This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m3h4iLcaPQOj4mkt8xwL6TgpAf4.roa File: m3h4iLcaPQOj4mkt8xwL6TgpAf4.roa (raw, json) Hash identifier: upw5eeKNc0KSO7ORxrO1nNKISxctSMC3RGgjHlGAzFU= Subject key identifier: 9B:78:78:88:B7:1A:3D:03:A3:E2:69:2D:F3:1C:0B:E9:38:29:01:FE Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A0DCA2A5B7684EC6E4ACD07A5370 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m3h4iLcaPQOj4mkt8xwL6TgpAf4.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33905 IP address blocks: 2.18.48.0/24 maxlen: 24 2.18.49.0/24 maxlen: 24 2.18.50.0/24 maxlen: 24 2.18.51.0/24 maxlen: 24 2.18.52.0/24 maxlen: 24 2.18.53.0/24 maxlen: 24 2.18.54.0/24 maxlen: 24 2.18.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a0:dc:a2:a5:b7:68:4e:c6:e4:ac:d0:7a:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b787888b71a3d03a3e2692df31c0be9382901fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:c6:99:d1:f7:e2:ca:78:db:ab:35:ee:00: bb:62:7f:73:e8:96:ec:38:ff:b2:c6:9e:8f:bc:64: a1:6e:56:3d:1e:25:bf:9e:3e:8d:e3:26:38:74:39: 76:d2:83:f1:6b:47:2d:96:71:e1:bd:7e:4f:13:07: 34:4e:6d:3b:6f:91:c9:ec:bd:5c:3f:7d:38:dc:97: b7:e1:d4:dd:23:e9:30:a6:a8:8c:35:14:bf:53:b8: 84:75:ad:8d:c1:be:f4:52:50:dd:24:18:0b:b1:b7: f4:3f:e3:47:bb:e6:88:45:ce:4a:6c:c6:0f:91:e9: c2:88:9a:de:24:bc:d7:31:b5:66:a4:91:19:dd:f1: 57:c4:f5:35:ce:fc:3b:a6:66:bd:93:f8:3e:64:24: f2:ad:0a:1f:09:14:f9:c1:16:01:3d:a7:28:d0:49: 48:7d:49:31:8a:f9:2a:02:df:1f:b5:ed:45:1e:88: f5:5a:c8:5c:46:b9:65:94:12:7a:13:4c:9a:1a:2f: 6b:24:b4:b7:a0:4b:9d:ab:e9:09:cb:d3:24:6c:f9: c9:ca:5f:3b:a8:84:ea:81:a1:f8:c5:87:80:56:d6: 10:e9:4d:0b:8f:ae:69:5a:73:0a:86:81:d6:bc:0f: 56:84:ef:7c:9d:8f:6f:a8:72:24:f0:56:1c:b3:5b: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:78:88:B7:1A:3D:03:A3:E2:69:2D:F3:1C:0B:E9:38:29:01:FE X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m3h4iLcaPQOj4mkt8xwL6TgpAf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.18.48.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:6c:55:3c:61:05:71:35:55:13:34:e8:e2:ef:fb:05:a1:fd: 2d:a5:d8:cc:d1:fd:14:c6:17:7f:c1:cf:fa:e8:d9:0e:b3:13: 5b:3f:45:48:48:40:ce:c2:48:47:83:d6:cb:6f:81:89:c2:65: 56:28:e3:a2:9f:08:cb:2a:68:72:8e:25:dd:5f:a9:75:c4:8c: 0e:4c:42:2e:4f:dc:6c:6d:8b:92:76:ba:98:06:29:cd:6c:8a: a9:18:44:cb:85:f2:74:98:e8:80:17:a8:aa:e9:63:6b:08:fd: 56:31:eb:0c:61:67:c7:fe:6d:01:5d:a5:43:c2:37:7a:b4:c2: 0e:e9:64:41:ac:1b:4f:c0:4d:fe:78:97:cf:fd:6b:e2:3b:97: 25:7f:45:da:a8:9f:33:ae:b9:04:98:d4:ec:e4:eb:aa:6f:cb: 11:fd:49:c5:c0:de:25:2e:ba:1b:a5:88:99:40:c6:af:62:06: cb:b7:71:f5:7a:ff:7a:70:4e:ad:d4:61:96:64:8c:98:9e:a2: bd:b5:e1:5c:fa:63:d0:57:7f:b4:83:26:39:41:b1:bb:96:7e: bf:ca:f2:5e:4a:34:14:66:a6:a4:3e:08:81:45:83:17:6d:1d: 5b:b7:38:43:33:33:0b:94:94:99:70:02:95:7e:0a:af:48:5e: c0:f2:9f:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaDcoqW3aE7G5KzQelNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc4Nzg4OGI3MWEzZDAzYTNlMjY5MmRmMzFjMGJlOTM4MjkwMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJfGmdH34sp426s17gC7Yn9z6Jbs OP+yxp6PvGShblY9HiW/nj6N4yY4dDl20oPxa0ctlnHhvX5PEwc0Tm07b5HJ7L1c P3043Je34dTdI+kwpqiMNRS/U7iEda2Nwb70UlDdJBgLsbf0P+NHu+aIRc5KbMYP kenCiJreJLzXMbVmpJEZ3fFXxPU1zvw7pma9k/g+ZCTyrQofCRT5wRYBPaco0ElI fUkxivkqAt8fte1FHoj1WshcRrlllBJ6E0yaGi9rJLS3oEudq+kJy9MkbPnJyl87 qITqgaH4xYeAVtYQ6U0Lj65pWnMKhoHWvA9WhO98nY9vqHIk8FYcs1tFvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJt4eIi3Gj0Do+JpLfMcC+k4KQH+MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvbTNoNGlMY2FQUU9qNG1rdDh4d0w2VGdwQWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAhIwMA0G CSqGSIb3DQEBCwUAA4IBAQCNbFU8YQVxNVUTNOji7/sFof0tpdjM0f0Uxhd/wc/6 6NkOsxNbP0VISEDOwkhHg9bLb4GJwmVWKOOinwjLKmhyjiXdX6l1xIwOTEIuT9xs bYuSdrqYBinNbIqpGETLhfJ0mOiAF6iq6WNrCP1WMesMYWfH/m0BXaVDwjd6tMIO 6WRBrBtPwE3+eJfP/WviO5clf0XaqJ8zrrkEmNTs5Ouqb8sR/UnFwN4lLrobpYiZ QMavYgbLt3H1ev96cE6t1GGWZIyYnqK9teFc+mPQV3+0gyY5QbG7ln6/yvJeSjQU ZqakPgiBRYMXbR1btzhDMzMLlJSZcAKVfgqvSF7A8p9V -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:42 2026 by rpki-client