This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/MYmRAFd2hTKulpERWcjfyqZP9kI.roa File: MYmRAFd2hTKulpERWcjfyqZP9kI.roa (raw, json) Hash identifier: 9t4qZjTg0yDx0o1CgqGkaBklgr114UOMbCzHn3lQ74o= Subject key identifier: 31:89:91:00:57:76:85:32:AE:96:91:11:59:C8:DF:CA:A6:4F:F6:42 Certificate issuer: /CN=3664e4462a2902a52f826dae38565731efc5bdd3 Certificate serial: 019B77595FB835251A99C1FF2337D2D1254E Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/MYmRAFd2hTKulpERWcjfyqZP9kI.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199265 IP address blocks: 128.0.37.0/24 maxlen: 25 185.69.196.0/22 maxlen: 23 193.17.14.0/24 maxlen: 25 2001:67c:155c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5f:b8:35:25:1a:99:c1:ff:23:37:d2:d1:25:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3189910057768532ae96911159c8dfcaa64ff642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:90:f8:cc:76:25:e9:c5:89:46:73:96:f1: 59:a4:9b:ca:5c:03:60:f5:6e:9b:51:64:08:65:93: f6:e7:22:56:8a:69:c7:9a:24:30:0f:a7:d5:44:ac: fa:98:35:6a:84:2b:cc:b3:58:d9:a4:27:ab:d6:99: 73:b1:5f:90:76:5a:4b:1c:30:19:58:f7:e0:02:99: 62:57:fe:96:fa:7b:78:31:9e:d2:75:11:7f:2b:46: dd:72:eb:ba:ee:d3:28:f2:71:84:48:e7:c1:e2:14: a1:6c:ad:cc:51:1a:50:08:83:0d:e2:56:78:db:ea: 7d:fd:b2:78:d0:31:0c:82:ce:58:2b:26:17:29:a0: 45:04:6c:8b:83:78:81:28:03:05:20:b8:7b:02:1a: 80:e7:ed:19:88:d5:8a:3b:a9:b3:e1:9f:12:60:c4: d2:e2:db:83:30:da:2a:43:62:58:bc:89:d8:e8:41: f0:e7:05:ee:d9:05:5a:db:70:24:2a:ca:cb:cb:4d: 8b:b0:a3:83:09:3e:fe:b9:d7:5e:6b:9a:38:1c:87: e8:09:30:55:f2:56:89:66:f0:5c:06:f8:7b:29:c1: be:31:aa:c6:b6:bc:d4:10:04:3b:19:75:9d:65:c8: e8:6b:ee:2c:89:23:4f:68:a6:7e:90:93:39:92:d6: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:89:91:00:57:76:85:32:AE:96:91:11:59:C8:DF:CA:A6:4F:F6:42 X509v3 Authority Key Identifier: keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/MYmRAFd2hTKulpERWcjfyqZP9kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.37.0/24 185.69.196.0/22 193.17.14.0/24 IPv6: 2001:67c:155c::/48 Signature Algorithm: sha256WithRSAEncryption 60:37:5c:84:1b:37:24:cf:1c:67:99:8d:c7:32:a0:ca:dd:21: c8:b5:a6:c7:b8:68:24:01:02:02:3c:7c:9f:fd:cb:42:86:0d: b2:c6:2c:5c:bf:9a:7f:2c:f4:1d:ca:c0:0b:dc:e9:8e:5e:a9: 1d:f1:e9:68:4d:c0:e7:13:4b:f0:08:70:e8:d1:dc:54:cf:1c: 3b:7a:ef:3c:80:a9:61:b8:73:ad:6e:9b:65:09:3f:65:30:44: 72:37:69:fd:1e:0d:b3:0a:86:ac:c4:d3:b0:c0:06:05:7f:5e: 4a:0c:75:d1:48:76:f3:99:cb:85:12:a4:cd:6e:d5:73:13:3b: 02:2c:cc:20:07:a6:f6:29:6b:bf:47:97:1c:f4:b5:4e:30:07: c1:b8:74:04:8a:5a:d0:88:90:ed:13:28:e5:ff:bb:b3:5a:4a: ab:98:51:aa:b1:ba:81:87:5b:34:92:aa:29:93:3b:ab:51:67: 93:d9:7c:c9:10:32:27:c8:f1:f6:6c:36:c8:82:7d:23:3d:e2: 74:21:81:27:1a:3d:55:80:a0:c6:f7:04:62:08:aa:d0:ad:f7: a9:eb:55:84:7a:a5:ea:34:60:7e:85:d7:75:0c:31:e7:8e:ef: aa:c4:6a:1e:d7:1d:9a:32:cc:47:c4:72:c7:bf:dc:58:f5:24: ee:cf:cb:fe -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt3WV+4NSUamcH/IzfS0SVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjRlNDQ2MmEyOTAyYTUyZjgyNmRhZTM4NTY1NzMxZWZj NWJkZDMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTg5OTEwMDU3NzY4NTMyYWU5NjkxMTE1OWM4ZGZjYWE2NGZmNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ+Q+Mx2JenFiUZzlvFZpJvKXANg 9W6bUWQIZZP25yJWimnHmiQwD6fVRKz6mDVqhCvMs1jZpCer1plzsV+QdlpLHDAZ WPfgApliV/6W+nt4MZ7SdRF/K0bdcuu67tMo8nGESOfB4hShbK3MURpQCIMN4lZ4 2+p9/bJ40DEMgs5YKyYXKaBFBGyLg3iBKAMFILh7AhqA5+0ZiNWKO6mz4Z8SYMTS 4tuDMNoqQ2JYvInY6EHw5wXu2QVa23AkKsrLy02LsKODCT7+uddea5o4HIfoCTBV 8laJZvBcBvh7KcG+MarGtrzUEAQ7GXWdZcjoa+4siSNPaKZ+kJM5ktYV/wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDGJkQBXdoUyrpaREVnI38qmT/ZCMB8GA1UdIwQY MBaAFDZk5EYqKQKlL4JtrjhWVzHvxb3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEt YTQ1YjFhNGFjZTU2LzEvTVltUkFGZDJoVEt1bHBFUldjamZ5cVpQOWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEtYTQ1YjFhNGFjZTU2 LzEvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAgAAlAwQC uUXEAwQAwREOMA8EAgACMAkDBwAgAQZ8FVwwDQYJKoZIhvcNAQELBQADggEBAGA3 XIQbNyTPHGeZjccyoMrdIci1pse4aCQBAgI8fJ/9y0KGDbLGLFy/mn8s9B3KwAvc 6Y5eqR3x6WhNwOcTS/AIcOjR3FTPHDt67zyAqWG4c61um2UJP2UwRHI3af0eDbMK hqzE07DABgV/XkoMddFIdvOZy4USpM1u1XMTOwIszCAHpvYpa79Hlxz0tU4wB8G4 dASKWtCIkO0TKOX/u7NaSquYUaqxuoGHWzSSqimTO6tRZ5PZfMkQMifI8fZsNsiC fSM94nQhgScaPVWAoMb3BGIIqtCt96nrVYR6peo0YH6F13UMMeeO76rEah7XHZoy zEfEcse/3Fj1JO7Py/4= -----END CERTIFICATE-----Generated at Tue Feb 10 07:52:03 2026 by rpki-client