This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/M5KrEv-LXY9aqDpf0oBaroxnaNM.roa File: M5KrEv-LXY9aqDpf0oBaroxnaNM.roa (raw, json) Hash identifier: ODb7IQwgK6VivONUorfGDOs27Z/Iob0YPAAPCKFTYtA= Subject key identifier: 33:92:AB:12:FF:8B:5D:8F:5A:A8:3A:5F:D2:80:5A:AE:8C:67:68:D3 Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2 Certificate serial: 019B78348EE78AD5FA083E10734C3EE31298 Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/M5KrEv-LXY9aqDpf0oBaroxnaNM.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8487 IP address blocks: 185.171.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8e:e7:8a:d5:fa:08:3e:10:73:4c:3e:e3:12:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3392ab12ff8b5d8f5aa83a5fd2805aae8c6768d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:f2:f9:b7:e4:bb:0b:2f:a1:88:e6:08:a1: 82:08:72:1b:15:12:48:57:92:1a:16:d2:77:a1:15: 1d:d2:f7:ab:0b:f9:83:c8:ae:86:63:72:c0:60:d3: cb:72:42:95:07:b8:f3:22:b2:0a:70:d6:90:74:3e: e4:98:aa:ed:de:4d:ca:74:89:40:27:6f:f9:82:61: 45:44:89:a7:c7:06:d5:bd:02:f9:39:fd:27:f1:2b: 62:c4:1f:22:0f:9a:13:52:4c:5d:33:19:11:08:76: d1:b0:7a:53:2a:f6:12:6d:5f:e3:3e:53:df:b9:db: 3a:d5:41:fd:85:77:4e:b2:33:8e:a6:ed:ed:0a:50: b5:bb:96:f9:ec:56:cc:c3:94:03:c2:50:44:42:ba: 56:2b:29:47:94:d3:9b:2b:bb:fa:5c:29:01:c7:91: 82:03:2f:50:f0:d8:2f:c3:9f:c3:ee:96:37:64:1c: 6b:f9:85:f7:32:cd:c0:d9:85:ce:0e:7a:35:99:1d: b3:67:43:ba:c4:f6:12:d4:ea:e6:d7:24:4d:b8:e6: d3:c7:b8:78:bf:a9:ab:c2:10:2d:e5:cf:9f:c3:77: 7f:27:0d:b9:a3:a0:7a:bd:20:a4:62:ff:b1:6b:ce: a0:9f:5c:28:ce:09:fd:b8:23:fc:4a:54:04:dc:00: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:AB:12:FF:8B:5D:8F:5A:A8:3A:5F:D2:80:5A:AE:8C:67:68:D3 X509v3 Authority Key Identifier: keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/M5KrEv-LXY9aqDpf0oBaroxnaNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:db:b9:69:d4:31:42:56:e4:bb:8f:77:bc:aa:39:05:3a:20: 17:aa:00:4e:f7:a3:da:ec:df:b4:08:08:13:08:f0:ba:47:0d: 1c:cb:dd:a0:12:c8:ce:ed:bc:0c:c0:6f:f2:3a:81:ba:d1:92: 60:86:1c:17:22:84:ac:2e:61:07:05:a0:a6:d4:13:08:0f:80: 7b:ef:56:64:f9:cd:b6:f3:b6:40:87:93:92:cc:a0:cc:8a:67: d5:76:02:81:a5:72:e4:43:4b:63:54:98:34:99:be:9e:39:81: 53:78:fd:fe:c9:1a:6a:83:63:6d:d7:51:f6:67:36:d9:17:1f: e8:16:47:f5:17:42:d1:4c:57:0d:6b:8d:6d:d8:47:e5:0a:fe: 69:b6:7c:08:14:b8:9a:9c:c1:8e:84:36:c2:d7:b9:cf:30:3a: 39:0a:28:1e:32:6b:4c:e5:68:d1:cc:1c:a0:c3:cc:e3:03:2e: a5:7b:cc:26:5f:d3:44:d6:68:7b:8b:0b:e8:81:80:79:4b:04: 0d:51:50:06:9b:27:73:86:70:e8:91:66:d6:95:7e:19:f8:33: 95:82:d5:b3:c2:d5:20:03:fc:2e:3d:cb:dc:e4:9f:13:12:31: 3b:85:26:74:92:12:87:d9:05:75:79:c2:1c:64:09:95:6e:4e: 00:a6:db:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NI7nitX6CD4Qc0w+4xKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWJkZGFlNmE3YWNlZTgzYTMyMmEwZTc0M2E2NzU5ZDg1 MzY1ZjIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzkyYWIxMmZmOGI1ZDhmNWFhODNhNWZkMjgwNWFhZThjNjc2OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweTy+bfkuwsvoYjmCKGCCHIbFRJI V5IaFtJ3oRUd0verC/mDyK6GY3LAYNPLckKVB7jzIrIKcNaQdD7kmKrt3k3KdIlA J2/5gmFFRImnxwbVvQL5Of0n8StixB8iD5oTUkxdMxkRCHbRsHpTKvYSbV/jPlPf uds61UH9hXdOsjOOpu3tClC1u5b57FbMw5QDwlBEQrpWKylHlNObK7v6XCkBx5GC Ay9Q8Ngvw5/D7pY3ZBxr+YX3Ms3A2YXODno1mR2zZ0O6xPYS1Orm1yRNuObTx7h4 v6mrwhAt5c+fw3d/Jw25o6B6vSCkYv+xa86gn1wozgn9uCP8SlQE3ACiDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOSqxL/i12PWqg6X9KAWq6MZ2jTMB8GA1UdIwQY MBaAFEbr3a5qes7oOjIqDnQ6Z1nYU2XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDIt MmJjOTA3OTRkMzhkLzEvTTVLckV2LUxYWTlhcURwZjBvQmFyb3huYU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDItMmJjOTA3OTRkMzhk LzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuasXMA0G CSqGSIb3DQEBCwUAA4IBAQCT27lp1DFCVuS7j3e8qjkFOiAXqgBO96Pa7N+0CAgT CPC6Rw0cy92gEsjO7bwMwG/yOoG60ZJghhwXIoSsLmEHBaCm1BMID4B771Zk+c22 87ZAh5OSzKDMimfVdgKBpXLkQ0tjVJg0mb6eOYFTeP3+yRpqg2Nt11H2ZzbZFx/o Fkf1F0LRTFcNa41t2EflCv5ptnwIFLianMGOhDbC17nPMDo5CigeMmtM5WjRzByg w8zjAy6le8wmX9NE1mh7iwvogYB5SwQNUVAGmydzhnDokWbWlX4Z+DOVgtWzwtUg A/wuPcvc5J8TEjE7hSZ0khKH2QV1ecIcZAmVbk4AptvT -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:39 2026 by rpki-client