This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/M25DxF769Ii8sD3VQLHjxn_a5xs.roa File: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (raw, json) Hash identifier: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0= Subject key identifier: 33:6E:43:C4:5E:FA:F4:88:BC:B0:3D:D5:40:B1:E3:C6:7F:DA:E7:1B Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807C0F4D66E74CEB1614B28E1AD10C Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/M25DxF769Ii8sD3VQLHjxn_a5xs.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46562 IP address blocks: 188.74.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:0f:4d:66:e7:4c:eb:16:14:b2:8e:1a:d1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=336e43c45efaf488bcb03dd540b1e3c67fdae71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:0a:5c:02:2d:e8:30:38:2d:83:5e:0e:16: ac:f8:71:2d:41:19:8b:01:11:01:8e:a0:7d:5f:31: 7d:8a:40:27:7e:20:de:ee:de:11:88:21:19:b8:68: 88:5d:56:47:f1:c8:16:b0:ee:c0:10:26:dc:76:58: ef:d7:05:6a:13:69:c2:63:bc:6c:bf:3f:15:85:10: 81:11:38:29:c2:84:b1:56:fe:8c:e0:46:99:b8:b2: 5f:81:6b:7e:42:c4:60:24:fa:09:f5:00:be:54:2a: 3f:0d:6b:7c:b6:61:56:d8:33:ba:f5:3a:1d:27:a5: 69:20:49:e3:90:61:b5:a8:8c:e5:5b:f3:9b:7b:24: 6b:a5:74:80:b5:21:e7:5f:5f:87:0e:f8:95:1b:d4: c2:11:45:0a:32:a2:3f:dc:68:3d:06:76:58:d5:fe: 89:d7:2d:ce:a5:d5:a2:5f:9f:67:5e:39:78:ad:17: be:a7:b0:4b:21:ed:fa:14:f2:87:fe:c7:cf:7d:9c: 1b:10:0e:d9:45:6a:d4:e9:66:6c:ab:ae:16:55:02: 18:c6:a0:cd:ca:41:01:42:8d:2c:42:ea:df:32:78: 34:de:c5:d0:76:96:55:0f:6d:91:dd:e0:5c:e9:8c: 4e:fc:a7:4e:f2:ac:49:48:d6:59:18:91:95:80:30: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:43:C4:5E:FA:F4:88:BC:B0:3D:D5:40:B1:E3:C6:7F:DA:E7:1B X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/M25DxF769Ii8sD3VQLHjxn_a5xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.74.180.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e1:13:6c:49:69:d4:b4:b6:72:cb:ad:60:2e:9b:d3:b1:36: a6:e2:17:b9:50:5a:d0:b7:e2:f5:61:c3:00:a4:50:93:eb:c0: 6e:85:1a:1c:76:92:68:45:ca:fb:c0:1b:d7:9a:3d:ea:88:e9: c7:7d:ea:b8:c9:49:52:f5:79:7d:10:58:f3:4e:d7:91:c3:dc: f4:e0:2f:46:dc:a1:9a:d5:5c:bf:62:d5:78:ae:69:ae:56:c1: d5:bb:f8:02:e9:86:9a:6b:76:dd:6e:fb:69:de:7e:1e:c1:b6: 67:50:c7:ab:87:d0:64:d3:3e:9e:ed:42:2c:e5:f5:33:18:12: 68:26:60:27:08:9c:bf:a4:39:b2:d9:fc:bb:e9:d1:cc:13:44: 73:35:77:4a:26:e2:23:78:27:da:44:e8:b7:90:39:b0:66:74: 3c:4d:c3:90:ef:c5:36:3a:70:24:a3:d1:53:9a:d8:fe:25:c4: a3:c8:af:88:ae:54:94:a3:94:53:cd:73:ec:92:39:5a:87:e2: 38:50:41:68:ce:92:43:6d:5e:c1:b4:d4:bb:ba:44:d9:0a:83: 80:e3:a7:be:83:7f:aa:1f:9b:70:c8:a2:1e:1a:a0:ab:6f:f9: 83:24:eb:8d:2a:dd:f0:77:7a:d7:a5:55:0f:81:1a:10:50:c2: 84:94:a1:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHwPTWbnTOsWFLKOGtEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzZlNDNjNDVlZmFmNDg4YmNiMDNkZDU0MGIxZTNjNjdmZGFlNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BEKXAIt6DA4LYNeDhas+HEtQRmL AREBjqB9XzF9ikAnfiDe7t4RiCEZuGiIXVZH8cgWsO7AECbcdljv1wVqE2nCY7xs vz8VhRCBETgpwoSxVv6M4EaZuLJfgWt+QsRgJPoJ9QC+VCo/DWt8tmFW2DO69Tod J6VpIEnjkGG1qIzlW/ObeyRrpXSAtSHnX1+HDviVG9TCEUUKMqI/3Gg9BnZY1f6J 1y3OpdWiX59nXjl4rRe+p7BLIe36FPKH/sfPfZwbEA7ZRWrU6WZsq64WVQIYxqDN ykEBQo0sQurfMng03sXQdpZVD22R3eBc6YxO/KdO8qxJSNZZGJGVgDDr7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNuQ8Re+vSIvLA91UCx48Z/2ucbMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvTTI1RHhGNzY5SWk4c0QzVlFMSGp4bl9hNXhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEq0MA0G CSqGSIb3DQEBCwUAA4IBAQCZ4RNsSWnUtLZyy61gLpvTsTam4he5UFrQt+L1YcMA pFCT68BuhRocdpJoRcr7wBvXmj3qiOnHfeq4yUlS9Xl9EFjzTteRw9z04C9G3KGa 1Vy/YtV4rmmuVsHVu/gC6Yaaa3bdbvtp3n4ewbZnUMerh9Bk0z6e7UIs5fUzGBJo JmAnCJy/pDmy2fy76dHME0RzNXdKJuIjeCfaROi3kDmwZnQ8TcOQ78U2OnAko9FT mtj+JcSjyK+IrlSUo5RTzXPskjlah+I4UEFozpJDbV7BtNS7ukTZCoOA46e+g3+q H5twyKIeGqCrb/mDJOuNKt3wd3rXpVUPgRoQUMKElKEz -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:02 2026 by rpki-client