This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/M1XUwx-qMuHZrYDCmzcQe3mGodQ.roa File: M1XUwx-qMuHZrYDCmzcQe3mGodQ.roa (raw, json) Hash identifier: BfbtHciCspEAeWp502ftheTZWOwWYnEqou2fg776SoM= Subject key identifier: 33:55:D4:C3:1F:AA:32:E1:D9:AD:80:C2:9B:37:10:7B:79:86:A1:D4 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB572D84C113A327F4198F63292EB5 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/M1XUwx-qMuHZrYDCmzcQe3mGodQ.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 5.42.220.0/24 maxlen: 24 45.91.238.0/24 maxlen: 24 80.68.156.0/24 maxlen: 24 185.211.170.0/24 maxlen: 24 195.206.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:2d:84:c1:13:a3:27:f4:19:8f:63:29:2e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3355d4c31faa32e1d9ad80c29b37107b7986a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:06:e1:8b:24:9c:be:06:c0:0f:c3:51:f5: 8f:47:07:14:1a:f2:79:f4:5f:16:0a:42:a9:98:24: 1c:94:d8:d7:d7:40:5f:95:fb:e0:af:2e:90:e6:f8: f8:93:7b:27:21:b9:4e:0b:9e:e3:84:f5:2f:b6:15: d7:2d:b9:b3:7e:3d:26:53:69:8b:bd:63:93:24:98: 20:97:e0:88:1f:c6:6d:1b:dc:47:bf:14:4b:f3:75: 3e:eb:ee:bc:cc:3e:97:09:4a:cf:51:21:e2:5c:5d: 9a:fe:d8:d2:56:e9:cd:cf:23:04:dc:e6:c7:8b:df: 62:a8:4e:b8:50:4e:08:10:65:a3:fe:63:27:49:a5: 4e:43:29:50:fe:57:96:0c:a7:dd:f9:f4:3a:30:b7: 1b:f8:54:5f:84:c0:ab:e4:d1:6d:5a:7b:b3:63:8a: 0c:b4:bf:c5:ba:d7:49:7f:ae:7c:c9:36:c1:58:5d: 32:14:bd:c2:8c:c0:0c:5b:1a:11:d3:46:82:cd:c8: bb:24:7d:cf:f1:14:ba:02:3d:82:d0:0d:b2:e4:76: 6b:eb:41:b9:99:f8:b0:0b:ea:27:ce:38:31:50:97: 5b:b2:ca:81:d9:95:7e:fd:c8:3f:e5:5a:8f:97:88: 9e:9a:11:29:15:a1:9d:71:d9:be:01:ad:be:86:9e: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:D4:C3:1F:AA:32:E1:D9:AD:80:C2:9B:37:10:7B:79:86:A1:D4 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/M1XUwx-qMuHZrYDCmzcQe3mGodQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.220.0/24 45.91.238.0/24 80.68.156.0/24 185.211.170.0/24 195.206.243.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6e:ec:5a:ac:5c:ef:54:3f:c0:09:85:0b:95:1e:70:fb:45: f2:3e:7b:87:4a:19:f4:14:9f:b6:6b:d7:38:bb:6e:44:47:45: bc:e9:43:84:c3:ca:11:aa:02:d6:a5:2b:b3:9c:33:cf:d0:35: 23:21:9d:47:84:f8:73:41:84:c3:36:76:2e:9c:d5:8d:9e:a1: 69:78:bd:d3:dd:cd:40:b9:6d:69:d6:50:2d:8e:ce:f4:28:df: 23:37:ab:f0:c6:8c:dd:dd:c6:ef:44:90:a7:08:e2:e0:1d:b2: e4:f0:9a:ad:2f:1d:ef:61:75:32:57:82:7b:06:6c:ea:22:f8: fb:c8:b5:43:4c:11:4a:40:a5:a5:c5:6b:5c:c3:4a:82:08:fe: 6b:80:95:b0:81:13:72:39:15:48:85:db:5a:8d:50:a6:99:ba: 54:8d:ab:7b:8e:3a:a1:d1:92:fc:9c:7d:11:78:17:17:15:c4: 2d:72:b1:66:30:0d:cb:55:24:87:dc:a6:23:58:52:13:6e:11: f5:6c:56:2d:22:a7:1c:24:08:91:45:4d:90:f7:d2:c7:70:33: 44:bc:94:18:c6:38:28:47:c0:3e:ff:5d:85:04:a4:f7:fa:89: a3:5d:d0:f6:94:2e:aa:19:b2:94:22:f0:a8:30:72:f7:ce:d1: ac:d7:31:ba -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9y1cthMEToyf0GY9jKS61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzU1ZDRjMzFmYWEzMmUxZDlhZDgwYzI5YjM3MTA3Yjc5ODZhMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcsG4YsknL4GwA/DUfWPRwcUGvJ5 9F8WCkKpmCQclNjX10Bflfvgry6Q5vj4k3snIblOC57jhPUvthXXLbmzfj0mU2mL vWOTJJggl+CIH8ZtG9xHvxRL83U+6+68zD6XCUrPUSHiXF2a/tjSVunNzyME3ObH i99iqE64UE4IEGWj/mMnSaVOQylQ/leWDKfd+fQ6MLcb+FRfhMCr5NFtWnuzY4oM tL/FutdJf658yTbBWF0yFL3CjMAMWxoR00aCzci7JH3P8RS6Aj2C0A2y5HZr60G5 mfiwC+onzjgxUJdbssqB2ZV+/cg/5VqPl4iemhEpFaGdcdm+Aa2+hp6AxwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDNV1MMfqjLh2a2Awps3EHt5hqHUMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTTFYVXd4LXFNdUhacllEQ216Y1FlM21Hb2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABSrcAwQA LVvuAwQAUEScAwQAudOqAwQAw87zMA0GCSqGSIb3DQEBCwUAA4IBAQA5buxarFzv VD/ACYULlR5w+0XyPnuHShn0FJ+2a9c4u25ER0W86UOEw8oRqgLWpSuznDPP0DUj IZ1HhPhzQYTDNnYunNWNnqFpeL3T3c1AuW1p1lAtjs70KN8jN6vwxozd3cbvRJCn COLgHbLk8JqtLx3vYXUyV4J7BmzqIvj7yLVDTBFKQKWlxWtcw0qCCP5rgJWwgRNy ORVIhdtajVCmmbpUjat7jjqh0ZL8nH0ReBcXFcQtcrFmMA3LVSSH3KYjWFITbhH1 bFYtIqccJAiRRU2Q99LHcDNEvJQYxjgoR8A+/12FBKT3+omjXdD2lC6qGbKUIvCo MHL3ztGs1zG6 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client