This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7tXgEoOv4RxCq5wAVNkYtlm8OQ.roa File: m7tXgEoOv4RxCq5wAVNkYtlm8OQ.roa (raw, json) Hash identifier: QPxUjz9xdYQnEuDusaurgpF0cyq9TwiKp7Xz1GEEhKs= Subject key identifier: 9B:BB:57:80:4A:0E:BF:84:71:0A:AE:70:01:53:64:62:D9:66:F0:E4 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85423EC805A416DC9623BE60DFFDB2 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7tXgEoOv4RxCq5wAVNkYtlm8OQ.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203025 IP address blocks: 194.50.184.0/23 maxlen: 23 194.50.188.0/23 maxlen: 23 2a02:c580::/29 maxlen: 29 2a09:ef40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:42:3e:c8:05:a4:16:dc:96:23:be:60:df:fd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bbb57804a0ebf84710aae7001536462d966f0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:09:8a:4b:9b:58:b4:8f:ff:19:23:65:20: e0:f5:a5:7f:e7:c6:e3:5f:76:57:06:a9:0c:35:f0: 3d:c8:63:01:0d:1c:4b:e0:92:ed:8d:d0:b9:6e:21: 45:01:c0:bf:a9:1b:53:fa:f8:7e:19:8c:6e:5f:b4: d2:c0:fc:fa:17:a7:84:c4:51:7a:c9:ef:34:73:e7: 9a:39:0c:15:15:5e:10:c9:d4:9f:ea:aa:09:56:2c: d0:7e:94:60:91:18:0a:f9:f5:cf:e2:ac:af:2c:b0: 7b:3f:c0:74:67:bc:9a:2e:73:04:c9:96:5f:bf:fd: 38:26:53:30:88:2d:c1:bc:4e:b9:43:05:4a:1d:a5: e5:f9:0f:ea:18:80:2d:ca:bc:39:49:0d:77:a1:2f: b1:8a:71:cc:2c:10:41:00:17:75:71:b7:94:3a:4d: a2:88:fa:dc:26:e4:0c:26:be:2f:16:04:8d:65:ff: aa:5d:20:2d:91:29:81:68:ab:62:bb:d5:34:7c:50: ed:7f:91:27:5d:ec:e4:c8:bb:89:32:f6:70:29:d9: c7:0c:8c:c7:51:c8:d2:91:19:b0:66:9e:0f:c1:6f: e1:c2:7a:c2:3e:05:40:4f:ec:30:ce:b7:45:0b:f9: ae:2c:0b:fa:9b:41:24:ff:6c:62:0a:70:b0:b4:f4: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:57:80:4A:0E:BF:84:71:0A:AE:70:01:53:64:62:D9:66:F0:E4 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7tXgEoOv4RxCq5wAVNkYtlm8OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.184.0/23 194.50.188.0/23 IPv6: 2a02:c580::/29 2a09:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 7a:0a:a8:fb:a9:d1:29:99:aa:09:d1:28:af:84:9c:30:a4:01: 0a:9a:38:47:60:eb:d0:b0:b8:cd:0c:23:7a:21:8a:09:72:16: 86:89:cc:ae:fe:92:5a:e3:1b:a1:f6:51:9d:be:71:bc:6a:25: 1c:56:8b:4a:90:00:a9:bb:3d:38:dd:15:4c:c5:1f:73:82:bf: 29:c7:f2:9c:bb:1b:1f:ce:fc:6f:9c:50:cb:9a:ae:b6:45:09: dc:a9:43:d2:b7:f4:b3:25:d3:03:45:06:d0:d8:2e:d8:e6:69: 5c:d1:85:85:01:bf:0e:56:46:fb:65:6d:5a:14:29:8f:6f:ea: 1d:e8:a5:75:7d:c3:2a:72:a9:e3:7b:02:32:43:82:11:c3:73: df:ca:c0:34:63:8f:cc:bd:c9:ab:ca:18:df:eb:68:d5:0e:f4: e3:8c:a5:71:40:62:10:77:4c:fb:80:aa:3a:67:20:b6:88:6f: eb:f0:63:11:8a:ab:a3:cc:03:42:ee:93:5a:e6:38:b6:51:04: ef:f9:04:c9:cc:c9:49:dd:91:d4:49:b7:ea:a0:ee:96:65:df: ca:8c:db:18:e9:3e:7f:40:99:2a:69:d1:45:e4:be:0e:eb:73: 6c:40:77:75:f2:5a:29:29:36:c1:db:0d:de:49:a8:ca:f6:1d: 7b:1e:e1:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/hUI+yAWkFtyWI75g3/2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmJiNTc4MDRhMGViZjg0NzEwYWFlNzAwMTUzNjQ2MmQ5NjZmMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs0JikubWLSP/xkjZSDg9aV/58bj X3ZXBqkMNfA9yGMBDRxL4JLtjdC5biFFAcC/qRtT+vh+GYxuX7TSwPz6F6eExFF6 ye80c+eaOQwVFV4QydSf6qoJVizQfpRgkRgK+fXP4qyvLLB7P8B0Z7yaLnMEyZZf v/04JlMwiC3BvE65QwVKHaXl+Q/qGIAtyrw5SQ13oS+xinHMLBBBABd1cbeUOk2i iPrcJuQMJr4vFgSNZf+qXSAtkSmBaKtiu9U0fFDtf5EnXezkyLuJMvZwKdnHDIzH UcjSkRmwZp4PwW/hwnrCPgVAT+wwzrdFC/muLAv6m0Ek/2xiCnCwtPSkiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJu7V4BKDr+EcQqucAFTZGLZZvDkMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvbTd0WGdFb092NFJ4Q3E1d0FWTmtZdGxtOE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBwjK4AwQB wjK8MBQEAgACMA4DBQMqAsWAAwUDKgnvQDANBgkqhkiG9w0BAQsFAAOCAQEAegqo +6nRKZmqCdEor4ScMKQBCpo4R2Dr0LC4zQwjeiGKCXIWhonMrv6SWuMbofZRnb5x vGolHFaLSpAAqbs9ON0VTMUfc4K/KcfynLsbH878b5xQy5qutkUJ3KlD0rf0syXT A0UG0Ngu2OZpXNGFhQG/DlZG+2VtWhQpj2/qHeildX3DKnKp43sCMkOCEcNz38rA NGOPzL3Jq8oY3+to1Q7044ylcUBiEHdM+4CqOmcgtohv6/BjEYqro8wDQu6TWuY4 tlEE7/kEyczJSd2R1Em36qDulmXfyozbGOk+f0CZKmnRReS+DutzbEB3dfJaKSk2 wdsN3kmoyvYdex7h3w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:00 2026 by rpki-client