:b9:31:7f:7b:0f:ef:84:97:0d:ec:22:e4:94:b1: 30:9d:4c:72:bb:4c:e9:d3:ef:64:0d:31:62:ad:1a:2b:17:5e: 4b:66:7f:e3:44:da:45:86:a0:5e:d3:84:f3:f9:ce:66:26:23: ad:01:db:e6:a1:3b:88:36:b8:29:0b:09:66:e3:42:b7:1c:5c: 1a:5d:0d:c8:39:4e:61:de:8a:a8:27:d1:d3:f1:8e:c2:d3:ca: d4:d9:91:2b:97:3d:e0:9d:ef:23:34:5d:95:a1:c5:d8:54:c3: c0:39:74:29:6c:e4:63:85:14:7b:97:8b:fc:d7:35:3e:50:a7: 46:ff:01:88:a4:f6:ce:82:e1:7a:5d:f7:32:86:a2:c5:e9:44: 78:8d:f7:b6:06:17:d6:2b:39:6e:41:de:aa:39:74:9e:95:8e: 14:89:4e:2c:bb:a5:93:97:92:f4:dc:35:8b:fe:9a:35:4a:fc: af:29:18:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/VtDppvbcO2HLKZVxJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0 NDI2NmIwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDdlMDhmNzE2YWZlMGI3ZDUwZWFmYmNhOGIxZjZhZDBiMDgwNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tuJdMnw9QHbkguJfQpnZBdEYU1a OaidRwuQq2vgXzDHur65J7zTyWO7A0P0uFv2l9xpt7Apxtpk6K9vRTRMInosvyuH 7n7FCHYRiisjOXQF+kNuzp28P6ViYE+r8go8mdzLitUO6pU3dj5Pj9vQnkPkgJ7A 6jRMJqhWZRf89NIEB3m1dgl4S+Cv8iWUQ0mtr+ijkItmyhxlTWOAyA442Elp2Rm4 0yDCZ18qIPs/eGzHDHdojP+AwbGTPmXLPSbEVtD0BlWxFl9fvmHY9KjtPnPbaw4n WbKrcRAXOhBNh81wb61JgLQlpFx2zj5cK48Kg7uc6q9HstbFM7GFzjyowwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDB+CPcWr+C31Q6vvKix9q0LCAdOMB8GA1UdIwQY MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt ZGNhMGZkNTA5ZmI2LzEvTUg0STl4YXY0TGZWRHEtOHFMSDJyUXNJQjA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2 LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjjCMA0G CSqGSIb3DQEBCwUAA4IBAQBioU+q3L5Yl2vTVdtvRt7Do30MUnx17kaLEvQeGcxa MPBhhCb2vejjd6gtXfUsg/4DuiKIP2KHm3WMeIu3XTf/yLYLDfB9MoWDweSBuTF/ ew/vhJcN7CLklLEwnUxyu0zp0+9kDTFirRorF15LZn/jRNpFhqBe04Tz+c5mJiOt AdvmoTuINrgpCwlm40K3HFwaXQ3IOU5h3oqoJ9HT8Y7C08rU2ZErlz3gne8jNF2V ocXYVMPAOXQpbORjhRR7l4v81zU+UKdG/wGIpPbOguF6XfcyhqLF6UR4jfe2BhfW KzluQd6qOXSelY4UiU4su6WTl5L03DWL/po1SvyvKRht -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:28 2026 by rpki-client