This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/m3hvTyYwrkksmz8oFuMhxSy4Ygg.roa File: m3hvTyYwrkksmz8oFuMhxSy4Ygg.roa (raw, json) Hash identifier: o2RIgCqbZp5nFybSGSbS1iCEr5kh5QJEKkoUlYXUvDk= Subject key identifier: 9B:78:6F:4F:26:30:AE:49:2C:9B:3F:28:16:E3:21:C5:2C:B8:62:08 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABF35DCD57A237DA65A627E53471A Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/m3hvTyYwrkksmz8oFuMhxSy4Ygg.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56765 IP address blocks: 94.184.112.0/21 maxlen: 24 194.225.24.0/21 maxlen: 24 2001:14e8:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bf:35:dc:d5:7a:23:7d:a6:5a:62:7e:53:47:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b786f4f2630ae492c9b3f2816e321c52cb86208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:f1:57:9b:70:c7:50:15:a0:90:12:2f:f6: 96:33:1e:ce:ff:64:93:31:fa:3c:e7:7f:67:34:92: 4c:ba:f5:b4:6f:2a:87:13:51:a2:16:c8:7b:56:e1: 67:13:97:b5:b6:7d:25:5c:a6:5e:69:32:d5:e4:8e: dc:6e:2a:bd:a8:cd:5a:c0:ec:e4:33:3d:a1:5f:c0: 11:31:60:65:1a:99:e1:ca:06:24:49:f3:11:56:88: bb:f6:cd:2f:6f:6b:66:0e:70:56:a7:a1:3c:b7:78: 39:d3:e3:ed:42:a6:b1:66:86:01:e1:89:65:e7:aa: 86:64:42:2f:33:c1:12:95:67:9d:b7:aa:63:b7:e6: f6:e6:66:2f:01:fc:68:6f:12:c7:13:61:25:b0:2b: 38:5a:d5:af:20:2c:90:aa:a7:d8:da:56:4b:eb:61: 11:c1:e6:86:00:8e:d4:1d:e7:86:8e:8c:a7:be:ec: c3:63:c6:c0:94:58:aa:02:d0:5e:0d:b0:06:de:23: 6b:0c:f4:a7:47:03:77:b9:22:c7:15:82:23:6a:9a: 52:28:62:fa:85:33:d3:9f:23:a1:6e:f2:87:71:fd: 92:f2:d0:a8:a3:0d:17:d9:27:64:d5:47:e5:1c:c5: 23:c8:7e:ae:9b:9b:e7:fb:b2:99:67:34:45:f2:6b: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:6F:4F:26:30:AE:49:2C:9B:3F:28:16:E3:21:C5:2C:B8:62:08 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/m3hvTyYwrkksmz8oFuMhxSy4Ygg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.112.0/21 194.225.24.0/21 IPv6: 2001:14e8:5::/48 Signature Algorithm: sha256WithRSAEncryption 43:be:74:cb:10:19:b1:3d:bb:fb:ce:28:bc:53:70:61:d9:5e: ce:c1:6c:58:db:4d:f1:86:71:73:6b:70:15:e5:87:ba:20:5d: 6c:05:01:9c:56:b2:fd:e0:f9:3d:d7:0c:19:86:40:60:75:ef: 2e:0a:3b:c2:ed:98:4e:b3:d7:f2:ce:0a:c9:2a:dd:e6:45:34: 62:3d:1b:0c:61:e5:23:ec:93:fa:a6:9e:cb:9e:02:3b:25:07: 6b:e8:0f:89:d3:f2:8d:ff:e4:6c:fa:45:11:90:bd:0d:e1:76: c7:92:54:29:50:60:ca:e3:cd:ad:52:77:52:8c:90:14:d9:b2: 05:41:c6:e3:3e:77:69:1e:10:aa:ca:fc:23:66:5b:5a:a9:c9: b3:c6:48:a4:b4:4d:bf:07:06:07:a5:aa:bb:34:9c:85:38:ea: 0e:2b:48:a0:16:dc:04:36:3f:e4:23:cd:24:1c:78:4d:1b:86: e1:e1:3b:b2:b1:28:6a:cd:14:fd:68:99:50:14:5f:50:c1:56: d5:be:80:05:49:a0:1f:c8:ec:4f:b7:f7:cc:6d:2e:60:95:2c: d7:98:9d:94:4c:da:40:42:d7:e8:ec:d6:ea:4b:72:e9:1e:a3: 0c:67:0b:30:bd:21:5f:2e:a8:47:4d:db:a1:54:b6:b2:25:07: f9:77:dd:37 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9yr813NV6I32mWmJ+U0caMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc4NmY0ZjI2MzBhZTQ5MmM5YjNmMjgxNmUzMjFjNTJjYjg2MjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnxV5twx1AVoJASL/aWMx7O/2ST Mfo8539nNJJMuvW0byqHE1GiFsh7VuFnE5e1tn0lXKZeaTLV5I7cbiq9qM1awOzk Mz2hX8ARMWBlGpnhygYkSfMRVoi79s0vb2tmDnBWp6E8t3g50+PtQqaxZoYB4Yll 56qGZEIvM8ESlWedt6pjt+b25mYvAfxobxLHE2ElsCs4WtWvICyQqqfY2lZL62ER weaGAI7UHeeGjoynvuzDY8bAlFiqAtBeDbAG3iNrDPSnRwN3uSLHFYIjappSKGL6 hTPTnyOhbvKHcf2S8tCoow0X2Sdk1UflHMUjyH6um5vn+7KZZzRF8mssIQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJt4b08mMK5JLJs/KBbjIcUsuGIIMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvbTNodlR5WXdya2tzbXo4b0Z1TWh4U3k0WWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDXrhwAwQD wuEYMA8EAgACMAkDBwAgARToAAUwDQYJKoZIhvcNAQELBQADggEBAEO+dMsQGbE9 u/vOKLxTcGHZXs7BbFjbTfGGcXNrcBXlh7ogXWwFAZxWsv3g+T3XDBmGQGB17y4K O8LtmE6z1/LOCskq3eZFNGI9Gwxh5SPsk/qmnsueAjslB2voD4nT8o3/5Gz6RRGQ vQ3hdseSVClQYMrjza1Sd1KMkBTZsgVBxuM+d2keEKrK/CNmW1qpybPGSKS0Tb8H Bgelqrs0nIU46g4rSKAW3AQ2P+QjzSQceE0bhuHhO7KxKGrNFP1omVAUX1DBVtW+ gAVJoB/I7E+398xtLmCVLNeYnZRM2kBC1+js1upLcukeowxnCzC9IV8uqEdN26FU trIlB/l33Tc= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:19 2026 by rpki-client