This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3M-I49wkG4qtVUQtqTf_KmrWNvA.roa File: 3M-I49wkG4qtVUQtqTf_KmrWNvA.roa (raw, json) Hash identifier: iXuHTvqfqDOn3nAH4lrOfDQTC+bw79xI1HWf+6YE6Ng= Subject key identifier: DC:CF:88:E3:DC:24:1B:8A:AD:55:44:2D:A9:37:FF:2A:6A:D6:36:F0 Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Certificate serial: 019B7BA50C1E811F45A58277FC96B2BDC851 Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3M-I49wkG4qtVUQtqTf_KmrWNvA.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15504 IP address blocks: 91.213.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0c:1e:81:1f:45:a5:82:77:fc:96:b2:bd:c8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dccf88e3dc241b8aad55442da937ff2a6ad636f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:85:a5:ab:92:73:c6:5f:21:3a:9c:62:0e: 83:e9:29:31:99:d3:1d:0e:5d:2c:37:fe:c6:50:cc: bc:35:af:e0:a3:e6:d6:f7:f7:21:65:ee:26:40:3e: 72:01:09:bc:56:63:3e:e0:6b:da:ea:89:e5:98:04: 7f:3b:b8:8e:36:63:49:05:ed:df:f6:17:37:ff:bc: 25:6a:49:3f:3b:d5:af:3e:98:26:c3:e9:83:4d:54: 78:d4:1b:8f:99:47:98:06:2c:71:52:4c:b7:fc:df: 41:bc:25:3f:32:b2:99:02:02:06:e7:0d:56:dd:3e: ae:15:af:fc:ec:e7:41:a4:fa:54:1e:ef:9f:81:c2: 99:66:68:35:f5:69:f8:05:1a:92:a1:1a:64:4e:c2: 59:e0:8f:d0:3b:ac:c2:06:14:28:c7:3a:6a:26:df: f2:11:6b:f0:fe:9a:ef:f8:b2:3e:cf:ec:cd:39:3d: af:b8:1b:17:d7:ef:08:0b:69:0b:e4:31:24:2e:f5: ba:7e:e4:26:8a:37:25:34:15:00:8c:b7:11:70:5c: 0c:13:0e:e2:be:d7:d2:5a:3d:82:e6:cd:00:8a:af: 90:ae:4e:11:bc:7c:a8:6e:93:f7:f3:d1:6b:14:42: e9:e1:41:f3:18:9d:0c:85:57:ff:22:c0:20:3d:9d: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CF:88:E3:DC:24:1B:8A:AD:55:44:2D:A9:37:FF:2A:6A:D6:36:F0 X509v3 Authority Key Identifier: keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3M-I49wkG4qtVUQtqTf_KmrWNvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.152.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d0:f9:1c:61:32:88:7d:3e:c1:04:d8:c0:fc:8d:7b:11:34: 3d:af:0b:1c:76:00:05:a2:c8:6d:44:65:9a:f9:da:0e:3c:1b: 7e:42:4d:fc:98:b3:9c:64:0f:e0:1f:89:9e:bb:71:62:4b:13: 77:f2:c0:b9:d3:ff:85:4b:ee:8b:ef:47:02:f7:67:01:f1:86: cd:cf:c5:52:88:66:f1:29:24:fb:38:75:88:84:ff:c7:0b:5a: db:66:da:5c:5d:e0:b1:07:79:60:3b:7d:5f:2b:3c:1e:a7:2a: 22:65:b6:a9:00:d7:ec:18:81:1e:c6:b8:b8:a9:10:16:57:d8: 4a:1b:65:d3:5a:01:88:8e:b0:9d:1b:ff:22:2b:34:59:a0:8d: 16:50:74:e9:27:22:cb:c1:19:f7:81:36:78:fa:e1:13:4d:3a: bc:af:f0:6d:c9:ce:f4:eb:0b:3d:01:6b:84:f2:54:ab:61:e5: 34:9f:d8:48:17:bd:15:d2:b3:48:8c:7c:07:86:e7:f8:6f:4b: f6:3a:ba:b9:6a:50:1c:f6:cc:e9:4e:e1:13:ec:3e:86:20:13: fa:f0:cf:07:c8:01:25:88:42:08:fd:ae:06:07:bd:53:c1:a2: 16:fc:b0:94:3f:d7:9b:76:80:bc:1c:91:53:b3:9c:c6:f1:34: ae:d6:21:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQwegR9FpYJ3/JayvchRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm MWRiNWQwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2NmODhlM2RjMjQxYjhhYWQ1NTQ0MmRhOTM3ZmYyYTZhZDYzNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4yFpauSc8ZfITqcYg6D6SkxmdMd Dl0sN/7GUMy8Na/go+bW9/chZe4mQD5yAQm8VmM+4Gva6onlmAR/O7iONmNJBe3f 9hc3/7wlakk/O9WvPpgmw+mDTVR41BuPmUeYBixxUky3/N9BvCU/MrKZAgIG5w1W 3T6uFa/87OdBpPpUHu+fgcKZZmg19Wn4BRqSoRpkTsJZ4I/QO6zCBhQoxzpqJt/y EWvw/prv+LI+z+zNOT2vuBsX1+8IC2kL5DEkLvW6fuQmijclNBUAjLcRcFwMEw7i vtfSWj2C5s0Aiq+Qrk4RvHyobpP389FrFELp4UHzGJ0MhVf/IsAgPZ2HXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzPiOPcJBuKrVVELak3/ypq1jbwMB8GA1UdIwQY MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt YTIxOWNiNGQ0YTNiLzEvM00tSTQ5d2tHNHF0VlVRdHFUZl9LbXJXTnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WYMA0G CSqGSIb3DQEBCwUAA4IBAQAU0PkcYTKIfT7BBNjA/I17ETQ9rwscdgAFoshtRGWa +doOPBt+Qk38mLOcZA/gH4meu3FiSxN38sC50/+FS+6L70cC92cB8YbNz8VSiGbx KST7OHWIhP/HC1rbZtpcXeCxB3lgO31fKzwepyoiZbapANfsGIEexri4qRAWV9hK G2XTWgGIjrCdG/8iKzRZoI0WUHTpJyLLwRn3gTZ4+uETTTq8r/Btyc706ws9AWuE 8lSrYeU0n9hIF70V0rNIjHwHhuf4b0v2Orq5alAc9szpTuET7D6GIBP68M8HyAEl iEII/a4GB71TwaIW/LCUP9ebdoC8HJFTs5zG8TSu1iGn -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:21 2026 by rpki-client