This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/M4YwzZnQpTpEIjJJQTa20n-PbwA.roa File: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (raw, json) Hash identifier: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk= Subject key identifier: 33:86:30:CD:99:D0:A5:3A:44:22:32:49:41:36:B6:D2:7F:8F:6F:00 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388E481518B6E5BBDE36EA8CBA585E Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/M4YwzZnQpTpEIjJJQTa20n-PbwA.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35470 IP address blocks: 213.249.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:48:15:18:b6:e5:bb:de:36:ea:8c:ba:58:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338630cd99d0a53a442232494136b6d27f8f6f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:cf:1a:65:89:80:a8:64:38:93:11:f3:10: 90:ed:5a:ce:4f:2c:fc:48:25:d2:3f:8b:5b:05:0d: 01:5d:c5:81:22:74:39:cf:da:25:13:90:f0:82:3e: 29:61:1d:a5:39:72:1c:b0:9a:a3:b2:11:7e:36:38: 3c:d0:f0:a7:27:f9:76:2b:63:51:98:64:1c:be:59: be:4e:41:c1:48:14:09:30:54:09:49:b7:3f:c4:d2: 1c:3c:07:15:81:df:15:0a:17:e8:88:ad:3c:92:de: 2b:c5:d2:89:8e:bf:98:18:60:d0:a0:4d:49:62:34: 52:e6:8c:66:89:f0:c4:4b:23:08:6f:7b:6c:e8:a2: a0:77:6a:26:cc:12:ce:df:26:07:2f:4d:b1:68:96: df:66:d3:fd:21:72:6c:17:d1:3d:4b:35:ab:ad:5f: f5:df:da:03:a0:b3:4e:0c:6b:14:de:a3:1c:c6:21: 73:04:c5:07:e9:c1:40:06:c4:a4:71:06:f9:a1:d4: 04:9f:89:e5:d2:cd:e6:96:69:c6:eb:6b:bb:ba:bb: 52:0c:e8:5d:63:ec:b0:91:e8:ef:02:c9:77:c1:c7: ae:37:59:5d:91:fa:36:06:ad:37:c0:9f:a7:a3:e9: af:5b:ea:ff:a4:76:c3:16:c4:ae:30:32:d3:06:5d: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:86:30:CD:99:D0:A5:3A:44:22:32:49:41:36:B6:D2:7F:8F:6F:00 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/M4YwzZnQpTpEIjJJQTa20n-PbwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.249.80.0/24 Signature Algorithm: sha256WithRSAEncryption 42:bd:96:0e:5d:f8:1c:f4:66:29:b3:df:63:88:37:95:fd:6b: a8:e4:65:8e:af:34:64:50:fb:90:90:66:94:4f:7e:7d:87:f1: ca:c7:30:cc:9b:a8:e7:6b:0c:54:74:1f:37:69:0d:12:7f:ef: b7:c3:c4:45:00:d7:15:b5:d7:89:f2:ad:50:18:5b:36:4d:ca: 7e:c7:46:1e:87:db:c6:b0:5f:3c:f3:67:e7:59:0b:d3:03:fc: 8c:29:50:60:b6:4a:b0:8e:d3:45:2a:f5:8e:12:da:35:dd:55: 37:e0:e6:66:2a:7e:55:cd:33:44:99:c3:95:e3:48:d3:f4:c9: 3d:b5:d0:51:cd:4c:4b:09:39:d4:b5:83:0b:2b:3e:76:2e:ae: 67:99:2f:1a:c7:32:7d:3d:9f:3d:09:b1:2b:c5:dd:3b:95:e2: cb:38:c8:d0:ed:d1:37:2c:fc:1a:2f:e9:2b:a8:7a:50:56:0b: 2f:bd:50:32:38:60:3a:c9:93:9a:ee:76:1d:ef:a6:35:d8:c2: 6d:89:4a:98:39:c6:1d:40:68:b1:f6:ca:de:fe:69:86:14:55: 43:55:a4:11:8f:4c:96:7c:c8:b9:3b:6c:9f:fc:b6:4f:db:d2: dd:95:e7:aa:eb:30:a7:9e:f2:aa:7c:8c:a2:a5:6f:af:6f:8a: 27:be:60:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI5IFRi25bveNuqMulheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzg2MzBjZDk5ZDBhNTNhNDQyMjMyNDk0MTM2YjZkMjdmOGY2ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcbPGmWJgKhkOJMR8xCQ7VrOTyz8 SCXSP4tbBQ0BXcWBInQ5z9olE5Dwgj4pYR2lOXIcsJqjshF+Njg80PCnJ/l2K2NR mGQcvlm+TkHBSBQJMFQJSbc/xNIcPAcVgd8VChfoiK08kt4rxdKJjr+YGGDQoE1J YjRS5oxmifDESyMIb3ts6KKgd2omzBLO3yYHL02xaJbfZtP9IXJsF9E9SzWrrV/1 39oDoLNODGsU3qMcxiFzBMUH6cFABsSkcQb5odQEn4nl0s3mlmnG62u7urtSDOhd Y+ywkejvAsl3wceuN1ldkfo2Bq03wJ+no+mvW+r/pHbDFsSuMDLTBl2oGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOGMM2Z0KU6RCIySUE2ttJ/j28AMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvTTRZd3pablFwVHBFSWpKSlFUYTIwbi1QYndBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1flQMA0G CSqGSIb3DQEBCwUAA4IBAQBCvZYOXfgc9GYps99jiDeV/Wuo5GWOrzRkUPuQkGaU T359h/HKxzDMm6jnawxUdB83aQ0Sf++3w8RFANcVtdeJ8q1QGFs2Tcp+x0Yeh9vG sF8882fnWQvTA/yMKVBgtkqwjtNFKvWOEto13VU34OZmKn5VzTNEmcOV40jT9Mk9 tdBRzUxLCTnUtYMLKz52Lq5nmS8axzJ9PZ89CbErxd07leLLOMjQ7dE3LPwaL+kr qHpQVgsvvVAyOGA6yZOa7nYd76Y12MJtiUqYOcYdQGix9sre/mmGFFVDVaQRj0yW fMi5O2yf/LZP29Ldleeq6zCnnvKqfIyipW+vb4onvmAu -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:31 2026 by rpki-client