This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/wM4IP5DC1DgveuDoXirlpMRIHqc.roa File: wM4IP5DC1DgveuDoXirlpMRIHqc.roa (raw, json) Hash identifier: ORIxf9cRPlx51odo5iTaqyNV6pwUbzloT9uYflN665I= Subject key identifier: C0:CE:08:3F:90:C2:D4:38:2F:7A:E0:E8:5E:2A:E5:A4:C4:48:1E:A7 Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Certificate serial: 019B7DCA91B28659A15FA03D144B65A31C6B Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/wM4IP5DC1DgveuDoXirlpMRIHqc.roa Signing time: Fri 02 Jan 2026 08:19:46 +0000 ROA not before: Fri 02 Jan 2026 08:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207943 IP address blocks: 185.46.71.0/24 maxlen: 24 2a12:9440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:91:b2:86:59:a1:5f:a0:3d:14:4b:65:a3:1c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ce083f90c2d4382f7ae0e85e2ae5a4c4481ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:20:1c:fd:f4:bf:dc:14:6a:6e:98:19:4c: 5b:d8:74:de:7b:1e:cb:f8:71:e5:e8:ca:25:1a:69: 6f:66:8d:3b:b4:cb:02:81:ad:3c:3c:55:e0:22:5e: 16:f3:72:df:46:aa:1c:69:b2:24:1d:e9:f5:c5:83: fd:e3:a9:fc:18:c6:33:7c:06:71:50:4f:ea:57:f8: e3:ad:95:5c:ac:9f:9d:ac:ae:6b:a9:82:d8:42:80: d4:a1:85:ca:4d:6e:5f:54:cd:a7:25:16:bc:07:d2: 25:f2:da:d7:28:5a:5c:c6:39:d8:f8:91:df:ae:43: ac:cf:3e:5e:7a:6a:2e:a0:31:23:19:8d:2d:e2:65: 52:1d:d9:86:50:a4:64:ac:d5:c4:26:dc:2e:09:0f: ad:7d:0f:7c:42:f1:cd:7b:21:a5:62:ea:e7:34:e6: db:31:9e:fe:8a:9c:35:a9:80:bc:b6:91:e9:99:04: cf:87:a9:84:22:f4:0c:7b:a0:37:6c:a2:1f:3f:b0: 51:77:b2:f1:a0:ed:32:ee:df:d2:d0:86:0d:be:87: 0b:65:e3:62:8a:ad:83:47:89:6d:6f:e5:6e:22:94: 00:2a:18:f1:c2:02:d7:3a:a0:a6:bf:30:08:4b:3c: f7:86:44:ef:fd:f7:0c:e8:bc:45:35:8b:93:c6:2e: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CE:08:3F:90:C2:D4:38:2F:7A:E0:E8:5E:2A:E5:A4:C4:48:1E:A7 X509v3 Authority Key Identifier: keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/wM4IP5DC1DgveuDoXirlpMRIHqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.71.0/24 IPv6: 2a12:9440::/29 Signature Algorithm: sha256WithRSAEncryption 6a:d9:88:3b:a1:6e:40:f9:3d:04:f6:0e:d0:48:00:67:09:b2: e1:87:55:32:37:52:75:8f:ea:aa:e6:df:a7:80:54:28:6e:9c: c7:1c:a9:04:95:15:f5:c6:ca:95:fb:14:c3:cc:dd:e2:82:05: 07:8a:10:9d:54:d3:62:da:87:2b:00:0a:fc:fe:8e:30:57:2c: b7:46:9e:43:82:c3:0a:da:33:d5:a3:ea:1b:39:ec:07:43:79: 92:60:2b:33:f7:d8:10:46:22:8e:4b:7e:aa:53:0d:26:dd:16: 33:33:cc:bf:2e:91:2a:1f:ce:37:b6:4a:d5:d2:6c:26:09:da: 3d:81:96:a3:e2:8d:25:9f:bd:c0:90:a9:f9:a3:48:cf:41:f5: 38:87:3d:c1:a0:52:63:c0:16:38:41:cf:49:69:71:8a:b7:bd: dd:e3:7b:84:ee:98:71:c7:85:2e:a1:db:0b:bf:0f:a6:16:8b: cc:06:87:ed:84:7c:a4:3a:89:a0:f9:43:76:2c:34:ac:ca:e7: e9:b6:8e:91:fc:67:85:ac:df:5a:c2:e4:65:d6:24:84:7d:a0: eb:6a:e8:47:a8:08:6f:9e:f4:64:8c:a2:5c:27:69:f6:90:fa: 90:b4:03:f8:00:76:0d:ad:8d:94:c1:ae:2a:36:e8:a3:7f:7a: 7f:66:25:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ypGyhlmhX6A9FEtloxxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDA2MzJkNGY4MDE1N2Q2OWVmNWI1M2ZlNjI0ZGJmOGFk ZmVmYWYwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGNlMDgzZjkwYzJkNDM4MmY3YWUwZTg1ZTJhZTVhNGM0NDgxZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwMgHP30v9wUam6YGUxb2HTeex7L +HHl6MolGmlvZo07tMsCga08PFXgIl4W83LfRqocabIkHen1xYP946n8GMYzfAZx UE/qV/jjrZVcrJ+drK5rqYLYQoDUoYXKTW5fVM2nJRa8B9Il8trXKFpcxjnY+JHf rkOszz5eemouoDEjGY0t4mVSHdmGUKRkrNXEJtwuCQ+tfQ98QvHNeyGlYurnNObb MZ7+ipw1qYC8tpHpmQTPh6mEIvQMe6A3bKIfP7BRd7LxoO0y7t/S0IYNvocLZeNi iq2DR4ltb+VuIpQAKhjxwgLXOqCmvzAISzz3hkTv/fcM6LxFNYuTxi6VXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMDOCD+QwtQ4L3rg6F4q5aTESB6nMB8GA1UdIwQY MBaAFLkAYy1PgBV9ae9bU/5iTb+K3++vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEt YjgwZmYyZjE1NTJiLzEvd000SVA1REMxRGd2ZXVEb1hpcmxwTVJJSHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEtYjgwZmYyZjE1NTJi LzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuS5HMA0E AgACMAcDBQMqEpRAMA0GCSqGSIb3DQEBCwUAA4IBAQBq2Yg7oW5A+T0E9g7QSABn CbLhh1UyN1J1j+qq5t+ngFQobpzHHKkElRX1xsqV+xTDzN3iggUHihCdVNNi2ocr AAr8/o4wVyy3Rp5DgsMK2jPVo+obOewHQ3mSYCsz99gQRiKOS36qUw0m3RYzM8y/ LpEqH843tkrV0mwmCdo9gZaj4o0ln73AkKn5o0jPQfU4hz3BoFJjwBY4Qc9JaXGK t73d43uE7phxx4UuodsLvw+mFovMBofthHykOomg+UN2LDSsyufpto6R/GeFrN9a wuRl1iSEfaDrauhHqAhvnvRkjKJcJ2n2kPqQtAP4AHYNrY2Uwa4qNuijf3p/ZiVi -----END CERTIFICATE-----Generated at Tue Feb 10 07:25:47 2026 by rpki-client