This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m84CLuxw2FJsW0scm8tH7sBc9EA.roa File: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (raw, json) Hash identifier: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c= Subject key identifier: 9B:CE:02:2E:EC:70:D8:52:6C:5B:4B:1C:9B:CB:47:EE:C0:5C:F4:40 Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981 Certificate serial: 019B77C6F397F1F4036E657E5CCD216E0178 Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m84CLuxw2FJsW0scm8tH7sBc9EA.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207957 IP address blocks: 91.196.32.0/24 maxlen: 24 91.196.33.0/24 maxlen: 24 91.196.34.0/24 maxlen: 24 91.196.35.0/24 maxlen: 24 193.151.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f3:97:f1:f4:03:6e:65:7e:5c:cd:21:6e:01:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bce022eec70d8526c5b4b1c9bcb47eec05cf440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:a4:1f:30:0f:29:df:1a:61:9a:e6:69:d7: 66:ff:74:11:08:73:9b:f5:15:71:c8:18:ba:4c:c9: 2b:83:96:ff:25:eb:29:c6:5d:46:64:1a:54:2a:70: 43:65:4e:2c:7a:d0:b6:ef:90:cc:1d:4f:f9:1a:3d: f4:22:aa:b7:7b:6d:2c:b0:91:eb:1e:25:1b:4c:17: 42:5c:f2:73:85:29:cc:e8:56:73:30:b9:4e:21:c8: 7c:b7:a1:c9:c1:f0:b7:2f:6f:8f:6e:ed:a9:a2:0d: 9d:f3:ca:fe:e1:21:88:dc:d1:df:79:5d:32:a2:16: d0:92:10:d7:3b:32:c1:3c:80:b2:72:9d:b5:55:f8: 4d:1a:e6:60:e7:1d:6d:94:d1:2a:47:4b:5e:99:84: 69:86:6a:7e:aa:d8:e8:46:58:db:04:43:0d:9f:d3: ff:41:cc:80:49:d1:9d:40:4b:ad:85:f5:d6:8b:4b: 41:13:04:aa:97:93:8d:c9:98:c4:af:5e:4b:9f:3a: 54:d3:8e:09:5c:46:3c:50:45:5e:f1:bd:4f:84:98: 07:e1:3b:be:8f:67:22:6b:2d:75:28:ae:1e:36:25: 3e:e0:55:5c:32:56:88:75:c0:ab:31:bc:32:44:d6: de:0f:1a:ea:f6:5b:c8:cc:3b:4d:86:f3:02:5d:63: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:02:2E:EC:70:D8:52:6C:5B:4B:1C:9B:CB:47:EE:C0:5C:F4:40 X509v3 Authority Key Identifier: keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m84CLuxw2FJsW0scm8tH7sBc9EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.32.0/22 193.151.108.0/24 Signature Algorithm: sha256WithRSAEncryption 39:49:c9:c9:bf:76:14:29:f1:f1:d7:c9:81:e2:d7:a9:3c:e7: f6:8c:74:51:fc:21:0c:a9:89:eb:a8:e0:22:fc:08:04:b3:c2: 32:a8:e0:36:3a:75:c7:c8:6a:b5:6c:fe:3c:09:55:5e:f5:09: ba:f5:c0:e9:a7:29:cb:6c:fe:c1:fc:cc:7b:5c:c0:fe:fb:c2: c2:b8:9c:9a:02:f5:c5:e9:4f:42:42:e4:21:e6:37:76:20:d5: 4b:55:a7:4d:5c:30:ac:67:a0:d6:0d:03:1c:1a:f4:90:62:3d: 89:ae:f6:6b:c2:c8:e0:97:3f:02:24:3c:e7:68:61:da:98:10: ff:2b:58:3f:19:21:74:e6:0b:f3:29:9f:29:c9:a0:29:6d:6f: 3a:5a:13:02:06:66:31:5d:9e:01:d4:ba:44:46:1b:91:81:b2: e7:a9:ee:89:9b:1e:18:c8:47:3c:cf:7c:ba:e2:5d:2f:b1:e2: 6b:fc:23:36:6f:f6:dd:22:4c:bc:a4:35:c4:d8:31:fb:5e:e5: 6a:b9:01:4b:b5:0a:2e:db:b2:70:83:b6:c7:ed:4a:ca:50:57: 99:eb:2b:4e:d2:a9:fc:f1:02:59:cc:78:85:63:8f:a1:8a:30: d2:3c:23:54:e0:3e:c8:27:f4:8e:34:ac:80:6b:e6:e6:c0:9f: c2:fc:9a:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvOX8fQDbmV+XM0hbgF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw NGE5ODEwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNlMDIyZWVjNzBkODUyNmM1YjRiMWM5YmNiNDdlZWMwNWNmNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP6kHzAPKd8aYZrmaddm/3QRCHOb 9RVxyBi6TMkrg5b/Jespxl1GZBpUKnBDZU4setC275DMHU/5Gj30Iqq3e20ssJHr HiUbTBdCXPJzhSnM6FZzMLlOIch8t6HJwfC3L2+Pbu2pog2d88r+4SGI3NHfeV0y ohbQkhDXOzLBPICycp21VfhNGuZg5x1tlNEqR0temYRphmp+qtjoRljbBEMNn9P/ QcyASdGdQEuthfXWi0tBEwSql5ONyZjEr15LnzpU044JXEY8UEVe8b1PhJgH4Tu+ j2ciay11KK4eNiU+4FVcMlaIdcCrMbwyRNbeDxrq9lvIzDtNhvMCXWM2NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJvOAi7scNhSbFtLHJvLR+7AXPRAMB8GA1UdIwQY MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt ODM2YzMxMmFjOGMyLzEvbTg0Q0x1eHcyRkpzVzBzY204dEg3c0JjOUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8QgAwQA wZdsMA0GCSqGSIb3DQEBCwUAA4IBAQA5ScnJv3YUKfHx18mB4tepPOf2jHRR/CEM qYnrqOAi/AgEs8IyqOA2OnXHyGq1bP48CVVe9Qm69cDppynLbP7B/Mx7XMD++8LC uJyaAvXF6U9CQuQh5jd2INVLVadNXDCsZ6DWDQMcGvSQYj2JrvZrwsjglz8CJDzn aGHamBD/K1g/GSF05gvzKZ8pyaApbW86WhMCBmYxXZ4B1LpERhuRgbLnqe6Jmx4Y yEc8z3y64l0vseJr/CM2b/bdIky8pDXE2DH7XuVquQFLtQou27Jwg7bH7UrKUFeZ 6ytO0qn88QJZzHiFY4+hijDSPCNU4D7IJ/SONKyAa+bmwJ/C/JoW -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:45 2026 by rpki-client