This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/mXR1vwAsCEfZCQ6KKfou_FufsHg.roa File: mXR1vwAsCEfZCQ6KKfou_FufsHg.roa (raw, json) Hash identifier: MguOaTrNnHUp4FVql5i5MlGMRxd61G72ChYyyrskpls= Subject key identifier: 99:74:75:BF:00:2C:08:47:D9:09:0E:8A:29:FA:2E:FC:5B:9F:B0:78 Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4 Certificate serial: 019B7F15D6EEE9F75DDFF4D3AC67F9BC7CBF Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/mXR1vwAsCEfZCQ6KKfou_FufsHg.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205617 IP address blocks: 37.208.112.0/21 maxlen: 21 185.150.208.0/22 maxlen: 22 2a00:c7c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d6:ee:e9:f7:5d:df:f4:d3:ac:67:f9:bc:7c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4 Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997475bf002c0847d9090e8a29fa2efc5b9fb078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:62:22:cb:9b:d4:a8:db:2b:27:d6:43:b3: 03:ac:48:0b:fb:ac:1f:5d:12:88:67:b0:be:ee:cc: 81:e8:58:64:87:fa:4a:f9:4b:c7:35:9c:4f:82:7e: 26:29:58:64:f8:4a:08:aa:20:d2:15:5e:0b:0c:e2: 55:0e:64:fa:05:a3:5c:97:6c:eb:4a:85:55:a1:93: 7a:52:8f:02:c9:7a:a3:bf:a0:fc:ad:a6:46:4b:35: 7f:72:7e:94:66:73:17:b9:4b:7e:52:db:2a:c4:d8: 40:fd:c2:88:ee:ef:25:78:ea:2e:f5:fa:22:b3:ee: 99:e3:f5:12:1f:c9:3b:67:3b:75:78:d3:e0:d3:fc: 2a:5c:4a:01:38:0f:ae:79:b1:02:50:d4:30:81:09: aa:ac:28:bb:84:c4:b1:2e:c3:f4:60:d2:3b:1b:b3: a9:f5:c5:53:b2:88:65:f9:52:30:d7:42:77:b7:c4: d7:d3:a6:bb:a7:3e:56:d0:99:9e:8b:59:48:f7:84: ad:8a:39:7c:b3:19:e8:bf:b1:de:4d:48:f4:38:df: 3d:cd:57:11:07:a0:e3:10:44:af:47:6b:13:c0:99: 58:fc:6a:8b:5b:8f:f4:5d:1f:08:3a:07:75:f1:a3: ed:a0:5c:a3:15:8d:f8:e8:b7:31:18:36:4f:6f:b1: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:74:75:BF:00:2C:08:47:D9:09:0E:8A:29:FA:2E:FC:5B:9F:B0:78 X509v3 Authority Key Identifier: keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/mXR1vwAsCEfZCQ6KKfou_FufsHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.112.0/21 185.150.208.0/22 IPv6: 2a00:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 47:dc:72:3e:10:48:1c:fd:21:a5:21:aa:e9:ad:fd:e6:c0:ba: 34:67:db:04:51:63:6e:6e:bc:aa:c3:80:e1:82:a5:91:82:bb: e7:69:58:b5:73:f5:c8:98:f0:33:90:7a:20:d2:14:e7:27:99: f5:61:45:6a:1e:97:d1:d9:dc:81:2c:7f:bb:8f:67:0b:2a:e1: 34:82:79:a2:c5:f4:d3:0e:d1:9a:a5:ce:ee:fe:02:bb:62:0d: ed:3e:d3:a2:60:30:1a:bc:9c:fe:ef:57:57:0f:10:db:61:66: 7b:a7:95:38:5f:c4:be:4d:f2:ae:2d:7c:56:76:97:eb:40:27: d8:8a:57:03:c0:fa:33:19:02:84:27:3f:4e:76:95:64:cb:30: 16:7b:c6:be:98:70:9f:57:08:7c:47:94:f8:35:30:af:31:13: 0c:67:af:bd:09:b3:bb:68:5c:6f:1d:a3:f7:d9:97:a4:71:75: 46:cc:81:1e:20:c4:6f:e9:e3:5c:af:07:8f:42:64:59:a4:0e: 2c:b5:75:23:81:50:69:07:90:f7:0d:52:2b:90:4d:82:4c:11: 77:51:c0:49:92:fa:f0:bc:9f:e8:f5:47:6c:1b:dd:58:97:bf: eb:22:62:b4:d9:d4:4c:58:6f:88:d7:71:8c:b7:a2:10:ce:ed: c2:37:e9:b7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fdbu6fdd3/TTrGf5vHy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz OTc5YzQwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTc0NzViZjAwMmMwODQ3ZDkwOTBlOGEyOWZhMmVmYzViOWZiMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxFiIsub1KjbKyfWQ7MDrEgL+6wf XRKIZ7C+7syB6Fhkh/pK+UvHNZxPgn4mKVhk+EoIqiDSFV4LDOJVDmT6BaNcl2zr SoVVoZN6Uo8CyXqjv6D8raZGSzV/cn6UZnMXuUt+UtsqxNhA/cKI7u8leOou9foi s+6Z4/USH8k7Zzt1eNPg0/wqXEoBOA+uebECUNQwgQmqrCi7hMSxLsP0YNI7G7Op 9cVTsohl+VIw10J3t8TX06a7pz5W0Jmei1lI94Stijl8sxnov7HeTUj0ON89zVcR B6DjEESvR2sTwJlY/GqLW4/0XR8IOgd18aPtoFyjFY346LcxGDZPb7HzPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJl0db8ALAhH2QkOiin6Lvxbn7B4MB8GA1UdIwQY MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt ZjdlZGIyNjg4NjUyLzEvbVhSMXZ3QXNDRWZaQ1E2S0tmb3VfRnVmc0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJdBwAwQC uZbQMA0EAgACMAcDBQMqAMfAMA0GCSqGSIb3DQEBCwUAA4IBAQBH3HI+EEgc/SGl Iarprf3mwLo0Z9sEUWNubryqw4DhgqWRgrvnaVi1c/XImPAzkHog0hTnJ5n1YUVq HpfR2dyBLH+7j2cLKuE0gnmixfTTDtGapc7u/gK7Yg3tPtOiYDAavJz+71dXDxDb YWZ7p5U4X8S+TfKuLXxWdpfrQCfYilcDwPozGQKEJz9OdpVkyzAWe8a+mHCfVwh8 R5T4NTCvMRMMZ6+9CbO7aFxvHaP32ZekcXVGzIEeIMRv6eNcrwePQmRZpA4stXUj gVBpB5D3DVIrkE2CTBF3UcBJkvrwvJ/o9UdsG91Yl7/rImK02dRMWG+I13GMt6IQ zu3CN+m3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:28 2026 by rpki-client