This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/magE7Oqvt4vQBy0S0W-6ngBkDPE.roa File: magE7Oqvt4vQBy0S0W-6ngBkDPE.roa (raw, json) Hash identifier: lje+xFMlOYI2U2KnAHNmX1xI+2awOlplYxa8y2jo/S0= Subject key identifier: 99:A8:04:EC:EA:AF:B7:8B:D0:07:2D:12:D1:6F:BA:9E:00:64:0C:F1 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45C0B9473F1F2CE379968500457B9 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/magE7Oqvt4vQBy0S0W-6ngBkDPE.roa Signing time: Thu 01 Jan 2026 22:18:47 +0000 ROA not before: Thu 01 Jan 2026 22:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211868 IP address blocks: 193.29.180.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5c:0b:94:73:f1:f2:ce:37:99:68:50:04:57:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a804eceaafb78bd0072d12d16fba9e00640cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:f4:e4:fb:fc:87:7e:24:0a:a9:66:7c:3b: 6e:92:71:b8:b9:6d:6e:19:c6:43:07:9d:6b:f7:be: e2:22:26:4c:a2:a0:82:2d:d9:18:69:8a:80:02:46: f6:d2:90:68:31:60:e9:66:14:54:06:15:68:2d:e6: 94:22:0b:f1:e3:f7:01:97:1b:44:15:eb:6a:c5:63: 71:92:68:49:d4:eb:02:23:af:cf:bc:43:a4:f4:6f: e9:7c:11:c1:16:63:01:fe:96:06:0b:9e:0f:ea:5f: 33:14:82:78:17:b3:52:11:7d:b5:84:0d:6a:80:db: f7:ef:4d:be:91:45:37:0f:1f:58:27:33:3e:fd:23: 43:7c:12:cc:d3:c4:cb:22:94:45:3b:ef:d9:fa:95: aa:06:b2:16:8c:04:ce:fb:65:a8:5f:58:e0:c5:53: 8b:e1:03:99:ab:9a:8b:cb:1f:42:4e:3d:38:00:8f: c9:94:11:ad:b4:2d:cd:55:dc:e8:6a:77:24:19:2a: 0a:0b:aa:a9:1c:58:3e:d9:a5:99:0e:59:15:e8:09: 32:fb:c6:c3:60:bc:f9:45:f9:d8:6d:bf:b7:f4:e0: d1:bc:d2:eb:f6:0a:ff:5c:84:74:62:0e:7d:89:d5: 50:dd:41:6b:82:e7:4f:10:52:95:83:e9:3c:71:f1: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:04:EC:EA:AF:B7:8B:D0:07:2D:12:D1:6F:BA:9E:00:64:0C:F1 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/magE7Oqvt4vQBy0S0W-6ngBkDPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.180.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e9:d7:47:66:04:c0:94:66:4a:b3:91:52:a3:96:8b:95:e8: 42:8c:e0:07:50:13:df:7c:e4:3d:10:02:5a:34:fb:c3:5b:b6: 8d:6d:f1:2c:c3:cf:b1:76:b3:d0:b2:ec:ba:b5:a4:99:06:c1: 4d:55:04:3c:fa:37:c1:9e:8e:3f:85:c4:8d:22:c8:a7:78:7b: 4b:3e:60:27:80:aa:30:d9:f0:c6:d2:89:33:89:3f:64:dc:51: 37:32:80:4f:17:37:ea:42:d0:5f:b0:c0:c5:b5:1c:22:e4:48: 21:3b:b6:8d:65:0f:29:83:e4:c7:c6:e3:92:c1:84:d4:d6:20: 50:d2:ff:d9:18:6a:c0:b1:b2:2b:8e:67:8a:1b:ad:c8:2e:61: 79:f9:fc:c7:45:b9:1f:89:5c:bd:76:40:9c:47:7a:f9:29:64: 54:ef:c4:73:e0:68:d4:65:de:13:9f:c6:04:50:30:fa:be:dd: 21:45:3a:58:d5:06:b1:54:8d:8b:54:a6:18:62:0f:be:b7:3d: 43:d7:10:96:bf:b2:11:b7:bf:f0:62:ce:eb:16:9b:cc:80:07: 08:94:9d:ed:88:b3:aa:d2:2a:45:f7:d1:19:97:32:70:58:1d: e2:31:40:49:3d:ec:5a:91:66:dc:47:98:9f:50:16:19:fe:40: de:67:a3:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pFwLlHPx8s43mWhQBFe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWE4MDRlY2VhYWZiNzhiZDAwNzJkMTJkMTZmYmE5ZTAwNjQwY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymD05Pv8h34kCqlmfDtuknG4uW1u GcZDB51r977iIiZMoqCCLdkYaYqAAkb20pBoMWDpZhRUBhVoLeaUIgvx4/cBlxtE FetqxWNxkmhJ1OsCI6/PvEOk9G/pfBHBFmMB/pYGC54P6l8zFIJ4F7NSEX21hA1q gNv3702+kUU3Dx9YJzM+/SNDfBLM08TLIpRFO+/Z+pWqBrIWjATO+2WoX1jgxVOL 4QOZq5qLyx9CTj04AI/JlBGttC3NVdzoanckGSoKC6qpHFg+2aWZDlkV6Aky+8bD YLz5RfnYbb+39ODRvNLr9gr/XIR0Yg59idVQ3UFrgudPEFKVg+k8cfH2rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmoBOzqr7eL0ActEtFvup4AZAzxMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvbWFnRTdPcXZ0NHZRQnkwUzBXLTZuZ0JrRFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR20MA0G CSqGSIb3DQEBCwUAA4IBAQAP6ddHZgTAlGZKs5FSo5aLlehCjOAHUBPffOQ9EAJa NPvDW7aNbfEsw8+xdrPQsuy6taSZBsFNVQQ8+jfBno4/hcSNIsineHtLPmAngKow 2fDG0okziT9k3FE3MoBPFzfqQtBfsMDFtRwi5EghO7aNZQ8pg+THxuOSwYTU1iBQ 0v/ZGGrAsbIrjmeKG63ILmF5+fzHRbkfiVy9dkCcR3r5KWRU78Rz4GjUZd4Tn8YE UDD6vt0hRTpY1QaxVI2LVKYYYg++tz1D1xCWv7IRt7/wYs7rFpvMgAcIlJ3tiLOq 0ipF99EZlzJwWB3iMUBJPexakWbcR5ifUBYZ/kDeZ6Mg -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client