This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/m_R3fUozzL87EYeBBOJB4HDCEG0.roa File: m_R3fUozzL87EYeBBOJB4HDCEG0.roa (raw, json) Hash identifier: Kb4aDfQxNlTgIE8pMcyu4olptfzwH607RGeuUZmL39o= Subject key identifier: 9B:F4:77:7D:4A:33:CC:BF:3B:11:87:81:04:E2:41:E0:70:C2:10:6D Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea Certificate serial: 019B7B3599ACAE45408398DD92FC17AE947D Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/m_R3fUozzL87EYeBBOJB4HDCEG0.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49736 IP address blocks: 213.108.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:99:ac:ae:45:40:83:98:dd:92:fc:17:ae:94:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bf4777d4a33ccbf3b11878104e241e070c2106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:fc:db:69:e7:60:08:28:e1:1f:8d:0e:a0: 79:5e:40:e6:6c:b6:f6:de:d4:4c:68:58:b3:45:5a: fb:81:ae:fa:4a:ff:54:ab:b0:cc:8b:f6:21:ec:47: 9d:25:18:ae:f8:21:a5:6e:bc:97:cf:ef:2b:d6:2b: 1f:d2:7a:d8:c7:a1:29:f9:c8:62:1a:bd:4b:8e:e0: 82:65:9e:64:ef:3a:26:11:1d:5a:32:7b:8b:71:30: 03:26:1f:69:47:56:9f:cc:83:90:f0:4b:70:9e:5d: 47:aa:16:40:5b:59:0b:79:dd:eb:df:fa:51:b6:01: 65:9c:b0:ef:09:12:6a:50:21:d2:5a:7e:3a:7e:38: 12:a4:b5:17:51:71:b6:df:5b:04:9c:e6:b9:05:13: a8:b0:b0:17:42:d3:9c:55:03:75:53:03:03:27:4c: c1:79:ef:ba:b6:be:ab:63:2a:15:46:d8:49:de:84: 68:3f:7b:e5:70:99:47:98:07:e3:ea:5e:3e:8d:dc: c0:8f:b0:5b:94:57:51:cb:88:c7:c7:c5:60:20:0b: 1a:cd:db:1b:3d:08:15:17:b6:04:c4:30:96:b5:66: 88:3a:71:67:ac:72:57:0a:8e:54:ee:e0:d2:f4:be: 07:fa:f2:92:ee:7f:64:09:6c:65:c7:3d:f4:11:8d: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F4:77:7D:4A:33:CC:BF:3B:11:87:81:04:E2:41:E0:70:C2:10:6D X509v3 Authority Key Identifier: keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/m_R3fUozzL87EYeBBOJB4HDCEG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.184.0/21 Signature Algorithm: sha256WithRSAEncryption 38:7b:0a:72:b1:dc:33:a0:74:ec:ac:64:4e:06:fc:6d:4a:76: be:25:cf:70:62:28:1e:a3:52:75:cf:cd:46:46:c8:c7:3a:32: 1f:be:b4:38:84:88:25:8c:e0:8a:e7:b0:eb:c6:3a:41:5a:7a: 92:df:33:3b:78:1e:ea:80:37:2a:3b:cb:c8:74:e4:74:bf:5f: 36:3f:11:ed:de:71:57:7d:14:d8:73:1f:f5:59:77:5d:63:f5: 02:da:ba:d6:05:54:6f:ed:2e:bf:11:ad:84:5f:1b:af:c6:05: 9b:e5:5f:fb:60:dc:32:f5:45:32:25:35:df:05:d7:3b:d7:b7: 36:8b:c0:1d:83:5a:d1:3d:62:5d:48:a5:10:ec:01:e6:16:c4: 23:ec:c7:c9:95:4d:99:32:7a:56:8c:03:7c:09:64:59:bb:80: 5e:24:fc:4c:7b:70:b9:bf:b6:f7:a8:ad:0b:cc:74:a4:ff:94: 0d:fa:70:08:20:5a:45:ea:46:26:87:99:ff:5e:bb:a9:e5:51: fc:8f:15:47:fb:1f:f6:50:c3:fd:31:a6:ff:d0:e0:9c:be:2f: 95:fa:06:b9:24:e5:3e:93:ca:51:7b:30:62:04:dd:92:0b:56: b9:6c:5c:b8:92:d0:76:1a:39:d3:fd:10:6c:4f:f9:2f:17:c9: 9e:3d:ed:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZmsrkVAg5jdkvwXrpR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmQyYzJiNjljMjQ4NTE2MjNiZjkxNDc2OTAyNjM1YTRj ZTA5ZWEwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmY0Nzc3ZDRhMzNjY2JmM2IxMTg3ODEwNGUyNDFlMDcwYzIxMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAr822nnYAgo4R+NDqB5XkDmbLb2 3tRMaFizRVr7ga76Sv9Uq7DMi/Yh7EedJRiu+CGlbryXz+8r1isf0nrYx6Ep+chi Gr1LjuCCZZ5k7zomER1aMnuLcTADJh9pR1afzIOQ8Etwnl1HqhZAW1kLed3r3/pR tgFlnLDvCRJqUCHSWn46fjgSpLUXUXG231sEnOa5BROosLAXQtOcVQN1UwMDJ0zB ee+6tr6rYyoVRthJ3oRoP3vlcJlHmAfj6l4+jdzAj7BblFdRy4jHx8VgIAsazdsb PQgVF7YExDCWtWaIOnFnrHJXCo5U7uDS9L4H+vKS7n9kCWxlxz30EY0JXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJv0d31KM8y/OxGHgQTiQeBwwhBtMB8GA1UdIwQY MBaAFF5tLCtpwkhRYjv5FHaQJjWkzgnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEt ZTdiYjUwYmMwODFiLzEvbV9SM2ZVb3p6TDg3RVllQkJPSkI0SERDRUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEtZTdiYjUwYmMwODFi LzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1Wy4MA0G CSqGSIb3DQEBCwUAA4IBAQA4ewpysdwzoHTsrGROBvxtSna+Jc9wYigeo1J1z81G RsjHOjIfvrQ4hIgljOCK57DrxjpBWnqS3zM7eB7qgDcqO8vIdOR0v182PxHt3nFX fRTYcx/1WXddY/UC2rrWBVRv7S6/Ea2EXxuvxgWb5V/7YNwy9UUyJTXfBdc717c2 i8Adg1rRPWJdSKUQ7AHmFsQj7MfJlU2ZMnpWjAN8CWRZu4BeJPxMe3C5v7b3qK0L zHSk/5QN+nAIIFpF6kYmh5n/Xrup5VH8jxVH+x/2UMP9Mab/0OCcvi+V+ga5JOU+ k8pRezBiBN2SC1a5bFy4ktB2GjnT/RBsT/kvF8mePe0Q -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:17 2026 by rpki-client