This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/0_1M3WwnEVZKS87X1cA2tjjxW-A.roa File: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (raw, json) Hash identifier: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ= Subject key identifier: D3:FD:4C:DD:6C:27:11:56:4A:4B:CE:D7:D5:C0:36:B6:38:F1:5B:E0 Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Certificate serial: 019C291B08AC8FB378352FB5E96F00ACB652 Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/0_1M3WwnEVZKS87X1cA2tjjxW-A.roa Signing time: Wed 04 Feb 2026 14:42:43 +0000 ROA not before: Wed 04 Feb 2026 14:42:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210258 IP address blocks: 139.28.208.0/22 maxlen: 25 185.254.148.0/22 maxlen: 25 2a0c:4f40::/29 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:1b:08:ac:8f:b3:78:35:2f:b5:e9:6f:00:ac:b6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Validity Not Before: Feb 4 14:42:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3fd4cdd6c2711564a4bced7d5c036b638f15be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:7e:dc:10:cd:25:f3:ba:fd:05:f1:85:ef: 03:83:8e:07:83:fc:68:71:d3:07:0a:36:5b:a9:a7: a8:33:dc:36:9e:4d:fd:7b:96:70:74:71:df:ba:34: 68:f6:f1:f2:48:06:82:40:9f:a9:6b:07:a0:e3:1e: 77:35:94:c9:76:32:9d:ce:10:06:37:c7:5b:18:42: 75:83:46:d5:f2:db:ab:54:0f:ad:05:3a:99:0c:13: 1b:81:58:48:75:77:2b:25:8a:21:35:64:5a:1e:96: 24:c9:dd:29:f1:50:c8:5f:2b:45:d3:21:fc:5f:ab: fa:a3:4e:eb:d6:80:54:11:f9:b7:7f:34:7e:c7:b4: 89:6f:00:16:19:81:59:74:8f:95:49:74:ee:b3:e2: ef:c9:8f:cb:b7:f1:25:2f:68:17:1e:52:63:46:15: e5:60:f9:ea:df:45:0a:b9:48:5a:74:bc:b3:d9:3a: 7a:3c:0b:8e:4a:73:af:ee:43:c4:92:6d:04:58:1b: 3c:75:57:2d:6f:0d:b8:3b:db:f7:e4:f9:84:3d:23: 0e:16:9b:f6:14:8d:51:0e:7e:f5:51:84:ff:3b:4d: a2:61:be:2c:7c:a3:5e:eb:6d:00:c3:df:9e:69:88: 7b:58:f5:c9:1f:5c:41:49:d8:21:80:65:1e:c2:f6: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FD:4C:DD:6C:27:11:56:4A:4B:CE:D7:D5:C0:36:B6:38:F1:5B:E0 X509v3 Authority Key Identifier: keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/0_1M3WwnEVZKS87X1cA2tjjxW-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.208.0/22 185.254.148.0/22 IPv6: 2a0c:4f40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:cb:30:48:0c:93:1b:72:07:cb:3a:8a:52:77:fa:98:57:35: d4:f1:4d:bc:ec:1e:b1:f9:cf:71:8e:f8:91:16:d0:44:1a:34: 57:f6:b3:ca:21:b0:22:54:2a:45:d6:aa:43:a2:1d:0e:5f:19: 3c:c3:c7:27:e4:f6:a0:df:e1:03:97:5e:62:af:97:84:4a:28: 98:29:34:13:2a:b8:1c:94:a8:ab:9d:f0:f9:57:a3:67:e9:5d: 39:0a:a5:89:0a:d2:2d:eb:23:83:76:13:ed:fa:84:8f:af:e5: ff:a3:b7:5c:89:9c:df:49:b5:50:5b:a2:c8:04:f9:4e:b0:e0: 25:37:39:dd:01:51:62:a2:57:bc:93:8c:4c:88:4e:1e:96:67: 8e:92:7f:15:12:fe:ec:41:7e:22:3b:27:11:ec:a4:19:e7:31: f5:ea:60:84:bf:38:c7:d0:33:3b:5c:b1:1a:30:0d:12:2c:86: 70:ea:08:54:94:67:ef:ba:a2:69:8c:75:b5:45:d5:ba:31:f0: 0e:99:22:b2:3c:44:67:1f:92:4b:08:c5:b0:01:1f:c0:0d:ad: 9e:ec:1f:06:5a:80:a2:e3:ba:20:18:38:4a:54:43:ca:f0:14: 13:2d:02:0f:f1:27:1a:18:74:dc:60:ff:5c:61:1c:49:60:1b: 01:5f:77:8e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZwpGwisj7N4NS+16W8ArLZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4 NGQ2NjAwHhcNMjYwMjA0MTQ0MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ZkNGNkZDZjMjcxMTU2NGE0YmNlZDdkNWMwMzZiNjM4ZjE1YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQV+3BDNJfO6/QXxhe8Dg44Hg/xo cdMHCjZbqaeoM9w2nk39e5ZwdHHfujRo9vHySAaCQJ+paweg4x53NZTJdjKdzhAG N8dbGEJ1g0bV8turVA+tBTqZDBMbgVhIdXcrJYohNWRaHpYkyd0p8VDIXytF0yH8 X6v6o07r1oBUEfm3fzR+x7SJbwAWGYFZdI+VSXTus+LvyY/Lt/ElL2gXHlJjRhXl YPnq30UKuUhadLyz2Tp6PAuOSnOv7kPEkm0EWBs8dVctbw24O9v35PmEPSMOFpv2 FI1RDn71UYT/O02iYb4sfKNe620Aw9+eaYh7WPXJH1xBSdghgGUewvZg5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNP9TN1sJxFWSkvO19XANrY48VvgMB8GA1UdIwQY MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct YWM1YTI5N2Y5YmE0LzEvMF8xTTNXd25FVlpLUzg3WDFjQTJ0amp4Vy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0 LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCixzQAwQC uf6UMA0EAgACMAcDBQMqDE9AMA0GCSqGSIb3DQEBCwUAA4IBAQBNyzBIDJMbcgfL OopSd/qYVzXU8U287B6x+c9xjviRFtBEGjRX9rPKIbAiVCpF1qpDoh0OXxk8w8cn 5Pag3+EDl15ir5eESiiYKTQTKrgclKirnfD5V6Nn6V05CqWJCtIt6yODdhPt+oSP r+X/o7dciZzfSbVQW6LIBPlOsOAlNzndAVFiole8k4xMiE4elmeOkn8VEv7sQX4i OycR7KQZ5zH16mCEvzjH0DM7XLEaMA0SLIZw6ghUlGfvuqJpjHW1RdW6MfAOmSKy PERnH5JLCMWwAR/ADa2e7B8GWoCi47ogGDhKVEPK8BQTLQIP8ScaGHTcYP9cYRxJ YBsBX3eO -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:48 2026 by rpki-client