This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m-klutdBHDwP7G869MvAcwl6nqQ.roa File: m-klutdBHDwP7G869MvAcwl6nqQ.roa (raw, json) Hash identifier: gBJgQ5wrOdj+fY1Fu4G5hf1EVMufWFYF62EtYVGs/cg= Subject key identifier: 9B:E9:25:BA:D7:41:1C:3C:0F:EC:6F:3A:F4:CB:C0:73:09:7A:9E:A4 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DADCB6D7465A04B406AACFB848A2 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m-klutdBHDwP7G869MvAcwl6nqQ.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 37.139.128.0/24 maxlen: 24 45.128.234.0/24 maxlen: 24 83.219.98.0/24 maxlen: 24 85.31.44.0/24 maxlen: 24 109.206.240.0/24 maxlen: 24 185.246.221.0/24 maxlen: 24 193.47.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:dc:b6:d7:46:5a:04:b4:06:aa:cf:b8:48:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be925bad7411c3c0fec6f3af4cbc073097a9ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:59:4f:f4:99:e0:12:b6:1a:f4:ef:e6:a9: 7b:ce:65:0d:3c:5c:8a:c1:a6:77:45:54:d4:27:49: dd:5c:4f:6b:01:99:37:11:45:84:05:41:2e:85:1d: 3a:f4:b7:98:b6:1d:a5:00:58:b3:17:19:88:88:db: 02:34:79:9d:ee:3c:9b:25:a2:5f:e7:5e:91:8b:76: eb:8d:30:ab:90:08:21:14:b8:de:a8:e4:d0:4d:47: fb:da:e5:f8:2d:ee:da:d0:59:71:b4:4d:b0:be:02: fb:8f:e3:d7:80:f5:8e:e3:a0:63:c9:93:5f:fc:60: eb:e5:2a:79:1f:83:d3:f6:4a:d4:d7:63:31:19:f3: 7a:9c:87:5a:16:8f:4e:c5:fe:5f:02:4a:67:cb:d5: fb:e9:30:af:d1:49:e2:c0:d2:4e:f6:75:b7:c3:7c: 46:e9:7d:1c:a2:82:34:68:f5:a3:c4:9c:d4:0f:7c: ce:2e:ff:c0:20:f9:49:f5:f7:46:f4:7a:47:ed:07: f7:ee:d0:cd:aa:83:de:84:0c:d5:16:ce:95:15:97: b5:74:17:ce:17:c8:d9:bd:d0:a4:f9:cd:9d:1a:d6: 63:39:6b:b3:2f:c6:53:99:04:74:ed:00:69:78:09: 19:1b:24:9f:76:fb:c8:67:e3:c0:fd:c0:a4:da:1d: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E9:25:BA:D7:41:1C:3C:0F:EC:6F:3A:F4:CB:C0:73:09:7A:9E:A4 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m-klutdBHDwP7G869MvAcwl6nqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.128.0/24 45.128.234.0/24 83.219.98.0/24 85.31.44.0/24 109.206.240.0/24 185.246.221.0/24 193.47.61.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e8:7f:96:67:ce:fb:2a:c2:61:63:f7:33:60:89:e8:2a:7a: 46:77:8b:ee:6b:66:f8:d3:36:c2:ae:48:ea:5a:2f:be:d9:52: f6:6a:94:6d:6a:df:79:37:e0:3f:cf:de:e0:24:a5:4d:1f:5d: 1d:3c:8d:45:15:d9:ed:ad:9c:f5:7f:6f:b2:f2:6a:da:11:5b: 16:a8:a7:6d:ee:5e:cf:c8:3d:79:31:69:b9:62:79:5b:3e:10: 20:85:75:b9:8f:d4:05:5c:13:52:9d:70:4e:1a:97:8a:76:20: e1:3c:ca:9b:a9:b8:8e:2b:8e:33:0a:f5:b0:25:c4:4f:c5:d4: 06:12:46:e7:bf:72:5b:ec:45:ed:96:f8:53:3d:f4:ad:e9:de: b5:50:c0:63:cf:de:e9:53:1f:9b:47:a7:dd:21:92:d8:9a:32: 72:51:2a:e2:5e:84:dd:ce:48:7e:f1:a0:a0:0c:fe:a3:a4:73: 04:3e:38:0d:b1:d1:7b:47:8e:07:2b:50:49:75:c6:1a:45:4a: df:66:57:c4:8d:a8:cb:fb:db:0f:e1:f0:6c:7d:1f:33:5b:e1: 26:ba:79:2f:24:a6:a0:4a:2f:3f:e7:69:45:4b:bf:ec:81:35: a5:03:f8:b3:93:26:2b:f2:b4:0e:a2:0f:5a:d2:9d:9e:d7:05: 22:a6:92:3c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4otrcttdGWgS0BqrPuEiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmU5MjViYWQ3NDExYzNjMGZlYzZmM2FmNGNiYzA3MzA5N2E5ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFZT/SZ4BK2GvTv5ql7zmUNPFyK waZ3RVTUJ0ndXE9rAZk3EUWEBUEuhR069LeYth2lAFizFxmIiNsCNHmd7jybJaJf 516Ri3brjTCrkAghFLjeqOTQTUf72uX4Le7a0FlxtE2wvgL7j+PXgPWO46BjyZNf /GDr5Sp5H4PT9krU12MxGfN6nIdaFo9Oxf5fAkpny9X76TCv0UniwNJO9nW3w3xG 6X0cooI0aPWjxJzUD3zOLv/AIPlJ9fdG9HpH7Qf37tDNqoPehAzVFs6VFZe1dBfO F8jZvdCk+c2dGtZjOWuzL8ZTmQR07QBpeAkZGySfdvvIZ+PA/cCk2h0nDwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJvpJbrXQRw8D+xvOvTLwHMJep6kMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbS1rbHV0ZEJIRHdQN0c4NjlNdkFjd2w2bnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJYuAAwQA LYDqAwQAU9tiAwQAVR8sAwQAbc7wAwQAufbdAwQAwS89MA0GCSqGSIb3DQEBCwUA A4IBAQCJ6H+WZ877KsJhY/czYInoKnpGd4vua2b40zbCrkjqWi++2VL2apRtat95 N+A/z97gJKVNH10dPI1FFdntrZz1f2+y8mraEVsWqKdt7l7PyD15MWm5YnlbPhAg hXW5j9QFXBNSnXBOGpeKdiDhPMqbqbiOK44zCvWwJcRPxdQGEkbnv3Jb7EXtlvhT PfSt6d61UMBjz97pUx+bR6fdIZLYmjJyUSriXoTdzkh+8aCgDP6jpHMEPjgNsdF7 R44HK1BJdcYaRUrfZlfEjajL+9sP4fBsfR8zW+EmunkvJKagSi8/52lFS7/sgTWl A/izkyYr8rQOog9a0p2e1wUippI8 -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:27 2026 by rpki-client