This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa File: m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa (raw, json) Hash identifier: L3jK7ngzl36wT68C1jk8TWgb+EAYAtZ/AFxjRpzTIzQ= Subject key identifier: 9B:61:77:01:D0:27:60:DC:81:C5:76:11:FB:4F:61:77:40:A0:27:E7 Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e Certificate serial: 019B7AC7ADFC53A9DE44FB93304285B83802 Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29585 IP address blocks: 185.102.0.0/24 maxlen: 24 185.102.1.0/24 maxlen: 24 185.102.2.0/24 maxlen: 24 185.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ad:fc:53:a9:de:44:fb:93:30:42:85:b8:38:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233adc97f9826262007f46286591830df58fc55e Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b617701d02760dc81c57611fb4f617740a027e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:41:68:3d:a9:7a:27:04:c8:ba:01:be:2f: 07:42:76:9b:6e:16:5a:00:99:0d:53:27:a1:d9:50: 6c:c2:38:28:72:e1:06:bc:1a:89:83:f3:d5:ca:97: 94:a2:09:8b:25:4d:56:cf:93:b4:05:58:57:75:bc: 0b:18:ba:30:17:0d:6a:a9:07:28:2d:02:ef:af:4a: de:de:f5:0d:2d:11:53:85:34:51:15:72:55:df:3c: 7a:60:c2:07:83:c3:70:2b:37:72:e9:9d:27:e9:33: 69:e8:bb:b4:25:cc:d0:8c:f4:a2:02:72:64:d5:62: 97:57:d1:87:60:a1:8e:98:5a:0f:fa:80:72:fb:e9: fe:d3:9d:9b:ab:e4:16:19:69:ef:21:a9:e1:4b:2c: 9b:f1:68:9f:64:0d:8e:b3:8d:2d:5f:6f:6b:7b:9f: e7:1f:18:b6:e0:6e:b7:dc:55:09:6a:d1:49:ff:8a: 5e:13:4f:b0:32:d4:05:aa:72:ae:79:65:db:5d:55: d7:50:fb:e2:36:4c:c1:94:22:ac:25:ec:e4:4b:44: 76:f2:78:9a:ff:33:35:79:66:3e:15:82:99:f7:b1: 67:88:b0:a4:83:89:71:91:cf:bc:e3:1b:5d:26:f6: 46:b9:a1:9f:5d:55:1a:dd:6d:d7:c6:f9:55:ec:91: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:77:01:D0:27:60:DC:81:C5:76:11:FB:4F:61:77:40:A0:27:E7 X509v3 Authority Key Identifier: keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.0.0/22 Signature Algorithm: sha256WithRSAEncryption 31:2d:43:b4:40:b5:ac:14:db:01:44:8d:d3:48:81:5d:68:d9: ce:9b:4f:30:8e:0f:7f:da:f3:78:db:37:16:cc:52:9b:89:59: 02:8e:f6:be:e9:b7:7e:d8:e0:19:36:15:85:22:44:df:ab:08: 10:35:c3:bd:21:1e:47:43:e4:e0:dd:bf:96:4d:51:68:47:a1: 29:72:b4:b4:1a:83:cb:98:b6:97:61:6b:7d:4f:5c:92:54:cf: aa:9e:d5:4c:62:dc:af:72:7c:e3:a2:c1:53:4e:03:24:73:b8: 01:5f:cd:97:59:da:e5:52:f8:58:0c:eb:b2:46:6e:09:98:84: a7:54:21:4d:9f:2f:49:b5:5c:57:82:0b:bd:e1:3e:34:8b:6b: c0:06:5a:70:92:fe:1b:7a:9e:f3:b4:a2:17:33:ec:68:cf:2b: ea:df:30:10:3a:87:ba:d5:82:4c:f9:80:22:39:94:bc:b7:b2: 16:f8:73:df:82:3f:cb:7b:9a:5b:01:0b:ad:b5:71:ff:63:6e: ae:e3:95:57:9f:80:2e:ae:a8:00:67:ab:77:cf:0e:a2:03:ae: a4:fd:03:21:d8:66:54:85:fa:91:2a:46:bd:7d:b4:c0:02:32: 31:1f:13:a2:8a:ea:18:7d:86:ff:ed:29:11:94:5b:4c:76:58: f6:52:52:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x638U6neRPuTMEKFuDgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2FkYzk3Zjk4MjYyNjIwMDdmNDYyODY1OTE4MzBkZjU4 ZmM1NWUwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjYxNzcwMWQwMjc2MGRjODFjNTc2MTFmYjRmNjE3NzQwYTAyN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PRBaD2peicEyLoBvi8HQnabbhZa AJkNUyeh2VBswjgocuEGvBqJg/PVypeUogmLJU1Wz5O0BVhXdbwLGLowFw1qqQco LQLvr0re3vUNLRFThTRRFXJV3zx6YMIHg8NwKzdy6Z0n6TNp6Lu0JczQjPSiAnJk 1WKXV9GHYKGOmFoP+oBy++n+052bq+QWGWnvIanhSyyb8WifZA2Os40tX29re5/n Hxi24G633FUJatFJ/4peE0+wMtQFqnKueWXbXVXXUPviNkzBlCKsJezkS0R28nia /zM1eWY+FYKZ97FniLCkg4lxkc+84xtdJvZGuaGfXVUa3W3XxvlV7JGTpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJthdwHQJ2DcgcV2EftPYXdAoCfnMB8GA1UdIwQY MBaAFCM63Jf5gmJiAH9GKGWRgw31j8VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWIt NDU1YTEyYmM4MzAyLzEvbTJGM0FkQW5ZTnlCeFhZUi0wOWhkMENnSi1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWItNDU1YTEyYmM4MzAy LzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWYAMA0G CSqGSIb3DQEBCwUAA4IBAQAxLUO0QLWsFNsBRI3TSIFdaNnOm08wjg9/2vN42zcW zFKbiVkCjva+6bd+2OAZNhWFIkTfqwgQNcO9IR5HQ+Tg3b+WTVFoR6EpcrS0GoPL mLaXYWt9T1ySVM+qntVMYtyvcnzjosFTTgMkc7gBX82XWdrlUvhYDOuyRm4JmISn VCFNny9JtVxXggu94T40i2vABlpwkv4bep7ztKIXM+xozyvq3zAQOoe61YJM+YAi OZS8t7IW+HPfgj/Le5pbAQuttXH/Y26u45VXn4AurqgAZ6t3zw6iA66k/QMh2GZU hfqRKka9fbTAAjIxHxOiiuoYfYb/7SkRlFtMdlj2UlL+ -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:13 2026 by rpki-client