This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/M2iBBMOA3qsSMyjlSglJFjGkADw.roa File: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (raw, json) Hash identifier: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo= Subject key identifier: 33:68:81:04:C3:80:DE:AB:12:33:28:E5:4A:09:49:16:31:A4:00:3C Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5 Certificate serial: 019B7E3788E6B8F63A27142E4EE7C09C02A3 Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/M2iBBMOA3qsSMyjlSglJFjGkADw.roa Signing time: Fri 02 Jan 2026 10:18:47 +0000 ROA not before: Fri 02 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209754 IP address blocks: 85.119.104.0/21 maxlen: 24 185.85.112.0/22 maxlen: 24 185.85.112.0/23 maxlen: 24 185.85.112.0/24 maxlen: 24 185.85.113.0/24 maxlen: 24 185.85.114.0/23 maxlen: 23 185.85.114.0/24 maxlen: 24 185.85.115.0/24 maxlen: 24 2a01:9780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:88:e6:b8:f6:3a:27:14:2e:4e:e7:c0:9c:02:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5 Validity Not Before: Jan 2 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33688104c380deab123328e54a09491631a4003c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:c6:92:22:ce:4d:46:60:ce:4d:90:90:22: 51:63:2e:69:19:76:4d:f3:60:25:c4:2f:f5:b6:af: 95:15:e4:c9:33:9e:70:63:24:5a:90:ab:b2:ae:59: 80:6b:69:15:50:ff:06:91:c1:65:cf:2f:8f:9b:90: 47:4a:7d:2d:b5:32:18:a8:7e:01:3e:67:6d:40:ac: 74:9f:b8:c2:0a:c6:03:4a:87:68:07:d7:3a:66:d2: 6f:79:88:49:1f:fe:16:ed:1e:08:f3:06:52:5a:87: 32:f9:d9:dd:4d:5e:18:6c:cb:b8:6e:ed:2b:9a:03: 87:fe:f5:a3:1e:66:0c:e4:ef:c2:bf:9d:67:1e:b3: dc:47:69:b0:a1:d1:82:cf:33:21:c6:17:73:28:c0: 93:bb:d4:0a:6e:cb:46:d4:34:e0:90:48:95:f3:0e: 4c:27:5b:12:63:88:74:e2:c9:79:d3:98:e1:bb:be: 04:41:9d:3c:5a:c7:10:53:c1:ad:25:b2:e7:ca:3f: c4:00:72:d3:c2:b1:95:68:ca:08:9d:57:01:be:15: 65:78:c4:0c:4c:61:0a:ee:9b:4c:75:70:60:58:e6: bc:c9:56:e2:87:91:d4:73:b0:1e:70:61:43:4f:60: 91:a3:db:58:c3:49:fe:31:db:a1:6b:71:85:3d:ea: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:81:04:C3:80:DE:AB:12:33:28:E5:4A:09:49:16:31:A4:00:3C X509v3 Authority Key Identifier: keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/M2iBBMOA3qsSMyjlSglJFjGkADw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.104.0/21 185.85.112.0/22 IPv6: 2a01:9780::/32 Signature Algorithm: sha256WithRSAEncryption 0d:5c:74:7d:74:da:60:33:bb:82:4c:65:6e:0f:81:9b:e4:3c: b3:4f:20:a9:20:99:cb:1b:88:45:e8:3e:99:69:cb:89:e7:e8: 08:b1:ca:10:65:53:40:e1:79:f3:69:82:30:54:47:cd:7f:6d: d9:e1:5d:00:20:cf:46:e3:1d:45:ac:f1:01:ce:62:ae:4e:60: 8a:4e:b5:b4:75:45:68:44:91:7f:ae:86:6b:a5:35:8d:e6:47: b0:de:f7:ba:2a:b7:73:bf:8f:c8:8d:fb:3e:b6:a6:a8:18:1d: 1c:81:e7:ab:2e:59:e8:09:04:08:24:bd:fe:0e:b0:3d:a6:26: 85:32:a5:e4:15:1b:d6:79:32:f6:9c:83:ff:a9:ee:48:88:1c: ac:e9:fb:e5:81:2c:b6:b1:8f:a4:21:6a:fc:e0:ba:e0:b1:ad: 2e:fd:b5:7e:84:85:05:9b:8b:21:d4:bc:b7:74:c4:74:af:3a: c7:bc:e2:88:91:40:79:e0:42:9b:b8:11:49:fe:73:4c:41:32: 3b:36:b4:3a:68:f4:c3:4c:d9:96:e8:6d:2d:e6:d4:4d:22:7a: ce:d9:07:bf:c0:66:27:41:b8:9f:a3:71:48:7c:44:bc:c5:08: 2f:2d:a0:9f:7b:e6:82:1b:c8:14:f7:c6:a0:db:df:15:15:93: 6a:44:fa:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+N4jmuPY6JxQuTufAnAKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2 Yzk4ZDUwHhcNMjYwMTAyMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzY4ODEwNGMzODBkZWFiMTIzMzI4ZTU0YTA5NDkxNjMxYTQwMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsrGkiLOTUZgzk2QkCJRYy5pGXZN 82AlxC/1tq+VFeTJM55wYyRakKuyrlmAa2kVUP8GkcFlzy+Pm5BHSn0ttTIYqH4B PmdtQKx0n7jCCsYDSodoB9c6ZtJveYhJH/4W7R4I8wZSWocy+dndTV4YbMu4bu0r mgOH/vWjHmYM5O/Cv51nHrPcR2mwodGCzzMhxhdzKMCTu9QKbstG1DTgkEiV8w5M J1sSY4h04sl505jhu74EQZ08WscQU8GtJbLnyj/EAHLTwrGVaMoInVcBvhVleMQM TGEK7ptMdXBgWOa8yVbih5HUc7AecGFDT2CRo9tYw0n+Mduha3GFPeo3NwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDNogQTDgN6rEjMo5UoJSRYxpAA8MB8GA1UdIwQY MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt Y2RhYTU4MTUxOGYzLzEvTTJpQkJNT0EzcXNTTXlqbFNnbEpGakdrQUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDVXdoAwQC uVVwMA0EAgACMAcDBQAqAZeAMA0GCSqGSIb3DQEBCwUAA4IBAQANXHR9dNpgM7uC TGVuD4Gb5DyzTyCpIJnLG4hF6D6ZacuJ5+gIscoQZVNA4XnzaYIwVEfNf23Z4V0A IM9G4x1FrPEBzmKuTmCKTrW0dUVoRJF/roZrpTWN5kew3ve6Krdzv4/Ijfs+tqao GB0cgeerLlnoCQQIJL3+DrA9piaFMqXkFRvWeTL2nIP/qe5IiBys6fvlgSy2sY+k IWr84Lrgsa0u/bV+hIUFm4sh1Ly3dMR0rzrHvOKIkUB54EKbuBFJ/nNMQTI7NrQ6 aPTDTNmW6G0t5tRNInrO2Qe/wGYnQbifo3FIfES8xQgvLaCfe+aCG8gU98ag298V FZNqRPr1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:50 2026 by rpki-client