This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/M4MI8IskioFX_GL9An1slOnzOXk.roa File: M4MI8IskioFX_GL9An1slOnzOXk.roa (raw, json) Hash identifier: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI= Subject key identifier: 33:83:08:F0:8B:24:8A:81:57:FC:62:FD:02:7D:6C:94:E9:F3:39:79 Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Certificate serial: 019B7DCB302081484F1A003E362687E374E8 Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/M4MI8IskioFX_GL9An1slOnzOXk.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49740 IP address blocks: 85.187.160.0/20 maxlen: 20 85.187.176.0/22 maxlen: 22 194.69.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:30:20:81:48:4f:1a:00:3e:36:26:87:e3:74:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338308f08b248a8157fc62fd027d6c94e9f33979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:b9:18:e8:41:83:c2:0e:93:98:30:d6:ce: 23:75:fb:f7:ee:be:12:73:14:71:05:14:ee:5f:a5: 2b:f2:c1:b6:68:a3:d4:fc:98:6e:8e:25:4f:14:71: 4b:3e:66:3b:9b:81:26:93:af:13:72:df:86:4e:13: 4e:a7:d5:c6:d1:39:f5:de:33:37:84:2c:88:1e:bd: 57:82:c4:5c:87:8d:05:1a:45:ea:6d:4f:81:47:a4: d5:6a:3a:88:37:eb:82:72:79:a0:5b:00:0b:1a:70: 2e:5b:d4:19:d3:47:24:6f:90:40:4f:36:bf:fc:db: c9:1e:f8:1f:10:3b:61:b0:d9:3a:15:b3:8f:e6:d6: 60:f2:67:ce:40:39:f3:b8:f4:07:a2:ab:5e:d8:51: f3:e1:e8:86:4e:48:22:db:e8:01:17:ad:c4:89:52: e2:3d:9c:60:8e:69:d0:a7:4c:0b:be:ac:fa:a0:66: 83:3a:34:a4:b0:67:7f:21:1c:d6:17:b9:8b:24:f3: b7:59:13:a2:f8:d2:db:8e:c7:ae:70:4b:45:72:6a: 62:1a:e6:f8:e1:98:d7:1a:ca:22:6d:9d:57:61:62: 01:73:2b:1f:79:58:8a:f8:7c:14:d6:32:3d:c9:66: a3:59:0a:93:9e:08:90:05:2e:e2:c2:bf:c3:1e:3c: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:83:08:F0:8B:24:8A:81:57:FC:62:FD:02:7D:6C:94:E9:F3:39:79 X509v3 Authority Key Identifier: keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/M4MI8IskioFX_GL9An1slOnzOXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.160.0-85.187.179.255 194.69.202.0/24 Signature Algorithm: sha256WithRSAEncryption 91:30:cb:f6:75:e2:44:2c:a6:a2:e7:f4:0a:ef:d5:da:45:bb: 2c:e8:c7:08:51:88:67:54:43:29:53:7b:ce:ca:98:15:d7:1e: c6:34:c5:18:51:82:24:28:42:1b:b2:31:20:4e:c2:31:0b:27: 98:36:28:33:00:1c:2c:7b:79:eb:b8:1f:7d:62:c6:33:ab:9d: 9a:c0:72:e7:1f:0f:49:7d:bc:17:07:3e:73:4f:74:03:b5:ee: 38:78:45:81:5c:6e:d8:e3:6c:d5:1c:73:3a:1f:dd:8d:a5:71: ee:0e:e5:ba:d2:d6:7e:a7:06:cd:99:ab:8c:af:b9:ad:fd:6b: d5:93:dc:48:5f:a9:b1:17:aa:1d:c0:01:3a:d9:55:7b:ff:11: 37:61:62:d4:e0:15:3e:9e:13:cc:49:77:d5:1e:b8:c1:aa:9f: d3:d6:b7:b3:3f:28:80:09:fb:64:33:9a:27:e2:dc:64:b2:a3: a8:0a:4f:34:eb:85:55:83:54:b7:7d:f2:58:2f:f3:d3:3b:44: c3:8b:cb:7a:57:4e:18:2d:16:73:43:5b:9c:78:79:d0:f6:1a: 0c:51:8f:4e:4c:3b:4c:52:34:e8:fd:29:aa:7c:f8:4a:f6:68: 67:32:7d:a2:f7:db:2b:da:0a:6b:7c:e9:f7:65:d2:1b:1d:59: 09:f6:17:86 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yzAggUhPGgA+NiaH43ToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3 NzU3MTUwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzgzMDhmMDhiMjQ4YTgxNTdmYzYyZmQwMjdkNmM5NGU5ZjMzOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqi5GOhBg8IOk5gw1s4jdfv37r4S cxRxBRTuX6Ur8sG2aKPU/JhujiVPFHFLPmY7m4Emk68Tct+GThNOp9XG0Tn13jM3 hCyIHr1XgsRch40FGkXqbU+BR6TVajqIN+uCcnmgWwALGnAuW9QZ00ckb5BATza/ /NvJHvgfEDthsNk6FbOP5tZg8mfOQDnzuPQHoqte2FHz4eiGTkgi2+gBF63EiVLi PZxgjmnQp0wLvqz6oGaDOjSksGd/IRzWF7mLJPO3WROi+NLbjseucEtFcmpiGub4 4ZjXGsoibZ1XYWIBcysfeViK+HwU1jI9yWajWQqTngiQBS7iwr/DHjzELwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDODCPCLJIqBV/xi/QJ9bJTp8zl5MB8GA1UdIwQY MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt ZjA1YWEyMjlkNjM4LzEvTTRNSThJc2tpb0ZYX0dMOUFuMXNsT256T1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4 LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVVu6AD BAJVu7ADBADCRcowDQYJKoZIhvcNAQELBQADggEBAJEwy/Z14kQspqLn9Arv1dpF uyzoxwhRiGdUQylTe87KmBXXHsY0xRhRgiQoQhuyMSBOwjELJ5g2KDMAHCx7eeu4 H31ixjOrnZrAcucfD0l9vBcHPnNPdAO17jh4RYFcbtjjbNUcczof3Y2lce4O5brS 1n6nBs2Zq4yvua39a9WT3EhfqbEXqh3AATrZVXv/ETdhYtTgFT6eE8xJd9UeuMGq n9PWt7M/KIAJ+2Qzmifi3GSyo6gKTzTrhVWDVLd98lgv89M7RMOLy3pXThgtFnND W5x4edD2GgxRj05MO0xSNOj9Kap8+Er2aGcyfaL32yvaCmt86fdl0hsdWQn2F4Y= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:13 2026 by rpki-client