This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa File: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (raw, json) Hash identifier: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8= Subject key identifier: 33:EA:C9:C2:B7:5B:0E:13:E1:DD:B4:87:05:49:50:4A:D8:79:C2:74 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1604A3817514ABD3FE7AD561D53434 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 85.239.153.0/24 maxlen: 24 85.239.159.0/24 maxlen: 24 92.62.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:04:a3:81:75:14:ab:d3:fe:7a:d5:61:d5:34:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33eac9c2b75b0e13e1ddb4870549504ad879c274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:38:58:98:7c:2b:57:37:90:3e:7f:c6:7a: c9:43:28:95:96:8f:86:2d:6f:a8:a4:d8:4f:5f:2d: db:af:3e:32:05:e0:71:2b:08:b0:74:71:1e:63:65: c1:f3:c3:87:4f:dd:d8:96:f5:35:4f:e1:e5:79:d6: ea:96:bc:a6:15:3c:90:aa:0c:aa:73:28:11:7c:7d: 85:4c:1b:ce:a4:42:0a:3f:eb:12:b5:23:81:b6:51: 56:d1:5e:8a:8c:5b:b5:5b:7e:99:3f:5a:4d:c9:b2: 4f:05:61:96:db:50:b4:d6:e7:e9:5c:04:76:da:24: 02:f0:94:ff:96:6a:13:bf:a7:0f:f8:97:48:fd:39: 3f:9e:35:27:98:50:12:e7:f0:9c:0d:8a:56:ce:3d: cc:fc:49:b4:13:02:be:e4:d1:b6:5e:f3:6b:65:29: de:97:d5:e9:df:47:c5:17:fe:b8:dd:50:f9:e0:fb: 3e:2a:1d:cc:73:97:18:55:78:4e:31:87:a5:f6:29: 5e:21:9c:2e:70:f5:0a:b5:0e:99:80:83:0a:a2:0b: 1d:c5:80:c6:14:d7:80:de:da:c8:3a:9e:20:d8:73: 09:98:ad:5b:cd:20:ff:62:fa:2b:02:36:ab:d9:78: 43:3b:b9:ea:d5:17:53:7b:10:22:97:0b:dd:a2:25: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:C9:C2:B7:5B:0E:13:E1:DD:B4:87:05:49:50:4A:D8:79:C2:74 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.153.0/24 85.239.159.0/24 92.62.250.0/24 Signature Algorithm: sha256WithRSAEncryption 51:2c:f1:8f:37:a0:41:03:e6:a5:0d:9d:e8:6b:97:6c:7f:9b: 96:10:9f:ae:1a:da:80:04:1c:ff:99:90:13:d6:c2:a4:07:ff: 35:20:3d:1e:b6:48:ad:10:f2:71:4a:8e:52:94:44:9e:31:e6: a3:16:42:a2:89:2b:8b:d5:10:0f:10:c8:52:27:8f:29:26:fd: a0:50:02:bf:0f:1b:27:aa:df:eb:97:ac:f1:5c:c0:97:9d:0f: 55:4c:34:0a:e9:b6:96:a2:fa:2e:48:03:06:eb:99:ff:58:a9: cd:c8:fe:9f:b1:a0:79:86:94:2c:ac:dd:a7:e7:14:a7:d4:f3: 6c:dd:e2:59:ee:6b:36:36:56:36:00:f8:ea:b1:19:95:19:57: 6c:e3:4b:24:aa:8e:fa:03:97:ec:c7:b2:8b:f6:95:a7:d4:39: 29:9d:93:fe:b8:38:30:15:9d:5e:64:a5:70:ce:79:0d:60:8c: 59:2d:6b:60:58:e7:b4:a7:bb:73:97:8c:1b:6b:d3:98:f9:55: 73:e4:99:4f:f0:b0:1b:d0:d6:a9:b6:50:4e:ef:9b:d9:23:d3: 39:a3:de:6c:9a:9e:0d:b9:94:20:bd:da:2c:b8:0d:5b:c7:54: 2a:7e:37:b2:9d:6f:0d:d4:b0:53:8a:5c:70:df:cd:c7:5d:cd: e6:c0:77:02 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FgSjgXUUq9P+etVh1TQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2VhYzljMmI3NWIwZTEzZTFkZGI0ODcwNTQ5NTA0YWQ4NzljMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF44WJh8K1c3kD5/xnrJQyiVlo+G LW+opNhPXy3brz4yBeBxKwiwdHEeY2XB88OHT93YlvU1T+HledbqlrymFTyQqgyq cygRfH2FTBvOpEIKP+sStSOBtlFW0V6KjFu1W36ZP1pNybJPBWGW21C01ufpXAR2 2iQC8JT/lmoTv6cP+JdI/Tk/njUnmFAS5/CcDYpWzj3M/Em0EwK+5NG2XvNrZSne l9Xp30fFF/643VD54Ps+Kh3Mc5cYVXhOMYel9ileIZwucPUKtQ6ZgIMKogsdxYDG FNeA3trIOp4g2HMJmK1bzSD/YvorAjar2XhDO7nq1RdTexAilwvdoiU5AQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDPqycK3Ww4T4d20hwVJUErYecJ0MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvTS1ySndyZGJEaFBoM2JTSEJVbFFTdGg1d25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe+ZAwQA Ve+fAwQAXD76MA0GCSqGSIb3DQEBCwUAA4IBAQBRLPGPN6BBA+alDZ3oa5dsf5uW EJ+uGtqABBz/mZAT1sKkB/81ID0etkitEPJxSo5SlESeMeajFkKiiSuL1RAPEMhS J48pJv2gUAK/Dxsnqt/rl6zxXMCXnQ9VTDQK6baWovouSAMG65n/WKnNyP6fsaB5 hpQsrN2n5xSn1PNs3eJZ7ms2NlY2APjqsRmVGVds40skqo76A5fsx7KL9pWn1Dkp nZP+uDgwFZ1eZKVwznkNYIxZLWtgWOe0p7tzl4wba9OY+VVz5JlP8LAb0NaptlBO 75vZI9M5o95smp4NuZQgvdosuA1bx1QqfjeynW8N1LBTilxw383HXc3mwHcC -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:54 2026 by rpki-client