This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3vMkn9A84GbQcYPqGjKynT4_U8.roa File: m3vMkn9A84GbQcYPqGjKynT4_U8.roa (raw, json) Hash identifier: hl8sHV1Wq+oka3Opr5ATtVf45G+p8cfai/uxfPbSYgo= Subject key identifier: 9B:7B:CC:92:7F:40:F3:81:9B:41:C6:0F:A8:68:CA:CA:74:F8:FD:4F Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B7ECA7CD36D8A7C6EA205ECA91FB594CE Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3vMkn9A84GbQcYPqGjKynT4_U8.roa Signing time: Fri 02 Jan 2026 12:59:17 +0000 ROA not before: Fri 02 Jan 2026 12:59:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216084 IP address blocks: 185.34.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:ca:7c:d3:6d:8a:7c:6e:a2:05:ec:a9:1f:b5:94:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 2 12:59:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b7bcc927f40f3819b41c60fa868caca74f8fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:1b:cc:ab:4c:25:12:f9:7f:30:b2:71:a9: 18:1e:59:59:42:28:01:bd:82:f4:20:56:98:bd:59: 83:0c:57:35:45:3a:bf:f1:6a:06:4e:8f:04:0f:7f: 63:51:75:84:d3:e0:d0:16:bf:b5:82:30:69:db:08: 13:be:a0:15:9f:34:c9:c5:1b:77:1b:20:0e:f5:70: 3f:fd:cf:0d:cc:c9:a7:7f:f5:94:9e:2f:e0:7c:38: 8f:90:79:7f:73:28:af:76:50:ea:f8:68:2a:77:e6: c2:95:2f:ab:4b:45:47:50:e0:40:61:bd:f7:f4:a9: d7:dc:4e:69:8d:c2:6e:ce:a1:08:f1:3c:3f:3c:d1: 63:62:07:38:65:8e:8e:d9:c3:6f:79:2a:77:83:cd: 9a:8c:78:4a:8d:f1:8c:77:e6:8e:59:fb:6b:a2:82: 8e:49:a6:f5:73:fa:4c:e7:1f:a9:6d:64:7a:7b:1e: d4:bc:1c:4e:15:99:64:59:5f:a2:81:95:4a:34:38: e0:5e:5e:c0:fc:dd:76:38:db:fc:44:7a:94:4b:bd: c8:0b:da:95:7c:4a:16:97:b9:7c:6c:7d:c3:96:16: 15:0b:55:5d:0d:a6:08:17:c2:d4:c5:08:dd:58:97: d3:fc:55:ba:52:37:c0:1e:70:41:a4:45:7a:97:8c: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7B:CC:92:7F:40:F3:81:9B:41:C6:0F:A8:68:CA:CA:74:F8:FD:4F X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3vMkn9A84GbQcYPqGjKynT4_U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.101.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e1:ea:66:12:0c:7f:63:c3:8a:5a:f5:1c:7d:23:b5:31:75: 59:15:8e:9d:b7:74:fc:66:b6:27:ee:8e:d3:2b:e1:c9:87:af: 60:70:a8:ac:d8:6f:4e:d3:59:3c:25:6a:3e:eb:c3:6c:07:4f: e7:55:29:30:b0:dd:1d:e9:1b:28:f2:6d:28:08:d4:33:14:f2: 2a:ef:bf:5a:d4:d7:48:a3:35:8a:6d:2e:f4:66:4c:c1:14:de: 6e:9b:02:52:d8:48:95:43:58:dd:ff:fe:38:cb:9b:98:95:4a: 61:30:1f:6a:c0:ad:c6:57:64:a6:f0:bf:df:5b:c4:86:1c:20: 2f:d0:a3:8b:a0:d0:a0:34:13:da:1b:a2:a3:a7:f9:97:fb:40: 71:0e:49:05:42:57:93:45:27:7c:b0:2e:b9:54:5c:52:46:61: 7f:6d:9b:ab:11:89:19:79:f9:e5:fc:96:e8:4b:bb:bd:3e:3c: a4:77:91:f4:2c:bc:fd:6e:1f:b7:64:2f:8e:b6:36:d3:fc:59: 29:b6:73:cd:84:4b:2b:f2:dc:fc:1f:04:91:14:de:46:94:b1: be:c6:0f:71:5c:47:3a:a3:2d:f3:31:62:76:64:b8:1b:16:ae: 49:f7:7c:2b:65:d1:4c:18:8c:18:66:fa:ac:d0:20:8b:cd:ec: 32:05:9e:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ynzTbYp8bqIF7KkftZTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAyMTI1OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjdiY2M5MjdmNDBmMzgxOWI0MWM2MGZhODY4Y2FjYTc0ZjhmZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKAbzKtMJRL5fzCycakYHllZQigB vYL0IFaYvVmDDFc1RTq/8WoGTo8ED39jUXWE0+DQFr+1gjBp2wgTvqAVnzTJxRt3 GyAO9XA//c8NzMmnf/WUni/gfDiPkHl/cyivdlDq+Ggqd+bClS+rS0VHUOBAYb33 9KnX3E5pjcJuzqEI8Tw/PNFjYgc4ZY6O2cNveSp3g82ajHhKjfGMd+aOWftrooKO Sab1c/pM5x+pbWR6ex7UvBxOFZlkWV+igZVKNDjgXl7A/N12ONv8RHqUS73IC9qV fEoWl7l8bH3DlhYVC1VdDaYIF8LUxQjdWJfT/FW6UjfAHnBBpEV6l4zLxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJt7zJJ/QPOBm0HGD6hoysp0+P1PMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbTN2TWtuOUE4NEdiUWNZUHFHakt5blQ0X1U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSJlMA0G CSqGSIb3DQEBCwUAA4IBAQCV4epmEgx/Y8OKWvUcfSO1MXVZFY6dt3T8ZrYn7o7T K+HJh69gcKis2G9O01k8JWo+68NsB0/nVSkwsN0d6Rso8m0oCNQzFPIq779a1NdI ozWKbS70ZkzBFN5umwJS2EiVQ1jd//44y5uYlUphMB9qwK3GV2Sm8L/fW8SGHCAv 0KOLoNCgNBPaG6Kjp/mX+0BxDkkFQleTRSd8sC65VFxSRmF/bZurEYkZefnl/Jbo S7u9Pjykd5H0LLz9bh+3ZC+OtjbT/FkptnPNhEsr8tz8HwSRFN5GlLG+xg9xXEc6 oy3zMWJ2ZLgbFq5J93wrZdFMGIwYZvqs0CCLzewyBZ4K -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:36 2026 by rpki-client