This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/M39X3O93meXiYEZMdDY1T4wsyVE.roa File: M39X3O93meXiYEZMdDY1T4wsyVE.roa (raw, json) Hash identifier: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4= Subject key identifier: 33:7F:57:DC:EF:77:99:E5:E2:60:46:4C:74:36:35:4F:8C:2C:C9:51 Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Certificate serial: 019B7AC7C83D8F4E9BC47B4D6DE04B66E731 Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/M39X3O93meXiYEZMdDY1T4wsyVE.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57630 IP address blocks: 185.18.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c8:3d:8f:4e:9b:c4:7b:4d:6d:e0:4b:66:e7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=337f57dcef7799e5e260464c7436354f8c2cc951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:21:39:22:56:25:25:bf:8b:f2:05:b8:0b: 15:86:cf:a4:37:a5:73:f4:d1:25:16:1c:8e:6d:de: 24:2e:dd:64:8a:2a:2e:ad:eb:35:ce:ee:7d:ca:70: 25:68:0b:fe:77:a3:a5:89:b8:61:ad:eb:91:6e:41: 4a:34:e9:67:41:db:c8:8b:2e:88:9d:c5:04:ea:63: 4c:0f:55:97:fe:c3:4b:e3:2c:7e:d7:29:04:f6:41: c6:c4:28:02:0f:ae:6c:1d:76:77:e9:7f:f5:86:a0: bd:b3:e3:fa:b5:7f:74:43:61:86:78:b5:43:34:5f: ee:e0:6d:41:b5:20:52:d0:91:c9:84:c5:41:01:15: 0d:7c:eb:38:c3:f3:ac:94:57:43:7c:84:02:d3:1d: ad:27:84:1b:4b:b4:e5:05:8c:fd:82:b3:68:44:16: 4a:f6:7e:af:68:43:dd:cf:93:6d:8f:b2:70:3d:93: c8:f7:55:5b:7e:da:6b:d9:54:13:48:02:a1:38:0c: c3:aa:fd:6c:ad:7c:59:9b:a1:b0:e6:00:06:68:73: e7:47:a8:f9:49:15:f2:10:62:e7:69:c1:e7:eb:af: be:5e:4b:87:ec:fb:9b:b5:f2:95:97:d3:8a:4f:ea: 35:3a:b8:ba:8e:a7:38:6e:f5:2d:5e:03:39:59:6e: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:57:DC:EF:77:99:E5:E2:60:46:4C:74:36:35:4F:8C:2C:C9:51 X509v3 Authority Key Identifier: keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/M39X3O93meXiYEZMdDY1T4wsyVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.195.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ff:c0:e3:c3:03:cd:49:0f:2f:05:e8:e4:c3:95:42:3e:42: 64:e4:17:19:c6:5b:47:02:ad:50:13:ac:d4:4c:94:75:03:d9: 50:a0:5e:b7:da:ae:fa:bd:cc:a9:df:8c:a7:11:b0:4f:b3:3e: 51:9f:bd:43:62:ba:06:fe:fe:0a:15:7e:5a:56:d3:27:b8:62: d7:53:b3:c1:82:14:ed:c7:8f:54:a1:46:dc:51:ff:3f:50:61: a9:0f:f4:e5:f7:b2:69:77:ef:4e:09:81:bd:eb:32:0c:db:f4: 61:a2:96:bc:fb:ed:54:8d:6b:fc:98:38:34:be:e5:32:a0:05: 6c:cd:11:02:a1:de:f1:25:52:f0:8f:a8:1a:69:f8:fe:1d:e4: 79:9c:84:0e:3c:88:f1:29:69:36:34:0f:27:a8:53:9b:d9:94: 1a:03:7b:48:99:d6:1e:f6:05:fa:0c:6f:c7:4a:30:0a:84:42: eb:64:ea:a8:fa:fc:19:e6:68:da:bf:7e:ec:c9:6e:b5:c0:e6: 43:69:16:eb:d9:46:73:2d:36:39:ef:e8:45:dc:17:6d:7e:da: 75:0a:06:1d:4f:68:9a:bf:46:54:e6:90:7b:b3:4f:9e:16:0a: 27:e4:ac:18:f4:82:83:4a:d0:b3:d8:1b:12:9d:fe:33:63:4a: ba:f6:2a:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8g9j06bxHtNbeBLZucxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk ZDE1MDcwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzdmNTdkY2VmNzc5OWU1ZTI2MDQ2NGM3NDM2MzU0ZjhjMmNjOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb8hOSJWJSW/i/IFuAsVhs+kN6Vz 9NElFhyObd4kLt1kiioures1zu59ynAlaAv+d6OlibhhreuRbkFKNOlnQdvIiy6I ncUE6mNMD1WX/sNL4yx+1ykE9kHGxCgCD65sHXZ36X/1hqC9s+P6tX90Q2GGeLVD NF/u4G1BtSBS0JHJhMVBARUNfOs4w/OslFdDfIQC0x2tJ4QbS7TlBYz9grNoRBZK 9n6vaEPdz5Ntj7JwPZPI91Vbftpr2VQTSAKhOAzDqv1srXxZm6Gw5gAGaHPnR6j5 SRXyEGLnacHn66++XkuH7PubtfKVl9OKT+o1Ori6jqc4bvUtXgM5WW5M3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDN/V9zvd5nl4mBGTHQ2NU+MLMlRMB8GA1UdIwQY MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt Mzg0MTFhMzEyZDg2LzEvTTM5WDNPOTNtZVhpWUVaTWREWTFUNHdzeVZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2 LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRLDMA0G CSqGSIb3DQEBCwUAA4IBAQCV/8DjwwPNSQ8vBejkw5VCPkJk5BcZxltHAq1QE6zU TJR1A9lQoF632q76vcyp34ynEbBPsz5Rn71DYroG/v4KFX5aVtMnuGLXU7PBghTt x49UoUbcUf8/UGGpD/Tl97Jpd+9OCYG96zIM2/Rhopa8++1UjWv8mDg0vuUyoAVs zRECod7xJVLwj6gaafj+HeR5nIQOPIjxKWk2NA8nqFOb2ZQaA3tImdYe9gX6DG/H SjAKhELrZOqo+vwZ5mjav37syW61wOZDaRbr2UZzLTY57+hF3Bdtftp1CgYdT2ia v0ZU5pB7s0+eFgon5KwY9IKDStCz2BsSnf4zY0q69ipy -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:37 2026 by rpki-client