This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa File: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (raw, json) Hash identifier: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0= Subject key identifier: EC:C9:10:64:68:4E:56:D1:D0:93:93:10:ED:96:3D:59:6D:3B:0F:C4 Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c Certificate serial: 019B7834F99F7E256B0F110CEDCEAC4F3CB6 Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47698 IP address blocks: 91.206.174.0/23 maxlen: 23 91.208.103.0/24 maxlen: 24 2001:67c:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:9f:7e:25:6b:0f:11:0c:ed:ce:ac:4f:3c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecc91064684e56d1d0939310ed963d596d3b0fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:ae:56:df:a7:a1:f7:70:dc:0d:2e:2a:01: 4f:78:bd:64:5a:fc:16:ea:6e:81:42:2c:0f:05:bd: f2:15:13:00:60:ff:b9:08:13:32:35:9a:0c:ae:74: fb:28:1f:2b:f6:4c:b2:28:ec:2f:53:0a:26:b6:2d: d0:8b:41:2f:45:82:66:7f:65:bd:b4:8d:86:bc:1d: 3d:3c:03:a0:b6:02:61:49:19:b4:03:a1:4b:58:c7: e1:49:76:46:f8:11:af:66:5d:1d:67:8e:6b:c1:e1: 40:65:99:45:d6:c2:d7:6a:b9:06:93:be:1f:af:59: d4:33:17:f8:4b:49:dd:cf:4e:78:1d:cc:4a:05:a4: 41:ab:30:e0:a7:4a:28:c1:d2:fa:02:8f:b4:bd:a1: ce:d4:88:d4:fc:47:58:a8:fe:2d:50:00:8f:53:a2: ca:70:77:00:b6:39:dd:82:ee:ae:8d:02:3a:31:cc: a7:2e:c4:14:16:61:03:d6:81:aa:fd:3b:dd:c0:4f: 9a:b4:c2:eb:14:5d:c4:f3:e0:64:6a:a9:d3:dd:3b: bd:2e:6d:85:1e:25:5b:87:4a:ae:be:c8:f0:0a:eb: 3c:35:58:62:27:f6:99:e1:04:e2:69:ce:8b:f1:eb: 36:e1:19:2e:3b:77:c3:3d:e0:c1:5f:fb:43:f4:ee: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:10:64:68:4E:56:D1:D0:93:93:10:ED:96:3D:59:6D:3B:0F:C4 X509v3 Authority Key Identifier: keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.174.0/23 91.208.103.0/24 IPv6: 2001:67c:394::/48 Signature Algorithm: sha256WithRSAEncryption 6f:9f:3c:09:5b:3a:4b:7c:36:08:a0:81:2d:07:2f:fc:8e:35: 25:04:6c:b2:07:90:85:c0:44:8f:9a:ef:ff:02:c2:bd:5d:3b: 7a:c5:06:42:ed:8c:ee:88:57:66:92:b2:23:21:55:79:f1:dd: b0:01:bb:39:86:88:fd:ac:0d:80:d9:6e:a5:9d:c2:b5:ae:e2: 98:a7:c7:d8:35:9d:2c:16:52:4b:67:4e:d2:78:ee:1b:d3:ae: 9a:89:39:64:af:a5:71:68:04:56:0d:cc:85:c0:cf:02:f1:be: 29:a6:2f:45:22:d5:d1:7a:02:50:0d:b2:d8:93:6e:d9:2e:24: 91:d7:5f:23:5c:b0:29:83:ea:bb:91:c5:4c:37:95:af:e5:c4: f1:d9:11:c3:93:77:4f:a6:0f:c0:48:dd:07:0c:17:bc:16:e5: 07:a3:6c:00:0b:bf:32:b8:e5:4e:1c:ca:82:f4:f9:c0:da:3c: 14:b7:b2:4e:9b:d8:78:51:90:91:7c:33:96:60:09:e6:90:66: 9f:a4:7d:ae:9d:96:2f:88:f3:61:43:c5:f1:a8:e0:66:e6:3c: 04:eb:c1:4b:5c:60:40:41:cb:22:25:6f:9c:f3:dd:f2:ac:fe: 00:46:8c:fb:d7:5c:fa:d4:d2:0d:2b:5a:77:93:0c:8d:f0:35: eb:70:c2:f5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NPmffiVrDxEM7c6sTzy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzEwY2Y4MWQyMTc3N2E5OGQzZDk5OWRjMWU2ZWFlMDU1 ZjdjM2MwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2M5MTA2NDY4NGU1NmQxZDA5MzkzMTBlZDk2M2Q1OTZkM2IwZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUauVt+nofdw3A0uKgFPeL1kWvwW 6m6BQiwPBb3yFRMAYP+5CBMyNZoMrnT7KB8r9kyyKOwvUwomti3Qi0EvRYJmf2W9 tI2GvB09PAOgtgJhSRm0A6FLWMfhSXZG+BGvZl0dZ45rweFAZZlF1sLXarkGk74f r1nUMxf4S0ndz054HcxKBaRBqzDgp0oowdL6Ao+0vaHO1IjU/EdYqP4tUACPU6LK cHcAtjndgu6ujQI6McynLsQUFmED1oGq/TvdwE+atMLrFF3E8+BkaqnT3Tu9Lm2F HiVbh0quvsjwCus8NVhiJ/aZ4QTiac6L8es24RkuO3fDPeDBX/tD9O7/FwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOzJEGRoTlbR0JOTEO2WPVltOw/EMB8GA1UdIwQY MBaAFDNxDPgdIXd6mNPZmdwebq4FX3w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2Ut M2I1ZTgzZjYyNmUzLzEvN01rUVpHaE9WdEhRazVNUTdaWTlXVzA3RDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2UtM2I1ZTgzZjYyNmUz LzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBW86uAwQA W9BnMA8EAgACMAkDBwAgAQZ8A5QwDQYJKoZIhvcNAQELBQADggEBAG+fPAlbOkt8 NgiggS0HL/yONSUEbLIHkIXARI+a7/8Cwr1dO3rFBkLtjO6IV2aSsiMhVXnx3bAB uzmGiP2sDYDZbqWdwrWu4pinx9g1nSwWUktnTtJ47hvTrpqJOWSvpXFoBFYNzIXA zwLxvimmL0Ui1dF6AlANstiTbtkuJJHXXyNcsCmD6ruRxUw3la/lxPHZEcOTd0+m D8BI3QcMF7wW5QejbAALvzK45U4cyoL0+cDaPBS3sk6b2HhRkJF8M5ZgCeaQZp+k fa6dli+I82FDxfGo4GbmPATrwUtcYEBByyIlb5zz3fKs/gBGjPvXXPrU0g0rWneT DI3wNetwwvU= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:24 2026 by rpki-client