This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/M6nX0b_8WXbR873UBJ7U_r9vLtw.roa File: M6nX0b_8WXbR873UBJ7U_r9vLtw.roa (raw, json) Hash identifier: buG+Ig1CCw37N6dkdJQG1tlV+5Kvt1VxV2B5tymV0k4= Subject key identifier: 33:A9:D7:D1:BF:FC:59:76:D1:F3:BD:D4:04:9E:D4:FE:BF:6F:2E:DC Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846206C1D29449C888ED61DC1F4566 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/M6nX0b_8WXbR873UBJ7U_r9vLtw.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42193 IP address blocks: 213.14.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:62:06:c1:d2:94:49:c8:88:ed:61:dc:1f:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33a9d7d1bffc5976d1f3bdd4049ed4febf6f2edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:41:ab:c4:f2:72:46:46:31:c0:6c:3b:a0: dc:1e:2d:70:33:14:e9:76:06:f6:b8:da:5b:a8:4b: 32:69:d3:8b:56:dc:0e:e4:f0:e1:98:66:bc:95:9f: 06:8c:75:89:38:72:21:18:57:a2:bf:63:5d:ec:25: 92:69:63:cf:21:ea:ca:0a:b9:a8:d7:2c:7a:45:28: 77:6e:72:63:71:97:c8:39:8d:36:46:18:f1:ef:e6: 88:27:c0:e9:56:72:23:70:37:8a:ae:17:4a:52:6c: 7d:32:e3:00:6c:a9:16:4c:b7:54:5a:ff:7d:f0:36: f5:3b:7e:26:0e:92:1f:27:d6:8c:23:03:72:89:cb: 02:47:e9:ac:dd:af:a9:a1:5b:62:f7:c3:e0:aa:97: 63:95:d4:ca:33:a1:2e:df:df:df:2c:9b:0d:92:50: 3b:9d:6e:a3:f9:12:37:cb:72:92:4f:a0:8b:7b:ec: 50:de:dd:18:ec:cb:c1:aa:fc:66:e1:3a:33:80:92: aa:a6:a3:15:a0:23:a4:fe:4d:f6:89:41:bf:5c:c7: 8f:93:df:3e:fe:8f:bf:13:d7:55:09:f5:e6:3d:0c: 4a:f6:23:21:86:40:41:9c:9f:ab:99:c8:a8:58:00: 16:f2:2c:e9:10:3a:64:18:e7:b4:41:37:78:47:52: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:D7:D1:BF:FC:59:76:D1:F3:BD:D4:04:9E:D4:FE:BF:6F:2E:DC X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/M6nX0b_8WXbR873UBJ7U_r9vLtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.241.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:24:e2:aa:39:41:ed:9a:5c:88:f7:3d:3e:df:8b:4f:1e:0e: cb:b8:3e:a4:8f:55:66:b4:93:a3:15:17:55:4b:c4:fe:5e:50: 6f:28:ea:97:ae:f5:a6:0a:ab:26:56:2f:33:c3:35:cd:a7:8d: e0:24:d7:ef:95:49:1a:7f:44:7d:59:c3:74:31:ce:19:68:0c: 1b:33:9c:99:17:b2:d1:74:de:bf:74:d6:8e:4c:ff:49:db:64: 89:dd:7e:56:78:29:2e:ea:45:57:a4:09:1f:6f:00:9a:4b:71: 98:6a:c6:8d:c1:fa:88:a1:24:47:b5:82:f3:41:e4:1c:5d:76: 21:76:36:ac:8f:46:b4:22:9e:27:c7:a0:b8:a2:39:1e:77:14: 78:91:36:72:3e:9e:54:fa:b2:fb:bb:50:06:7c:47:02:89:11: bb:66:b2:4b:34:1f:47:95:69:5c:10:19:ea:7b:26:92:26:f4: 4d:b0:6b:79:fe:d6:4f:46:ea:e1:0f:c2:75:f5:ba:53:d5:16: 14:54:25:7b:83:98:12:75:a2:5e:f9:31:1c:d5:90:5b:dc:a8: a1:ef:01:0a:c3:71:72:d9:b9:a3:47:76:f1:f9:46:d9:42:74: 91:6d:aa:ab:ea:be:7d:da:e9:63:2a:1d:da:4e:b0:83:2d:67: 04:5a:6a:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGIGwdKUSciI7WHcH0VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2E5ZDdkMWJmZmM1OTc2ZDFmM2JkZDQwNDllZDRmZWJmNmYyZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFNBq8TyckZGMcBsO6DcHi1wMxTp dgb2uNpbqEsyadOLVtwO5PDhmGa8lZ8GjHWJOHIhGFeiv2Nd7CWSaWPPIerKCrmo 1yx6RSh3bnJjcZfIOY02Rhjx7+aIJ8DpVnIjcDeKrhdKUmx9MuMAbKkWTLdUWv99 8Db1O34mDpIfJ9aMIwNyicsCR+ms3a+poVti98PgqpdjldTKM6Eu39/fLJsNklA7 nW6j+RI3y3KST6CLe+xQ3t0Y7MvBqvxm4TozgJKqpqMVoCOk/k32iUG/XMePk98+ /o+/E9dVCfXmPQxK9iMhhkBBnJ+rmcioWAAW8izpEDpkGOe0QTd4R1IGHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOp19G//Fl20fO91ASe1P6/by7cMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvTTZuWDBiXzhXWGJSODczVUJKN1Vfcjl2THR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7xMA0G CSqGSIb3DQEBCwUAA4IBAQBqJOKqOUHtmlyI9z0+34tPHg7LuD6kj1VmtJOjFRdV S8T+XlBvKOqXrvWmCqsmVi8zwzXNp43gJNfvlUkaf0R9WcN0Mc4ZaAwbM5yZF7LR dN6/dNaOTP9J22SJ3X5WeCku6kVXpAkfbwCaS3GYasaNwfqIoSRHtYLzQeQcXXYh djasj0a0Ip4nx6C4ojkedxR4kTZyPp5U+rL7u1AGfEcCiRG7ZrJLNB9HlWlcEBnq eyaSJvRNsGt5/tZPRurhD8J19bpT1RYUVCV7g5gSdaJe+TEc1ZBb3Kih7wEKw3Fy 2bmjR3bx+UbZQnSRbaqr6r592uljKh3aTrCDLWcEWmpQ -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:59 2026 by rpki-client