This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/M2RriBLwk53BN_AgCVd-87noYms.roa File: M2RriBLwk53BN_AgCVd-87noYms.roa (raw, json) Hash identifier: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU= Subject key identifier: 33:64:6B:88:12:F0:93:9D:C1:37:F0:20:09:57:7E:F3:B9:E8:62:6B Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Certificate serial: 019B7AC93C7CD043D42205E5D83811053D95 Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/M2RriBLwk53BN_AgCVd-87noYms.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49524 IP address blocks: 185.82.224.0/22 maxlen: 22 2a05:9540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3c:7c:d0:43:d4:22:05:e5:d8:38:11:05:3d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33646b8812f0939dc137f02009577ef3b9e8626b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:de:04:47:68:fa:e7:58:96:09:3d:62:5c: af:b7:66:29:1c:3e:e3:02:ce:49:72:38:8e:3a:cb: 27:a8:c6:f5:60:2f:0f:9a:c1:da:c9:59:00:69:83: b2:95:7e:10:83:91:e8:01:dd:54:a3:0a:0c:51:00: 76:ad:55:7a:6e:a5:29:fd:d6:b0:c0:0e:68:c7:d8: 5e:71:22:63:2b:56:aa:8c:b0:7e:67:4d:c1:59:ca: 44:61:b5:10:38:80:a6:92:a4:d7:4c:4b:9a:79:ef: c9:0c:49:4b:53:69:54:aa:b9:45:61:96:46:10:b5: e3:d3:48:23:18:d9:4f:5a:e2:ee:4a:2e:d0:1e:9c: 1a:0b:b8:95:b1:0b:4f:c1:14:6d:b3:64:8b:be:11: f4:9d:b2:e5:cf:d8:cc:83:84:e1:c1:e1:51:eb:35: df:af:3a:1e:f0:3b:2a:cc:45:44:ea:5d:bc:9d:9d: 61:e3:39:af:95:6a:5f:9a:c4:1c:82:ff:49:34:43: ff:3d:66:14:1e:6c:34:7d:9f:d3:47:3a:cc:59:d1: 13:49:28:9c:66:1a:05:63:55:91:de:22:72:7a:a4: 29:55:dd:75:f7:65:3c:f1:be:21:81:b2:45:4c:45: 9e:90:66:8b:97:6b:7e:ab:f8:dc:89:56:b5:fc:c1: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:6B:88:12:F0:93:9D:C1:37:F0:20:09:57:7E:F3:B9:E8:62:6B X509v3 Authority Key Identifier: keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/M2RriBLwk53BN_AgCVd-87noYms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.224.0/22 IPv6: 2a05:9540::/29 Signature Algorithm: sha256WithRSAEncryption a9:6f:2a:1c:a5:db:94:5e:8d:b3:fb:f8:73:b1:1a:e4:af:de: e9:02:82:81:2e:c4:ee:65:08:f0:76:19:a8:3e:5e:ca:76:f4: d2:15:b0:43:55:83:e1:7e:5e:15:ce:9d:4b:5a:35:d7:2d:12: 3d:ac:89:f4:ce:af:5c:ab:4a:93:7d:4b:a2:97:ad:67:ba:ad: 4d:e8:31:03:62:02:ee:94:11:f5:a2:96:5b:10:1b:36:43:cb: 7e:34:8a:a6:b4:4a:03:a7:e0:e4:de:2f:60:85:d7:87:9b:4e: 20:27:3c:40:ec:be:20:48:e3:52:37:b6:ea:2e:e2:4c:2c:8f: e7:9f:f8:d1:b4:94:eb:35:3a:88:1d:18:3e:3b:e6:7a:ca:d8: 23:3b:e6:aa:56:4b:35:b0:bd:a1:6d:f1:ea:14:12:b7:a6:38: 02:e8:ba:39:8e:6b:78:df:16:ca:01:72:ee:85:d5:52:11:ec: 8d:02:07:35:e0:95:83:35:39:22:7c:44:2e:37:73:0e:57:93: b6:22:61:5f:fb:c4:90:98:e1:10:93:8f:ff:c2:c8:1b:5b:d0: 01:6b:cd:08:0b:b6:95:b8:d3:b2:a8:e4:26:4b:8b:68:33:bb: 5b:03:84:aa:1d:68:f4:b2:e2:1c:be:26:e6:6d:2e:27:c7:4e: 0f:52:9e:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yTx80EPUIgXl2DgRBT2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm ZjJlMzAwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzY0NmI4ODEyZjA5MzlkYzEzN2YwMjAwOTU3N2VmM2I5ZTg2MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8PeBEdo+udYlgk9Ylyvt2YpHD7j As5JcjiOOssnqMb1YC8PmsHayVkAaYOylX4Qg5HoAd1UowoMUQB2rVV6bqUp/daw wA5ox9hecSJjK1aqjLB+Z03BWcpEYbUQOICmkqTXTEuaee/JDElLU2lUqrlFYZZG ELXj00gjGNlPWuLuSi7QHpwaC7iVsQtPwRRts2SLvhH0nbLlz9jMg4ThweFR6zXf rzoe8DsqzEVE6l28nZ1h4zmvlWpfmsQcgv9JNEP/PWYUHmw0fZ/TRzrMWdETSSic ZhoFY1WR3iJyeqQpVd1192U88b4hgbJFTEWekGaLl2t+q/jciVa1/MHcYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDNka4gS8JOdwTfwIAlXfvO56GJrMB8GA1UdIwQY MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt ZGJjYThjMzFlYmM4LzEvTTJScmlCTHdrNTNCTl9BZ0NWZC04N25vWW1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4 LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVLgMA0E AgACMAcDBQMqBZVAMA0GCSqGSIb3DQEBCwUAA4IBAQCpbyocpduUXo2z+/hzsRrk r97pAoKBLsTuZQjwdhmoPl7KdvTSFbBDVYPhfl4Vzp1LWjXXLRI9rIn0zq9cq0qT fUuil61nuq1N6DEDYgLulBH1opZbEBs2Q8t+NIqmtEoDp+Dk3i9ghdeHm04gJzxA 7L4gSONSN7bqLuJMLI/nn/jRtJTrNTqIHRg+O+Z6ytgjO+aqVks1sL2hbfHqFBK3 pjgC6Lo5jmt43xbKAXLuhdVSEeyNAgc14JWDNTkifEQuN3MOV5O2ImFf+8SQmOEQ k4//wsgbW9ABa80IC7aVuNOyqOQmS4toM7tbA4SqHWj0suIcvibmbS4nx04PUp7N -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:33 2026 by rpki-client