This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/m3wtHY_DfaP85oa2Wf6djmVEzGg.roa File: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (raw, json) Hash identifier: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok= Subject key identifier: 9B:7C:2D:1D:8F:C3:7D:A3:FC:E6:86:B6:59:FE:9D:8E:65:44:CC:68 Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb Certificate serial: 019B7C7FFD3DE2BEA29461A2B801FC1683B8 Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/m3wtHY_DfaP85oa2Wf6djmVEzGg.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49273 IP address blocks: 45.153.60.0/24 maxlen: 24 45.153.61.0/24 maxlen: 24 45.153.62.0/24 maxlen: 24 45.153.63.0/24 maxlen: 24 45.153.64.0/24 maxlen: 24 45.153.65.0/24 maxlen: 24 45.153.66.0/24 maxlen: 24 45.153.67.0/24 maxlen: 24 185.208.176.0/24 maxlen: 24 185.208.177.0/24 maxlen: 24 185.208.178.0/24 maxlen: 24 185.208.179.0/24 maxlen: 24 188.113.192.0/24 maxlen: 24 188.113.193.0/24 maxlen: 24 188.113.194.0/24 maxlen: 24 188.113.195.0/24 maxlen: 24 188.113.196.0/24 maxlen: 24 188.113.197.0/24 maxlen: 24 188.113.198.0/24 maxlen: 24 188.113.199.0/24 maxlen: 24 188.113.200.0/24 maxlen: 24 188.113.201.0/24 maxlen: 24 188.113.202.0/24 maxlen: 24 188.113.203.0/24 maxlen: 24 188.113.204.0/24 maxlen: 24 188.113.205.0/24 maxlen: 24 188.113.206.0/24 maxlen: 24 188.113.207.0/24 maxlen: 24 188.113.208.0/24 maxlen: 24 188.113.209.0/24 maxlen: 24 188.113.210.0/24 maxlen: 24 188.113.211.0/24 maxlen: 24 188.113.212.0/24 maxlen: 24 188.113.213.0/24 maxlen: 24 188.113.214.0/24 maxlen: 24 188.113.215.0/24 maxlen: 24 188.113.216.0/24 maxlen: 24 188.113.217.0/24 maxlen: 24 188.113.218.0/24 maxlen: 24 188.113.219.0/24 maxlen: 24 188.113.221.0/24 maxlen: 24 188.113.222.0/24 maxlen: 24 188.113.224.0/24 maxlen: 24 188.113.225.0/24 maxlen: 24 188.113.226.0/24 maxlen: 24 188.113.227.0/24 maxlen: 24 188.113.228.0/24 maxlen: 24 188.113.229.0/24 maxlen: 24 188.113.230.0/24 maxlen: 24 188.113.231.0/24 maxlen: 24 188.113.232.0/24 maxlen: 24 188.113.233.0/24 maxlen: 24 188.113.234.0/24 maxlen: 24 188.113.235.0/24 maxlen: 24 188.113.236.0/24 maxlen: 24 188.113.237.0/24 maxlen: 24 188.113.238.0/24 maxlen: 24 188.113.239.0/24 maxlen: 24 188.113.240.0/24 maxlen: 24 188.113.241.0/24 maxlen: 24 188.113.242.0/24 maxlen: 24 188.113.243.0/24 maxlen: 24 188.113.244.0/24 maxlen: 24 188.113.245.0/24 maxlen: 24 188.113.246.0/24 maxlen: 24 188.113.247.0/24 maxlen: 24 188.113.248.0/24 maxlen: 24 188.113.249.0/24 maxlen: 24 188.113.250.0/24 maxlen: 24 188.113.251.0/24 maxlen: 24 188.113.252.0/24 maxlen: 24 188.113.253.0/24 maxlen: 24 188.113.254.0/24 maxlen: 24 188.113.255.0/24 maxlen: 24 2a02:f7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fd:3d:e2:be:a2:94:61:a2:b8:01:fc:16:83:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b7c2d1d8fc37da3fce686b659fe9d8e6544cc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:2a:b6:0b:94:bc:f7:1c:13:46:12:dc:d8: 5d:0f:f0:31:94:ef:ab:28:91:d9:d9:b0:8c:5d:cb: 1f:b3:44:5a:16:82:7e:53:0d:13:5e:d0:78:5b:18: 94:f9:47:f8:08:c7:87:4a:d6:58:01:e3:dc:63:33: 2c:3e:21:00:ef:6b:ce:96:d0:f4:9a:ed:52:d4:37: de:8a:67:78:ee:f0:d4:4e:32:3f:6e:e9:c0:e7:5c: 1e:ec:be:c0:84:52:c0:d2:37:56:96:01:f8:bf:ad: 