This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cMVR_b_QBDVweUJSfI-BhE8BMHo.roa File: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (raw, json) Hash identifier: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI= Subject key identifier: 70:C5:51:FD:BF:D0:04:35:70:79:42:52:7C:8F:81:84:4F:01:30:7A Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38DA89CD0EEDB537C4871B0FB0C6A6 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cMVR_b_QBDVweUJSfI-BhE8BMHo.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397225 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:da:89:cd:0e:ed:b5:37:c4:87:1b:0f:b0:c6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c551fdbfd00435707942527c8f81844f01307a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:f8:36:b1:31:80:b5:0e:61:ee:c5:89:9a: 70:a5:d3:71:05:a7:90:56:71:88:49:16:66:1b:a9: 82:43:1c:15:5f:82:b1:f1:0c:98:b8:83:39:da:52: b7:7a:ca:94:48:b4:20:32:53:ac:3e:76:23:39:cb: 86:8f:9d:1e:05:44:e1:1d:d2:76:b1:fd:31:d2:dd: f8:31:08:c9:02:7c:34:4c:94:4b:2e:25:51:09:9f: 27:db:66:17:d0:8a:dd:12:d1:91:23:4e:74:c9:7c: 06:7c:6e:05:e6:12:a4:68:2c:da:5d:21:48:f5:f6: d0:16:99:d1:f5:ca:42:02:fd:5e:66:2d:0b:b3:01: 51:d5:28:e1:1b:b0:67:54:9e:83:4c:f9:7a:30:b0: 9a:62:e9:fb:84:a9:b8:7c:6d:ba:e4:71:fe:b4:b4: f6:a0:a7:b9:8f:3e:ff:da:93:b6:da:4e:5b:77:94: 08:5c:f6:1b:d1:47:a8:6f:96:4d:da:7b:fa:d5:d5: d1:cc:53:25:9e:35:26:b9:34:a3:d4:ea:c5:d1:bf: c1:69:25:a6:fe:87:bb:fd:d3:e9:23:b7:3d:fe:e0: a1:a3:29:94:3e:0f:26:5b:cf:a6:8c:63:28:43:f5: e9:6c:8a:99:36:96:36:60:90:b1:18:53:ef:18:d7: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:51:FD:BF:D0:04:35:70:79:42:52:7C:8F:81:84:4F:01:30:7A X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cMVR_b_QBDVweUJSfI-BhE8BMHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:c2:10:6f:78:1e:c4:17:e8:af:ed:12:b3:e0:af:fc:11:22: 83:e3:c4:b0:b2:e2:d3:59:bb:68:27:00:68:af:2e:3d:4f:e0: 51:38:03:a3:bb:4e:02:3e:ef:7f:f3:e2:04:77:b9:17:e4:d5: f4:50:50:d6:62:d8:5e:ca:56:63:93:e7:6f:c9:fd:01:a6:62: a4:73:dd:02:00:ce:d0:42:3f:ea:dd:0b:e0:34:ba:13:9f:3e: b1:00:14:7a:4c:1c:1c:da:2d:9e:fc:fb:13:2c:d5:af:db:ed: c5:1f:bb:84:84:5e:86:4f:31:3f:90:63:3d:c0:18:4f:e7:dc: 34:ab:03:7f:b6:c1:d0:9e:b8:39:1a:20:1a:cf:8f:02:49:c5: 1d:68:a8:90:10:6b:61:e7:d2:c0:eb:e2:ca:c5:9f:71:66:f0: 6e:bd:36:75:af:11:0a:a3:36:ea:cd:e2:04:3e:9b:d4:83:1c: e6:8f:60:23:b8:ee:06:ac:34:34:48:fa:54:79:ba:53:8e:5e: a8:07:49:58:9c:c2:21:fc:a7:2d:1c:f6:ca:3c:6d:f8:59:13: ef:f8:63:5d:f4:11:e2:47:29:be:93:79:31:cd:81:4f:82:0b: d9:38:f0:c3:44:46:21:18:96:8a:f5:29:8b:23:53:69:cd:1e: 77:9a:7e:ee -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONqJzQ7ttTfEhxsPsMamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM1NTFmZGJmZDAwNDM1NzA3OTQyNTI3YzhmODE4NDRmMDEzMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttv4NrExgLUOYe7FiZpwpdNxBaeQ VnGISRZmG6mCQxwVX4Kx8QyYuIM52lK3esqUSLQgMlOsPnYjOcuGj50eBUThHdJ2 sf0x0t34MQjJAnw0TJRLLiVRCZ8n22YX0IrdEtGRI050yXwGfG4F5hKkaCzaXSFI 9fbQFpnR9cpCAv1eZi0LswFR1SjhG7BnVJ6DTPl6MLCaYun7hKm4fG265HH+tLT2 oKe5jz7/2pO22k5bd5QIXPYb0Ueob5ZN2nv61dXRzFMlnjUmuTSj1OrF0b/BaSWm /oe7/dPpI7c9/uChoymUPg8mW8+mjGMoQ/XpbIqZNpY2YJCxGFPvGNeaLQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHDFUf2/0AQ1cHlCUnyPgYRPATB6MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvY01WUl9iX1FCRFZ3ZVVKU2ZJLUJoRThCTUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQB9whBveB7EF+iv7RKz 4K/8ESKD48SwsuLTWbtoJwBory49T+BROAOju04CPu9/8+IEd7kX5NX0UFDWYthe ylZjk+dvyf0BpmKkc90CAM7QQj/q3QvgNLoTnz6xABR6TBwc2i2e/PsTLNWv2+3F H7uEhF6GTzE/kGM9wBhP59w0qwN/tsHQnrg5GiAaz48CScUdaKiQEGth59LA6+LK xZ9xZvBuvTZ1rxEKozbqzeIEPpvUgxzmj2AjuO4GrDQ0SPpUebpTjl6oB0lYnMIh /KctHPbKPG34WRPv+GNd9BHiRym+k3kxzYFPggvZOPDDREYhGJaK9SmLI1NpzR53 mn7u -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:03 2026 by rpki-client