This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa File: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (raw, json) Hash identifier: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8= Subject key identifier: 98:1E:39:76:FB:B9:1E:D7:E7:E5:DF:E8:16:7D:11:FD:8D:BF:29:13 Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed Certificate serial: 019BC96ACF7DB338DC468D3CE90035D9F8A7 Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa Signing time: Sat 17 Jan 2026 00:46:18 +0000 ROA not before: Sat 17 Jan 2026 00:46:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202157 IP address blocks: 195.149.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:6a:cf:7d:b3:38:dc:46:8d:3c:e9:00:35:d9:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed Validity Not Before: Jan 17 00:46:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=981e3976fbb91ed7e7e5dfe8167d11fd8dbf2913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:a2:db:d8:83:c2:be:6d:dd:f7:1a:1b:8e: 7d:49:b9:b3:41:62:3d:8f:8e:2e:4e:ee:c7:71:48: 3e:9c:a7:a7:86:81:b6:f7:cf:c5:87:6f:ff:29:c4: fd:ea:d8:6f:76:bd:b8:4a:46:aa:76:8e:d9:ae:c3: a4:77:f5:15:9a:cd:67:b6:26:ac:2b:69:96:08:e1: c3:1b:57:26:03:7b:58:50:2d:16:c0:32:a0:ac:c6: a7:94:9f:8f:a4:ef:41:fa:f3:d1:dd:62:5e:d2:3b: 50:70:bf:0a:70:19:5c:0c:8f:ed:ec:11:21:d5:35: 59:36:24:a0:db:64:c8:48:07:ba:b2:09:7d:bc:a6: 9e:e2:ca:2d:bc:9b:91:af:b6:e9:59:fd:37:21:13: 8b:b0:bd:3b:0f:4f:d8:2d:8e:72:94:ee:26:5c:3f: 2d:5b:84:17:3a:be:22:c4:50:4b:ab:cc:e0:84:88: 79:56:ff:66:30:68:87:ec:bf:87:4b:5a:17:f4:84: 41:5f:f3:18:b3:8b:71:bd:96:b4:b1:ea:f4:bb:d8: 08:d5:b3:2f:8d:5f:c5:01:6e:5c:b0:2f:0f:1e:8b: 17:03:81:c0:44:f3:86:b6:b3:7a:13:82:7a:75:c8: d8:bb:1b:a8:ae:30:0a:78:d4:b5:76:d5:47:b5:84: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:39:76:FB:B9:1E:D7:E7:E5:DF:E8:16:7D:11:FD:8D:BF:29:13 X509v3 Authority Key Identifier: keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.74.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ae:94:19:f0:1c:dc:05:4d:4c:c2:58:6e:e5:5f:05:5e:49: 75:7b:4e:8c:96:a5:d5:1c:fe:29:d3:06:48:a8:67:2a:e3:3e: 9a:db:4b:76:d4:26:2f:2f:65:54:4f:ea:84:00:c6:92:d0:eb: 59:4a:b5:63:8f:ee:ac:a4:b3:c2:1a:32:92:54:cb:87:45:ca: 6c:b8:88:43:ad:75:2a:60:d6:a7:1d:e9:6d:b4:d8:6a:71:49: 07:9f:cf:f7:bb:d6:8f:d0:6c:df:c0:ac:89:4d:c6:f0:eb:3c: bb:5e:48:bc:cd:56:19:ae:b9:07:4f:21:df:03:d8:14:69:f7: 63:b4:a6:25:95:96:27:9f:7b:2a:67:83:bc:a2:e0:96:ab:88: 3e:c8:2b:e3:4d:4e:a2:0e:31:e2:79:0c:46:ab:85:fe:0c:0a: 6a:a9:cd:be:85:26:36:0a:4e:37:46:a0:a8:b4:8a:4b:46:06: b1:fb:4a:94:ac:ef:27:00:f0:99:2d:d8:b5:48:b6:9c:11:23: 61:75:b2:b5:c7:18:b2:c3:86:6e:37:b9:7e:99:57:ce:30:6c: 39:b7:4c:15:b2:d6:89:53:ef:e8:26:67:28:2b:38:0f:45:49: 8c:d0:ea:67:00:49:cc:64:14:6c:3b:da:28:15:57:63:6e:f6: b3:94:20:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvJas99szjcRo086QA12finMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj ZTUzZWQwHhcNMjYwMTE3MDA0NjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODFlMzk3NmZiYjkxZWQ3ZTdlNWRmZTgxNjdkMTFmZDhkYmYyOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Gi29iDwr5t3fcaG459SbmzQWI9 j44uTu7HcUg+nKenhoG298/Fh2//KcT96thvdr24Skaqdo7ZrsOkd/UVms1ntias K2mWCOHDG1cmA3tYUC0WwDKgrManlJ+PpO9B+vPR3WJe0jtQcL8KcBlcDI/t7BEh 1TVZNiSg22TISAe6sgl9vKae4sotvJuRr7bpWf03IROLsL07D0/YLY5ylO4mXD8t W4QXOr4ixFBLq8zghIh5Vv9mMGiH7L+HS1oX9IRBX/MYs4txvZa0ser0u9gI1bMv jV/FAW5csC8PHosXA4HARPOGtrN6E4J6dcjYuxuorjAKeNS1dtVHtYQUkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgeOXb7uR7X5+Xf6BZ9Ef2NvykTMB8GA1UdIwQY MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt ZDUyYTE4OTg1OTk5LzEvbUI0NWR2dTVIdGZuNWRfb0ZuMFJfWTJfS1JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5 LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VKMA0G CSqGSIb3DQEBCwUAA4IBAQBlrpQZ8BzcBU1Mwlhu5V8FXkl1e06MlqXVHP4p0wZI qGcq4z6a20t21CYvL2VUT+qEAMaS0OtZSrVjj+6spLPCGjKSVMuHRcpsuIhDrXUq YNanHelttNhqcUkHn8/3u9aP0GzfwKyJTcbw6zy7Xki8zVYZrrkHTyHfA9gUafdj tKYllZYnn3sqZ4O8ouCWq4g+yCvjTU6iDjHieQxGq4X+DApqqc2+hSY2Ck43RqCo tIpLRgax+0qUrO8nAPCZLdi1SLacESNhdbK1xxiyw4ZuN7l+mVfOMGw5t0wVstaJ U+/oJmcoKzgPRUmM0OpnAEnMZBRsO9ooFVdjbvazlCCN -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:22 2026 by rpki-client