This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/m4rs5cnwWBMbt76R1xpp4mTXG1U.roa File: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (raw, json) Hash identifier: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA= Subject key identifier: 9B:8A:EC:E5:C9:F0:58:13:1B:B7:BE:91:D7:1A:69:E2:64:D7:1B:55 Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f Certificate serial: 019B7E380E3E2E2491F9681AFA79C370A758 Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/m4rs5cnwWBMbt76R1xpp4mTXG1U.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211559 IP address blocks: 213.178.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0e:3e:2e:24:91:f9:68:1a:fa:79:c3:70:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b8aece5c9f058131bb7be91d71a69e264d71b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:9d:a7:16:7c:04:a0:24:65:64:4e:07:86: da:1e:de:34:8d:c7:5e:5b:03:be:47:34:fc:9d:88: af:f4:92:cf:1e:f7:7d:2a:68:18:fb:ac:67:cc:a5: 28:bc:28:3a:9c:ad:56:9b:08:e2:0c:ad:22:8e:85: 68:5b:7e:f7:3f:fd:5d:68:65:25:f7:b6:3e:d3:c5: 4e:81:51:8d:14:3d:29:8e:33:7d:ed:3d:51:bb:28: 23:ff:48:2f:ea:ea:fa:5b:06:c1:f6:8a:d9:69:dd: fa:96:1f:12:03:da:d5:75:2d:0b:bb:f9:e0:08:88: 83:ca:0d:ef:0d:cb:8f:3a:ed:a3:00:80:f8:9d:c8: b5:61:4e:b2:16:62:48:8f:44:69:34:e5:36:0b:3e: 12:9b:56:f5:ee:dd:5e:20:76:2f:d4:10:7b:3e:76: b9:35:e9:89:7f:ac:05:88:ab:e2:54:91:24:bb:63: 7e:e2:3c:af:58:f2:73:09:ee:9f:6e:82:e6:36:f6: b6:8a:3f:40:10:4b:7d:59:40:5e:82:6e:09:39:51: 50:d9:f3:25:2e:f2:ce:4a:8a:b5:20:61:47:7c:87: 0c:01:04:06:ac:d6:8b:b3:65:7b:6f:a6:0c:f8:6d: ca:87:b0:47:73:f4:f9:5d:00:1a:fb:e1:a8:fb:fb: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:EC:E5:C9:F0:58:13:1B:B7:BE:91:D7:1A:69:E2:64:D7:1B:55 X509v3 Authority Key Identifier: keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/m4rs5cnwWBMbt76R1xpp4mTXG1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.136.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:a2:e6:8f:92:de:3d:53:cb:31:ea:65:36:8c:49:1c:8c:cb: be:6d:d8:dc:93:3a:53:05:d1:21:75:ff:21:5b:80:76:55:99: 3d:1e:5c:5c:e8:e3:72:72:60:2b:53:b1:84:f5:12:6d:8c:29: 19:22:ee:f5:e2:5f:3a:47:5a:d9:2e:1f:c7:b2:2c:c4:37:7a: df:c8:98:c1:67:fa:27:76:c5:db:ea:1c:fa:92:33:87:75:49: ed:c9:3c:67:f1:36:84:60:92:d0:e2:26:64:2b:2b:0b:33:09: 17:f7:a7:3b:cc:d4:d6:32:36:d0:d1:dd:93:6e:9d:99:b8:55: 3c:4f:cf:12:8e:7e:72:bd:e7:d1:c0:ae:79:b9:82:a1:25:57: 5a:c3:49:14:d2:b8:ce:07:26:7a:51:cd:b3:50:e4:2b:63:ed: 33:35:90:5e:98:00:2a:e5:17:10:f7:69:6c:50:81:10:e0:f0: 33:f2:b9:0a:64:63:a7:04:68:41:72:42:d9:c0:28:34:94:f5: 69:5b:67:9a:74:fd:ff:97:12:aa:ef:4b:3d:ee:09:fe:84:56: bc:20:97:d6:2c:31:d5:21:7e:c1:a4:de:fa:c6:d9:5c:cb:0e: 96:b9:9d:6b:95:04:fd:f1:42:56:ce:8f:2c:d6:51:02:d7:17: 52:e8:c0:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OA4+LiSR+Wga+nnDcKdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl ZWJlOWYwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhhZWNlNWM5ZjA1ODEzMWJiN2JlOTFkNzFhNjllMjY0ZDcxYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWSdpxZ8BKAkZWROB4baHt40jcde WwO+RzT8nYiv9JLPHvd9KmgY+6xnzKUovCg6nK1WmwjiDK0ijoVoW373P/1daGUl 97Y+08VOgVGNFD0pjjN97T1Ruygj/0gv6ur6WwbB9orZad36lh8SA9rVdS0Lu/ng CIiDyg3vDcuPOu2jAID4nci1YU6yFmJIj0RpNOU2Cz4Sm1b17t1eIHYv1BB7Pna5 NemJf6wFiKviVJEku2N+4jyvWPJzCe6fboLmNva2ij9AEEt9WUBegm4JOVFQ2fMl LvLOSoq1IGFHfIcMAQQGrNaLs2V7b6YM+G3Kh7BHc/T5XQAa++Go+/u3AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuK7OXJ8FgTG7e+kdcaaeJk1xtVMB8GA1UdIwQY MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt NTNhNWFmNzY1MzQzLzEvbTRyczVjbndXQk1idDc2UjF4cHA0bVRYRzFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bKIMA0G CSqGSIb3DQEBCwUAA4IBAQCKouaPkt49U8sx6mU2jEkcjMu+bdjckzpTBdEhdf8h W4B2VZk9Hlxc6ONycmArU7GE9RJtjCkZIu714l86R1rZLh/HsizEN3rfyJjBZ/on dsXb6hz6kjOHdUntyTxn8TaEYJLQ4iZkKysLMwkX96c7zNTWMjbQ0d2Tbp2ZuFU8 T88Sjn5yvefRwK55uYKhJVdaw0kU0rjOByZ6Uc2zUOQrY+0zNZBemAAq5RcQ92ls UIEQ4PAz8rkKZGOnBGhBckLZwCg0lPVpW2eadP3/lxKq70s97gn+hFa8IJfWLDHV IX7BpN76xtlcyw6WuZ1rlQT98UJWzo8s1lEC1xdS6MBU -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:10 2026 by rpki-client