This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m35MBC3-R1Km-GWEprOI4k13d4o.roa File: m35MBC3-R1Km-GWEprOI4k13d4o.roa (raw, json) Hash identifier: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM= Subject key identifier: 9B:7E:4C:04:2D:FE:47:52:A6:F8:65:84:A6:B3:88:E2:4D:77:77:8A Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B791039B77CEA3BFC2979FBE5415D3BFB Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m35MBC3-R1Km-GWEprOI4k13d4o.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 213.182.193.0/24 maxlen: 24 213.182.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:39:b7:7c:ea:3b:fc:29:79:fb:e5:41:5d:3b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b7e4c042dfe4752a6f86584a6b388e24d77778a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:6e:30:e0:e2:dd:5f:5a:45:63:94:00:1f: ce:fb:47:64:af:b4:c3:c2:d3:1c:2f:d1:75:b6:ad: 77:cd:b4:b7:46:ab:21:ad:5f:ee:b5:0a:2c:a8:8d: 4a:54:75:04:24:21:a7:ed:f1:fe:82:9d:e7:1b:46: 89:22:8c:4a:85:d9:c7:3b:c0:fa:15:3f:55:94:8d: e4:0c:42:f9:39:f9:b7:f9:cf:b1:c6:78:f7:d0:97: 1d:7e:3d:65:a2:ff:50:d6:11:3b:62:24:f8:1b:9c: 4b:09:19:13:17:14:de:60:7a:83:7a:cd:f8:52:bb: 56:b8:9c:80:f6:49:fc:5d:3c:a7:09:2e:ff:51:46: 13:cf:e9:0e:45:1a:75:49:3c:c7:0b:fe:64:e3:11: 08:e2:9f:d0:f6:da:ac:76:c3:88:77:70:7f:34:95: b9:db:db:ab:75:c2:a0:93:c3:70:81:e4:e6:c9:3b: 58:76:7a:34:04:da:81:8e:66:e3:1e:00:4e:f2:d3: 92:f0:a5:98:00:13:a4:ce:96:7e:5c:be:93:cf:a4: bf:54:09:62:88:91:34:b0:17:41:e5:c8:c9:b5:77: 27:4c:02:0d:07:60:12:42:52:7d:75:ab:8c:ee:f8: 58:37:70:53:17:ff:34:e6:27:17:37:bd:b2:3f:c9: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7E:4C:04:2D:FE:47:52:A6:F8:65:84:A6:B3:88:E2:4D:77:77:8A X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m35MBC3-R1Km-GWEprOI4k13d4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.182.193.0-213.182.194.255 Signature Algorithm: sha256WithRSAEncryption 88:22:52:86:00:41:85:0d:98:69:fd:f7:8a:fb:c8:3c:fa:0a: 8a:6c:38:7d:a2:41:ef:aa:83:23:47:73:6e:b0:37:c4:0d:ec: 99:1f:ff:aa:c8:6a:6e:c7:12:84:12:4b:b1:90:93:c9:ae:10: 55:6b:c2:4d:4f:40:05:5c:f4:09:39:2f:e1:79:18:82:77:40: e9:7f:9e:f7:82:fa:50:18:f5:bd:a2:2f:11:0f:0b:84:34:3a: 20:51:a5:f6:e6:8e:9f:8e:a4:a3:3e:bf:17:70:3e:28:dd:d2: 82:64:99:0f:60:db:ed:5d:d9:aa:ea:47:3f:18:82:e4:40:5a: 26:77:69:52:9a:12:4f:c3:89:f3:fb:75:96:6e:ca:19:1a:cb: d2:ef:ec:8c:37:a5:8a:4a:62:2b:dc:6e:7c:cb:78:fd:12:38: 85:d8:21:6c:f4:75:02:c9:5c:44:65:8f:06:21:9c:1a:64:67: 3b:45:d7:a2:01:d2:78:8f:b2:11:ba:39:f8:d2:d0:d9:b9:58: 8d:8b:c3:48:b5:b5:35:61:2c:02:38:80:86:08:9b:8e:9a:77: 36:3e:1a:e7:85:c0:69:94:54:48:e5:64:66:4a:76:73:f1:7a: 4e:95:aa:7a:b3:2a:2f:1a:6d:21:84:d0:99:ae:a6:c7:a8:69: b6:92:f1:e7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EDm3fOo7/Cl5++VBXTv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjdlNGMwNDJkZmU0NzUyYTZmODY1ODRhNmIzODhlMjRkNzc3NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRNuMODi3V9aRWOUAB/O+0dkr7TD wtMcL9F1tq13zbS3RqshrV/utQosqI1KVHUEJCGn7fH+gp3nG0aJIoxKhdnHO8D6 FT9VlI3kDEL5Ofm3+c+xxnj30Jcdfj1lov9Q1hE7YiT4G5xLCRkTFxTeYHqDes34 UrtWuJyA9kn8XTynCS7/UUYTz+kORRp1STzHC/5k4xEI4p/Q9tqsdsOId3B/NJW5 29urdcKgk8NwgeTmyTtYdno0BNqBjmbjHgBO8tOS8KWYABOkzpZ+XL6Tz6S/VAli iJE0sBdB5cjJtXcnTAINB2ASQlJ9dauM7vhYN3BTF/805icXN72yP8lhuQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJt+TAQt/kdSpvhlhKaziOJNd3eKMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvbTM1TUJDMy1SMUttLUdXRXByT0k0azEzZDRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADVtsED BADVtsIwDQYJKoZIhvcNAQELBQADggEBAIgiUoYAQYUNmGn994r7yDz6CopsOH2i Qe+qgyNHc26wN8QN7Jkf/6rIam7HEoQSS7GQk8muEFVrwk1PQAVc9Ak5L+F5GIJ3 QOl/nveC+lAY9b2iLxEPC4Q0OiBRpfbmjp+OpKM+vxdwPijd0oJkmQ9g2+1d2arq Rz8YguRAWiZ3aVKaEk/DifP7dZZuyhkay9Lv7Iw3pYpKYivcbnzLeP0SOIXYIWz0 dQLJXERljwYhnBpkZztF16IB0niPshG6OfjS0Nm5WI2Lw0i1tTVhLAI4gIYIm46a dzY+GueFwGmUVEjlZGZKdnPxek6VqnqzKi8abSGE0JmupseoabaS8ec= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:12 2026 by rpki-client