16:7d:b5:f4:c5:db:60:c7:f7:44:0b:5d:a5:67:07: 4c:fe:9d:f0:57:6d:70:cf:f9:d2:ad:ee:a8:7c:02: 80:27:c5:6c:cd:0e:54:7c:67:11:be:c1:28:6e:07: 51:9d:26:46:d6:d6:fd:51:eb:f1:90:26:27:e6:4b: 71:6b:e4:ff:67:e3:4f:b5:95:84:17:31:8b:14:1d: c0:e9:bb:07:73:52:9c:1a:18:42:43:df:dd:21:e3: 6a:33:25:18:68:57:9a:71:ad:3b:68:51:29:7b:0b: 5d:d4:96:1d:40:f8:ce:f0:23:5d:a1:d2:c4:98:6f: b8:6a:c3:fa:ec:bd:89:de:f4:58:9a:8e:b3:95:cb: 2c:05:c6:5c:18:fc:eb:89:65:99:2f:e2:70:48:da: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:2D:1D:8F:C3:7D:A3:FC:E6:86:B6:59:FE:9D:8E:65:44:CC:68 X509v3 Authority Key Identifier: keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/m3wtHY_DfaP85oa2Wf6djmVEzGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.60.0-45.153.67.255 185.208.176.0/22 188.113.192.0-188.113.219.255 188.113.221.0-188.113.222.255 188.113.224.0/19 IPv6: 2a02:f7c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:15:73:02:0d:08:76:33:26:0d:91:4a:8f:a3:4e:f2:6c:6e: 40:b3:87:58:e1:2e:53:34:51:60:30:80:4d:51:ba:0a:b8:aa: ac:4f:2a:0a:36:0c:00:4d:8c:70:2b:bb:14:6a:e2:ec:96:c5: c5:71:89:5d:61:61:80:9f:89:3a:4c:ac:db:c5:b1:75:49:7f: 46:64:08:ce:8f:c6:32:8c:48:93:fb:62:b8:63:c7:ce:e8:b4: d1:5b:8e:77:a0:b5:e4:da:16:89:fa:b8:9e:28:7a:97:2c:54: d1:89:a2:9c:48:06:2c:23:4a:f1:d0:26:af:9e:7a:1c:3b:bf: 61:cd:aa:1a:60:e3:b5:af:0a:de:dc:a6:99:cc:36:39:ff:31: 5e:aa:f4:72:36:64:57:81:09:2a:86:0a:bd:5b:06:74:68:7e: d1:e2:87:b6:7d:9f:f4:35:e9:23:20:f9:1a:7c:1d:76:4d:e5: 95:46:07:65:e8:7f:c3:20:15:b5:c8:ed:34:f1:b0:79:2f:47: 3e:66:b6:89:99:aa:82:03:7c:3e:b3:b6:f5:34:aa:40:4b:22: e9:ea:9f:88:18:8f:3b:36:f3:bd:b1:1a:50:85:8a:d8:80:62: a2:c7:dc:67:15:56:6c:a5:66:06:0c:40:bf:df:a4:bd:fd:e8: 00:72:38:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt8f/094r6ilGGiuAH8FoO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5 NjQ5YmIwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjdjMmQxZDhmYzM3ZGEzZmNlNjg2YjY1OWZlOWQ4ZTY1NDRjYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra4qtguUvPccE0YS3NhdD/AxlO+r KJHZ2bCMXcsfs0RaFoJ+Uw0TXtB4WxiU+Uf4CMeHStZYAePcYzMsPiEA72vOltD0 mu1S1Dfeimd47vDUTjI/bunA51we7L7AhFLA0jdWlgH4v60WfbX0xdtgx/dEC12l ZwdM/p3wV21wz/nSre6ofAKAJ8VszQ5UfGcRvsEobgdRnSZG1tb9UevxkCYn5ktx a+T/Z+NPtZWEFzGLFB3A6bsHc1KcGhhCQ9/dIeNqMyUYaFeaca07aFEpewtd1JYd QPjO8CNdodLEmG+4asP67L2J3vRYmo6zlcssBcZcGPzriWWZL+JwSNqzXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJt8LR2Pw32j/OaGtln+nY5lRMxoMB8GA1UdIwQY MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt ZWVkZjc2MDc3ZjA5LzEvbTN3dEhZX0RmYVA4NW9hMldmNmRqbVZFekdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5 LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2MAwDBAItmTwD BAItmUADBAK50LAwDAMEBrxxwAMEArxx2DAMAwQAvHHdAwQAvHHeAwQFvHHgMA0E AgACMAcDBQAqAvfAMA0GCSqGSIb3DQEBCwUAA4IBAQCRFXMCDQh2MyYNkUqPo07y bG5As4dY4S5TNFFgMIBNUboKuKqsTyoKNgwATYxwK7sUauLslsXFcYldYWGAn4k6 TKzbxbF1SX9GZAjOj8YyjEiT+2K4Y8fO6LTRW453oLXk2haJ+rieKHqXLFTRiaKc SAYsI0rx0CavnnocO79hzaoaYOO1rwre3KaZzDY5/zFeqvRyNmRXgQkqhgq9WwZ0 aH7R4oe2fZ/0NekjIPkafB12TeWVRgdl6H/DIBW1yO008bB5L0c+ZraJmaqCA3w+ s7b1NKpASyLp6p+IGI87NvO9sRpQhYrYgGKix9xnFVZspWYGDEC/36S9/egAcjjM -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:20 2026 by rpki-client