This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/M--TDwBebYUuyU8m_hJhv6lANn0.roa File: M--TDwBebYUuyU8m_hJhv6lANn0.roa (raw, json) Hash identifier: ng0FfscKlU2HqCySpQvVoxWawyYxW3g+qpkRloBHnkM= Subject key identifier: 33:EF:93:0F:00:5E:6D:85:2E:C9:4F:26:FE:12:61:BF:A9:40:36:7D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C7789E00BDD79DC54D367EDD733492 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/M--TDwBebYUuyU8m_hJhv6lANn0.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 212.116.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:78:9e:00:bd:d7:9d:c5:4d:36:7e:dd:73:34:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ef930f005e6d852ec94f26fe1261bfa940367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:4c:1a:06:b3:d0:5d:ee:ed:36:c6:3b:19: 5f:b1:83:39:7d:d8:f5:d8:db:d3:40:fd:bc:74:88: 88:62:7a:e4:73:5f:7e:e3:b1:f5:76:af:8b:cb:cd: 68:1b:9a:0c:a9:52:06:3a:73:4f:cc:89:dc:c5:85: c1:58:ca:e0:58:67:aa:0c:ee:80:ce:1a:93:08:1e: b5:92:d1:dd:26:8a:89:4f:92:ef:ff:e6:f0:5f:78: 0d:24:c0:f6:90:d8:5d:6a:4b:61:13:1f:3a:d7:ba: e2:d2:14:1a:c3:38:f3:7a:c0:39:a2:ac:aa:ac:73: 50:29:c0:86:b2:bf:49:56:a5:a4:8c:2b:82:a0:a3: 99:14:74:d2:f0:5b:52:f3:20:19:f2:ca:14:79:a9: eb:11:c9:d6:d5:84:76:56:db:7c:e9:cd:82:49:f3: 8b:bb:d9:5b:02:b1:10:2b:19:1d:58:8d:fe:75:5c: 8e:a0:ee:f2:fa:06:ac:d0:49:52:51:2b:36:2b:50: 69:38:49:ab:73:3c:58:c7:c6:03:e7:6c:68:2d:0d: 96:76:dc:37:d7:61:90:b9:37:c6:ef:1d:f9:5b:a9: 6b:d6:16:20:7b:ae:af:4e:02:80:87:80:e0:d1:0d: 88:ab:38:26:75:34:86:d1:62:f0:12:e5:e8:62:bb: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:93:0F:00:5E:6D:85:2E:C9:4F:26:FE:12:61:BF:A9:40:36:7D X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/M--TDwBebYUuyU8m_hJhv6lANn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.227.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c2:50:4a:e4:69:ec:e2:31:59:c9:59:b2:7f:f8:57:59:99: 28:f0:69:d8:8b:95:d7:c3:28:52:ef:96:5a:56:4d:79:e2:a9: f2:eb:e2:36:a8:15:90:7d:52:e5:4c:42:0b:9a:f1:6a:0b:da: 31:22:65:ac:6d:97:bc:be:0d:b9:c8:90:fe:af:14:15:ef:9a: a0:c2:70:6b:59:44:00:bf:62:c0:21:53:47:7d:95:4a:5d:3c: e5:e8:3a:cd:82:c1:3e:a8:d4:ac:f3:2a:a3:30:ee:72:69:09: 93:d7:aa:a5:7d:f4:ee:19:a8:de:d7:71:85:38:b8:cd:a1:f8: 9b:b1:89:14:30:66:3e:40:c8:80:3c:56:9b:86:24:24:52:40: e8:fd:6d:05:5e:c0:94:25:07:1d:f2:16:14:00:06:8c:b2:8b: e9:e1:38:cb:e8:8b:d2:3d:18:3b:8a:08:83:b4:62:67:48:af: e8:f4:ab:df:20:c0:75:af:b8:18:5c:3c:fd:df:fa:7a:f1:65: 83:78:c6:45:3d:22:c4:c0:c5:e5:d6:4b:d6:2c:62:1b:f0:f0: 88:7a:c7:02:6e:52:eb:1c:cc:90:0a:4c:77:94:ea:77:7e:76: 4d:8a:a9:87:28:bd:c1:cd:d1:76:51:73:6b:75:61:41:0d:17: 2c:50:0d:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3ieAL3XncVNNn7dczSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2VmOTMwZjAwNWU2ZDg1MmVjOTRmMjZmZTEyNjFiZmE5NDAzNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBMGgaz0F3u7TbGOxlfsYM5fdj1 2NvTQP28dIiIYnrkc19+47H1dq+Ly81oG5oMqVIGOnNPzIncxYXBWMrgWGeqDO6A zhqTCB61ktHdJoqJT5Lv/+bwX3gNJMD2kNhdakthEx8617ri0hQawzjzesA5oqyq rHNQKcCGsr9JVqWkjCuCoKOZFHTS8FtS8yAZ8soUeanrEcnW1YR2Vtt86c2CSfOL u9lbArEQKxkdWI3+dVyOoO7y+gas0ElSUSs2K1BpOEmrczxYx8YD52xoLQ2Wdtw3 12GQuTfG7x35W6lr1hYge66vTgKAh4Dg0Q2IqzgmdTSG0WLwEuXoYrtHQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPvkw8AXm2FLslPJv4SYb+pQDZ9MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvTS0tVER3QmViWVV1eVU4bV9oSmh2NmxBTm4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTjMA0G CSqGSIb3DQEBCwUAA4IBAQAJwlBK5Gns4jFZyVmyf/hXWZko8GnYi5XXwyhS75Za Vk154qny6+I2qBWQfVLlTEILmvFqC9oxImWsbZe8vg25yJD+rxQV75qgwnBrWUQA v2LAIVNHfZVKXTzl6DrNgsE+qNSs8yqjMO5yaQmT16qlffTuGaje13GFOLjNofib sYkUMGY+QMiAPFabhiQkUkDo/W0FXsCUJQcd8hYUAAaMsovp4TjL6IvSPRg7igiD tGJnSK/o9KvfIMB1r7gYXDz93/p68WWDeMZFPSLEwMXl1kvWLGIb8PCIescCblLr HMyQCkx3lOp3fnZNiqmHKL3BzdF2UXNrdWFBDRcsUA3T -----END CERTIFICATE-----Generated at Fri Jan 23 00:31:52 2026 by rpki-client