This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa File: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (raw, json) Hash identifier: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s= Subject key identifier: 9B:68:D2:D9:89:0D:4D:41:D1:3E:2E:A1:DC:B9:21:7B:AE:E9:F6:4D Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Certificate serial: 019B7B35688DDBE21D4C1FBE2E3B71F0237F Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 83.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:68:8d:db:e2:1d:4c:1f:be:2e:3b:71:f0:23:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b68d2d9890d4d41d13e2ea1dcb9217baee9f64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:7f:d0:97:64:7b:11:16:07:d7:ca:0e:c9: 4d:07:b0:80:f1:26:50:0d:97:96:f8:8c:e1:f4:e2: aa:1b:9b:26:77:e8:96:4f:f5:23:d1:56:76:e1:06: 06:6b:87:91:f5:16:cd:8e:9c:b9:43:d9:ef:51:d7: 72:5b:a6:8b:c1:47:74:f5:37:f7:8a:b7:7e:a9:4d: 99:54:6d:f0:49:87:96:a1:02:bf:cc:31:3d:df:02: c3:2f:2b:a7:12:a4:e1:5f:8e:f3:86:92:32:6f:ba: aa:b4:dd:22:64:e3:95:33:bb:57:c3:71:27:d7:f3: 1d:a6:e6:63:b4:05:84:53:c0:5a:66:d8:94:29:00: 5a:89:0c:a8:46:bc:03:8a:8f:fd:d6:2d:49:74:89: b8:03:92:76:da:61:bf:89:bb:06:63:4b:8a:97:55: d7:df:34:78:ef:b0:a3:26:89:49:54:54:9d:b4:a8: 6e:aa:e3:28:e5:0e:fd:b4:92:3f:5f:65:e4:ad:0a: 10:12:b4:f6:ae:b2:27:d7:3a:f0:53:ef:fe:42:86: 5a:5e:a3:11:bd:cc:c0:18:11:ad:dd:38:7d:f4:ea: a2:4b:be:7b:6d:9a:6b:17:ba:72:d9:0d:1e:01:ed: 17:36:40:78:61:89:58:82:96:37:9d:52:c1:5e:61: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:D2:D9:89:0D:4D:41:D1:3E:2E:A1:DC:B9:21:7B:AE:E9:F6:4D X509v3 Authority Key Identifier: keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:b0:a9:74:37:5b:f6:87:a4:29:ba:6c:03:11:97:af:f1:25: 91:74:e9:9c:ca:7d:3c:07:1d:f9:f9:d1:ac:89:62:cd:34:dc: 47:26:51:40:a0:a9:40:cf:eb:a5:fb:12:9d:3a:d4:eb:a3:9f: 5c:9c:87:40:cc:22:3a:cd:71:bc:e7:fd:23:27:72:2a:eb:c8: e8:50:7b:8f:bd:25:66:3c:c5:92:de:76:27:fa:84:97:66:4b: b3:fd:f0:41:f5:a5:1f:02:d0:3d:ff:4f:10:e8:24:47:a8:0c: 2f:8d:cd:9d:2b:a1:81:94:2d:1f:90:e6:d8:ce:99:2f:b2:99: 5a:6e:8c:ba:74:14:5a:c6:90:f3:97:eb:5a:12:c4:2d:1a:0f: 3c:e4:39:67:9a:ce:58:41:7c:0d:44:bb:5a:e9:12:33:c8:5e: 32:f6:77:4c:0f:7a:0a:29:c0:73:cc:19:50:95:e3:8b:1d:3f: cc:0a:e4:24:97:6a:48:c3:7d:24:83:a1:b6:d3:47:b0:43:55: f7:98:81:0e:ad:cc:c1:aa:2e:00:ed:ef:99:8b:5c:b5:a4:09: e3:34:d0:23:10:15:98:f6:46:75:26:5b:8d:d7:ee:b2:a4:4e: 1e:54:99:6d:3d:ce:3a:92:40:bb:c7:9b:e7:70:d1:14:83:32: aa:cb:97:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWiN2+IdTB++Ljtx8CN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2 ZjRkYjQwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjY4ZDJkOTg5MGQ0ZDQxZDEzZTJlYTFkY2I5MjE3YmFlZTlmNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArch/0JdkexEWB9fKDslNB7CA8SZQ DZeW+Izh9OKqG5smd+iWT/Uj0VZ24QYGa4eR9RbNjpy5Q9nvUddyW6aLwUd09Tf3 ird+qU2ZVG3wSYeWoQK/zDE93wLDLyunEqThX47zhpIyb7qqtN0iZOOVM7tXw3En 1/MdpuZjtAWEU8BaZtiUKQBaiQyoRrwDio/91i1JdIm4A5J22mG/ibsGY0uKl1XX 3zR477CjJolJVFSdtKhuquMo5Q79tJI/X2XkrQoQErT2rrIn1zrwU+/+QoZaXqMR vczAGBGt3Th99OqiS757bZprF7py2Q0eAe0XNkB4YYlYgpY3nVLBXmHPcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJto0tmJDU1B0T4uody5IXuu6fZNMB8GA1UdIwQY MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt MmVlMmI3Mjk1ZGZmLzEvbTJqUzJZa05UVUhSUGk2aDNMa2hlNjdwOWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4n1MA0G CSqGSIb3DQEBCwUAA4IBAQB6sKl0N1v2h6QpumwDEZev8SWRdOmcyn08Bx35+dGs iWLNNNxHJlFAoKlAz+ul+xKdOtTro59cnIdAzCI6zXG85/0jJ3Iq68joUHuPvSVm PMWS3nYn+oSXZkuz/fBB9aUfAtA9/08Q6CRHqAwvjc2dK6GBlC0fkObYzpkvspla boy6dBRaxpDzl+taEsQtGg885Dlnms5YQXwNRLta6RIzyF4y9ndMD3oKKcBzzBlQ leOLHT/MCuQkl2pIw30kg6G200ewQ1X3mIEOrczBqi4A7e+Zi1y1pAnjNNAjEBWY 9kZ1JluN1+6ypE4eVJltPc46kkC7x5vncNEUgzKqy5c+ -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:56 2026 by rpki-client