This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/M4cDIpRWsEUHm5a4sTzRttlAuvk.roa File: M4cDIpRWsEUHm5a4sTzRttlAuvk.roa (raw, json) Hash identifier: q9zjX7dOD7oaVX47BAp2xiQ0yxG0DW0f2ZWOvHM7Mbc= Subject key identifier: 33:87:03:22:94:56:B0:45:07:9B:96:B8:B1:3C:D1:B6:D9:40:BA:F9 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019BF97F6AA0A6BCAEDC66E01C6F95A9F8EB Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/M4cDIpRWsEUHm5a4sTzRttlAuvk.roa Signing time: Mon 26 Jan 2026 08:50:35 +0000 ROA not before: Mon 26 Jan 2026 08:50:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48881 IP address blocks: 37.156.7.0/24 maxlen: 24 91.250.247.0/24 maxlen: 24 93.113.28.0/24 maxlen: 24 188.209.212.0/24 maxlen: 24 188.212.111.0/24 maxlen: 24 188.213.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:7f:6a:a0:a6:bc:ae:dc:66:e0:1c:6f:95:a9:f8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 26 08:50:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338703229456b045079b96b8b13cd1b6d940baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:a7:da:ad:47:d2:92:06:9d:3f:3b:23:59: aa:99:96:6a:6a:21:c1:58:33:72:c7:9a:4a:87:33: ab:49:4a:a2:12:a8:3a:78:57:cb:a7:20:8e:e9:00: 9c:70:cf:a8:d4:74:d8:f8:40:43:22:59:ee:99:b7: 1e:ee:88:e5:04:aa:5d:a6:29:1e:15:68:16:40:7d: 2b:16:95:92:6a:d4:0b:2c:a5:9a:2a:ca:5a:e4:57: 5b:50:cb:3c:ad:a9:b2:8c:e6:86:e7:89:bf:da:8c: ee:68:45:c9:7a:21:ad:db:85:b2:e0:e4:38:88:f8: 50:33:9a:ac:f6:a5:54:08:77:6c:c6:c2:c3:9b:73: 07:24:43:d8:08:e3:e7:9a:58:48:fe:a4:7d:82:22: 91:92:72:21:e3:11:cc:b6:f6:f9:76:1c:b9:99:d0: 4d:59:c5:b3:2d:ca:9a:92:56:f8:10:59:ab:47:f7: fe:82:04:e9:46:00:f3:17:d8:38:4a:b8:4f:e6:c7: 98:e6:2f:a7:84:a3:f4:fc:21:3f:73:4f:8b:e6:80: 37:6a:7e:82:5e:ef:f1:bf:3b:6d:1e:31:b3:50:d2: 1b:bc:23:7f:dd:47:91:3e:a7:81:19:6b:fc:f4:ae: f2:65:08:2f:2b:f7:03:3f:75:bb:f3:29:a7:db:ba: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:87:03:22:94:56:B0:45:07:9B:96:B8:B1:3C:D1:B6:D9:40:BA:F9 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/M4cDIpRWsEUHm5a4sTzRttlAuvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.7.0/24 91.250.247.0/24 93.113.28.0/24 188.209.212.0/24 188.212.111.0/24 188.213.134.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:03:ca:5b:26:58:79:a6:06:55:60:ec:a3:c5:e8:60:55:3d: 82:4a:8f:fe:1d:9c:df:8c:38:4b:27:ba:f4:78:89:7a:b3:76: 16:6e:50:94:1e:ad:eb:52:f5:fc:6d:3a:4b:57:08:b9:6c:dd: c5:89:39:6d:0b:2b:b8:61:93:6b:89:de:47:8f:67:e4:a0:ec: ef:fc:c1:6c:e2:09:e0:a7:b9:66:56:5b:0c:34:8a:73:ec:e2: 21:25:ea:04:7b:1d:95:07:0d:3e:cf:37:2e:6f:c3:90:ec:9e: 19:f9:a4:59:7d:58:6a:19:66:d5:37:08:9f:f2:09:65:77:fe: 24:0e:b5:32:96:f3:9f:4b:df:66:3a:6b:d4:97:79:59:43:1d: c3:84:16:94:94:27:10:4d:e2:05:28:a2:f3:57:c7:1c:ed:55: 2e:e8:6f:8e:f9:a9:50:9f:7d:1f:b3:7f:3a:aa:61:9c:04:9a: c7:c1:e9:3c:a7:77:13:8f:81:74:88:2d:43:f5:c9:82:4f:b3: 35:e4:eb:94:91:aa:9f:2a:80:57:bb:74:f7:fa:df:f9:d8:6a: 6f:70:5c:e0:5a:cc:bf:cc:e8:a7:42:05:0c:ed:39:cf:b8:63: 11:8c:46:88:4b:a5:23:5f:25:32:74:c6:3f:52:31:9b:ca:78: 5c:c6:8d:ca -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZv5f2qgpryu3GbgHG+VqfjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTI2MDg1MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzg3MDMyMjk0NTZiMDQ1MDc5Yjk2YjhiMTNjZDFiNmQ5NDBiYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkGn2q1H0pIGnT87I1mqmZZqaiHB WDNyx5pKhzOrSUqiEqg6eFfLpyCO6QCccM+o1HTY+EBDIlnumbce7ojlBKpdpike FWgWQH0rFpWSatQLLKWaKspa5FdbUMs8ramyjOaG54m/2ozuaEXJeiGt24Wy4OQ4 iPhQM5qs9qVUCHdsxsLDm3MHJEPYCOPnmlhI/qR9giKRknIh4xHMtvb5dhy5mdBN WcWzLcqaklb4EFmrR/f+ggTpRgDzF9g4SrhP5seY5i+nhKP0/CE/c0+L5oA3an6C Xu/xvzttHjGzUNIbvCN/3UeRPqeBGWv89K7yZQgvK/cDP3W78ymn27pOdQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDOHAyKUVrBFB5uWuLE80bbZQLr5MB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvTTRjRElwUldzRVVIbTVhNHNUelJ0dGxBdXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJZwHAwQA W/r3AwQAXXEcAwQAvNHUAwQAvNRvAwQAvNWGMA0GCSqGSIb3DQEBCwUAA4IBAQAv A8pbJlh5pgZVYOyjxehgVT2CSo/+HZzfjDhLJ7r0eIl6s3YWblCUHq3rUvX8bTpL Vwi5bN3FiTltCyu4YZNrid5Hj2fkoOzv/MFs4gngp7lmVlsMNIpz7OIhJeoEex2V Bw0+zzcub8OQ7J4Z+aRZfVhqGWbVNwif8glld/4kDrUylvOfS99mOmvUl3lZQx3D hBaUlCcQTeIFKKLzV8cc7VUu6G+O+alQn30fs386qmGcBJrHwek8p3cTj4F0iC1D 9cmCT7M15OuUkaqfKoBXu3T3+t/52GpvcFzgWsy/zOinQgUM7TnPuGMRjEaIS6Uj XyUydMY/UjGbynhcxo3K -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:26 2026 by rpki-client