This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/M3ksnFn9ABZEMHo2-kOAUSZyghM.roa File: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (raw, json) Hash identifier: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8= Subject key identifier: 33:79:2C:9C:59:FD:00:16:44:30:7A:36:FA:43:80:51:26:72:82:13 Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B7C1173C4C65BADB9AB02327A9C13FB07 Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/M3ksnFn9ABZEMHo2-kOAUSZyghM.roa Signing time: Fri 02 Jan 2026 00:17:57 +0000 ROA not before: Fri 02 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205516 IP address blocks: 45.86.80.0/22 maxlen: 24 45.86.80.0/24 maxlen: 24 45.86.81.0/24 maxlen: 24 45.86.82.0/24 maxlen: 24 45.86.83.0/24 maxlen: 24 45.130.4.0/24 maxlen: 24 89.223.4.0/24 maxlen: 24 89.223.11.0/24 maxlen: 24 91.147.96.0/22 maxlen: 24 91.147.96.0/24 maxlen: 24 91.147.97.0/24 maxlen: 24 91.147.99.0/24 maxlen: 24 185.215.160.0/22 maxlen: 24 185.215.160.0/24 maxlen: 24 185.215.161.0/24 maxlen: 24 185.215.162.0/24 maxlen: 24 185.215.163.0/24 maxlen: 24 2a0b:abc0::/29 maxlen: 48 2a0e:db80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:73:c4:c6:5b:ad:b9:ab:02:32:7a:9c:13:fb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Jan 2 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33792c9c59fd001644307a36fa43805126728213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:19:a0:6f:9d:18:8f:cb:96:3b:47:38:5c: 65:d9:23:d3:7c:7e:7e:0d:7a:69:9a:c6:4e:5d:a9: dd:0d:fe:0b:56:3c:ad:a2:fb:73:c1:71:eb:27:85: 08:7a:00:59:4c:3f:9b:41:a0:99:51:f7:28:7b:f0: ae:7e:14:10:3c:13:5c:e6:6e:f7:45:84:47:94:c9: 15:95:ec:8c:54:34:dc:8b:4a:74:f9:61:54:39:b3: 86:ab:b8:1b:ef:64:28:ee:29:7a:46:ab:72:ff:dd: 71:0c:cf:23:41:63:56:2a:ee:69:60:46:d9:79:63: 28:07:23:66:69:55:69:1c:06:12:d3:b8:71:97:d7: 98:d9:ff:59:08:45:58:a8:8d:9d:81:50:4f:bd:9b: a1:72:27:f7:1c:43:f4:84:d5:7f:8a:ea:2d:62:c7: bd:67:2f:5a:84:cb:d6:4d:9c:d0:5a:ce:87:2c:4c: 29:6d:29:bf:ec:3f:d5:90:93:54:15:68:d1:a6:64: 5a:8f:0b:8e:5f:a8:8f:a6:c9:14:0e:fd:2b:95:cd: 80:60:c1:01:80:fc:41:31:cc:de:d1:7a:18:d3:0d: 48:d2:6c:79:02:d7:80:bf:8e:a3:b2:51:a5:86:38: ed:a9:18:0a:d4:13:62:2f:4c:cc:f6:bc:46:dc:65: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:2C:9C:59:FD:00:16:44:30:7A:36:FA:43:80:51:26:72:82:13 X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/M3ksnFn9ABZEMHo2-kOAUSZyghM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.80.0/22 45.130.4.0/24 89.223.4.0/24 89.223.11.0/24 91.147.96.0/22 185.215.160.0/22 IPv6: 2a0b:abc0::/29 2a0e:db80::/29 Signature Algorithm: sha256WithRSAEncryption 0b:4c:6a:0d:73:d4:79:00:4f:88:5a:96:bb:d9:3d:0d:f5:b1: 87:69:a9:41:27:ca:37:b5:1c:fb:7d:2e:87:ca:87:c4:7e:91: f0:66:b2:f7:5d:ab:07:83:92:4a:ef:00:38:2b:fd:2a:ec:85: 53:3f:1f:3b:00:8e:30:30:82:5a:a9:65:8f:44:43:a0:a6:92: f6:67:12:ce:9b:eb:f9:e6:4b:30:23:b4:89:ac:1d:c7:2d:95: c6:64:fd:b4:fc:7c:88:6e:18:31:c7:af:e9:b1:92:d6:92:67: 05:46:35:66:37:7c:f3:76:36:03:48:26:71:50:85:9e:84:7b: 77:e6:40:b5:c7:44:19:2a:62:f6:0f:3b:ca:d7:79:6b:83:d0: 44:68:c6:6c:3c:eb:24:16:db:c4:43:72:6e:ac:b3:65:30:b4: 56:98:08:43:ce:fb:24:76:ec:48:b4:cf:3e:15:6b:18:15:df: 0f:bd:8d:f5:43:c1:08:fb:72:40:6b:57:47:ce:b1:ab:7a:d6: 9c:13:55:62:0f:2f:12:bd:43:4f:bd:e1:2a:f2:3c:48:79:48: 7a:47:be:b6:bb:26:ed:20:bb:22:89:13:95:f1:93:9d:15:33: 00:71:5e:7c:96:14:31:3a:7e:03:32:e0:f1:98:16:61:06:ac: d0:c4:bf:de -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt8EXPExlutuasCMnqcE/sHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjYwMTAyMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzc5MmM5YzU5ZmQwMDE2NDQzMDdhMzZmYTQzODA1MTI2NzI4MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy8ZoG+dGI/LljtHOFxl2SPTfH5+ DXppmsZOXandDf4LVjytovtzwXHrJ4UIegBZTD+bQaCZUfcoe/CufhQQPBNc5m73 RYRHlMkVleyMVDTci0p0+WFUObOGq7gb72Qo7il6Rqty/91xDM8jQWNWKu5pYEbZ eWMoByNmaVVpHAYS07hxl9eY2f9ZCEVYqI2dgVBPvZuhcif3HEP0hNV/iuotYse9 Zy9ahMvWTZzQWs6HLEwpbSm/7D/VkJNUFWjRpmRajwuOX6iPpskUDv0rlc2AYMEB gPxBMcze0XoY0w1I0mx5AteAv46jslGlhjjtqRgK1BNiL0zM9rxG3GVTywIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFDN5LJxZ/QAWRDB6NvpDgFEmcoITMB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvTTNrc25GbjlBQlpFTUhvMi1rT0FVU1p5Z2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQCLVZQAwQA LYIEAwQAWd8EAwQAWd8LAwQCW5NgAwQCudegMBQEAgACMA4DBQMqC6vAAwUDKg7b gDANBgkqhkiG9w0BAQsFAAOCAQEAC0xqDXPUeQBPiFqWu9k9DfWxh2mpQSfKN7Uc +30uh8qHxH6R8Gay912rB4OSSu8AOCv9KuyFUz8fOwCOMDCCWqllj0RDoKaS9mcS zpvr+eZLMCO0iawdxy2VxmT9tPx8iG4YMcev6bGS1pJnBUY1Zjd883Y2A0gmcVCF noR7d+ZAtcdEGSpi9g87ytd5a4PQRGjGbDzrJBbbxENybqyzZTC0VpgIQ877JHbs SLTPPhVrGBXfD72N9UPBCPtyQGtXR86xq3rWnBNVYg8vEr1DT73hKvI8SHlIeke+ trsm7SC7IokTlfGTnRUzAHFefJYUMTp+AzLg8ZgWYQas0MS/3g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:36 2026 by rpki-client