This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/277UMnCRR7zGdjhVvQlpf_Mrq_c.roa File: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (raw, json) Hash identifier: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA= Subject key identifier: DB:BE:D4:32:70:91:47:BC:C6:76:38:55:BD:09:69:7F:F3:2B:AB:F7 Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Certificate serial: 019B7C7FD35B526D10B0467FCC19E3A5F481 Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/277UMnCRR7zGdjhVvQlpf_Mrq_c.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 147.251.0.0/16 maxlen: 24 217.69.96.0/20 maxlen: 24 2a00:5800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d3:5b:52:6d:10:b0:46:7f:cc:19:e3:a5:f4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbbed432709147bcc6763855bd09697ff32babf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:74:2e:d1:69:ed:c6:d8:18:6c:b0:01:3c:85: 10:ac:7e:03:7b:60:b1:a2:81:3a:7a:d1:b4:f4:57: 67:53:de:9a:a7:67:c2:ff:e8:59:1a:10:54:39:15: 90:c7:6b:43:53:16:54:76:0c:4d:95:3e:c8:38:15: 51:25:5c:44:d4:2c:dc:58:8f:af:cd:13:bf:07:f0: 37:1d:5c:17:15:1b:2e:93:2a:58:ef:d5:7d:96:d8: ab:3b:64:54:4d:ce:53:f6:3f:13:cc:d4:bf:28:1b: 26:24:45:5e:4f:ac:99:56:44:3d:25:11:a9:c0:02: d6:c5:3c:76:1c:c9:25:07:73:97:4f:42:91:9f:d5: cb:48:6b:75:d1:47:a8:06:61:16:2d:fb:d2:13:8a: d7:4a:85:60:14:17:55:58:01:34:2d:3d:e9:dc:43: bc:15:c7:f8:43:af:45:3d:ae:e1:2d:69:6f:9a:5b: 2c:23:ae:81:d7:b5:b9:45:db:eb:23:7f:8e:b7:7c: 06:3a:02:be:21:e0:66:76:7b:fd:33:bd:04:fb:b1: 75:28:c4:87:68:a8:33:38:7b:02:1d:3f:e3:fb:b1: 29:64:48:ea:a9:aa:65:58:b8:bb:dd:9a:8f:6d:dc: 87:0e:b5:fd:31:46:0d:1e:6f:96:b0:76:3f:f4:32: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:D4:32:70:91:47:BC:C6:76:38:55:BD:09:69:7F:F3:2B:AB:F7 X509v3 Authority Key Identifier: keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/277UMnCRR7zGdjhVvQlpf_Mrq_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.251.0.0/16 217.69.96.0/20 IPv6: 2a00:5800::/32 Signature Algorithm: sha256WithRSAEncryption 52:86:5f:57:53:43:71:8f:ec:76:c7:c8:0b:9a:0d:e3:d0:4d: 86:af:3d:9b:2d:b0:0a:47:b8:24:01:38:83:60:69:59:55:2f: 6b:94:50:7e:1f:9b:de:d2:f5:48:50:12:e7:0f:f2:18:2a:c3: 5a:b6:aa:0f:a3:d6:b5:e2:2a:a0:44:7a:57:4c:cc:3b:7e:6f: 6e:1d:3b:d8:ae:47:ae:7e:df:1b:86:52:6b:d2:d6:eb:83:62: 2c:73:23:e3:e8:32:93:64:75:8f:dd:04:c6:19:35:f9:90:a2: 16:22:b5:37:e0:9b:0d:6e:7f:b4:31:4f:d9:df:64:17:a0:d8: 51:5f:83:a7:3c:3e:fb:58:f1:2d:ec:94:b9:9a:e7:c1:76:27: 39:cf:06:27:6d:8e:ee:47:e1:79:c5:55:2e:e6:65:16:ee:2e: db:c8:22:f6:56:94:a9:46:41:74:cc:28:0f:e4:01:e1:c4:6d: ec:d6:c2:a8:3c:58:14:26:f6:de:4f:1d:d0:79:e0:14:51:96: 6b:ab:97:9a:8f:02:bb:04:6e:20:5d:38:60:96:4f:b4:9e:9d: 73:e0:fb:84:c3:0e:ba:fb:cb:db:e7:0d:25:b5:bb:a1:b6:a6: 75:a1:28:89:8e:8b:1b:b1:89:2c:15:59:51:8e:65:c6:5c:28: c9:fd:58:8b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8f9NbUm0QsEZ/zBnjpfSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm ODVkNmUwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmJlZDQzMjcwOTE0N2JjYzY3NjM4NTViZDA5Njk3ZmYzMmJhYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HQu0WntxtgYbLABPIUQrH4De2Cx ooE6etG09FdnU96ap2fC/+hZGhBUORWQx2tDUxZUdgxNlT7IOBVRJVxE1CzcWI+v zRO/B/A3HVwXFRsukypY79V9ltirO2RUTc5T9j8TzNS/KBsmJEVeT6yZVkQ9JRGp wALWxTx2HMklB3OXT0KRn9XLSGt10UeoBmEWLfvSE4rXSoVgFBdVWAE0LT3p3EO8 Fcf4Q69FPa7hLWlvmlssI66B17W5RdvrI3+Ot3wGOgK+IeBmdnv9M70E+7F1KMSH aKgzOHsCHT/j+7EpZEjqqaplWLi73ZqPbdyHDrX9MUYNHm+WsHY/9DLVrwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNu+1DJwkUe8xnY4Vb0JaX/zK6v3MB8GA1UdIwQY MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt NjlhZjBhNmU5ODliLzEvMjc3VU1uQ1JSN3pHZGpoVnZRbHBmX01ycV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAk/sDBATZ RWAwDQQCAAIwBwMFACoAWAAwDQYJKoZIhvcNAQELBQADggEBAFKGX1dTQ3GP7HbH yAuaDePQTYavPZstsApHuCQBOINgaVlVL2uUUH4fm97S9UhQEucP8hgqw1q2qg+j 1rXiKqBEeldMzDt+b24dO9iuR65+3xuGUmvS1uuDYixzI+PoMpNkdY/dBMYZNfmQ ohYitTfgmw1uf7QxT9nfZBeg2FFfg6c8PvtY8S3slLma58F2JznPBidtju5H4XnF VS7mZRbuLtvIIvZWlKlGQXTMKA/kAeHEbezWwqg8WBQm9t5PHdB54BRRlmurl5qP ArsEbiBdOGCWT7SenXPg+4TDDrr7y9vnDSW1u6G2pnWhKImOixuxiSwVWVGOZcZc KMn9WIs= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:12 2026 by rpki-client