This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m0DeYX-V30V4UwEbU2h1QWuix-M.roa File: m0DeYX-V30V4UwEbU2h1QWuix-M.roa (raw, json) Hash identifier: afELCdA77FWcxkzJwWM67yB5DsfgJQZxu41FpASk5LU= Subject key identifier: 9B:40:DE:61:7F:95:DF:45:78:53:01:1B:53:68:75:41:6B:A2:C7:E3 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1334B487C6A056F92B3ABC18B1F104 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m0DeYX-V30V4UwEbU2h1QWuix-M.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35830 IP address blocks: 5.181.171.0/24 maxlen: 24 5.183.254.0/24 maxlen: 24 45.66.210.0/24 maxlen: 24 45.66.211.0/24 maxlen: 24 45.132.186.0/24 maxlen: 24 45.132.187.0/24 maxlen: 24 45.148.126.0/24 maxlen: 24 185.61.216.0/24 maxlen: 24 185.61.220.0/24 maxlen: 24 185.81.144.0/24 maxlen: 24 185.81.145.0/24 maxlen: 24 185.88.102.0/24 maxlen: 24 185.88.103.0/24 maxlen: 24 185.96.37.0/24 maxlen: 24 185.102.112.0/24 maxlen: 24 185.102.113.0/24 maxlen: 24 213.232.121.0/24 maxlen: 24 213.232.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:34:b4:87:c6:a0:56:f9:2b:3a:bc:18:b1:f1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b40de617f95df457853011b536875416ba2c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:db:0f:fa:9c:0c:9d:4d:21:2f:76:68:e2: cc:8f:3c:d4:eb:9d:d2:3b:51:3e:bd:e7:17:d7:a2: 85:56:4d:73:44:3d:5c:65:95:91:3e:15:8d:ba:f5: c5:2d:1e:b3:ae:a1:0a:30:d0:18:01:63:d5:5d:67: e5:be:7f:32:fb:a9:e0:d9:50:c9:a6:2b:d0:ad:62: 50:83:e3:6a:ed:82:a0:a7:b3:e2:56:ce:00:d7:7e: 55:53:62:ee:87:31:f6:72:eb:23:83:03:d5:08:e7: 84:ed:18:8e:7c:b6:24:d0:10:22:79:8d:a0:9b:61: e8:b7:7a:29:d8:2d:07:a6:e8:74:3f:9d:bc:4c:05: c2:bf:52:1f:5f:45:00:d5:5a:3c:ab:25:52:62:1c: 12:b8:75:2b:95:4d:23:a6:33:35:67:89:34:d5:13: de:ea:e7:ad:7f:da:f4:c2:32:8e:a6:98:41:a7:57: 0f:ae:ae:af:3a:f8:87:88:13:d3:1a:31:e9:fd:7d: dd:8c:75:24:f5:dd:1e:84:94:09:55:d2:f6:99:06: 1f:13:77:76:a1:6b:79:23:29:f8:1f:87:bb:c5:75: 72:64:d2:87:7f:00:9f:98:7c:25:2f:2e:82:b4:1b: 77:9d:65:2c:aa:11:4f:df:52:68:fb:de:bb:4a:81: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:40:DE:61:7F:95:DF:45:78:53:01:1B:53:68:75:41:6B:A2:C7:E3 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m0DeYX-V30V4UwEbU2h1QWuix-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.171.0/24 5.183.254.0/24 45.66.210.0/23 45.132.186.0/23 45.148.126.0/24 