This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa File: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (raw, json) Hash identifier: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo= Subject key identifier: 33:B0:C9:E6:C4:1E:05:A3:EB:5B:EF:52:2B:99:23:3D:8D:B0:E2:BA Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B7F158E70929D2A689B3AEC4C4B93B3FA Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 46.102.177.0/24 maxlen: 24 46.102.178.0/24 maxlen: 24 77.81.90.0/24 maxlen: 24 77.81.91.0/24 maxlen: 24 86.104.2.0/24 maxlen: 24 86.104.213.0/24 maxlen: 24 86.106.116.0/24 maxlen: 24 89.37.93.0/24 maxlen: 24 89.37.94.0/24 maxlen: 24 89.41.27.0/24 maxlen: 24 89.42.154.0/24 maxlen: 24 93.119.125.0/24 maxlen: 24 176.223.160.0/24 maxlen: 24 188.208.48.0/24 maxlen: 24 188.208.220.0/24 maxlen: 24 188.208.221.0/24 maxlen: 24 188.208.223.0/24 maxlen: 24 188.209.124.0/24 maxlen: 24 188.209.125.0/24 maxlen: 24 193.30.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8e:70:92:9d:2a:68:9b:3a:ec:4c:4b:93:b3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33b0c9e6c41e05a3eb5bef522b99233d8db0e2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:3c:24:81:60:17:44:30:59:c6:db:74:ea: 54:73:e8:d4:53:39:60:39:3b:14:dd:e6:65:ae:a4: 18:9a:61:78:14:2e:49:20:e0:3d:f2:8b:34:32:60: 54:93:e3:97:9b:d0:e2:df:0a:2c:ea:fc:5d:c6:5d: ef:59:f2:5f:99:7d:41:3d:49:36:45:65:12:bf:47: fe:d4:46:3f:07:33:6e:c5:c0:14:6d:b3:5c:44:c2: cb:95:19:e2:89:91:8b:df:47:ec:fc:7a:ab:1f:7c: 5a:3a:75:1e:3a:35:f8:47:09:e6:30:8f:05:6e:9e: 95:6e:9b:1d:de:10:4a:89:a7:bb:e1:02:75:ee:5c: f6:2b:3f:1a:14:27:0e:12:58:11:c2:33:a3:68:4e: 9c:6d:92:f4:15:5f:53:c1:88:4b:86:af:df:8c:f1: 68:91:dc:b8:6b:dc:37:e6:61:4a:5a:50:18:1d:45: f1:c6:38:0a:1e:02:2f:be:e7:49:24:c0:57:68:9a: ef:27:de:46:dd:18:95:d1:99:15:89:59:17:f6:96: b8:af:ec:eb:b3:9d:f9:c9:46:3e:a7:71:e9:91:e0: a7:fa:a3:02:9b:af:12:5a:78:57:a4:b9:3a:9e:11: 72:10:41:16:76:ba:b6:51:b9:b9:65:c2:74:ff:63: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:C9:E6:C4:1E:05:A3:EB:5B:EF:52:2B:99:23:3D:8D:B0:E2:BA X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.177.0-46.102.178.255 77.81.90.0/23 86.104.2.0/24 86.104.213.0/24 86.106.116.0/24 89.37.93.0-89.37.94.255 89.41.27.0/24 89.42.154.0/24 93.119.125.0/24 176.223.160.0/24 188.208.48.0/24 188.208.220.0/23 188.208.223.0/24 188.209.124.0/23 193.30.255.0/24 Signature Algorithm: sha256WithRSAEncryption 52:1a:8c:4c:86:3e:61:bf:7d:34:a5:73:32:46:5c:00:20:e2: 0e:4a:56:09:5b:5c:05:fd:81:32:78:eb:c1:ee:77:a3:e5:22: 27:d7:93:57:19:13:d0:37:83:f1:77:34:ff:20:21:4f:06:4b: c7:04:54:b3:c4:18:a4:ad:27:17:74:2b:8d:8b:32:7e:1a:5c: bb:49:07:24:8f:49:a8:ef:d9:cd:d0:ef:4c:b1:fd:4b:e7:64: 39:08:d9:a3:9b:20:23:e8:8f:d1:2c:7a:c6:89:5f:2e:93:5f: 6f:a0:29:5e:ba:e8:d1:46:a8:8d:11:0b:8f:49:15:c4:ce:c5: f9:ca:ab:c5:84:aa:a1:d7:69:8e:e4:5d:de:81:9c:02:4b:91: 66:be:ab:a7:9c:c4:f2:19:93:ba:ad:eb:c5:25:e1:1e:85:1f: 6e:a8:77:3d:46:67:a7:8b:d7:40:1f:ec:0c:d8:79:c6:3e:a1: f0:d3:28:c9:78:79:64:83:f4:0c:16:0b:75:0d:36:f9:45:81: a3:16:b0:c5:5a:67:68:5f:80:b6:04:d1:ae:8d:3a:cb:ce:60: 1c:6e:4a:ca:56:b6:e7:a6:56:33:fa:ee:3e:af:78:9d:c0:6d: 57:d2:a5:4c:4a:48:b9:2a:ac:0a:d3:27:e0:f3:af:c0:75:c4: 9c:c7:6b:2c -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt/FY5wkp0qaJs67ExLk7P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2IwYzllNmM0MWUwNWEzZWI1YmVmNTIyYjk5MjMzZDhkYjBlMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngI8JIFgF0QwWcbbdOpUc+jUUzlg OTsU3eZlrqQYmmF4FC5JIOA98os0MmBUk+OXm9Di3wos6vxdxl3vWfJfmX1BPUk2 RWUSv0f+1EY/BzNuxcAUbbNcRMLLlRniiZGL30fs/HqrH3xaOnUeOjX4RwnmMI8F bp6Vbpsd3hBKiae74QJ17lz2Kz8aFCcOElgRwjOjaE6cbZL0FV9TwYhLhq/fjPFo kdy4a9w35mFKWlAYHUXxxjgKHgIvvudJJMBXaJrvJ95G3RiV0ZkViVkX9pa4r+zr s535yUY+p3HpkeCn+qMCm68SWnhXpLk6nhFyEEEWdrq2Ubm5ZcJ0/2M6cQIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFDOwyebEHgWj61vvUiuZIz2NsOK6MB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvTTdESjVzUWVCYVByVy05U0s1a2pQWTJ3NHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQALmax AwQALmayAwQBTVFaAwQAVmgCAwQAVmjVAwQAVmp0MAwDBABZJV0DBABZJV4DBABZ KRsDBABZKpoDBABdd30DBACw36ADBAC80DADBAG80NwDBAC80N8DBAG80XwDBADB Hv8wDQYJKoZIhvcNAQELBQADggEBAFIajEyGPmG/fTSlczJGXAAg4g5KVglbXAX9 gTJ468Hud6PlIifXk1cZE9A3g/F3NP8gIU8GS8cEVLPEGKStJxd0K42LMn4aXLtJ BySPSajv2c3Q70yx/UvnZDkI2aObICPoj9EsesaJXy6TX2+gKV666NFGqI0RC49J FcTOxfnKq8WEqqHXaY7kXd6BnAJLkWa+q6ecxPIZk7qt68Ul4R6FH26odz1GZ6eL 10Af7AzYecY+ofDTKMl4eWSD9AwWC3UNNvlFgaMWsMVaZ2hfgLYE0a6NOsvOYBxu SspWtuemVjP67j6veJ3AbVfSpUxKSLkqrArTJ+Dzr8B1xJzHayw= -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:53 2026 by rpki-client