This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/M81Qxbtts07Ib9z19i7shUVMtA8.roa File: M81Qxbtts07Ib9z19i7shUVMtA8.roa (raw, json) Hash identifier: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8= Subject key identifier: 33:CD:50:C5:BB:6D:B3:4E:C8:6F:DC:F5:F6:2E:EC:85:45:4C:B4:0F Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Certificate serial: 019B79EC343BB5A6C2D46717817708E35E3F Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/M81Qxbtts07Ib9z19i7shUVMtA8.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48614 IP address blocks: 185.185.56.0/22 maxlen: 22 193.106.92.0/22 maxlen: 22 195.93.180.0/23 maxlen: 23 2a0b:4880::/48 maxlen: 48 2a0b:4880:1::/48 maxlen: 48 2a0b:4880:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:34:3b:b5:a6:c2:d4:67:17:81:77:08:e3:5e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33cd50c5bb6db34ec86fdcf5f62eec85454cb40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:25:37:b0:f0:22:e9:8b:a1:db:6f:91:f8: 30:c1:59:4d:b7:1c:aa:7b:95:4b:e2:3d:19:e2:95: 73:e8:16:63:19:f6:a4:b8:8d:a6:5a:27:91:14:dd: d5:c9:9a:69:4e:de:02:a7:d9:8f:b8:db:01:b1:24: f1:47:71:28:9a:36:05:94:98:56:0c:90:2a:d0:1b: 41:6d:5d:fe:d4:02:5f:1b:84:0c:f0:f7:3f:cb:f1: af:c1:16:bd:fe:cb:83:c9:02:1a:f7:d7:f5:a1:25: d3:f3:e3:85:b9:57:87:ef:52:91:f1:67:4e:a1:25: 83:ba:b4:f7:86:18:6f:51:0c:89:30:fa:b7:c5:75: ca:b2:25:53:7d:46:5a:97:13:fb:14:88:22:f4:95: 2c:b4:d1:2c:47:5c:93:0b:99:f0:d1:01:04:1e:ac: 31:e1:af:82:bf:4b:8a:d2:36:be:63:8f:d1:e8:14: dc:2b:9e:e3:e7:bf:fe:27:36:4c:c2:a7:e6:88:b3: fe:7f:78:d0:2b:c2:ef:3d:06:e0:d9:42:15:d9:73: 41:dd:07:11:02:4a:a4:89:68:78:5f:8b:1a:67:65: 71:7e:19:75:61:7a:47:97:53:fd:a4:9b:5a:63:57: 1e:2e:c6:b5:85:54:a9:39:95:a9:b8:04:62:a9:a3: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CD:50:C5:BB:6D:B3:4E:C8:6F:DC:F5:F6:2E:EC:85:45:4C:B4:0F X509v3 Authority Key Identifier: keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/M81Qxbtts07Ib9z19i7shUVMtA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.56.0/22 193.106.92.0/22 195.93.180.0/23 IPv6: 2a0b:4880::-2a0b:4880:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 35:43:29:68:fb:be:2a:64:46:bd:f4:fc:3c:d1:f7:81:8f:97: 75:2e:d4:10:2f:44:13:20:e4:d1:46:c8:f9:2c:70:b2:35:32: bf:c6:89:3e:97:9a:07:83:cb:50:21:12:b0:d2:6f:28:ac:93: 24:06:9b:bb:ac:90:10:99:1d:6a:cc:b8:4c:98:a1:4b:0c:a8: 6f:47:dc:d8:6a:51:65:ad:ae:1d:86:c3:75:c5:0d:d6:9d:16: 6a:b5:75:f3:98:4a:85:e0:ca:55:ea:12:15:45:96:6f:6b:d6: 33:f7:7c:60:19:ba:1e:ce:31:70:6b:7f:47:19:14:06:c3:b3: d0:32:aa:f9:13:23:6a:fd:98:7e:3f:99:35:cc:8f:af:cc:4f: e2:fd:61:42:96:34:0b:12:a7:91:79:d7:68:69:2f:60:25:07: ac:ed:c5:73:07:1f:3d:af:69:8e:55:f9:1e:06:9f:d9:5d:8d: 99:b8:af:ca:af:a2:da:d4:d4:8a:78:d5:0b:a8:56:80:4c:65: b6:8d:de:32:86:c0:d8:40:bf:67:45:c4:eb:39:e2:65:b2:32: 29:bb:d3:e3:2c:8e:08:f6:e6:48:cb:42:ad:57:a8:4b:8f:50: a5:5a:19:d6:4f:1b:8c:fc:4c:0e:83:c5:35:c0:66:c6:0d:db: bf:a7:cf:bc -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt57DQ7tabC1GcXgXcI414/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0 MjA4YjcwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2NkNTBjNWJiNmRiMzRlYzg2ZmRjZjVmNjJlZWM4NTQ1NGNiNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQlN7DwIumLodtvkfgwwVlNtxyq e5VL4j0Z4pVz6BZjGfakuI2mWieRFN3VyZppTt4Cp9mPuNsBsSTxR3EomjYFlJhW DJAq0BtBbV3+1AJfG4QM8Pc/y/GvwRa9/suDyQIa99f1oSXT8+OFuVeH71KR8WdO oSWDurT3hhhvUQyJMPq3xXXKsiVTfUZalxP7FIgi9JUstNEsR1yTC5nw0QEEHqwx 4a+Cv0uK0ja+Y4/R6BTcK57j57/+JzZMwqfmiLP+f3jQK8LvPQbg2UIV2XNB3QcR AkqkiWh4X4saZ2Vxfhl1YXpHl1P9pJtaY1ceLsa1hVSpOZWpuARiqaO83QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFDPNUMW7bbNOyG/c9fYu7IVFTLQPMB8GA1UdIwQY MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt YmVhY2IwOTRmODBjLzEvTTgxUXhidHRzMDdJYjl6MTlpN3NoVVZNdEE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCubk4AwQC wWpcAwQBw120MBgEAgACMBIwEAMFByoLSIADBwAqC0iAAAIwDQYJKoZIhvcNAQEL BQADggEBADVDKWj7vipkRr30/DzR94GPl3Uu1BAvRBMg5NFGyPkscLI1Mr/GiT6X mgeDy1AhErDSbyiskyQGm7uskBCZHWrMuEyYoUsMqG9H3NhqUWWtrh2Gw3XFDdad Fmq1dfOYSoXgylXqEhVFlm9r1jP3fGAZuh7OMXBrf0cZFAbDs9AyqvkTI2r9mH4/ mTXMj6/MT+L9YUKWNAsSp5F512hpL2AlB6ztxXMHHz2vaY5V+R4Gn9ldjZm4r8qv otrU1Ip41QuoVoBMZbaN3jKGwNhAv2dFxOs54mWyMim70+Msjgj25kjLQq1XqEuP UKVaGdZPG4z8TA6DxTXAZsYN27+nz7w= -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:21 2026 by rpki-client