This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RMSbReZxAHoFg9QhadNO9TahUm8.roa File: RMSbReZxAHoFg9QhadNO9TahUm8.roa (raw, json) Hash identifier: f0AnUWtxhrAYYQTYCZDIqQ5s08RCO7RTaWlG1CYAjZ0= Subject key identifier: 44:C4:9B:45:E6:71:00:7A:05:83:D4:21:69:D3:4E:F5:36:A1:52:6F Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AAF0E1D66C660500921A98AA9C37 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RMSbReZxAHoFg9QhadNO9TahUm8.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.232.87.0/24 maxlen: 32 193.232.135.0/24 maxlen: 32 193.232.136.0/24 maxlen: 32 193.232.140.0/24 maxlen: 32 193.232.244.0/24 maxlen: 32 194.85.107.0/24 maxlen: 32 194.85.177.0/24 maxlen: 32 194.190.119.0/24 maxlen: 32 194.190.120.0/24 maxlen: 32 194.226.100.0/22 maxlen: 32 195.208.208.0/21 maxlen: 32 2001:7f8:20:101::/64 maxlen: 128 2001:7f8:20:201::/64 maxlen: 128 2001:7f8:20:202::/64 maxlen: 128 2001:7f8:20:301::/64 maxlen: 128 2001:7f8:20:401::/64 maxlen: 128 2001:7f8:20:501::/64 maxlen: 128 2001:7f8:20:601::/64 maxlen: 128 2001:7f8:20:701::/64 maxlen: 128 2001:7f8:20:801::/64 maxlen: 128 2001:7f8:20:901::/64 maxlen: 128 2001:7f8:20:1101::/64 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:aa:f0:e1:d6:6c:66:05:00:92:1a:98:aa:9c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c49b45e671007a0583d42169d34ef536a1526f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:ab:6b:89:ec:6b:f8:0e:a9:28:25:d8:1c: 33:1e:8e:ba:04:81:8d:52:1e:82:e2:f7:ed:74:ed: 86:03:a5:5f:8c:1c:72:48:9b:74:c2:af:59:a4:b6: 3c:79:b0:7a:d7:12:96:1f:b2:8b:48:bd:5c:ec:77: 95:32:61:9a:45:79:f9:48:eb:a4:a7:dd:be:75:74: ae:82:f0:07:96:da:6f:aa:cf:d7:b4:1e:f9:ea:d0: c0:2b:14:f1:b5:3a:10:cc:52:12:c9:bf:18:90:57: db:81:c7:c5:98:8d:6b:ee:e8:fb:d5:c4:93:35:63: 58:2e:5f:12:ca:eb:a6:cb:c0:55:27:cd:44:ee:be: 1a:ec:c8:2b:ec:6a:c5:7e:20:d8:4c:2c:fb:a4:3e: 88:5b:2e:cb:c5:7d:04:fd:05:74:03:1c:0b:86:9c: 6c:6b:44:72:c4:bb:bb:79:b1:89:a2:0b:8a:34:e3: fb:7b:f4:c1:3f:4e:1c:b1:86:1e:56:a3:9b:94:40: 3a:ed:8d:5f:f3:83:b7:45:b5:49:fb:8c:cb:af:fe: 1c:04:e1:0d:96:8e:dc:31:a5:49:d1:62:b7:71:fd: c2:a2:08:b0:37:86:38:14:18:c7:c3:31:89:4b:05: 79:68:78:be:49:8b:ce:bd:09:31:b1:b4:ec:ab:d9: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:9B:45:E6:71:00:7A:05:83:D4:21:69:D3:4E:F5:36:A1:52:6F X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RMSbReZxAHoFg9QhadNO9TahUm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.87.0/24 193.232.135.0-193.232.136.255 193.232.140.0/24 193.232.244.0/24 194.85.107.0/24 194.85.177.0/24 194.190.119.0-194.190.120.255 194.226.100.0/22 195.208.208.0/21 IPv6: 