This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa File: m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa (raw, json) Hash identifier: JyQkpr8DHxnP4GkQcPbRn8ESMBpHk6iJejQz7SBKaYY= Subject key identifier: 9B:8C:E3:A7:E3:30:04:B8:2D:21:C5:3A:08:BF:E7:33:D8:E6:1D:70 Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Certificate serial: 019B7CEDF7B06ECB33CF29E48C25BF5632C2 Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42844 IP address blocks: 91.196.224.0/22 maxlen: 24 91.211.108.0/22 maxlen: 24 195.234.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f7:b0:6e:cb:33:cf:29:e4:8c:25:bf:56:32:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b8ce3a7e33004b82d21c53a08bfe733d8e61d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:d7:fe:ce:ca:66:3d:b6:8d:47:3e:9c:ef: f8:ca:3c:0f:1a:15:fc:7f:45:70:fb:79:8f:61:01: 1c:99:bb:76:e1:9c:ca:9d:e9:c2:42:54:99:17:57: 5a:c1:10:86:c9:79:55:5d:d7:eb:a8:b7:c8:b3:94: 6c:4a:50:47:ca:4b:34:2d:44:0f:a4:b7:e4:02:3c: d1:26:57:19:bd:ce:79:5b:b7:32:2c:30:a4:53:d8: 76:91:08:c9:af:41:fa:7d:89:d5:ae:1c:ee:67:1f: 8a:97:85:37:e3:b1:53:71:cc:e5:4e:84:04:d3:c9: c6:55:43:9b:a6:df:77:7f:88:7a:48:dd:0d:3a:88: ef:50:1f:07:16:02:31:2d:25:e2:55:63:3c:c2:da: 98:3a:b0:d6:5a:ba:af:a6:2d:b8:45:ba:b5:01:93: 64:03:80:8a:be:88:d1:b2:07:98:39:d4:ea:ea:02: 9f:62:f3:89:4e:38:31:8e:83:eb:ec:41:8e:b7:d7: 24:21:2f:5f:93:ea:93:a9:b1:66:da:ef:e1:a2:57: 19:a0:fa:a7:af:f0:bf:e0:a8:45:c9:11:2e:ea:ab: 3c:5e:95:2f:cd:87:dc:d3:81:07:93:b2:f3:28:f8: a3:a4:0c:e0:13:aa:9b:ea:17:9e:7d:a1:66:4a:14: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:E3:A7:E3:30:04:B8:2D:21:C5:3A:08:BF:E7:33:D8:E6:1D:70 X509v3 Authority Key Identifier: keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.224.0/22 91.211.108.0/22 195.234.84.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:1c:1d:36:b5:b0:b0:31:91:f8:df:7f:f4:0c:33:9f:e8:7e: 8f:67:c9:cd:27:f2:30:44:38:ea:1c:cc:49:e2:ce:28:35:23: 88:2a:c1:26:5a:8e:17:f1:ed:5a:99:bd:0d:c8:16:86:08:89: 33:9f:ca:5b:85:ff:db:92:20:fa:75:ed:a6:70:99:c6:bc:23: c1:2d:6e:5f:9f:6a:f3:27:b0:cc:7d:81:4e:80:a5:2c:f0:04: 72:fe:a6:1b:2b:09:6a:aa:53:80:49:80:f6:27:74:52:82:d8: d7:9b:64:53:50:3c:db:a1:09:31:36:b9:39:66:ea:0e:9f:b7: d9:46:ff:fc:ed:20:33:05:4f:6c:60:6d:d4:20:f5:60:f8:9c: a3:7a:d6:8a:8e:fe:56:76:fc:65:a1:f0:cf:79:10:e5:df:4d: d4:dd:f5:55:3c:f3:9d:cb:bf:0a:0a:09:f8:34:3d:59:84:06: 46:7e:3d:a3:98:81:66:2b:70:4e:68:b4:5f:62:2d:cc:06:21: 5e:83:99:7d:9e:1f:84:cf:e6:35:b3:63:e8:ce:1e:f4:90:de: aa:79:63:06:05:1e:55:d9:cb:e8:8c:5d:21:37:6e:ec:a7:03: 81:e5:67:57:7d:5c:fe:7b:e1:4f:34:cf:32:b2:82:27:83:dd: c1:17:0b:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87fewbsszzynkjCW/VjLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YmUyYWE5YjRmYmY5MDcxNWViY2M5MDUzNGY5ZDJkNTRm N2RhNDMwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhjZTNhN2UzMzAwNGI4MmQyMWM1M2EwOGJmZTczM2Q4ZTYxZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvljX/s7KZj22jUc+nO/4yjwPGhX8 f0Vw+3mPYQEcmbt24ZzKnenCQlSZF1dawRCGyXlVXdfrqLfIs5RsSlBHyks0LUQP pLfkAjzRJlcZvc55W7cyLDCkU9h2kQjJr0H6fYnVrhzuZx+Kl4U347FTcczlToQE 08nGVUObpt93f4h6SN0NOojvUB8HFgIxLSXiVWM8wtqYOrDWWrqvpi24Rbq1AZNk A4CKvojRsgeYOdTq6gKfYvOJTjgxjoPr7EGOt9ckIS9fk+qTqbFm2u/holcZoPqn r/C/4KhFyREu6qs8XpUvzYfc04EHk7LzKPijpAzgE6qb6heefaFmShQ+9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJuM46fjMAS4LSHFOgi/5zPY5h1wMB8GA1UdIwQY MBaAFDW+Kqm0+/kHFevMkFNPnS1U99pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgt Y2I5ZjA0YzFlMTU0LzEvbTR6anAtTXdCTGd0SWNVNkNMX25NOWptSFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgtY2I5ZjA0YzFlMTU0 LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8TgAwQC W9NsAwQCw+pUMA0GCSqGSIb3DQEBCwUAA4IBAQBLHB02tbCwMZH433/0DDOf6H6P Z8nNJ/IwRDjqHMxJ4s4oNSOIKsEmWo4X8e1amb0NyBaGCIkzn8pbhf/bkiD6de2m cJnGvCPBLW5fn2rzJ7DMfYFOgKUs8ARy/qYbKwlqqlOASYD2J3RSgtjXm2RTUDzb oQkxNrk5ZuoOn7fZRv/87SAzBU9sYG3UIPVg+JyjetaKjv5WdvxlofDPeRDl303U 3fVVPPOdy78KCgn4ND1ZhAZGfj2jmIFmK3BOaLRfYi3MBiFeg5l9nh+Ez+Y1s2Po zh70kN6qeWMGBR5V2cvojF0hN27spwOB5WdXfVz+e+FPNM8ysoIng93BFwtK -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client