This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa File: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (raw, json) Hash identifier: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA= Subject key identifier: 33:FE:FD:5D:0D:92:5C:02:96:20:5C:B7:1C:D9:81:15:7D:98:46:02 Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Certificate serial: 019B78351BBB48BA1B06365E5C97C7508DC6 Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60717 IP address blocks: 185.30.224.0/22 maxlen: 22 2a04:45c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:bb:48:ba:1b:06:36:5e:5c:97:c7:50:8d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33fefd5d0d925c0296205cb71cd981157d984602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:aa:bf:56:9b:cd:ff:25:a7:13:df:81:53:d1: 16:c7:e1:6f:3f:91:e6:ff:2b:9e:e3:96:ea:c1:e0: 79:3f:47:16:c6:e2:8b:67:80:7f:17:ad:8f:27:43: a3:c5:76:c6:87:19:3b:6d:d0:8a:9f:a5:d9:f7:db: b8:f5:84:4e:23:a9:01:5f:4c:e4:d4:d7:56:34:98: dc:77:24:08:92:31:0e:09:51:ca:d8:2c:46:d7:d5: 88:e6:e1:ec:ca:32:2d:05:99:4e:6a:d7:d9:ac:7c: 0f:21:fa:b8:bd:7a:2e:22:a4:69:e5:ff:ef:7a:7e: ec:a9:06:a1:d2:64:0f:55:5c:07:14:71:45:75:be: bb:07:93:63:4d:e8:92:c4:2f:ea:3f:68:8a:dc:a7: 25:8e:26:a9:6a:bd:9e:60:b9:57:03:c0:c1:57:69: 03:98:2a:f9:f2:6a:18:90:94:0b:6b:f8:f5:a7:81: 08:4f:d8:db:e8:6d:1c:ff:39:4c:ea:90:79:ec:77: ed:b9:52:eb:29:93:eb:04:ee:16:47:2b:20:62:ab: a6:d3:4a:f2:6e:5e:52:a3:08:bb:59:e0:f2:6c:63: 37:6b:e3:24:f6:36:47:cd:51:f7:3b:dc:a1:38:b5: 06:17:9e:e0:4f:44:d1:b0:28:96:93:80:fe:88:00: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:FD:5D:0D:92:5C:02:96:20:5C:B7:1C:D9:81:15:7D:98:46:02 X509v3 Authority Key Identifier: keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.224.0/22 IPv6: 2a04:45c0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:a7:84:9f:2a:71:a1:f5:0b:6e:52:ad:5b:32:a6:42:c2:f2: b0:12:7b:7a:aa:17:30:9f:94:7b:f7:50:31:eb:b2:7b:c3:aa: 9f:cf:c8:46:45:91:bf:da:35:26:bf:72:64:28:6d:fa:68:eb: f9:59:01:77:4d:d7:c6:5c:76:e9:b0:1d:d1:d5:a9:1e:a8:14: 3e:75:6f:7f:2a:64:20:42:da:fd:69:ed:ea:38:c8:ab:63:fd: a6:e3:d0:9c:db:4e:e9:0a:8b:fd:b9:ab:4f:98:e4:c7:3b:e8: 80:bf:bf:60:2f:24:0e:fb:4a:49:02:93:d5:ba:5b:29:59:ac: 8e:ef:f9:32:29:a1:7a:ef:94:35:a2:6f:42:85:c0:e4:65:8a: 7d:a4:a4:80:eb:c4:e5:73:b2:d5:38:80:c7:6f:3a:a6:b4:e0: 5d:c4:8c:81:10:fc:0b:44:2f:a1:24:61:51:70:a9:0e:68:5f: ab:61:16:b2:3e:64:0f:f2:2f:7e:33:6f:e5:6a:33:05:66:dd: d7:34:19:d9:de:99:24:05:0c:55:48:fc:dc:90:78:38:eb:b6: ed:63:8b:98:b5:29:67:61:f9:b0:e7:60:b4:46:d6:25:d0:d6: 3f:d7:53:b1:97:af:63:32:10:02:e7:8b:13:44:6a:a4:a3:5d: f5:85:b0:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRu7SLobBjZeXJfHUI3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm OGM5MGUwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2ZlZmQ1ZDBkOTI1YzAyOTYyMDVjYjcxY2Q5ODExNTdkOTg0NjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qq/VpvN/yWnE9+BU9EWx+FvP5Hm /yue45bqweB5P0cWxuKLZ4B/F62PJ0OjxXbGhxk7bdCKn6XZ99u49YROI6kBX0zk 1NdWNJjcdyQIkjEOCVHK2CxG19WI5uHsyjItBZlOatfZrHwPIfq4vXouIqRp5f/v en7sqQah0mQPVVwHFHFFdb67B5NjTeiSxC/qP2iK3Kcljiapar2eYLlXA8DBV2kD mCr58moYkJQLa/j1p4EIT9jb6G0c/zlM6pB57HftuVLrKZPrBO4WRysgYqum00ry bl5Sowi7WeDybGM3a+Mk9jZHzVH3O9yhOLUGF57gT0TRsCiWk4D+iABLYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDP+/V0NklwCliBctxzZgRV9mEYCMB8GA1UdIwQY MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt YjI3YzM0MTI0MjZhLzEvTV83OVhRMlNYQUtXSUZ5M0hObUJGWDJZUmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR7gMA0E AgACMAcDBQMqBEXAMA0GCSqGSIb3DQEBCwUAA4IBAQBfp4SfKnGh9QtuUq1bMqZC wvKwEnt6qhcwn5R791Ax67J7w6qfz8hGRZG/2jUmv3JkKG36aOv5WQF3TdfGXHbp sB3R1akeqBQ+dW9/KmQgQtr9ae3qOMirY/2m49Cc207pCov9uatPmOTHO+iAv79g LyQO+0pJApPVulspWayO7/kyKaF675Q1om9ChcDkZYp9pKSA68Tlc7LVOIDHbzqm tOBdxIyBEPwLRC+hJGFRcKkOaF+rYRayPmQP8i9+M2/lajMFZt3XNBnZ3pkkBQxV SPzckHg467btY4uYtSlnYfmw52C0RtYl0NY/11Oxl69jMhAC54sTRGqko131hbAp -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:13 2026 by rpki-client