This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/M5rLBovi9FegD_6XfZI0UvOLj9A.roa File: M5rLBovi9FegD_6XfZI0UvOLj9A.roa (raw, json) Hash identifier: Ncj1lwYIIUnFe3TFAOPydLTK9RtxEBu7QwiwQw7cVtk= Subject key identifier: 33:9A:CB:06:8B:E2:F4:57:A0:0F:FE:97:7D:92:34:52:F3:8B:8F:D0 Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8 Certificate serial: 019B7D5D2FB329E7A87212BE466E507BF66E Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/M5rLBovi9FegD_6XfZI0UvOLj9A.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209048 IP address blocks: 45.8.244.0/22 maxlen: 22 45.8.244.0/24 maxlen: 24 45.8.245.0/24 maxlen: 24 45.8.246.0/24 maxlen: 24 45.8.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2f:b3:29:e7:a8:72:12:be:46:6e:50:7b:f6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339acb068be2f457a00ffe977d923452f38b8fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:6f:e3:e9:04:c2:54:5e:16:d1:44:71:5f: a6:68:f2:77:71:2d:90:8f:a1:e6:3c:0d:bc:c1:82: 76:8c:98:b7:8b:e4:dd:81:7a:c5:dc:cf:04:ee:99: 0b:e5:b2:e3:2c:b2:62:1b:ec:36:82:c3:16:ce:02: ef:b1:1a:b3:b8:aa:da:6d:9a:87:d9:52:53:2a:b1: 94:e5:b4:30:71:19:bb:23:3f:bc:41:54:9a:53:06: ad:ff:be:13:6c:3f:72:8a:9d:0d:d1:9d:9a:d0:25: 4c:66:18:64:91:3f:c4:dd:6b:a0:78:36:62:cc:c1: b2:8b:29:66:6b:e7:d5:ef:2d:f5:ec:ed:55:d6:64: 28:cb:2f:ec:42:c7:f5:bb:5c:73:a5:a8:5e:eb:90: 8a:21:34:9b:c0:7f:9d:a9:52:87:0e:46:72:cf:d9: 6c:12:f8:82:2a:da:e3:12:78:53:9c:9e:bc:b1:72: c1:96:4a:c8:dc:0f:36:0b:45:19:f2:8a:0a:6f:8a: 58:26:a8:39:83:ec:f9:3d:c5:e2:a5:77:ed:f6:d8: 1c:28:6d:87:9e:26:d1:c0:a8:4e:37:a7:c3:ff:c9: ea:81:ff:ea:35:0f:32:7c:c1:95:ab:23:2c:93:23: 9c:c6:48:a9:2f:22:7f:88:b1:63:5a:c6:3c:4d:ac: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:CB:06:8B:E2:F4:57:A0:0F:FE:97:7D:92:34:52:F3:8B:8F:D0 X509v3 Authority Key Identifier: keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/M5rLBovi9FegD_6XfZI0UvOLj9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:b9:9e:85:d4:e0:6a:27:df:ce:1d:80:ba:7f:82:47:4c:71: fc:7a:c0:db:ee:1c:b2:1b:10:fa:b8:71:2f:fc:25:71:df:08: 4b:21:b1:f1:d1:b2:d7:08:89:71:52:dd:ad:36:5e:f3:23:24: 94:d1:f7:32:69:7a:36:bc:0c:59:b3:66:b6:4e:ca:c2:4d:ae: 44:fd:95:a4:1a:8b:f8:cf:67:aa:01:cc:61:2a:61:e5:9d:5d: 4d:38:04:25:33:c6:76:c7:03:69:bb:8c:ea:fe:42:27:8f:cf: 73:5d:e1:51:04:c1:b3:63:a1:da:2a:12:52:79:ce:84:91:7f: 0b:26:5e:bc:27:92:c2:54:1a:25:3d:e4:91:92:c7:c0:21:a9: 2d:7c:26:b2:ad:37:3a:06:95:1e:d0:25:44:59:4c:f6:ee:83: 4a:2e:06:8f:7b:b9:23:5a:3c:b3:45:82:2e:5e:64:25:d1:1e: 9a:e3:c1:4d:16:25:51:8c:85:f2:c0:8e:3f:b0:c7:fc:e8:39: 1d:9e:8a:9e:74:64:3d:a2:3c:9a:92:8d:20:2c:87:5e:c2:b3: 53:a0:93:25:12:c1:1b:b2:68:c5:77:be:21:db:6f:5e:83:d8: 38:bc:66:03:d9:48:a3:2e:d4:f6:00:ca:49:dd:ee:b3:ce:58: ff:7a:c3:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XS+zKeeochK+Rm5Qe/ZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDAxMGU0Mzk4ZGZkNmUxOWY0NWI1MTNjMjJjMWVjYTMz MzExZjgwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzlhY2IwNjhiZTJmNDU3YTAwZmZlOTc3ZDkyMzQ1MmYzOGI4ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81v4+kEwlReFtFEcV+maPJ3cS2Q j6HmPA28wYJ2jJi3i+TdgXrF3M8E7pkL5bLjLLJiG+w2gsMWzgLvsRqzuKrabZqH 2VJTKrGU5bQwcRm7Iz+8QVSaUwat/74TbD9yip0N0Z2a0CVMZhhkkT/E3WugeDZi zMGyiylma+fV7y317O1V1mQoyy/sQsf1u1xzpahe65CKITSbwH+dqVKHDkZyz9ls EviCKtrjEnhTnJ68sXLBlkrI3A82C0UZ8ooKb4pYJqg5g+z5PcXipXft9tgcKG2H nibRwKhON6fD/8nqgf/qNQ8yfMGVqyMskyOcxkipLyJ/iLFjWsY8Tay0LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOaywaL4vRXoA/+l32SNFLzi4/QMB8GA1UdIwQY MBaAFBNAEOQ5jf1uGfRbUTwiweyjMxH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgt MTYyZGYwOGIzOWU1LzEvTTVyTEJvdmk5RmVnRF82WGZaSTBVdk9MajlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgtMTYyZGYwOGIzOWU1 LzEvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQj0MA0G CSqGSIb3DQEBCwUAA4IBAQCKuZ6F1OBqJ9/OHYC6f4JHTHH8esDb7hyyGxD6uHEv /CVx3whLIbHx0bLXCIlxUt2tNl7zIySU0fcyaXo2vAxZs2a2TsrCTa5E/ZWkGov4 z2eqAcxhKmHlnV1NOAQlM8Z2xwNpu4zq/kInj89zXeFRBMGzY6HaKhJSec6EkX8L Jl68J5LCVBolPeSRksfAIaktfCayrTc6BpUe0CVEWUz27oNKLgaPe7kjWjyzRYIu XmQl0R6a48FNFiVRjIXywI4/sMf86DkdnoqedGQ9ojyako0gLIdewrNToJMlEsEb smjFd74h229eg9g4vGYD2UijLtT2AMpJ3e6zzlj/esOO -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:27 2026 by rpki-client