This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/M2182yhCWIp3Dr1q8N4Z80xWV3w.roa File: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (raw, json) Hash identifier: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI= Subject key identifier: 33:6D:7C:DB:28:42:58:8A:77:0E:BD:6A:F0:DE:19:F3:4C:56:57:7C Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc Certificate serial: 019B77C65F37F94945A89740878BF27EF6CE Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/M2182yhCWIp3Dr1q8N4Z80xWV3w.roa Signing time: Thu 01 Jan 2026 04:17:27 +0000 ROA not before: Thu 01 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 5.179.112.0/21 maxlen: 24 31.216.32.0/21 maxlen: 24 81.91.0.0/20 maxlen: 24 176.57.88.0/22 maxlen: 24 185.21.144.0/22 maxlen: 24 185.27.240.0/22 maxlen: 24 193.108.0.0/21 maxlen: 24 213.180.64.0/19 maxlen: 24 2a00:5860::/32 maxlen: 48 2a03:2f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:5f:37:f9:49:45:a8:97:40:87:8b:f2:7e:f6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc Validity Not Before: Jan 1 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=336d7cdb2842588a770ebd6af0de19f34c56577c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:9f:e4:c2:27:c2:80:6d:8d:c8:41:ae:b5: b0:02:7c:b4:68:94:4a:a0:e2:67:f7:e7:ef:6f:ec: fb:c9:d1:f0:44:2d:f1:9b:24:3b:5b:74:a4:65:90: 5d:80:d8:c8:7b:e5:73:db:3d:1e:5e:2b:71:4b:43: ab:1f:ee:79:95:79:c5:24:02:14:7f:59:b9:82:11: 41:90:f3:58:68:d9:e9:c5:46:e4:a7:ac:bb:c5:26: 23:09:7c:1b:79:c3:b0:1a:95:e9:35:b8:e4:36:13: ba:ec:a9:72:ed:84:93:4f:98:54:5e:da:3f:25:5c: 55:f0:b9:aa:2d:e2:b1:cc:35:81:50:13:c2:94:04: 72:5e:c8:cb:e3:43:6a:aa:f8:ff:cb:39:ac:6c:05: a8:9a:f9:1c:ae:ee:0c:b6:fc:2c:24:80:c0:68:df: 89:61:cb:b1:28:8c:d0:42:0c:ae:3c:fb:88:58:f2: a9:29:22:10:e3:5c:c8:00:0a:58:5b:35:4a:db:05: a4:63:39:37:fe:64:08:92:65:bd:f6:06:30:09:6c: 51:17:c4:52:50:77:de:e3:68:fa:68:1f:ca:58:48: 3e:16:83:fd:b2:19:6c:22:5b:be:62:d2:83:aa:8b: bc:74:4e:fa:bd:40:8a:7d:e4:f4:43:ea:e4:d2:51: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:7C:DB:28:42:58:8A:77:0E:BD:6A:F0:DE:19:F3:4C:56:57:7C X509v3 Authority Key Identifier: keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/M2182yhCWIp3Dr1q8N4Z80xWV3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.112.0/21 31.216.32.0/21 81.91.0.0/20 176.57.88.0/22 185.21.144.0/22 185.27.240.0/22 193.108.0.0/21 213.180.64.0/19 IPv6: 2a00:5860::/32 2a03:2f80::/32 Signature Algorithm: sha256WithRSAEncryption 9c:c5:c2:7a:a1:f2:b4:80:0a:db:d4:cf:1c:f7:3f:6e:a3:b2: 27:f9:12:c2:18:28:9b:5b:16:82:8e:9a:bf:9d:a9:fd:f3:92: 8d:b8:17:70:06:7d:9b:93:27:14:c6:2c:86:ad:dd:8b:c0:3c: 6d:b2:f4:b1:92:20:ca:86:59:46:a7:83:21:62:40:87:32:c6: 39:0d:92:62:d7:51:80:20:74:52:b2:b6:30:55:17:a3:67:8a: 82:9a:0a:57:77:b5:d9:64:b3:4c:3e:1b:4c:8e:c5:51:ae:a3: 5d:20:c4:44:96:00:e8:a8:dc:5c:da:d2:c7:ea:ed:7c:37:05: 4a:34:fd:8e:f0:63:1a:7f:2c:17:05:35:66:24:c7:81:c3:8e: ac:1c:cd:71:7d:21:51:52:72:27:9d:70:13:bb:d7:57:e6:c7: 9c:4f:a9:54:5b:f1:0c:13:88:32:aa:7d:e9:3b:0b:cc:05:04: 07:e5:5c:9a:d5:e9:a2:d0:3c:f7:9d:d7:81:cb:ea:1a:46:ca: 8e:62:e0:ec:34:73:94:fa:4a:71:16:a5:f5:ec:4b:89:44:7d: 2a:41:16:96:7e:02:0f:57:e6:19:97:a0:fb:96:10:b5:50:f6: cb:e4:46:58:ca:35:a9:e8:f8:a0:63:9d:46:1b:6e:79:19:d6: 38:22:c7:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt3xl83+UlFqJdAh4vyfvbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix NTUxZGMwHhcNMjYwMTAxMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzZkN2NkYjI4NDI1ODhhNzcwZWJkNmFmMGRlMTlmMzRjNTY1NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jqf5MInwoBtjchBrrWwAny0aJRK oOJn9+fvb+z7ydHwRC3xmyQ7W3SkZZBdgNjIe+Vz2z0eXitxS0OrH+55lXnFJAIU f1m5ghFBkPNYaNnpxUbkp6y7xSYjCXwbecOwGpXpNbjkNhO67Kly7YSTT5hUXto/ JVxV8LmqLeKxzDWBUBPClARyXsjL40Nqqvj/yzmsbAWomvkcru4MtvwsJIDAaN+J YcuxKIzQQgyuPPuIWPKpKSIQ41zIAApYWzVK2wWkYzk3/mQIkmW99gYwCWxRF8RS UHfe42j6aB/KWEg+FoP9shlsIlu+YtKDqou8dE76vUCKfeT0Q+rk0lEBCQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDNtfNsoQliKdw69avDeGfNMVld8MB8GA1UdIwQY MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt MzRhOWU5OGE1Zjg2LzEvTTIxODJ5aENXSXAzRHIxcThONFo4MHhXVjN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2 LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDBbNwAwQD H9ggAwQEUVsAAwQCsDlYAwQCuRWQAwQCuRvwAwQDwWwAAwQF1bRAMBQEAgACMA4D BQAqAFhgAwUAKgMvgDANBgkqhkiG9w0BAQsFAAOCAQEAnMXCeqHytIAK29TPHPc/ bqOyJ/kSwhgom1sWgo6av52p/fOSjbgXcAZ9m5MnFMYshq3di8A8bbL0sZIgyoZZ RqeDIWJAhzLGOQ2SYtdRgCB0UrK2MFUXo2eKgpoKV3e12WSzTD4bTI7FUa6jXSDE RJYA6KjcXNrSx+rtfDcFSjT9jvBjGn8sFwU1ZiTHgcOOrBzNcX0hUVJyJ51wE7vX V+bHnE+pVFvxDBOIMqp96TsLzAUEB+VcmtXpotA8953XgcvqGkbKjmLg7DRzlPpK cRal9exLiUR9KkEWln4CD1fmGZeg+5YQtVD2y+RGWMo1qej4oGOdRhtueRnWOCLH NA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:25 2026 by rpki-client