This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa File: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (raw, json) Hash identifier: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc= Subject key identifier: 33:F7:A3:F8:62:E8:F4:C9:83:76:60:97:E0:8E:59:56:D9:3F:9D:74 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B07E2BA1CD2800175BA40C6B765EE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62442 IP address blocks: 185.136.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:07:e2:ba:1c:d2:80:01:75:ba:40:c6:b7:65:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33f7a3f862e8f4c983766097e08e5956d93f9d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:e6:d2:83:f0:0e:9d:ba:59:9a:e6:ad:33: b2:0f:cc:8c:8c:89:a4:9f:06:2c:11:7e:57:8d:49: 33:af:3e:fc:10:7b:28:66:14:d2:f8:56:90:54:86: 75:b3:9d:29:12:68:b5:60:1e:91:c3:42:a3:62:ff: ea:45:ce:97:9a:e5:9a:7b:1a:15:55:d9:b2:43:67: 9f:d0:ae:14:e0:6e:10:26:8a:f9:85:21:89:ad:f8: 50:d9:16:37:53:64:81:97:b2:74:13:a6:4b:da:9b: ea:09:a1:4a:40:c0:6c:62:57:5f:bc:8c:f5:e9:32: 45:6d:2d:25:cd:f7:97:d7:c8:bf:80:07:17:67:0e: 48:a5:a3:c8:c2:b0:72:2e:d0:12:bd:16:e4:fe:b5: db:bb:26:0e:a1:47:63:ab:68:a5:ff:88:aa:a8:8d: 3c:bf:1d:9e:ab:e7:80:81:18:1b:e2:2c:60:60:55: bf:5f:f5:49:fa:b9:93:5c:5d:8b:87:b9:61:5b:77: 53:00:d1:98:aa:e7:c0:a0:ec:1d:f4:fb:fc:98:8c: df:18:77:30:0e:3c:e7:53:8e:8d:5f:b9:b6:11:40: 8e:a7:38:de:90:21:95:6e:6a:64:85:66:96:d7:bd: b1:d8:63:98:6a:3f:75:0a:55:7a:4f:5f:aa:2b:e3: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:A3:F8:62:E8:F4:C9:83:76:60:97:E0:8E:59:56:D9:3F:9D:74 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.133.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:32:06:0c:ee:32:44:61:66:d4:af:50:2e:91:e6:1f:5c:85: 79:12:5d:05:d1:01:06:02:a8:8a:fc:94:4f:a9:05:0b:6f:4b: de:9d:8d:f3:30:69:b5:7b:5b:d4:55:53:2b:af:b5:20:92:fa: c6:cc:9d:fc:d5:72:72:b8:4b:80:d6:88:20:35:26:9c:03:69: 7d:4c:29:ff:65:52:ce:8c:ac:68:98:91:98:c7:ef:ce:35:68: e9:41:0a:c9:4b:9c:9f:8c:64:4d:dd:40:68:f0:8a:9e:ad:6d: 37:4c:c9:54:43:48:d3:38:41:1d:8f:5b:70:a9:99:a3:4c:44: a1:6f:db:96:7e:73:57:d9:4f:6c:6a:13:2c:11:df:1c:60:d0: 9e:d1:95:1b:d7:93:5f:3f:aa:d5:ba:a0:78:8c:e2:af:b0:46: 1a:ba:00:51:f6:30:9a:64:a9:8e:51:35:2d:c6:47:08:31:28: 43:09:a2:2d:d7:0f:42:d5:8a:f3:fa:de:5e:9a:0f:5c:5f:8d: fb:c8:01:e0:d6:a5:e2:3d:c4:5a:40:46:9e:3d:ae:1c:d2:31: db:bb:16:b8:ed:a5:ec:ce:a8:6d:c3:be:45:94:00:85:b0:03: 4e:ac:f8:3e:12:aa:2d:af:d4:06:7a:2d:a9:9d:52:95:4b:40: 56:66:ed:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwfiuhzSgAF1ukDGt2XuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Y3YTNmODYyZThmNGM5ODM3NjYwOTdlMDhlNTk1NmQ5M2Y5ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3bm0oPwDp26WZrmrTOyD8yMjImk nwYsEX5XjUkzrz78EHsoZhTS+FaQVIZ1s50pEmi1YB6Rw0KjYv/qRc6XmuWaexoV VdmyQ2ef0K4U4G4QJor5hSGJrfhQ2RY3U2SBl7J0E6ZL2pvqCaFKQMBsYldfvIz1 6TJFbS0lzfeX18i/gAcXZw5IpaPIwrByLtASvRbk/rXbuyYOoUdjq2il/4iqqI08 vx2eq+eAgRgb4ixgYFW/X/VJ+rmTXF2Lh7lhW3dTANGYqufAoOwd9Pv8mIzfGHcw DjznU46NX7m2EUCOpzjekCGVbmpkhWaW172x2GOYaj91ClV6T1+qK+OywwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDP3o/hi6PTJg3Zgl+COWVbZP510MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvTV9lai1HTG85TW1EZG1DWDRJNVpWdGtfblhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYiFMA0G CSqGSIb3DQEBCwUAA4IBAQB7MgYM7jJEYWbUr1AukeYfXIV5El0F0QEGAqiK/JRP qQULb0venY3zMGm1e1vUVVMrr7UgkvrGzJ381XJyuEuA1oggNSacA2l9TCn/ZVLO jKxomJGYx+/ONWjpQQrJS5yfjGRN3UBo8IqerW03TMlUQ0jTOEEdj1twqZmjTESh b9uWfnNX2U9sahMsEd8cYNCe0ZUb15NfP6rVuqB4jOKvsEYaugBR9jCaZKmOUTUt xkcIMShDCaIt1w9C1Yrz+t5emg9cX437yAHg1qXiPcRaQEaePa4c0jHbuxa47aXs zqhtw75FlACFsANOrPg+Eqotr9QGei2pnVKVS0BWZu1W -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:25 2026 by rpki-client