This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/M6wnPrDmWw7o372pn664G-6XMUM.roa File: M6wnPrDmWw7o372pn664G-6XMUM.roa (raw, json) Hash identifier: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ= Subject key identifier: 33:AC:27:3E:B0:E6:5B:0E:E8:DF:BD:A9:9F:AE:B8:1B:EE:97:31:43 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DC753C08E3407A297AFB4489BC10 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/M6wnPrDmWw7o372pn664G-6XMUM.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19930 IP address blocks: 155.204.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:75:3c:08:e3:40:7a:29:7a:fb:44:89:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ac273eb0e65b0ee8dfbda99faeb81bee973143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:77:91:5c:82:74:fd:5d:7b:99:7d:a5:18: 9c:de:b7:89:20:56:41:52:10:db:e0:b3:0f:ba:8c: 87:c0:da:1c:24:e7:74:f1:39:d5:e3:5b:ea:2d:25: 12:81:c0:93:ce:5e:ab:75:b8:82:79:d1:eb:43:cd: 96:87:5b:f0:fe:27:84:e9:6d:9a:bf:30:ea:ac:dd: a2:ef:f4:ce:2b:5b:c7:1d:99:77:c5:70:57:af:0e: c6:b0:c9:57:16:6d:0d:d6:a1:70:bd:eb:7a:c5:bf: cd:c8:03:01:36:5f:ba:f0:75:40:fd:27:48:72:05: 94:37:33:1f:a8:f1:b9:87:27:3a:12:b0:bc:19:f2: ae:fd:58:2f:39:03:87:52:2e:ca:5f:7d:ab:2f:2f: 24:9c:2f:f4:4b:39:1c:53:88:f0:8e:28:0d:fb:a6: 8d:7a:da:0a:c9:84:50:98:cf:cd:a1:65:81:2d:9e: e3:1f:e4:90:fa:65:b0:ce:80:16:ae:e9:09:94:d7: 8d:2d:2d:51:66:41:78:6b:fb:d0:20:71:f6:c7:0f: d8:eb:91:f1:7b:fd:18:27:b8:a5:c5:81:b5:63:a0: 5c:b1:d3:aa:4a:b5:da:a0:6f:ca:57:aa:3a:4d:20: bc:d1:72:9d:5e:8b:e1:2f:9a:d6:28:fa:cf:07:a5: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:27:3E:B0:E6:5B:0E:E8:DF:BD:A9:9F:AE:B8:1B:EE:97:31:43 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/M6wnPrDmWw7o372pn664G-6XMUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.204.152.0/21 Signature Algorithm: sha256WithRSAEncryption 08:cf:2b:a9:a2:a4:85:0e:f5:36:3f:56:43:80:e4:97:29:e7: 4f:8f:53:02:58:05:38:65:3d:db:9f:a0:8e:24:c0:23:30:c7: ef:ce:8d:40:01:8e:b9:ba:31:2e:35:e9:4a:d3:b4:73:0f:fc: c9:8a:c5:1c:52:00:62:53:0f:2e:66:51:01:27:76:4f:3a:75: 76:bc:b2:71:47:6e:e6:1f:11:6d:6f:f6:c6:3e:76:86:c5:78: 09:17:46:3e:73:bb:6f:ef:a5:fc:3b:ce:48:0e:aa:32:0e:49: 39:be:22:0a:dd:38:d3:d1:92:f4:5d:4b:b4:22:94:e0:f9:b0: 3d:f6:db:37:89:e8:25:bc:32:db:7f:e3:89:8e:9c:3e:cd:ff: 9b:70:e4:fc:fa:f5:42:1a:cf:c5:1e:0f:b8:22:96:fa:c2:d9: 23:8e:6f:a4:4f:a8:b3:63:62:68:de:6f:1c:0c:a4:33:79:27: dc:be:e5:17:18:bc:29:35:a5:ab:bb:d9:99:71:69:f9:52:47: 21:33:85:9f:1d:36:13:74:a6:b8:b3:93:a9:ee:a2:cf:68:c0: d2:ef:fd:9f:1c:18:9b:76:90:f6:fb:3a:f4:b8:24:e7:dc:45: d0:29:54:e2:46:d9:f3:35:b3:7d:81:64:e8:40:20:fa:43:73: 8b:39:77:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etx1PAjjQHopevtEibwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2FjMjczZWIwZTY1YjBlZThkZmJkYTk5ZmFlYjgxYmVlOTczMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF53kVyCdP1de5l9pRic3reJIFZB UhDb4LMPuoyHwNocJOd08TnV41vqLSUSgcCTzl6rdbiCedHrQ82Wh1vw/ieE6W2a vzDqrN2i7/TOK1vHHZl3xXBXrw7GsMlXFm0N1qFwvet6xb/NyAMBNl+68HVA/SdI cgWUNzMfqPG5hyc6ErC8GfKu/VgvOQOHUi7KX32rLy8knC/0SzkcU4jwjigN+6aN etoKyYRQmM/NoWWBLZ7jH+SQ+mWwzoAWrukJlNeNLS1RZkF4a/vQIHH2xw/Y65Hx e/0YJ7ilxYG1Y6BcsdOqSrXaoG/KV6o6TSC80XKdXovhL5rWKPrPB6XFPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOsJz6w5lsO6N+9qZ+uuBvulzFDMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvTTZ3blByRG1XdzdvMzcycG42NjRHLTZYTVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm8yYMA0G CSqGSIb3DQEBCwUAA4IBAQAIzyupoqSFDvU2P1ZDgOSXKedPj1MCWAU4ZT3bn6CO JMAjMMfvzo1AAY65ujEuNelK07RzD/zJisUcUgBiUw8uZlEBJ3ZPOnV2vLJxR27m HxFtb/bGPnaGxXgJF0Y+c7tv76X8O85IDqoyDkk5viIK3TjT0ZL0XUu0IpTg+bA9 9ts3ieglvDLbf+OJjpw+zf+bcOT8+vVCGs/FHg+4Ipb6wtkjjm+kT6izY2Jo3m8c DKQzeSfcvuUXGLwpNaWru9mZcWn5UkchM4WfHTYTdKa4s5Op7qLPaMDS7/2fHBib dpD2+zr0uCTn3EXQKVTiRtnzNbN9gWToQCD6Q3OLOXf/ -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client