This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/44CA1k5d4Zw23GcP4lb4i4-vDPc.roa File: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (raw, json) Hash identifier: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g= Subject key identifier: E3:80:80:D6:4E:5D:E1:9C:36:DC:67:0F:E2:56:F8:8B:8F:AF:0C:F7 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019B7D5C2AD75D00FC6817EF62051A93318F Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/44CA1k5d4Zw23GcP4lb4i4-vDPc.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57734 IP address blocks: 37.49.234.0/23 maxlen: 24 37.49.234.0/24 maxlen: 24 2a00:a4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2a:d7:5d:00:fc:68:17:ef:62:05:1a:93:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e38080d64e5de19c36dc670fe256f88b8faf0cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:74:33:8f:96:ff:9a:94:b5:81:9d:8c:2f: 1f:e8:a7:9d:0b:08:cd:b3:2c:5d:98:cd:38:22:a4: 6d:32:b9:f3:a9:9a:a9:06:27:d4:64:fe:0a:c3:ad: 53:11:55:59:da:b5:c5:29:04:7c:a9:1f:67:0c:29: 22:41:fe:bc:e9:82:e4:2d:84:c0:23:39:5e:51:ef: 1a:a7:68:8a:89:d1:31:d0:e6:a5:32:63:8b:37:19: 52:e0:cd:c4:20:56:27:00:c2:43:31:b0:4e:9a:9a: 5e:c3:18:a8:ea:b4:4b:3a:21:80:03:f5:6a:00:02: a5:0e:ca:4c:4f:ce:f4:0c:c5:27:4a:ca:a9:dd:bc: 46:b2:1b:7b:8a:dc:f2:f0:84:87:60:33:3b:3e:7c: 7c:58:fd:b1:a9:10:74:89:c4:f5:c1:f5:41:e2:23: 17:9f:ce:ef:8a:89:ff:9f:25:c3:e7:b7:47:a3:e7: 71:81:39:38:fa:e0:9b:6b:16:d1:13:c5:44:ea:e5: cd:e2:41:9f:74:a9:94:e5:a2:4e:5c:d4:cd:da:3f: a6:36:5f:11:0f:f7:b4:af:6e:86:6f:00:6d:b3:4f: 09:54:88:31:28:aa:cf:b2:ce:e2:54:eb:e9:cb:d0: 1a:ed:26:25:25:3e:c4:0f:01:80:5c:4e:3a:d6:36: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:80:D6:4E:5D:E1:9C:36:DC:67:0F:E2:56:F8:8B:8F:AF:0C:F7 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/44CA1k5d4Zw23GcP4lb4i4-vDPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.234.0/23 IPv6: 2a00:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption 4c:17:8f:c2:9b:4a:98:35:aa:5b:e6:0d:99:d3:13:da:2e:cf: 59:56:13:89:a4:1c:98:b6:2c:c6:d6:62:79:3e:fe:30:60:75: 15:b0:c0:d4:6c:f8:c9:36:70:c2:56:47:14:ef:09:39:98:79: 48:df:8d:e7:09:a4:8a:0b:63:40:84:ca:12:dd:7e:2d:9d:fe: 13:6f:6e:f9:2a:ea:4f:28:20:b9:3f:5c:04:9c:06:df:0b:79: 84:c2:02:cf:15:77:08:06:dc:b5:89:8d:02:dd:f3:40:2d:64: 5a:b2:9a:e5:cc:51:7a:48:7d:da:e6:c4:17:02:ac:8a:ff:31: a9:6c:d1:39:bf:73:a4:7a:21:9b:8c:61:a8:b3:0d:ea:83:a7: 1f:49:98:e9:58:bf:55:99:87:19:4e:0b:c6:c9:82:ad:97:d5: 6e:70:d4:76:65:b4:40:98:e8:f1:c0:22:10:95:a8:d0:a7:e6: 04:91:2c:67:d6:d3:5b:fc:82:60:06:50:83:55:34:ca:ff:91: 42:cc:83:74:42:fb:ac:11:fc:f0:5a:55:39:9f:05:ea:40:cb: b5:f0:c8:78:09:06:0f:7f:47:5f:ef:c6:b1:28:69:a4:96:59: dc:3c:87:bd:4e:c6:23:73:8e:55:80:2b:17:a4:c9:2d:e8:1e: e3:ca:d4:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XCrXXQD8aBfvYgUakzGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzgwODBkNjRlNWRlMTljMzZkYzY3MGZlMjU2Zjg4YjhmYWYwY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP50M4+W/5qUtYGdjC8f6KedCwjN syxdmM04IqRtMrnzqZqpBifUZP4Kw61TEVVZ2rXFKQR8qR9nDCkiQf686YLkLYTA IzleUe8ap2iKidEx0OalMmOLNxlS4M3EIFYnAMJDMbBOmppewxio6rRLOiGAA/Vq AAKlDspMT870DMUnSsqp3bxGsht7itzy8ISHYDM7Pnx8WP2xqRB0icT1wfVB4iMX n87vion/nyXD57dHo+dxgTk4+uCbaxbRE8VE6uXN4kGfdKmU5aJOXNTN2j+mNl8R D/e0r26GbwBts08JVIgxKKrPss7iVOvpy9Aa7SYlJT7EDwGAXE461jbEPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOOAgNZOXeGcNtxnD+JW+IuPrwz3MB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvNDRDQTFrNWQ0WncyM0djUDRsYjRpNC12RFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBJTHqMA0E AgACMAcDBQAqAKTAMA0GCSqGSIb3DQEBCwUAA4IBAQBMF4/Cm0qYNapb5g2Z0xPa Ls9ZVhOJpByYtizG1mJ5Pv4wYHUVsMDUbPjJNnDCVkcU7wk5mHlI343nCaSKC2NA hMoS3X4tnf4Tb275KupPKCC5P1wEnAbfC3mEwgLPFXcIBty1iY0C3fNALWRasprl zFF6SH3a5sQXAqyK/zGpbNE5v3OkeiGbjGGosw3qg6cfSZjpWL9VmYcZTgvGyYKt l9VucNR2ZbRAmOjxwCIQlajQp+YEkSxn1tNb/IJgBlCDVTTK/5FCzIN0QvusEfzw WlU5nwXqQMu18Mh4CQYPf0df78axKGmkllncPIe9TsYjc45VgCsXpMkt6B7jytR5 -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:48 2026 by rpki-client