This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/M9XPPIauYu8vbc2Ub3NT2ITQt40.roa File: M9XPPIauYu8vbc2Ub3NT2ITQt40.roa (raw, json) Hash identifier: cI1UxjgAX2tnU9TBtap9O6a2kSTgffH3bwWkwVoWftk= Subject key identifier: 33:D5:CF:3C:86:AE:62:EF:2F:6D:CD:94:6F:73:53:D8:84:D0:B7:8D Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Certificate serial: 019B76EAF5E876365F45DE1EAC2C439461BC Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/M9XPPIauYu8vbc2Ub3NT2ITQt40.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 83.151.192.0/24 maxlen: 24 83.151.193.0/24 maxlen: 24 83.151.194.0/24 maxlen: 24 83.151.195.0/24 maxlen: 24 88.202.208.0/23 maxlen: 23 88.202.208.0/24 maxlen: 24 88.202.209.0/24 maxlen: 24 88.202.210.0/24 maxlen: 24 88.202.211.0/24 maxlen: 24 88.212.156.0/24 maxlen: 24 88.212.157.0/24 maxlen: 24 88.212.158.0/24 maxlen: 24 88.212.159.0/24 maxlen: 24 185.8.132.0/24 maxlen: 24 185.8.133.0/24 maxlen: 24 185.8.134.0/24 maxlen: 24 185.8.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f5:e8:76:36:5f:45:de:1e:ac:2c:43:94:61:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33d5cf3c86ae62ef2f6dcd946f7353d884d0b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:f8:35:cf:78:06:b6:8c:1e:1d:25:a9:80: 22:91:45:8f:75:3a:26:de:54:94:14:43:1d:5f:a4: 01:74:c7:af:7f:67:56:c2:09:bf:6d:03:70:a0:05: 7e:17:02:28:eb:5c:27:f7:e9:02:a7:98:54:a9:6c: ee:ff:0c:72:f4:96:3c:19:e0:12:26:35:f6:ce:95: f2:1c:ed:78:f0:0c:3e:54:0a:be:66:78:a8:63:43: 34:c1:46:68:4e:7e:4e:2a:b1:34:a9:af:fa:87:1b: 4a:b0:25:d4:c4:6e:75:a3:14:38:00:ee:3c:d8:57: 61:b5:b6:e6:ec:38:b1:7c:b7:b3:55:d8:a0:ba:07: 34:71:a4:18:e7:08:5e:34:bd:ca:6d:9f:0e:b3:a4: 37:df:b7:8b:27:7e:56:45:1f:d8:ef:59:04:09:d6: 68:14:1d:ac:9a:da:f5:ee:3e:86:32:ed:30:69:a9: 7e:2e:d4:49:29:0a:3e:a5:ff:c2:eb:d8:3c:7a:f1: f5:d1:67:0e:c7:bd:69:e1:d1:36:6b:05:94:39:88: 19:38:2d:76:2c:7c:8f:2d:a8:f4:2e:8b:f9:a7:d9: ba:c3:31:12:46:f8:30:50:3d:d2:d5:ad:51:14:55: 44:44:0e:ba:d5:15:17:8c:b1:f7:b2:b2:b1:e4:53: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:CF:3C:86:AE:62:EF:2F:6D:CD:94:6F:73:53:D8:84:D0:B7:8D X509v3 Authority Key Identifier: keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/M9XPPIauYu8vbc2Ub3NT2ITQt40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.151.192.0/22 88.202.208.0/22 88.212.156.0/22 185.8.132.0/22 Signature Algorithm: sha256WithRSAEncryption 18:09:4e:ef:2a:ce:65:4f:f9:f2:b4:79:e4:2f:96:26:5b:25: 2a:9c:7c:88:94:db:37:19:77:23:a7:fc:ea:02:2e:6a:c4:f1: 6a:c7:e2:7f:74:a1:49:33:04:18:e4:c0:7d:3a:fa:2e:56:1b: 29:e4:e6:a5:a7:32:29:ae:ca:61:e1:7d:f4:ac:09:c1:36:bc: 3d:b2:2e:ec:ee:83:b1:4f:53:09:5e:2b:2c:9f:a8:74:2f:cc: 2c:2a:29:c3:38:a6:4d:04:7a:2c:ff:e3:1b:5a:b7:04:f9:6f: 15:b8:ce:07:5b:82:55:ac:d6:a9:22:d4:73:8a:ba:2a:10:2c: d4:8c:cf:5d:3e:22:2b:8d:17:f4:a9:a1:dd:3e:3e:de:c4:f5: 99:2a:b7:1a:1d:04:75:92:84:25:49:76:05:4d:13:87:bb:e5: 1d:56:34:9d:f0:bd:03:18:de:f5:a7:db:5c:8c:a7:45:4e:90: 5c:bd:6d:57:1a:f9:ea:8e:db:ac:c9:25:48:a5:f2:f5:b0:f3: e6:13:f0:ad:e8:f0:07:2a:16:b0:bf:d5:37:00:b7:a9:cd:0e: a0:78:3a:c6:74:e8:7c:28:3f:70:ad:9f:1d:c7:b2:cc:a7:8b: 8e:c0:21:10:4f:49:2e:09:40:89:0a:65:b4:05:84:15:63:43: db:55:c1:1f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26vXodjZfRd4erCxDlGG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj MzQxNDYwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Q1Y2YzYzg2YWU2MmVmMmY2ZGNkOTQ2ZjczNTNkODg0ZDBiNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e/4Nc94BraMHh0lqYAikUWPdTom 3lSUFEMdX6QBdMevf2dWwgm/bQNwoAV+FwIo61wn9+kCp5hUqWzu/wxy9JY8GeAS JjX2zpXyHO148Aw+VAq+ZnioY0M0wUZoTn5OKrE0qa/6hxtKsCXUxG51oxQ4AO48 2Fdhtbbm7DixfLezVdigugc0caQY5wheNL3KbZ8Os6Q337eLJ35WRR/Y71kECdZo FB2smtr17j6GMu0waal+LtRJKQo+pf/C69g8evH10WcOx71p4dE2awWUOYgZOC12 LHyPLaj0Lov5p9m6wzESRvgwUD3S1a1RFFVERA661RUXjLH3srKx5FMEnwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDPVzzyGrmLvL23NlG9zU9iE0LeNMB8GA1UdIwQY MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt NmNhMzQwZmE3NDkzLzEvTTlYUFBJYXVZdTh2YmMyVWIzTlQySVRRdDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5fAAwQC WMrQAwQCWNScAwQCuQiEMA0GCSqGSIb3DQEBCwUAA4IBAQAYCU7vKs5lT/nytHnk L5YmWyUqnHyIlNs3GXcjp/zqAi5qxPFqx+J/dKFJMwQY5MB9OvouVhsp5OalpzIp rsph4X30rAnBNrw9si7s7oOxT1MJXissn6h0L8wsKinDOKZNBHos/+MbWrcE+W8V uM4HW4JVrNapItRziroqECzUjM9dPiIrjRf0qaHdPj7exPWZKrcaHQR1koQlSXYF TROHu+UdVjSd8L0DGN71p9tcjKdFTpBcvW1XGvnqjtusySVIpfL1sPPmE/Ct6PAH Khawv9U3ALepzQ6geDrGdOh8KD9wrZ8dx7LMp4uOwCEQT0kuCUCJCmW0BYQVY0Pb VcEf -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:02 2026 by rpki-client