This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M38BoQnXF5TM27e_Xc8ZlNrjDOA.roa File: M38BoQnXF5TM27e_Xc8ZlNrjDOA.roa (raw, json) Hash identifier: 9vzFFDu9z0vLMmMDM6r9Wv9zuZGqjHEyTMZ3UG4foA8= Subject key identifier: 33:7F:01:A1:09:D7:17:94:CC:DB:B7:BF:5D:CF:19:94:DA:E3:0C:E0 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CC7C53113B773C4D6B38B8C28AC0 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M38BoQnXF5TM27e_Xc8ZlNrjDOA.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199300 IP address blocks: 80.233.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cc:7c:53:11:3b:77:3c:4d:6b:38:b8:c2:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=337f01a109d71794ccdbb7bf5dcf1994dae30ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:68:7a:e2:62:70:05:60:fd:0d:4d:11:f4: 70:86:bd:e7:fc:d9:e0:e6:4a:94:02:20:f4:d2:1d: 66:7d:c6:50:d4:94:d1:fc:6b:21:f7:d1:5a:b7:da: 97:82:e1:f6:fe:bc:00:43:3a:38:44:d9:94:ef:07: de:d6:48:69:fb:13:94:e4:ee:c7:3d:da:9e:6a:d2: 67:11:75:87:c5:b4:1d:80:d0:22:6c:13:49:a6:e0: 37:76:5f:95:80:49:15:ab:43:43:d9:2b:6c:92:7a: ed:ef:b1:b5:3a:07:1a:2b:e2:a0:68:6c:b2:f6:55: 60:86:17:c8:74:3d:ff:b6:9e:46:52:2e:72:4d:3b: e5:87:00:0f:60:78:e1:45:a0:7a:3e:98:e1:b2:f7: 9a:c8:a0:0e:ac:73:b7:a1:1e:11:c4:7a:6c:cf:ad: d7:db:23:d1:8f:e6:cf:48:c1:43:fc:a3:75:a9:f6: 2d:3d:b7:c1:3f:e7:ee:5a:47:bb:d4:31:c0:d8:c4: 34:49:6c:f2:28:79:cb:fc:5b:b4:38:c5:e8:a6:0a: b9:61:71:65:40:f6:a3:56:3e:34:a1:5a:73:b7:a6: 60:a3:b7:ed:af:22:54:12:8d:51:f2:51:90:a5:e7: 5b:f2:2e:37:40:90:51:d4:c2:b5:d5:0e:48:19:44: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:01:A1:09:D7:17:94:CC:DB:B7:BF:5D:CF:19:94:DA:E3:0C:E0 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M38BoQnXF5TM27e_Xc8ZlNrjDOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.153.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0c:72:a5:48:41:6b:57:49:48:f8:54:ad:a5:3b:b7:1d:1f: fa:74:e8:b6:8e:35:eb:b2:aa:c4:38:90:ae:92:8d:e1:bf:39: cd:8b:25:86:17:95:a1:ba:54:82:32:c8:e2:46:e1:6b:03:c5: 13:80:9b:9f:b3:05:fe:e3:7c:ae:c9:8e:9b:74:49:d1:5a:e4: c6:c0:ec:f8:4d:10:f2:59:c7:fc:94:15:1c:4c:30:44:ee:d8: ec:8c:33:35:d9:7c:20:1c:68:1f:fb:8f:4b:95:f3:7d:be:e9: fe:27:1f:8e:cd:7d:dd:e0:a7:ad:09:31:76:8b:1c:f9:95:f8: 99:ce:da:0f:44:3b:a8:ea:52:17:f1:13:e0:a9:5b:38:12:80: dd:87:0a:c6:52:19:85:ce:dd:b7:ef:f7:45:83:4b:35:45:51: 4a:0f:cd:35:79:07:66:5b:18:9b:30:35:e9:86:0f:2a:d5:20: 60:b2:2d:fc:08:81:1e:ac:50:29:81:d7:09:db:07:4a:ad:52: 15:3d:cb:8d:60:f5:43:9d:88:84:95:68:c7:53:1e:77:8b:ef: 53:70:ec:7d:d1:96:cb:95:48:11:ff:00:b0:6a:04:1e:58:68: 97:9a:03:32:37:0c:ab:a7:a6:af:ea:8a:8b:1e:5e:c0:84:c9: 33:57:17:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMx8UxE7dzxNazi4worAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzdmMDFhMTA5ZDcxNzk0Y2NkYmI3YmY1ZGNmMTk5NGRhZTMwY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GhoeuJicAVg/Q1NEfRwhr3n/Nng 5kqUAiD00h1mfcZQ1JTR/Gsh99Fat9qXguH2/rwAQzo4RNmU7wfe1khp+xOU5O7H PdqeatJnEXWHxbQdgNAibBNJpuA3dl+VgEkVq0ND2Stsknrt77G1OgcaK+KgaGyy 9lVghhfIdD3/tp5GUi5yTTvlhwAPYHjhRaB6PpjhsveayKAOrHO3oR4RxHpsz63X 2yPRj+bPSMFD/KN1qfYtPbfBP+fuWke71DHA2MQ0SWzyKHnL/Fu0OMXopgq5YXFl QPajVj40oVpzt6Zgo7ftryJUEo1R8lGQpedb8i43QJBR1MK11Q5IGUTT+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDN/AaEJ1xeUzNu3v13PGZTa4wzgMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvTTM4Qm9RblhGNVRNMjdlX1hjOFpsTnJqRE9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmZMA0G CSqGSIb3DQEBCwUAA4IBAQBFDHKlSEFrV0lI+FStpTu3HR/6dOi2jjXrsqrEOJCu ko3hvznNiyWGF5WhulSCMsjiRuFrA8UTgJufswX+43yuyY6bdEnRWuTGwOz4TRDy Wcf8lBUcTDBE7tjsjDM12XwgHGgf+49LlfN9vun+Jx+OzX3d4KetCTF2ixz5lfiZ ztoPRDuo6lIX8RPgqVs4EoDdhwrGUhmFzt237/dFg0s1RVFKD801eQdmWxibMDXp hg8q1SBgsi38CIEerFApgdcJ2wdKrVIVPcuNYPVDnYiElWjHUx53i+9TcOx90ZbL lUgR/wCwagQeWGiXmgMyNwyrp6av6oqLHl7AhMkzVxcm -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:35 2026 by rpki-client