This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m-nZmrOhOvhung4YHVdC3_kTtKc.roa File: m-nZmrOhOvhung4YHVdC3_kTtKc.roa (raw, json) Hash identifier: PI1axdAZyVhhs3DuREYJS2UXrWV1CgQLs+42R5gJ99g= Subject key identifier: 9B:E9:D9:9A:B3:A1:3A:F8:6E:9E:0E:18:1D:57:42:DF:F9:13:B4:A7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9D7CCB582C498B352B26DA8C7D07 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m-nZmrOhOvhung4YHVdC3_kTtKc.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 77.107.88.0/24 maxlen: 24 81.168.83.0/24 maxlen: 24 81.168.119.0/24 maxlen: 24 217.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9d:7c:cb:58:2c:49:8b:35:2b:26:da:8c:7d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be9d99ab3a13af86e9e0e181d5742dff913b4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:a8:9e:2d:b0:4c:0b:f3:2f:2a:5d:24:91: 8a:ff:f7:fe:8f:6d:aa:e9:88:8c:62:ab:86:20:3d: f1:e6:66:ee:7c:f1:fa:af:1a:1b:cf:c1:9a:1c:82: d3:30:52:09:cc:0f:16:b3:94:b3:fe:fa:3b:f0:34: e8:2c:6d:b0:f7:a5:eb:ab:c8:56:8c:41:f1:19:62: eb:e3:a2:e2:cd:3e:05:ba:8a:30:d3:24:f9:e9:de: 21:d7:bc:cb:99:6f:67:58:d8:4c:65:22:0c:3e:c2: 13:d4:0f:f7:e5:b0:73:de:3b:cd:ac:19:28:07:c9: ea:28:a6:5c:40:87:e7:d7:58:97:17:53:1d:93:90: d1:86:28:51:40:7f:d4:03:14:81:60:01:0f:17:dc: c0:d4:0a:39:39:7f:d8:5e:13:89:22:5f:2a:78:05: e6:17:8d:40:b6:0f:34:88:82:3c:77:03:ba:96:ad: 29:16:d8:70:66:90:20:98:32:fc:81:b2:8c:4e:95: 23:09:c5:36:26:d1:ea:95:5c:72:5a:54:8b:16:2e: 84:c1:1a:8f:53:22:13:61:aa:ad:24:f0:b1:3d:1e: 95:e2:b5:45:fe:ab:9a:05:98:73:5d:59:f8:42:02: 31:9b:f2:5e:18:29:0a:c8:d4:52:75:f8:77:cc:71: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E9:D9:9A:B3:A1:3A:F8:6E:9E:0E:18:1D:57:42:DF:F9:13:B4:A7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m-nZmrOhOvhung4YHVdC3_kTtKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.88.0/24 81.168.83.0/24 81.168.119.0/24 217.145.73.0/24 Signature Algorithm: sha256WithRSAEncryption 17:82:31:55:fe:52:0b:88:70:07:c8:3d:59:8d:4a:87:76:d8: 95:43:50:72:6f:88:82:1d:7e:38:f6:de:94:6a:50:e8:aa:f3: 20:eb:4f:7c:33:0c:77:a1:18:76:4c:ab:2d:cd:b9:70:6d:d0: 41:f8:7f:02:e9:67:34:49:d4:5d:cf:60:30:54:18:05:3e:cd: 13:6c:6f:90:26:79:08:6a:67:27:3b:70:ac:83:fd:9b:4d:9e: da:60:7a:52:0c:d6:c2:ea:16:3c:db:32:3e:35:0d:76:28:6e: 06:bc:57:f9:67:94:0d:b5:e6:8b:0f:64:2c:76:ee:a9:72:84: 7d:43:4e:7e:f2:34:c3:c7:3f:61:8f:ee:ca:8c:93:76:e9:4b: 89:db:3c:0a:72:7f:52:ac:9d:af:64:38:d6:65:8e:aa:9e:98: d1:8a:97:b5:96:45:c9:b5:c3:93:14:bd:4c:d6:11:a8:97:59: 49:92:66:d2:f9:32:e5:54:b4:6d:ad:22:3f:f2:45:eb:30:3d: 69:34:c0:a1:f3:ce:a4:e3:db:05:9a:9d:cb:59:be:0b:f3:d5: 09:e5:9f:9e:53:18:08:97:84:5d:d7:fb:37:99:88:e1:c0:e2: f9:00:66:26:9e:ab:57:1c:1c:88:c6:f9:d5:76:90:04:a2:b6: 67:9b:e5:45 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6Wp18y1gsSYs1KybajH0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmU5ZDk5YWIzYTEzYWY4NmU5ZTBlMTgxZDU3NDJkZmY5MTNiNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryqoni2wTAvzLypdJJGK//f+j22q 6YiMYquGID3x5mbufPH6rxobz8GaHILTMFIJzA8Ws5Sz/vo78DToLG2w96Xrq8hW jEHxGWLr46LizT4Fuoow0yT56d4h17zLmW9nWNhMZSIMPsIT1A/35bBz3jvNrBko B8nqKKZcQIfn11iXF1Mdk5DRhihRQH/UAxSBYAEPF9zA1Ao5OX/YXhOJIl8qeAXm F41Atg80iII8dwO6lq0pFthwZpAgmDL8gbKMTpUjCcU2JtHqlVxyWlSLFi6EwRqP UyITYaqtJPCxPR6V4rVF/quaBZhzXVn4QgIxm/JeGCkKyNRSdfh3zHEzKwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJvp2ZqzoTr4bp4OGB1XQt/5E7SnMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvbS1uWm1yT2hPdmh1bmc0WUhWZEMzX2tUdEtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATWtYAwQA UahTAwQAUah3AwQA2ZFJMA0GCSqGSIb3DQEBCwUAA4IBAQAXgjFV/lILiHAHyD1Z jUqHdtiVQ1Byb4iCHX449t6UalDoqvMg6098Mwx3oRh2TKstzblwbdBB+H8C6Wc0 SdRdz2AwVBgFPs0TbG+QJnkIamcnO3Csg/2bTZ7aYHpSDNbC6hY82zI+NQ12KG4G vFf5Z5QNteaLD2Qsdu6pcoR9Q05+8jTDxz9hj+7KjJN26UuJ2zwKcn9SrJ2vZDjW ZY6qnpjRipe1lkXJtcOTFL1M1hGol1lJkmbS+TLlVLRtrSI/8kXrMD1pNMCh886k 49sFmp3LWb4L89UJ5Z+eUxgIl4Rd1/s3mYjhwOL5AGYmnqtXHByIxvnVdpAEorZn m+VF -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:52 2026 by rpki-client