This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/2_M3hjSd7CTsmWcIflPRCb5WQkA.roa File: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (raw, json) Hash identifier: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU= Subject key identifier: DB:F3:37:86:34:9D:EC:24:EC:99:67:08:7E:53:D1:09:BE:56:42:40 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FDC84C5390B0DC5C2AD63574DF5B Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/2_M3hjSd7CTsmWcIflPRCb5WQkA.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142299 IP address blocks: 146.19.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:c8:4c:53:90:b0:dc:5c:2a:d6:35:74:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbf33786349dec24ec9967087e53d109be564240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:e6:f5:bc:3c:fe:39:b6:a0:fc:0c:ec:f4: 95:14:2c:84:fd:db:75:90:60:aa:25:88:6c:39:58: d0:07:dd:a0:39:24:c8:f0:5d:02:e1:cd:96:e4:0c: 94:98:2f:0d:fb:f9:f9:69:a8:e9:c5:00:10:65:9c: 20:6e:cf:ee:20:40:f7:0f:79:b1:89:ce:59:bd:d6: fa:58:75:e5:ab:59:c7:77:17:07:c9:86:af:07:01: f7:50:98:87:0f:cc:39:23:2c:21:9e:89:55:55:36: 5e:10:be:1c:97:37:9e:26:63:df:29:8d:4f:63:ff: 3e:73:dc:81:f3:02:41:cf:23:b1:f7:f7:96:89:65: f0:5f:ed:c8:72:28:b0:46:f1:7d:a5:fb:46:bd:4f: 1e:00:90:23:9e:69:e4:87:9e:37:16:e2:95:ad:e9: 29:db:89:42:a8:2b:4a:bf:ba:dd:87:dd:84:0c:cc: 59:37:ac:ba:39:77:4d:91:37:f1:29:43:c5:27:da: 15:12:ec:48:25:11:89:67:1c:c5:fc:16:49:c9:68: db:21:fc:a2:69:d3:56:ca:7c:a3:6e:51:a8:19:22: 3b:35:20:27:8b:6f:20:f9:51:a3:a0:de:3e:83:0f: 6d:e6:94:94:01:35:35:92:b2:b5:93:f6:06:b0:06: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F3:37:86:34:9D:EC:24:EC:99:67:08:7E:53:D1:09:BE:56:42:40 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/2_M3hjSd7CTsmWcIflPRCb5WQkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.69.0/24 Signature Algorithm: sha256WithRSAEncryption a4:5f:e0:e3:cc:f5:f1:18:cb:12:61:01:7e:13:84:96:cd:88: 96:6a:ba:d8:d5:e7:f3:af:f7:f8:a8:88:da:36:bf:b0:00:61: 0f:0e:56:52:08:aa:0d:7b:01:c7:b9:81:10:b8:2c:1c:67:39: 94:bb:69:b5:78:bb:76:00:de:f8:7c:42:7e:ac:6d:6c:08:d1: 0b:3d:c8:64:3a:84:70:e8:60:26:ed:89:ae:f0:8f:3b:d0:2b: 92:93:5c:19:41:b2:0e:83:a0:d7:de:12:ab:62:59:60:1e:d5: 78:36:27:05:9c:ad:d3:d4:f3:b9:2f:40:69:eb:73:66:52:bc: b7:32:b6:be:1c:21:e1:e7:3b:e3:7b:83:5d:75:2b:25:54:63: e1:08:36:17:84:09:6c:b2:6c:da:60:d1:e1:6d:6c:0a:8e:80: d5:91:fc:1c:a3:05:bb:c8:f0:bd:fc:4b:91:5f:04:3b:be:e6: ea:24:87:50:9e:9d:73:0e:f5:37:65:0b:87:91:ff:33:c5:c8: 45:5f:a3:25:6f:82:75:c9:c9:1e:70:09:e5:be:a1:b7:c2:41: 1b:28:f7:25:96:1d:b9:92:a3:ab:17:02:91:53:2e:1b:4c:12: 8e:26:91:97:06:a5:e2:64:4f:02:09:c2:7c:41:62:fd:e5:66: d0:81:1e:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ov3ITFOQsNxcKtY1dN9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmYzMzc4NjM0OWRlYzI0ZWM5OTY3MDg3ZTUzZDEwOWJlNTY0MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00/m9bw8/jm2oPwM7PSVFCyE/dt1 kGCqJYhsOVjQB92gOSTI8F0C4c2W5AyUmC8N+/n5aajpxQAQZZwgbs/uIED3D3mx ic5Zvdb6WHXlq1nHdxcHyYavBwH3UJiHD8w5IywhnolVVTZeEL4clzeeJmPfKY1P Y/8+c9yB8wJBzyOx9/eWiWXwX+3IciiwRvF9pftGvU8eAJAjnmnkh543FuKVrekp 24lCqCtKv7rdh92EDMxZN6y6OXdNkTfxKUPFJ9oVEuxIJRGJZxzF/BZJyWjbIfyi adNWynyjblGoGSI7NSAni28g+VGjoN4+gw9t5pSUATU1krK1k/YGsAY7lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvzN4Y0newk7JlnCH5T0Qm+VkJAMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvMl9NM2hqU2Q3Q1RzbVdjSWZsUFJDYjVXUWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNFMA0G CSqGSIb3DQEBCwUAA4IBAQCkX+DjzPXxGMsSYQF+E4SWzYiWarrY1efzr/f4qIja Nr+wAGEPDlZSCKoNewHHuYEQuCwcZzmUu2m1eLt2AN74fEJ+rG1sCNELPchkOoRw 6GAm7Ymu8I870CuSk1wZQbIOg6DX3hKrYllgHtV4NicFnK3T1PO5L0Bp63NmUry3 Mra+HCHh5zvje4NddSslVGPhCDYXhAlssmzaYNHhbWwKjoDVkfwcowW7yPC9/EuR XwQ7vubqJIdQnp1zDvU3ZQuHkf8zxchFX6Mlb4J1yckecAnlvqG3wkEbKPcllh25 kqOrFwKRUy4bTBKOJpGXBqXiZE8CCcJ8QWL95WbQgR53 -----END CERTIFICATE-----Generated at Wed Jan 21 06:06:36 2026 by rpki-client