This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/MrmdJdrahes4YHrf8GzXfXRAQTo.roa File: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (raw, json) Hash identifier: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk= Subject key identifier: 32:B9:9D:25:DA:DA:85:EB:38:60:7A:DF:F0:6C:D7:7D:74:40:41:3A Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2 Certificate serial: 019B77587D0D39B3909E202E6F08CC39CBBD Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/MrmdJdrahes4YHrf8GzXfXRAQTo.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31252 IP address blocks: 37.233.0.0/18 maxlen: 32 87.248.160.0/19 maxlen: 32 89.28.0.0/17 maxlen: 32 89.28.21.0/24 maxlen: 32 89.28.69.0/24 maxlen: 24 91.216.97.0/24 maxlen: 24 95.65.0.0/17 maxlen: 32 178.18.32.0/20 maxlen: 32 178.168.0.0/17 maxlen: 32 185.17.224.0/22 maxlen: 32 185.70.188.0/22 maxlen: 32 185.175.80.0/22 maxlen: 32 188.138.128.0/17 maxlen: 32 188.244.16.0/20 maxlen: 32 195.93.218.0/23 maxlen: 32 2a00:9900::/29 maxlen: 128 2a01:320::/29 maxlen: 128 2a0b:dd00::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7d:0d:39:b3:90:9e:20:2e:6f:08:cc:39:cb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32b99d25dada85eb38607adff06cd77d7440413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:60:37:8b:1a:ac:72:2e:5b:f4:c1:9f:05: 98:9c:44:9d:77:02:7a:bf:aa:7f:fd:13:5e:03:74: d2:0f:9a:99:ef:3c:69:8e:92:53:8a:33:ca:eb:f5: 92:75:93:9b:9a:b5:5f:e5:cf:05:f2:2a:e1:3d:96: 31:df:cb:1e:ed:31:e4:8b:35:58:01:03:4c:62:85: 0d:a6:f8:d2:6c:9e:c2:f0:4f:19:66:2a:b1:ad:c1: d1:91:ac:42:d2:15:fe:2e:50:ae:6f:76:51:8e:40: 89:39:4d:5d:bb:94:2a:40:da:33:55:6a:95:01:40: b1:1a:48:71:eb:b6:ec:b1:84:05:e0:9a:6a:4e:c4: 48:f2:18:4f:57:c0:1a:a3:fb:15:b7:01:86:ec:67: 12:c0:1f:09:bf:04:94:d9:e2:a1:01:6c:7f:ed:03: ba:48:66:81:12:3a:00:fb:a7:40:6a:f7:05:2f:20: 29:0a:4c:15:d3:33:43:5d:08:78:d8:54:2a:94:22: c3:74:3a:ff:47:36:dc:95:6e:46:e3:06:0b:e4:96: f0:78:e9:0d:dc:a7:e1:10:44:5e:9c:8d:c3:19:fe: 9c:91:b7:f4:04:a7:45:8e:1e:6c:b0:4e:96:e6:cf: 58:94:47:a0:9b:3b:a2:a6:9c:0b:11:2c:89:74:eb: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:9D:25:DA:DA:85:EB:38:60:7A:DF:F0:6C:D7:7D:74:40:41:3A X509v3 Authority Key Identifier: keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/MrmdJdrahes4YHrf8GzXfXRAQTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.233.0.0/18 87.248.160.0/19 89.28.0.0/17 91.216.97.0/24 95.65.0.0/17 178.18.32.0/20 178.168.0.0/17 185.17.224.0/22 