This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/m20soYBRpBwWiwOYMWjeGQImDiI.roa File: m20soYBRpBwWiwOYMWjeGQImDiI.roa (raw, json) Hash identifier: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s= Subject key identifier: 9B:6D:2C:A1:80:51:A4:1C:16:8B:03:98:31:68:DE:19:02:26:0E:22 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019BFA87EC23A091F76E45B0C157E0233EBE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/m20soYBRpBwWiwOYMWjeGQImDiI.roa Signing time: Mon 26 Jan 2026 13:39:30 +0000 ROA not before: Mon 26 Jan 2026 13:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 45.159.149.0/24 maxlen: 24 45.159.150.0/24 maxlen: 24 62.106.95.0/24 maxlen: 24 146.19.212.0/24 maxlen: 24 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:87:ec:23:a0:91:f7:6e:45:b0:c1:57:e0:23:3e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 26 13:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b6d2ca18051a41c168b03983168de1902260e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:fe:88:f0:3f:eb:bf:ea:fb:47:22:60:78: 71:82:81:01:ed:d4:97:5c:7d:05:1a:8a:2a:fe:ca: e0:d7:9f:70:01:13:8f:10:1f:64:45:c9:5a:0a:96: e8:84:ae:f1:3f:3e:18:2f:10:97:95:9b:be:17:30: 19:02:5e:e8:77:c5:5d:f9:be:5d:98:0c:4d:d8:9a: 35:32:aa:49:b8:11:20:72:54:dd:45:29:ad:a5:af: f4:b2:90:8c:f3:3b:7f:8c:bf:1d:37:32:e5:c9:b4: d0:a6:64:aa:35:98:f9:93:5d:4e:44:45:d8:3a:90: b6:1d:80:02:b7:63:70:95:92:1d:30:1f:97:33:db: d2:f8:31:a2:a3:26:e1:28:da:73:f4:38:98:b5:bf: 77:45:09:d9:88:57:7a:25:ad:f4:da:ae:f3:91:cb: 34:3b:d3:91:cc:d2:50:1d:3a:98:7f:d4:cb:c3:80: 34:1e:e3:e5:50:40:21:85:e4:37:71:3f:14:fa:ec: c3:24:fc:2c:59:0e:7e:bf:22:fa:e2:0f:58:4d:59: d0:fd:9c:07:c6:31:67:b4:1c:b9:34:68:3a:b3:b3: 20:88:b7:88:ed:60:86:4e:8f:e0:b2:da:92:73:a7: b6:8d:a4:e9:4d:b8:d2:72:93:88:e3:0e:ce:ca:b5: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6D:2C:A1:80:51:A4:1C:16:8B:03:98:31:68:DE:19:02:26:0E:22 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/m20soYBRpBwWiwOYMWjeGQImDiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.149.0-45.159.150.255 62.106.95.0/24 146.19.212.0/24 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption d6:f6:6c:74:b0:94:08:fd:a6:82:c2:90:a9:fc:5c:33:23:ae: 23:b5:d7:fa:ee:f9:e4:65:60:7e:2c:f5:ef:7d:79:43:df:cb: ab:69:c4:fa:24:69:16:16:77:36:e9:07:d4:cf:41:89:51:eb: 69:5e:59:4b:60:8d:71:bc:77:6e:e2:09:73:31:55:ab:cb:80: b4:5a:cd:76:d0:fe:6b:68:74:49:4a:2f:26:89:9e:33:c6:fe: 84:41:c3:9e:f0:85:82:a5:81:a7:ef:ca:9a:73:ba:ae:7a:97: ec:33:95:8d:df:90:a0:0a:12:9a:b7:63:03:ff:81:be:3e:51: 9b:29:9c:51:1e:13:1d:d1:81:bc:79:2d:38:a9:4a:7a:d4:fa: 61:ee:e2:c3:b7:15:39:f6:0b:4d:c3:af:48:18:61:25:81:58: b6:ce:bf:e2:ec:c1:6d:c7:4d:00:d5:c3:29:67:09:83:1b:54: 4c:43:90:25:1b:e2:c9:7d:14:1f:d0:9b:d5:46:bc:c3:c3:29: 80:cc:53:1a:58:e1:5d:76:74:59:38:45:97:b0:f1:e9:8a:44: 43:8f:fd:11:fa:d7:b6:17:c2:53:96:7f:89:3d:cb:fd:68:9b: 36:19:96:d5:30:cd:ce:b8:a4:2c:fd:7d:57:bb:82:c8:9d:99: dd:65:a8:39 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZv6h+wjoJH3bkWwwVfgIz6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTI2MTMzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjZkMmNhMTgwNTFhNDFjMTY4YjAzOTgzMTY4ZGUxOTAyMjYwZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2z+iPA/67/q+0ciYHhxgoEB7dSX XH0FGooq/srg159wAROPEB9kRclaCpbohK7xPz4YLxCXlZu+FzAZAl7od8Vd+b5d mAxN2Jo1MqpJuBEgclTdRSmtpa/0spCM8zt/jL8dNzLlybTQpmSqNZj5k11OREXY OpC2HYACt2NwlZIdMB+XM9vS+DGioybhKNpz9DiYtb93RQnZiFd6Ja302q7zkcs0 O9ORzNJQHTqYf9TLw4A0HuPlUEAhheQ3cT8U+uzDJPwsWQ5+vyL64g9YTVnQ/ZwH xjFntBy5NGg6s7MgiLeI7WCGTo/gstqSc6e2jaTpTbjScpOI4w7OyrV+NwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJttLKGAUaQcFosDmDFo3hkCJg4iMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvbTIwc29ZQlJwQndXaXdPWU1XamVHUUltRGlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtn5UD BAAtn5YDBAA+al8DBACSE9QDBADZcigwDQYJKoZIhvcNAQELBQADggEBANb2bHSw lAj9poLCkKn8XDMjriO11/ru+eRlYH4s9e99eUPfy6tpxPokaRYWdzbpB9TPQYlR 62leWUtgjXG8d27iCXMxVavLgLRazXbQ/mtodElKLyaJnjPG/oRBw57whYKlgafv yppzuq56l+wzlY3fkKAKEpq3YwP/gb4+UZspnFEeEx3Rgbx5LTipSnrU+mHu4sO3 FTn2C03Dr0gYYSWBWLbOv+LswW3HTQDVwylnCYMbVExDkCUb4sl9FB/Qm9VGvMPD KYDMUxpY4V12dFk4RZew8emKREOP/RH617YXwlOWf4k9y/1omzYZltUwzc64pCz9 fVe7gsidmd1lqDk= -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:24 2026 by rpki-client