This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/M2737Kt-OKT4cwZg4viZL0ezWHk.roa File: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (raw, json) Hash identifier: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I= Subject key identifier: 33:6E:F7:EC:AB:7E:38:A4:F8:73:06:60:E2:F8:99:2F:47:B3:58:79 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9B0EC62327FE803E464933F2EFFA Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/M2737Kt-OKT4cwZg4viZL0ezWHk.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202001 IP address blocks: 147.234.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9b:0e:c6:23:27:fe:80:3e:46:49:33:f2:ef:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=336ef7ecab7e38a4f8730660e2f8992f47b35879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:2f:bb:cb:39:ca:6f:87:62:46:ae:87:dd: 0c:d3:73:14:03:9a:00:84:dd:e9:93:5a:23:22:8d: c0:e0:4c:a4:a0:c6:54:ce:d6:47:3e:73:ed:4e:24: c5:ac:d9:34:18:4f:c3:a2:9d:65:cd:bf:9d:a7:70: b8:2b:7e:bd:65:9c:09:7e:0c:3b:64:0d:aa:ec:19: 3f:e2:52:74:1d:9b:6d:40:e9:78:ac:fd:ba:d5:f1: c9:d8:23:fc:7b:f2:fc:95:c4:45:1a:a2:eb:3d:28: 3b:ea:45:34:d0:5b:0c:01:d9:f3:7a:4f:49:01:36: 68:ac:3d:9e:5a:60:ff:d2:5c:76:55:e4:e8:0c:6c: 2c:31:c2:2b:92:e8:b5:1f:40:75:02:c1:a8:e2:98: db:6f:ca:db:ab:11:4c:5b:ca:a1:4b:e0:0c:62:da: b4:6a:55:aa:aa:69:6e:24:de:ac:12:82:c7:27:82: 06:82:35:51:a9:20:cb:cf:1c:af:e5:ea:a0:ca:e5: 5e:00:3a:cf:53:d9:b9:e9:55:cf:32:0a:2b:44:29: eb:43:a4:79:ef:9e:af:1c:89:51:e4:4f:12:8f:1b: 3d:76:1e:14:52:ae:62:d6:f2:0b:cb:0b:94:6c:ba: 8d:30:41:b6:f5:d0:31:a6:8b:12:71:b5:0c:4a:0c: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:F7:EC:AB:7E:38:A4:F8:73:06:60:E2:F8:99:2F:47:B3:58:79 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/M2737Kt-OKT4cwZg4viZL0ezWHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.34.0/24 Signature Algorithm: sha256WithRSAEncryption 47:7c:05:92:00:fc:e9:60:a4:f5:08:57:4b:7e:a2:54:8b:c9: b1:95:90:7d:56:e8:2f:3b:d9:b7:1c:60:cb:80:23:74:ca:66: e0:97:02:04:67:c5:d8:d6:99:43:33:64:82:8e:99:8e:05:86: 21:bd:3c:d8:62:e7:c7:01:e9:04:e8:5a:b6:e4:53:46:c9:27: a6:13:86:0c:d0:53:e3:81:90:ae:49:3c:fd:fe:65:f5:2b:63: 2a:7d:29:e5:4b:9b:63:4e:dd:91:de:a9:60:4a:88:8f:2a:9f: 38:d7:1b:9d:af:7f:d2:dd:c7:0c:41:14:a1:16:f0:be:fb:26: 2a:bc:46:6f:f0:40:93:10:87:52:0f:93:b8:67:2f:b3:77:a3: a4:ee:aa:6e:ae:fe:fa:a1:53:4e:74:de:63:2b:ab:4f:b7:6a: 8a:f2:ce:4e:f8:65:6b:5d:6d:74:9a:95:7c:cb:f4:17:a9:e3: be:ae:e4:d7:b9:1e:1f:3d:5a:80:d3:7e:dd:57:7e:55:b2:7a: a6:32:21:20:75:05:1d:51:9c:f7:66:b4:a9:75:02:d4:65:44: 3d:5b:66:42:6b:d8:3f:ac:c3:6e:3b:dd:76:19:1c:4a:59:06: 51:64:8c:bc:f3:a5:36:fd:a3:98:34:cb:57:59:ca:15:bc:03: 0a:05:15:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZsOxiMn/oA+Rkkz8u/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzZlZjdlY2FiN2UzOGE0Zjg3MzA2NjBlMmY4OTkyZjQ3YjM1ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKAvu8s5ym+HYkauh90M03MUA5oA hN3pk1ojIo3A4EykoMZUztZHPnPtTiTFrNk0GE/Dop1lzb+dp3C4K369ZZwJfgw7 ZA2q7Bk/4lJ0HZttQOl4rP261fHJ2CP8e/L8lcRFGqLrPSg76kU00FsMAdnzek9J ATZorD2eWmD/0lx2VeToDGwsMcIrkui1H0B1AsGo4pjbb8rbqxFMW8qhS+AMYtq0 alWqqmluJN6sEoLHJ4IGgjVRqSDLzxyv5eqgyuVeADrPU9m56VXPMgorRCnrQ6R5 756vHIlR5E8Sjxs9dh4UUq5i1vILywuUbLqNMEG29dAxposScbUMSgzPUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNu9+yrfjik+HMGYOL4mS9Hs1h5MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvTTI3MzdLdC1PS1Q0Y3daZzR2aVpMMGV6V0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+oiMA0G CSqGSIb3DQEBCwUAA4IBAQBHfAWSAPzpYKT1CFdLfqJUi8mxlZB9VugvO9m3HGDL gCN0ymbglwIEZ8XY1plDM2SCjpmOBYYhvTzYYufHAekE6Fq25FNGySemE4YM0FPj gZCuSTz9/mX1K2MqfSnlS5tjTt2R3qlgSoiPKp841xudr3/S3ccMQRShFvC++yYq vEZv8ECTEIdSD5O4Zy+zd6Ok7qpurv76oVNOdN5jK6tPt2qK8s5O+GVrXW10mpV8 y/QXqeO+ruTXuR4fPVqA037dV35VsnqmMiEgdQUdUZz3ZrSpdQLUZUQ9W2ZCa9g/ rMNuO912GRxKWQZRZIy886U2/aOYNMtXWcoVvAMKBRUp -----END CERTIFICATE-----Generated at Mon Jan 26 23:46:12 2026 by rpki-client