This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/M2fYQ-Xh1R9kL12fjU6kj21jnME.roa File: M2fYQ-Xh1R9kL12fjU6kj21jnME.roa (raw, json) Hash identifier: RNCxRLIEgxJ5YCHwFJ/0nlizuHzlZR5j4toiJWJqww0= Subject key identifier: 33:67:D8:43:E5:E1:D5:1F:64:2F:5D:9F:8D:4E:A4:8F:6D:63:9C:C1 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019B7C7F2DC17A394EC06B4471B59A00D84B Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/M2fYQ-Xh1R9kL12fjU6kj21jnME.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 109.68.67.0/24 maxlen: 24 109.68.70.0/24 maxlen: 24 109.68.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2d:c1:7a:39:4e:c0:6b:44:71:b5:9a:00:d8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3367d843e5e1d51f642f5d9f8d4ea48f6d639cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:3d:5e:39:3a:54:3d:51:6b:34:29:02:58: 4e:66:87:6a:3d:e2:f1:ff:5d:09:77:bd:a1:af:19: c2:09:fc:0a:ff:78:19:b4:bd:3d:52:63:08:3f:f4: 49:fe:e0:9f:01:e0:c3:8f:1b:3f:4f:6f:39:a2:4c: 46:cb:ab:76:e7:49:71:0e:32:d1:91:d1:05:c8:df: 6f:69:90:84:f8:b2:76:ff:18:b8:a1:6b:b4:60:52: c9:42:dd:da:c8:2d:d2:66:01:2b:18:49:b6:92:5d: 3c:df:74:ed:4f:59:51:04:63:30:2e:1d:cd:4a:48: be:bc:73:ca:b4:1b:cd:69:97:b8:91:30:ee:dd:05: 9a:16:d8:67:fe:4a:ae:48:51:f9:00:3e:0d:3e:48: 56:f5:b1:26:12:cf:f1:87:92:3b:6e:d3:0a:4b:e2: ba:a3:10:10:a5:4d:76:46:01:d6:23:c0:42:80:a3: 8b:c2:04:af:c0:c8:db:8c:bd:94:48:03:5a:e0:2f: e3:25:28:a0:2d:70:48:80:fd:2c:54:db:95:bf:49: f9:35:aa:93:5c:3a:ca:02:b0:f1:cb:5f:f9:91:9f: 02:e6:ed:e2:e2:ce:2d:76:cd:5a:80:9a:c9:78:0f: be:b5:ed:a0:4a:20:2b:d9:12:88:1b:87:3f:9f:65: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:D8:43:E5:E1:D5:1F:64:2F:5D:9F:8D:4E:A4:8F:6D:63:9C:C1 X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/M2fYQ-Xh1R9kL12fjU6kj21jnME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.67.0/24 109.68.70.0/23 Signature Algorithm: sha256WithRSAEncryption 81:94:8d:e9:a9:2b:f3:0e:a5:20:d9:58:43:b1:fc:06:b8:d3: 1f:fa:ef:cf:c3:3c:f6:ce:30:18:9e:15:82:2d:4d:da:f9:52: a4:6d:c5:5a:19:cc:e8:dd:6f:20:a4:05:a6:9c:48:64:bf:d2: e5:89:1c:6b:2a:ae:61:3e:de:8d:d7:aa:d7:ea:3a:e7:eb:72: 5b:de:d0:ed:83:c8:f8:ab:f1:65:ff:58:9f:bd:75:2b:fa:bf: c4:53:ed:d4:60:f6:02:d6:78:32:fe:30:f7:5d:74:72:8c:b5: f7:bb:9f:2e:47:03:08:6c:19:b3:a2:31:d7:33:e3:dc:7d:5a: b2:93:53:8c:98:5c:53:2a:41:da:c5:06:07:16:9e:66:db:19: 65:b4:72:ae:f5:f9:81:d4:76:3a:11:3a:a7:0c:ab:49:b4:b1: fb:f8:96:4d:d8:23:7c:cb:3e:a3:13:27:44:1a:5b:a9:3e:44: 76:43:3d:30:a9:65:5d:4d:81:5e:1a:45:7d:ca:d4:ec:78:97: 73:20:05:1e:3d:1e:81:22:f2:bd:13:98:fd:43:00:94:c8:74: 70:ca:c1:91:0b:fd:68:91:5f:57:da:3c:96:cb:5e:01:ba:6d: e3:01:45:38:6c:f6:6b:6c:c5:9f:07:b6:d5:49:d2:2d:c4:37: ff:50:28:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8fy3BejlOwGtEcbWaANhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzY3ZDg0M2U1ZTFkNTFmNjQyZjVkOWY4ZDRlYTQ4ZjZkNjM5Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj609Xjk6VD1RazQpAlhOZodqPeLx /10Jd72hrxnCCfwK/3gZtL09UmMIP/RJ/uCfAeDDjxs/T285okxGy6t250lxDjLR kdEFyN9vaZCE+LJ2/xi4oWu0YFLJQt3ayC3SZgErGEm2kl0833TtT1lRBGMwLh3N Ski+vHPKtBvNaZe4kTDu3QWaFthn/kquSFH5AD4NPkhW9bEmEs/xh5I7btMKS+K6 oxAQpU12RgHWI8BCgKOLwgSvwMjbjL2USANa4C/jJSigLXBIgP0sVNuVv0n5NaqT XDrKArDxy1/5kZ8C5u3i4s4tds1agJrJeA++te2gSiAr2RKIG4c/n2WOiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDNn2EPl4dUfZC9dn41OpI9tY5zBMB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvTTJmWVEtWGgxUjlrTDEyZmpVNmtqMjFqbk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbURDAwQB bURGMA0GCSqGSIb3DQEBCwUAA4IBAQCBlI3pqSvzDqUg2VhDsfwGuNMf+u/Pwzz2 zjAYnhWCLU3a+VKkbcVaGczo3W8gpAWmnEhkv9LliRxrKq5hPt6N16rX6jrn63Jb 3tDtg8j4q/Fl/1ifvXUr+r/EU+3UYPYC1ngy/jD3XXRyjLX3u58uRwMIbBmzojHX M+PcfVqyk1OMmFxTKkHaxQYHFp5m2xlltHKu9fmB1HY6ETqnDKtJtLH7+JZN2CN8 yz6jEydEGlupPkR2Qz0wqWVdTYFeGkV9ytTseJdzIAUePR6BIvK9E5j9QwCUyHRw ysGRC/1okV9X2jyWy14Bum3jAUU4bPZrbMWfB7bVSdItxDf/UCgT -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:26 2026 by rpki-client