This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/jM4bCus_MOUyOpnMWkBG4DEReus.roa File: jM4bCus_MOUyOpnMWkBG4DEReus.roa (raw, json) Hash identifier: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8= Subject key identifier: 8C:CE:1B:0A:EB:3F:30:E5:32:3A:99:CC:5A:40:46:E0:31:11:7A:EB Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Certificate serial: 019B79ED3567D9AA71F17306E79A3D168619 Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/jM4bCus_MOUyOpnMWkBG4DEReus.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 93.191.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:67:d9:aa:71:f1:73:06:e7:9a:3d:16:86:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cce1b0aeb3f30e5323a99cc5a4046e031117aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:c4:85:39:a9:11:03:b2:fc:ea:ab:70:fa: 54:c3:c6:76:45:1c:78:43:f8:39:35:ce:1e:65:15: 24:36:ae:e7:25:b1:32:a9:e6:64:db:b6:e2:3e:2f: 9b:4a:19:b4:d3:c8:75:8c:3e:c2:fd:02:73:01:45: 94:e5:77:51:3b:e9:96:af:f1:09:77:7d:4f:7b:34: 59:13:81:e9:b5:9d:f5:62:d1:ec:09:d9:43:f9:13: a1:1e:30:67:6f:00:e5:86:4d:4c:fe:78:e8:32:e3: e5:13:70:16:53:c9:a7:35:2e:b0:ed:2a:38:86:bd: af:f9:7f:8c:15:7f:a7:69:31:0f:0d:94:47:b0:10: 14:b1:de:1d:66:e5:fa:06:67:32:12:cc:2c:ec:5a: 0f:40:48:e3:25:2c:3c:20:c0:03:05:59:d7:0b:cf: d5:e0:ec:b8:1f:70:88:22:83:c6:70:0c:98:31:3d: 24:8e:3f:af:65:be:83:0c:6c:4b:26:36:4e:78:3c: cf:44:8a:a9:52:8e:f4:e1:a9:ba:17:65:6a:de:75: bb:05:e0:27:19:f7:8d:36:57:ae:bc:53:29:8e:d3: a1:d0:2f:08:c9:25:f4:40:d6:07:b5:47:bf:12:42: 1d:de:b5:c4:46:6b:a1:c4:b1:a4:79:e1:fb:52:b5: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:1B:0A:EB:3F:30:E5:32:3A:99:CC:5A:40:46:E0:31:11:7A:EB X509v3 Authority Key Identifier: keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/jM4bCus_MOUyOpnMWkBG4DEReus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:3d:68:c3:94:46:50:2e:59:41:14:7d:2f:ce:73:bf:10:2f: c2:e2:4c:aa:b9:1e:04:6f:5f:3d:01:fc:91:4c:00:2c:4e:e6: 2f:b0:eb:21:bf:0e:ea:aa:d8:a6:ec:fe:fc:d7:44:68:7e:b2: c5:12:5b:f4:25:5a:eb:80:c7:1b:80:f3:1a:4c:79:ea:bb:7c: fe:fc:1f:d6:8d:45:63:fc:70:df:bf:97:03:d5:bd:34:43:08: 1b:b2:31:b1:f0:cd:51:06:50:5b:d7:95:b0:ca:a9:96:be:63: b4:bf:54:c9:01:24:6f:b6:f7:78:c4:f7:d5:8e:7c:83:d9:64: c5:18:bd:08:ea:f8:fd:fc:b3:b5:6b:6b:3d:7c:d0:5b:12:8a: 1e:39:33:0e:82:4a:38:59:01:de:4d:ab:26:55:de:18:fb:10: 70:8f:91:89:77:61:f5:ad:e9:f5:82:05:f3:35:3f:54:7b:4e: 6d:57:a1:18:68:c0:d1:a0:5f:1c:7e:36:77:45:9c:0c:45:3d: 70:67:cf:8f:06:e1:cf:a5:7a:8c:ac:cc:c6:6c:3f:8c:83:8f: f3:eb:a7:19:d5:09:1b:7d:b2:ed:5b:5a:b6:2a:ef:65:3e:e9: cb:19:e5:d4:75:a5:15:d7:01:fa:3e:68:1f:24:1f:7f:69:ad: 10:21:27:03 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57TVn2apx8XMG55o9FoYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2 ODdiZDEwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2NlMWIwYWViM2YzMGU1MzIzYTk5Y2M1YTQwNDZlMDMxMTE3YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzavEhTmpEQOy/OqrcPpUw8Z2RRx4 Q/g5Nc4eZRUkNq7nJbEyqeZk27biPi+bShm008h1jD7C/QJzAUWU5XdRO+mWr/EJ d31PezRZE4HptZ31YtHsCdlD+ROhHjBnbwDlhk1M/njoMuPlE3AWU8mnNS6w7So4 hr2v+X+MFX+naTEPDZRHsBAUsd4dZuX6BmcyEsws7FoPQEjjJSw8IMADBVnXC8/V 4Oy4H3CIIoPGcAyYMT0kjj+vZb6DDGxLJjZOeDzPRIqpUo704am6F2Vq3nW7BeAn GfeNNleuvFMpjtOh0C8IySX0QNYHtUe/EkId3rXERmuhxLGkeeH7UrWWDQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIzOGwrrPzDlMjqZzFpARuAxEXrrMB8GA1UdIwQY MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy LTcyNDI2ZDkyNjAxYi8xL2pNNGJDdXNfTU9VeU9wbk1Xa0JHNERFUmV1cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMyLTcyNDI2ZDkyNjAx Yi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFdv5Qw DQYJKoZIhvcNAQELBQADggEBAF49aMOURlAuWUEUfS/Oc78QL8LiTKq5HgRvXz0B /JFMACxO5i+w6yG/Duqq2Kbs/vzXRGh+ssUSW/QlWuuAxxuA8xpMeeq7fP78H9aN RWP8cN+/lwPVvTRDCBuyMbHwzVEGUFvXlbDKqZa+Y7S/VMkBJG+293jE99WOfIPZ ZMUYvQjq+P38s7Vraz180FsSih45Mw6CSjhZAd5NqyZV3hj7EHCPkYl3YfWt6fWC BfM1P1R7Tm1XoRhowNGgXxx+NndFnAxFPXBnz48G4c+leoyszMZsP4yDj/PrpxnV CRt9su1bWrYq72U+6csZ5dR1pRXXAfo+aB8kH39prRAhJwM= -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:51 2026 by rpki-client