This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa File: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (raw, json) Hash identifier: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg= Subject key identifier: 33:59:53:10:E5:0A:24:A0:77:C3:15:3E:51:FC:37:C7:0A:F6:06:7E Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36BCDACEF23243560796EE0D4F5C68 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 185.226.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bc:da:ce:f2:32:43:56:07:96:ee:0d:4f:5c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33595310e50a24a077c3153e51fc37c70af6067e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:ac:20:e1:a7:15:30:d2:94:33:d6:cb:df: bd:08:c3:43:18:be:75:b9:82:0a:d6:97:cc:b3:0f: a2:ef:1d:ee:f6:2a:f0:ee:cf:ff:6e:6e:71:df:5a: 3c:52:57:f2:05:44:2d:c9:9e:dc:90:59:11:50:95: 3a:6a:7c:e7:1b:81:13:28:05:33:74:79:2c:8a:8a: 18:26:b8:cc:be:68:78:3f:a0:ae:30:31:92:20:66: e1:dc:8d:0f:25:c8:3b:a1:3d:3f:08:ad:51:85:f1: f1:fe:0b:24:3a:7a:c0:1b:ea:c7:6c:ba:9b:49:7f: 96:53:76:56:bd:b9:2c:16:c1:da:0c:a2:ff:63:3c: 30:e0:07:59:b9:8e:47:d2:1b:e7:83:92:39:53:7d: 72:6c:7b:41:95:69:91:86:ac:52:b3:fa:2d:ef:1c: 61:5c:8a:eb:4c:dc:4f:26:8d:30:3c:4e:83:04:53: ed:ba:30:fb:33:e7:1e:fc:5b:2a:8c:03:0c:b9:35: c2:88:48:20:f0:1d:20:90:5d:cd:1a:95:52:16:e0: 29:62:47:51:ff:ae:41:04:da:dd:66:b2:09:52:f2: c5:26:50:c8:fd:97:2f:7b:97:10:0e:c9:a5:30:c7: 76:22:65:e1:92:4e:7f:93:fa:fa:fc:4d:fd:c0:97: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:59:53:10:E5:0A:24:A0:77:C3:15:3E:51:FC:37:C7:0A:F6:06:7E X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.182.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:4c:7a:db:72:b4:39:18:ff:ea:68:c9:9b:65:6b:61:ef:9d: d0:df:15:67:45:6a:5b:0d:c9:6a:06:9c:6d:e8:e3:37:e3:a9: 54:ac:ff:fc:3f:be:79:a1:2f:f2:03:7a:3b:9d:1f:33:69:62: 92:f9:00:b5:64:6b:cb:93:6f:cd:aa:3b:04:95:36:36:41:b3: 22:ee:10:68:3c:77:88:a7:42:9d:0b:60:f3:15:23:13:81:78: ae:5a:ee:1a:85:bc:9c:ff:7b:f0:21:e3:9c:83:6e:bc:2c:15: ea:fa:19:8e:8f:dd:94:c7:6b:2b:f4:ab:a2:22:79:e9:be:5d: b1:d5:cc:7e:47:37:62:ce:bb:ba:51:11:b0:e2:82:51:65:30: 3d:85:f5:ba:c0:63:cb:b3:14:87:b4:2c:6b:83:2e:42:ff:9e: 5a:da:37:b5:da:8a:c7:e3:da:d6:1c:94:18:59:22:15:d0:b9: 01:43:14:76:44:0a:5c:85:aa:97:9a:2b:69:c3:11:02:42:3c: 24:ca:7d:9b:97:87:5a:f3:de:cb:be:48:89:e7:ec:0c:fc:bf: 77:9f:6e:45:13:3f:90:00:b4:9d:a7:cd:61:2c:72:1b:c5:46: af:9f:90:8d:54:02:93:6e:61:d5:b9:58:24:a9:8c:05:a8:fd: ff:0d:68:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrzazvIyQ1YHlu4NT1xoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzU5NTMxMGU1MGEyNGEwNzdjMzE1M2U1MWZjMzdjNzBhZjYwNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h+sIOGnFTDSlDPWy9+9CMNDGL51 uYIK1pfMsw+i7x3u9irw7s//bm5x31o8UlfyBUQtyZ7ckFkRUJU6anznG4ETKAUz dHksiooYJrjMvmh4P6CuMDGSIGbh3I0PJcg7oT0/CK1RhfHx/gskOnrAG+rHbLqb SX+WU3ZWvbksFsHaDKL/Yzww4AdZuY5H0hvng5I5U31ybHtBlWmRhqxSs/ot7xxh XIrrTNxPJo0wPE6DBFPtujD7M+ce/FsqjAMMuTXCiEgg8B0gkF3NGpVSFuApYkdR /65BBNrdZrIJUvLFJlDI/Zcve5cQDsmlMMd2ImXhkk5/k/r6/E39wJf5FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNZUxDlCiSgd8MVPlH8N8cK9gZ+MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTTFsVEVPVUtKS0Izd3hVLVVmdzN4d3IyQm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueK2MA0G CSqGSIb3DQEBCwUAA4IBAQCMTHrbcrQ5GP/qaMmbZWth753Q3xVnRWpbDclqBpxt 6OM346lUrP/8P755oS/yA3o7nR8zaWKS+QC1ZGvLk2/NqjsElTY2QbMi7hBoPHeI p0KdC2DzFSMTgXiuWu4ahbyc/3vwIeOcg268LBXq+hmOj92Ux2sr9KuiInnpvl2x 1cx+Rzdizru6URGw4oJRZTA9hfW6wGPLsxSHtCxrgy5C/55a2je12orH49rWHJQY WSIV0LkBQxR2RApchaqXmitpwxECQjwkyn2bl4da897LvkiJ5+wM/L93n25FEz+Q ALSdp81hLHIbxUavn5CNVAKTbmHVuVgkqYwFqP3/DWjI -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:29 2026 by rpki-client