This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/M0wDu78r7xywtOeR44tzruZSaEQ.roa File: M0wDu78r7xywtOeR44tzruZSaEQ.roa (raw, json) Hash identifier: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs= Subject key identifier: 33:4C:03:BB:BF:2B:EF:1C:B0:B4:E7:91:E3:8B:73:AE:E6:52:68:44 Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Certificate serial: 019B7A5AC7ADEE94EC1075A8D714FF5007AE Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/M0wDu78r7xywtOeR44tzruZSaEQ.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56457 IP address blocks: 176.119.210.0/24 maxlen: 24 185.201.254.0/24 maxlen: 24 194.48.152.0/24 maxlen: 24 2a06:5780::/29 maxlen: 32 2a13:5a00::/30 maxlen: 30 2a13:5a04::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:ad:ee:94:ec:10:75:a8:d7:14:ff:50:07:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=334c03bbbf2bef1cb0b4e791e38b73aee6526844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:7d:2c:3c:2d:0c:75:86:a6:31:c4:f8:73: 91:13:1b:0f:97:fc:36:7b:42:87:1b:8d:aa:55:71: 7d:92:a6:2f:46:54:b0:25:c1:98:3e:20:96:0c:60: a8:b6:77:8b:06:1a:6d:d1:60:35:b3:24:38:90:72: 46:56:a2:af:8c:60:41:60:61:cf:03:c8:e8:f8:bd: c6:f3:03:de:8b:69:30:e0:47:56:50:2b:db:20:27: 99:5f:71:f1:3f:23:91:e4:d2:59:b2:ae:a1:f5:80: aa:79:3a:c1:a7:d5:f1:ce:ec:10:26:ab:9f:94:57: 6c:69:75:15:83:97:2d:1a:1a:21:30:05:7a:e9:d8: 9f:2e:ca:af:fa:01:54:fb:fe:26:fd:8e:e2:50:9e: d7:2d:33:49:b2:74:04:58:a0:9c:19:1e:fe:98:b3: f5:3c:25:6f:1f:94:61:c1:a6:c3:c9:fa:1d:19:15: c6:16:f7:4c:09:00:95:e7:a1:8c:f2:34:9d:b7:b0: b0:63:cb:40:8c:f6:1c:53:fd:1f:13:a4:5b:88:64: 13:cf:a8:18:ee:b1:b5:98:5b:b1:26:7b:33:a5:6a: 00:1c:39:19:22:93:0e:ef:12:4f:d8:b9:1a:56:42: 78:f2:5f:75:88:46:c4:5c:c6:3b:e8:9d:75:4d:75: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4C:03:BB:BF:2B:EF:1C:B0:B4:E7:91:E3:8B:73:AE:E6:52:68:44 X509v3 Authority Key Identifier: keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/M0wDu78r7xywtOeR44tzruZSaEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.210.0/24 185.201.254.0/24 194.48.152.0/24 IPv6: 2a06:5780::/29 2a13:5a00::-2a13:5a05:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7e:85:3b:cc:77:27:aa:25:eb:e6:de:97:a0:31:41:d3:6c:07: f2:c1:86:21:bd:b4:08:61:fb:a9:e6:64:f8:8d:8e:34:7b:d4: 16:54:4d:32:b6:86:8d:3f:3f:c4:b8:6b:51:61:90:d4:45:cb: c9:23:e2:c0:28:a5:7b:d6:a0:83:e5:cf:85:f1:67:1c:06:6d: 02:d6:77:a8:b1:e4:22:c4:f8:9d:05:75:12:8a:49:55:83:99: 5d:5c:8d:99:cc:a9:ee:13:fb:64:a6:ea:de:a6:00:97:e9:58: e6:45:fa:8a:21:76:53:82:1b:e6:88:9e:d2:17:06:7f:c3:b0: 4b:22:81:74:51:43:36:b1:01:a6:23:cc:6d:c8:f5:58:a4:e9: fd:ff:31:70:92:4c:30:20:6d:42:bf:96:a1:fe:21:95:f7:a8: 0e:03:1c:db:b5:eb:b8:dc:32:4b:f9:2d:c4:aa:b1:1c:fd:0a: 5d:80:3b:77:0d:3c:e9:56:9f:38:b1:f6:80:63:97:8a:3b:5a: 7c:28:68:bd:03:7f:35:73:b1:ba:0a:5d:60:31:0c:13:a7:ed: 4a:81:98:19:21:ca:69:f0:79:32:a0:7c:6f:cb:b2:60:66:62: 01:c7:fe:6b:bd:e9:0a:bb:88:fe:8f:78:77:45:80:0c:5c:6c: ba:c2:d1:07 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6Wset7pTsEHWo1xT/UAeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz Mjc3ZTgwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzRjMDNiYmJmMmJlZjFjYjBiNGU3OTFlMzhiNzNhZWU2NTI2ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JV9LDwtDHWGpjHE+HORExsPl/w2 e0KHG42qVXF9kqYvRlSwJcGYPiCWDGCotneLBhpt0WA1syQ4kHJGVqKvjGBBYGHP A8jo+L3G8wPei2kw4EdWUCvbICeZX3HxPyOR5NJZsq6h9YCqeTrBp9XxzuwQJquf lFdsaXUVg5ctGhohMAV66difLsqv+gFU+/4m/Y7iUJ7XLTNJsnQEWKCcGR7+mLP1 PCVvH5RhwabDyfodGRXGFvdMCQCV56GM8jSdt7CwY8tAjPYcU/0fE6RbiGQTz6gY 7rG1mFuxJnszpWoAHDkZIpMO7xJP2LkaVkJ48l91iEbEXMY76J11TXVAOwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDNMA7u/K+8csLTnkeOLc67mUmhEMB8GA1UdIwQY MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt N2YzYTQyODE3MWM3LzEvTTB3RHU3OHI3eHl3dE9lUjQ0dHpydVpTYUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3 LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAYBAIAATASAwQAsHfSAwQA ucn+AwQAwjCYMBwEAgACMBYDBQMqBleAMA0DBAEqE1oDBQEqE1oEMA0GCSqGSIb3 DQEBCwUAA4IBAQB+hTvMdyeqJevm3pegMUHTbAfywYYhvbQIYfup5mT4jY40e9QW VE0ytoaNPz/EuGtRYZDURcvJI+LAKKV71qCD5c+F8WccBm0C1neoseQixPidBXUS iklVg5ldXI2ZzKnuE/tkpurepgCX6VjmRfqKIXZTghvmiJ7SFwZ/w7BLIoF0UUM2 sQGmI8xtyPVYpOn9/zFwkkwwIG1Cv5ah/iGV96gOAxzbteu43DJL+S3EqrEc/Qpd gDt3DTzpVp84sfaAY5eKO1p8KGi9A381c7G6Cl1gMQwTp+1KgZgZIcpp8HkyoHxv y7JgZmIBx/5rvekKu4j+j3h3RYAMXGy6wtEH -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:08 2026 by rpki-client