This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/mwE7644yuRyikfXfTRLC6TQjC0w.roa File: mwE7644yuRyikfXfTRLC6TQjC0w.roa (raw, json) Hash identifier: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA= Subject key identifier: 9B:01:3B:EB:8E:32:B9:1C:A2:91:F5:DF:4D:12:C2:E9:34:23:0B:4C Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DB24CAAA131FDB4BCE8B790E1304 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/mwE7644yuRyikfXfTRLC6TQjC0w.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 137.174.224.0/19 maxlen: 19 147.123.32.0/22 maxlen: 32 155.204.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:db:24:ca:aa:13:1f:db:4b:ce:8b:79:0e:13:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b013beb8e32b91ca291f5df4d12c2e934230b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:de:9e:a5:93:1c:d8:9a:07:ea:3d:4b:e7: 5f:3f:52:03:8c:fc:a1:e1:de:d8:a4:93:aa:cc:94: 7c:37:a5:6e:96:6f:2b:e2:cd:e5:e7:63:fe:96:78: 4e:2d:35:e7:0c:7c:09:66:25:35:9e:df:78:c3:7f: bf:16:9e:7a:ef:07:86:ab:a9:ce:6f:28:03:46:a2: 2f:e0:ee:b6:1a:f9:66:16:f7:99:8b:ac:36:7b:7f: 51:da:d0:76:38:fd:be:05:f7:a1:81:13:29:1f:3d: a3:53:78:87:4f:30:db:08:49:f0:81:0d:fd:4a:11: 3b:bb:0a:1c:85:59:46:f2:a8:a6:8d:da:45:b2:1f: 1c:f7:5b:29:80:ad:a0:78:1d:89:83:da:dc:35:46: b8:0a:fe:bd:94:58:52:74:ac:62:21:1b:c0:66:54: 4a:8b:09:a7:7c:1c:f5:a8:8f:4c:cc:98:cf:ef:78: 27:19:77:65:95:2b:2c:7b:1a:52:b5:cb:20:50:fd: b2:10:ac:04:f1:f7:df:1d:49:6b:9b:21:2b:54:7a: 56:bc:c0:07:d1:e2:b9:86:da:5a:c1:5a:e5:a9:b4: 45:b3:4f:ae:f2:6a:f6:49:50:ab:21:12:0b:dd:fc: cc:9c:b4:c8:21:fd:32:86:50:92:02:75:e0:bf:72: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:3B:EB:8E:32:B9:1C:A2:91:F5:DF:4D:12:C2:E9:34:23:0B:4C X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/mwE7644yuRyikfXfTRLC6TQjC0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.174.224.0/19 147.123.32.0/22 155.204.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1f:11:88:2b:c8:ee:5e:07:9a:68:1d:58:7a:c1:92:25:aa:73: 40:ce:1c:d5:7b:55:2a:d9:cc:84:81:82:df:85:da:f8:47:ca: 78:6c:9c:05:1c:70:d8:46:56:fe:db:d8:35:f5:14:8b:48:fd: d4:c2:95:99:73:cf:03:2a:bd:32:dc:e5:71:cf:4d:40:c9:20: 5a:e4:d2:11:09:ea:5c:97:2c:1a:77:ee:15:ee:24:69:e9:f4: 73:8f:37:95:cf:b7:b9:f2:dc:0c:d9:bf:07:dc:77:74:2f:03: c7:33:b8:cd:42:db:f4:2b:98:d0:1d:2b:11:94:12:41:b6:6e: 94:7a:b4:13:dc:af:1e:a3:bd:96:7a:d4:d9:c8:16:24:47:b7: e6:f1:e0:4d:de:ce:b3:2e:50:8c:af:dc:18:11:e0:44:28:66: 69:d9:c6:56:a9:4f:a1:50:8c:1d:a9:b8:b0:68:fb:f4:91:c1: e9:15:83:35:29:1e:e3:dd:8b:40:33:8a:39:50:1a:d4:ac:93: 0f:bb:6f:d4:fe:e5:30:20:c0:eb:3f:c4:db:54:f3:be:c8:6d: 53:3d:5b:fd:5d:b8:a5:7d:c9:ad:bd:23:0d:0d:fe:70:31:a4: 44:50:9b:64:54:23:64:45:01:03:42:c9:66:16:30:a8:8d:b5: 5e:1f:c3:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EtskyqoTH9tLzot5DhMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjAxM2JlYjhlMzJiOTFjYTI5MWY1ZGY0ZDEyYzJlOTM0MjMwYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBfenqWTHNiaB+o9S+dfP1IDjPyh 4d7YpJOqzJR8N6Vulm8r4s3l52P+lnhOLTXnDHwJZiU1nt94w3+/Fp567weGq6nO bygDRqIv4O62GvlmFveZi6w2e39R2tB2OP2+BfehgRMpHz2jU3iHTzDbCEnwgQ39 ShE7uwochVlG8qimjdpFsh8c91spgK2geB2Jg9rcNUa4Cv69lFhSdKxiIRvAZlRK iwmnfBz1qI9MzJjP73gnGXdllSssexpStcsgUP2yEKwE8fffHUlrmyErVHpWvMAH 0eK5htpawVrlqbRFs0+u8mr2SVCrIRIL3fzMnLTIIf0yhlCSAnXgv3JQGQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJsBO+uOMrkcopH1300Swuk0IwtMMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvbXdFNzY0NHl1Unlpa2ZYZlRSTEM2VFFqQzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFia7gAwQC k3sgAwQFm8zgMA0GCSqGSIb3DQEBCwUAA4IBAQAfEYgryO5eB5poHVh6wZIlqnNA zhzVe1Uq2cyEgYLfhdr4R8p4bJwFHHDYRlb+29g19RSLSP3UwpWZc88DKr0y3OVx z01AySBa5NIRCepclywad+4V7iRp6fRzjzeVz7e58twM2b8H3Hd0LwPHM7jNQtv0 K5jQHSsRlBJBtm6UerQT3K8eo72WetTZyBYkR7fm8eBN3s6zLlCMr9wYEeBEKGZp 2cZWqU+hUIwdqbiwaPv0kcHpFYM1KR7j3YtAM4o5UBrUrJMPu2/U/uUwIMDrP8Tb VPO+yG1TPVv9XbilfcmtvSMNDf5wMaREUJtkVCNkRQEDQslmFjCojbVeH8Nq -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:56 2026 by rpki-client