2001:7f8:20:101::/64 2001:7f8:20:201::-2001:7f8:20:202:ffff:ffff:ffff:ffff 2001:7f8:20:301::/64 2001:7f8:20:401::/64 2001:7f8:20:501::/64 2001:7f8:20:601::/64 2001:7f8:20:701::/64 2001:7f8:20:801::/64 2001:7f8:20:901::/64 2001:7f8:20:1101::/64 Signature Algorithm: sha256WithRSAEncryption 82:bf:e2:4d:2d:6c:72:67:77:c7:a4:c4:78:36:5a:da:85:3d: dc:c9:33:ed:f9:b7:0a:44:6c:16:b7:04:e4:ea:4c:ab:2a:39: b6:3e:e9:da:8f:2f:6e:0a:42:35:38:bb:e2:42:3b:51:78:14: b1:81:51:7f:a9:d6:b5:4c:13:27:4b:fc:74:50:c0:11:2c:b8: fb:c5:23:d3:73:3c:75:53:14:52:06:91:5f:6d:d2:36:a3:62: 28:1a:1d:e2:15:00:5c:2d:28:dd:70:02:df:df:c9:92:4f:c8: 4a:09:e7:55:1b:15:ae:7f:4d:41:56:28:45:43:3e:dd:ae:a2: cd:a3:ca:55:97:1e:63:d9:20:23:e9:b7:0c:7c:f7:04:fd:1d: 99:73:83:c2:8b:ab:6a:3f:d0:cc:02:d9:c9:f9:10:4f:0d:5c: 19:02:4c:8f:59:2e:50:87:e1:ad:10:d5:a0:2e:52:59:db:4f: 39:6e:d0:87:91:67:63:fa:cc:17:4a:b1:8d:45:0b:21:11:a2: 98:fe:1f:8e:76:9a:1d:5e:8f:4b:cd:ec:a9:d1:20:ca:90:0b: c5:72:eb:ce:74:6c:64:a5:2b:46:c6:dc:6e:3b:eb:c1:47:e9: 65:93:93:5e:46:6e:cc:64:d5:fb:6c:23:68:c3:7e:e5:5b:32: 75:a4:15:34 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt7Nqrw4dZsZgUAkhqYqpw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGM0OWI0NWU2NzEwMDdhMDU4M2Q0MjE2OWQzNGVmNTM2YTE1MjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWyra4nsa/gOqSgl2BwzHo66BIGN Uh6C4vftdO2GA6VfjBxySJt0wq9ZpLY8ebB61xKWH7KLSL1c7HeVMmGaRXn5SOuk p92+dXSugvAHltpvqs/XtB756tDAKxTxtToQzFISyb8YkFfbgcfFmI1r7uj71cST NWNYLl8Syuumy8BVJ81E7r4a7Mgr7GrFfiDYTCz7pD6IWy7LxX0E/QV0AxwLhpxs a0RyxLu7ebGJoguKNOP7e/TBP04csYYeVqOblEA67Y1f84O3RbVJ+4zLr/4cBOEN lo7cMaVJ0WK3cf3CogiwN4Y4FBjHwzGJSwV5aHi+SYvOvQkxsbTsq9kTDQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFETEm0XmcQB6BYPUIWnTTvU2oVJvMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvUk1TYlJlWnhBSG9GZzlRaGFkTk85VGFoVW04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jBMBAIAATBGAwQAwehX MAwDBADB6IcDBADB6IgDBADB6IwDBADB6PQDBADCVWsDBADCVbEwDAMEAMK+dwME AMK+eAMEAsLiZAMEA8PQ0DCBgQQCAAIwewMJACABB/gAIAEBMBYDCQAgAQf4ACAC AQMJACABB/gAIAICAwkAIAEH+AAgAwEDCQAgAQf4ACAEAQMJACABB/gAIAUBAwkA IAEH+AAgBgEDCQAgAQf4ACAHAQMJACABB/gAIAgBAwkAIAEH+AAgCQEDCQAgAQf4 ACARATANBgkqhkiG9w0BAQsFAAOCAQEAgr/iTS1scmd3x6TEeDZa2oU93Mkz7fm3 CkRsFrcE5OpMqyo5tj7p2o8vbgpCNTi74kI7UXgUsYFRf6nWtUwTJ0v8dFDAESy4 +8Uj03M8dVMUUgaRX23SNqNiKBod4hUAXC0o3XAC39/Jkk/ISgnnVRsVrn9NQVYo RUM+3a6izaPKVZceY9kgI+m3DHz3BP0dmXODwouraj/QzALZyfkQTw1cGQJMj1ku UIfhrRDVoC5SWdtPOW7Qh5FnY/rMF0qxjUULIRGimP4fjnaaHV6PS83sqdEgypAL xXLrznRsZKUrRsbcbjvrwUfpZZOTXkZuzGTV+2wjaMN+5VsydaQVNA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client