185.61.216.0/24 185.61.220.0/24 185.81.144.0/23 185.88.102.0/23 185.96.37.0/24 185.102.112.0/23 213.232.121.0/24 213.232.123.0/24 Signature Algorithm: sha256WithRSAEncryption 39:fc:19:4d:a1:4d:d6:24:44:fa:98:43:65:bc:c7:b9:30:b6: d5:c8:07:98:27:f4:41:94:fd:0f:c1:4d:b6:a2:30:b9:0e:d6: bc:89:92:8c:7d:b8:7e:0a:3d:8e:49:d1:00:a2:4f:74:c7:2a: f7:17:67:7a:46:2f:3e:25:80:06:30:c0:75:d2:1b:66:13:f5: 0c:82:c4:5d:cf:f3:01:1c:05:05:c1:cd:28:25:82:58:62:88: 0e:2b:94:de:4d:68:0e:5f:e6:a6:f9:3f:a3:c1:e0:d1:02:a2: 08:4b:c5:56:ae:80:05:7a:00:01:05:41:fd:85:0c:85:37:49: f2:93:55:6b:a6:57:4a:99:b0:b0:c1:6e:a9:54:61:b0:8d:e2: 8c:5f:a7:25:be:a7:48:67:49:bf:3c:ea:e1:73:d1:e4:21:0b: 3e:b5:40:bc:ea:76:62:94:a2:75:44:b7:53:ba:a4:0f:4f:9f: 06:b3:85:67:de:6e:d9:a1:bf:51:78:29:53:b0:88:fb:e0:ed: f9:25:f6:58:23:ed:41:d1:5e:0f:d1:e0:e9:1f:2d:f5:f7:4d: 32:07:ff:c2:3d:04:9a:fc:70:fb:ec:87:46:0d:05:36:6a:3c: 08:94:ff:4c:8c:95:79:dd:25:40:78:9e:be:89:d9:6d:49:78: 6e:61:21:1b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt8EzS0h8agVvkrOrwYsfEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjQwZGU2MTdmOTVkZjQ1Nzg1MzAxMWI1MzY4NzU0MTZiYTJjN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6XbD/qcDJ1NIS92aOLMjzzU653S O1E+vecX16KFVk1zRD1cZZWRPhWNuvXFLR6zrqEKMNAYAWPVXWflvn8y+6ng2VDJ pivQrWJQg+Nq7YKgp7PiVs4A135VU2LuhzH2cusjgwPVCOeE7RiOfLYk0BAieY2g m2Hot3op2C0Hpuh0P528TAXCv1IfX0UA1Vo8qyVSYhwSuHUrlU0jpjM1Z4k01RPe 6uetf9r0wjKOpphBp1cPrq6vOviHiBPTGjHp/X3djHUk9d0ehJQJVdL2mQYfE3d2 oWt5Iyn4H4e7xXVyZNKHfwCfmHwlLy6CtBt3nWUsqhFP31Jo+967SoFHVQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFJtA3mF/ld9FeFMBG1NodUFrosfjMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvbTBEZVlYLVYzMFY0VXdFYlUyaDFRV3VpeC1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABbWrAwQA Bbf+AwQBLULSAwQBLYS6AwQALZR+AwQAuT3YAwQAuT3cAwQBuVGQAwQBuVhmAwQA uWAlAwQBuWZwAwQA1eh5AwQA1eh7MA0GCSqGSIb3DQEBCwUAA4IBAQA5/BlNoU3W JET6mENlvMe5MLbVyAeYJ/RBlP0PwU22ojC5Dta8iZKMfbh+Cj2OSdEAok90xyr3 F2d6Ri8+JYAGMMB10htmE/UMgsRdz/MBHAUFwc0oJYJYYogOK5TeTWgOX+am+T+j weDRAqIIS8VWroAFegABBUH9hQyFN0nyk1VrpldKmbCwwW6pVGGwjeKMX6clvqdI Z0m/POrhc9HkIQs+tUC86nZilKJ1RLdTuqQPT58Gs4Vn3m7Zob9ReClTsIj74O35 JfZYI+1B0V4P0eDpHy31900yB//CPQSa/HD77IdGDQU2ajwIlP9MjJV53SVAeJ6+ idltSXhuYSEb -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:14 2026 by rpki-client