This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/m25_c1bwCRR27TwA0PikcbJqUsY.roa File: m25_c1bwCRR27TwA0PikcbJqUsY.roa (raw, json) Hash identifier: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo= Subject key identifier: 9B:6E:7F:73:56:F0:09:14:76:ED:3C:00:D0:F8:A4:71:B2:6A:52:C6 Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Certificate serial: 019B783481B151E89E27E0AC91CC6BDBECE9 Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/m25_c1bwCRR27TwA0PikcbJqUsY.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25180 IP address blocks: 37.17.184.0/24 maxlen: 24 37.17.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:81:b1:51:e8:9e:27:e0:ac:91:cc:6b:db:ec:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b6e7f7356f0091476ed3c00d0f8a471b26a52c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:63:19:c4:d6:59:34:9c:f1:9e:1a:e7:5f: 83:3d:f9:e9:ab:bf:90:10:60:0e:37:ee:09:27:ea: 0e:6a:8f:42:17:de:08:db:bd:71:56:96:35:35:f8: ef:a7:22:b5:dc:d1:e0:6b:0d:f4:d3:f4:fd:b9:9a: f9:c7:11:a8:4a:89:23:66:41:65:c0:99:9f:ac:bf: 29:25:de:bc:f9:f9:7f:32:5a:08:a8:10:de:6e:57: 23:28:9e:14:fc:a9:31:29:3e:bd:c8:2d:02:dd:d0: 48:7b:8e:09:da:65:06:1a:ca:dd:07:05:5e:7a:fe: 17:ca:ea:9f:67:6f:0e:38:32:97:13:a5:40:10:17: 7d:95:17:e9:33:07:38:ba:42:2b:6d:f4:1b:0c:e6: cb:15:1e:b1:9f:05:b8:e4:f2:a3:b8:d6:0f:b4:b6: a2:27:79:42:80:51:c5:e9:7d:7a:d0:a2:b3:30:05: 26:10:f6:71:27:ca:5f:6f:a4:85:93:70:01:0d:62: 42:6e:66:f2:35:87:27:8f:e0:05:d9:d3:fa:aa:7f: 9c:b5:af:cc:5f:39:31:5b:ed:93:3f:5e:23:0d:42: 77:0d:cf:2f:bd:72:89:28:ae:5c:44:bb:44:ac:28: 66:6d:34:bf:8e:e9:b4:6f:52:36:99:74:f0:e1:f1: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6E:7F:73:56:F0:09:14:76:ED:3C:00:D0:F8:A4:71:B2:6A:52:C6 X509v3 Authority Key Identifier: keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/m25_c1bwCRR27TwA0PikcbJqUsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.184.0/24 37.17.187.0/24 Signature Algorithm: sha256WithRSAEncryption ca:95:1f:10:ce:40:9a:bb:70:5e:71:e7:5a:ff:36:a4:0a:5d: 62:b8:b6:a2:fc:92:0d:d1:85:1b:33:68:b2:73:82:fe:96:2d: dc:bd:e2:95:74:32:4e:4c:35:43:0e:74:b9:06:9b:dd:f7:f9: 5f:5f:1a:92:9a:b8:04:98:94:9a:d8:39:30:14:6c:0a:2c:82: 00:a2:86:bf:d5:2c:cc:50:b5:5f:e8:e3:23:52:c8:11:6a:78: 99:df:03:7b:69:b8:74:f6:e8:f0:c7:c9:d1:4f:31:a4:5a:32: 58:fe:be:60:a8:c9:64:90:e3:fa:b5:4d:9c:a6:5d:12:db:b4: f9:cf:da:48:f4:01:6a:e3:e4:76:62:fb:3d:71:af:a9:6f:66: 22:31:0d:3b:3f:c5:01:8e:ab:8a:ea:4d:2e:76:44:a2:74:71: af:d4:4a:d1:2e:a1:c7:41:8d:02:52:d5:5f:09:24:c1:f5:24: 5d:28:5e:d9:55:16:ed:96:57:67:ec:cd:e0:8f:e6:39:8b:0a: 23:38:98:13:01:f9:c6:60:18:65:8c:1c:d9:ac:d8:20:f7:b7: b6:18:ac:fe:99:f1:86:b4:5c:6a:e0:f2:78:f1:34:ca:24:ed: cb:81:bf:9b:c2:10:d3:4f:64:dd:6b:3b:03:aa:6c:f5:f2:14: 3b:40:35:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NIGxUeieJ+Cskcxr2+zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx ZDAyYjgwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjZlN2Y3MzU2ZjAwOTE0NzZlZDNjMDBkMGY4YTQ3MWIyNmE1MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6JjGcTWWTSc8Z4a51+DPfnpq7+Q EGAON+4JJ+oOao9CF94I271xVpY1NfjvpyK13NHgaw300/T9uZr5xxGoSokjZkFl wJmfrL8pJd68+fl/MloIqBDeblcjKJ4U/KkxKT69yC0C3dBIe44J2mUGGsrdBwVe ev4XyuqfZ28OODKXE6VAEBd9lRfpMwc4ukIrbfQbDObLFR6xnwW45PKjuNYPtLai J3lCgFHF6X160KKzMAUmEPZxJ8pfb6SFk3ABDWJCbmbyNYcnj+AF2dP6qn+cta/M XzkxW+2TP14jDUJ3Dc8vvXKJKK5cRLtErChmbTS/jum0b1I2mXTw4fFCswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJtuf3NW8AkUdu08AND4pHGyalLGMB8GA1UdIwQY MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt ODBhOTFiZTgzZTRiLzEvbTI1X2MxYndDUlIyN1R3QTBQaWtjYkpxVXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJRG4AwQA JRG7MA0GCSqGSIb3DQEBCwUAA4IBAQDKlR8QzkCau3Beceda/zakCl1iuLai/JIN 0YUbM2iyc4L+li3cveKVdDJOTDVDDnS5Bpvd9/lfXxqSmrgEmJSa2DkwFGwKLIIA ooa/1SzMULVf6OMjUsgRaniZ3wN7abh09ujwx8nRTzGkWjJY/r5gqMlkkOP6tU2c pl0S27T5z9pI9AFq4+R2Yvs9ca+pb2YiMQ07P8UBjquK6k0udkSidHGv1ErRLqHH QY0CUtVfCSTB9SRdKF7ZVRbtlldn7M3gj+Y5iwojOJgTAfnGYBhljBzZrNgg97e2 GKz+mfGGtFxq4PJ48TTKJO3Lgb+bwhDTT2TdazsDqmz18hQ7QDUq -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:18 2026 by rpki-client