185.70.188.0/22 185.175.80.0/22 188.138.128.0/17 188.244.16.0/20 195.93.218.0/23 IPv6: 2a00:9900::/29 2a01:320::/29 2a0b:dd00::/29 Signature Algorithm: sha256WithRSAEncryption 49:37:07:53:ec:79:5b:1a:2d:c6:ad:85:6a:15:61:9e:37:25: be:a7:bf:d5:b4:77:7f:ec:89:06:24:45:30:55:80:28:35:8b: 69:07:ae:db:b4:a6:12:07:57:66:c0:26:50:1f:17:f9:e2:4b: 4e:c2:78:95:f8:8f:81:9e:40:75:56:f5:e4:ec:39:26:14:01: bc:a1:ed:f9:ec:e9:a8:c0:53:af:13:2d:be:18:e6:6c:15:57: a5:67:05:09:9b:cc:b8:9c:42:e5:6b:52:c6:7e:10:f7:08:81: dc:8b:81:27:e6:6d:e2:d0:ed:9f:34:75:1b:7c:a5:7a:b7:4e: 96:e0:eb:e2:ea:dd:c5:55:4c:e6:46:3f:14:aa:d5:68:61:69: 1f:89:2a:8d:0a:71:06:d8:5e:d3:c6:d1:68:c1:e8:82:28:04: 14:a7:87:7c:59:c6:43:aa:5f:db:79:36:cb:46:7d:2d:33:f0: b0:40:a9:74:ec:5c:0c:a9:49:fb:eb:59:87:6e:04:28:ad:63: 7b:a0:46:45:32:31:f5:31:89:f7:7c:65:b3:ec:72:c2:0f:f2: 8e:9c:36:2f:99:22:17:c9:3c:dc:4e:2a:07:55:83:8a:d3:50: 77:1d:d9:21:55:e6:5f:7e:e2:a0:d2:6e:fd:4b:e5:43:17:8b: 30:04:3a:38 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt3WH0NObOQniAubwjMOcu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3 OTc1ZTIwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmI5OWQyNWRhZGE4NWViMzg2MDdhZGZmMDZjZDc3ZDc0NDA0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdxgN4sarHIuW/TBnwWYnESddwJ6 v6p//RNeA3TSD5qZ7zxpjpJTijPK6/WSdZObmrVf5c8F8irhPZYx38se7THkizVY AQNMYoUNpvjSbJ7C8E8ZZiqxrcHRkaxC0hX+LlCub3ZRjkCJOU1du5QqQNozVWqV AUCxGkhx67bssYQF4JpqTsRI8hhPV8Aao/sVtwGG7GcSwB8JvwSU2eKhAWx/7QO6 SGaBEjoA+6dAavcFLyApCkwV0zNDXQh42FQqlCLDdDr/RzbclW5G4wYL5JbweOkN 3KfhEERenI3DGf6ckbf0BKdFjh5ssE6W5s9YlEegmzuippwLESyJdOsYjwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFDK5nSXa2oXrOGB63/Bs1310QEE6MB8GA1UdIwQY MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt YTI1ZTA3Y2VhMmMwLzEvTXJtZEpkcmFoZXM0WUhyZjhHelhmWFJBUVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEBiXpAAME BVf4oAMEB1kcAAMEAFvYYQMEB19BAAMEBLISIAMEB7KoAAMEArkR4AMEArlGvAME ArmvUAMEB7yKgAMEBLz0EAMEAcNd2jAbBAIAAjAVAwUDKgCZAAMFAyoBAyADBQMq C90AMA0GCSqGSIb3DQEBCwUAA4IBAQBJNwdT7HlbGi3GrYVqFWGeNyW+p7/VtHd/ 7IkGJEUwVYAoNYtpB67btKYSB1dmwCZQHxf54ktOwniV+I+BnkB1VvXk7DkmFAG8 oe357OmowFOvEy2+GOZsFVelZwUJm8y4nELla1LGfhD3CIHci4En5m3i0O2fNHUb fKV6t06W4Ovi6t3FVUzmRj8UqtVoYWkfiSqNCnEG2F7TxtFoweiCKAQUp4d8WcZD ql/beTbLRn0tM/CwQKl07FwMqUn761mHbgQorWN7oEZFMjH1MYn3fGWz7HLCD/KO nDYvmSIXyTzcTioHVYOK01B3HdkhVeZffuKg0m79S+VDF4swBDo4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:23 2026 by rpki-client