This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/T-lMXkCMAUn1cSmP84QNKdTnqzE.roa File: T-lMXkCMAUn1cSmP84QNKdTnqzE.roa (raw, json) Hash identifier: u0b6RMkrcz22t0V1+AakCj/CnEAS32OtK5Ml5FCc9x8= Subject key identifier: 4F:E9:4C:5E:40:8C:01:49:F5:71:29:8F:F3:84:0D:29:D4:E7:AB:31 Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Certificate serial: 019B79ECDF7946F8430093AC2B0D0261B202 Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/T-lMXkCMAUn1cSmP84QNKdTnqzE.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51152 IP address blocks: 185.151.36.0/24 maxlen: 24 185.151.37.0/24 maxlen: 24 185.151.38.0/24 maxlen: 24 185.151.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:79:46:f8:43:00:93:ac:2b:0d:02:61:b2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fe94c5e408c0149f571298ff3840d29d4e7ab31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:a9:5f:5a:c6:4e:1b:d7:84:44:24:3a:75: ae:58:7a:bc:64:a5:f3:b5:cc:ab:df:e8:93:cd:ac: 1f:2b:f4:03:d8:86:a9:18:c8:76:25:ed:ab:43:7a: f6:5b:d2:90:5f:1f:93:6c:90:71:fd:0f:90:c3:ab: 83:de:5d:a5:cf:b1:50:a7:a4:cf:12:4a:35:cc:fd: 3a:69:be:5f:b5:05:c7:25:45:cf:09:48:b5:45:93: 9d:07:54:02:b8:cf:ce:90:df:cc:8c:31:2f:ad:1c: f0:ee:cf:83:ac:67:74:76:58:92:91:bf:8b:f4:c7: 92:85:b9:a7:f6:90:a8:29:66:23:e2:15:5d:b2:5c: 13:6b:8e:21:1b:f2:51:bb:0c:81:2a:cb:29:fd:c3: c2:98:a4:c8:85:f8:15:b1:3d:50:25:8f:85:a8:c7: df:14:19:f9:b7:89:0f:0b:ed:29:6d:bf:78:16:a9: da:f7:0a:ff:bb:ff:0c:39:4e:77:0f:29:4e:19:aa: f8:52:59:6c:6b:36:7e:8c:95:ca:2d:15:80:90:67: 31:6f:0d:36:0b:71:e3:9b:27:26:a4:fa:e9:08:72: dc:06:10:39:af:07:62:a1:6b:35:4c:99:5b:fd:83: 9f:c2:4f:b1:2e:71:ef:b2:5d:27:dc:3a:0a:1a:6f: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:4C:5E:40:8C:01:49:F5:71:29:8F:F3:84:0D:29:D4:E7:AB:31 X509v3 Authority Key Identifier: keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/T-lMXkCMAUn1cSmP84QNKdTnqzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.36.0/22 Signature Algorithm: sha256WithRSAEncryption 48:ec:76:66:5d:be:c8:1c:50:71:c2:39:14:8a:40:96:0d:ac: a6:64:f6:aa:95:4c:bb:55:b4:19:49:7c:7e:d4:a7:84:72:26: e6:1e:5c:93:13:09:8b:68:41:0d:4d:77:e9:b6:ae:9b:f8:83: 7a:7e:98:8a:43:9d:a6:32:9d:49:d4:e1:95:74:be:be:b9:cc: 13:9b:e5:2b:b6:f8:e8:c3:fe:b0:c0:a7:6c:f5:9a:49:c1:69: df:82:68:61:cd:b8:e5:93:2f:04:8f:48:1f:d1:44:ce:8d:d2: c4:bf:5a:dd:e5:d6:ca:28:aa:8e:7b:55:ab:e6:26:3a:59:ed: e8:9c:fe:f0:cb:60:71:d5:50:e7:ea:1f:35:da:22:e2:9e:f9: 59:96:12:54:d2:5d:d7:2a:23:dc:22:96:66:75:73:93:7b:7f: 89:8f:39:1d:38:4b:8c:99:6c:aa:b7:c7:31:7e:cd:d5:2b:1a: d9:30:ea:6d:f3:3e:0e:a9:32:1e:65:7d:ae:39:d0:f4:d9:18: ec:d2:b1:d9:9b:8f:04:b2:19:f2:20:a0:21:18:a8:7b:76:3d: a0:f0:6e:2f:05:1e:b2:7c:6e:6a:03:ef:26:ba:f4:4c:b3:e0: 19:2d:e4:08:b6:3e:a0:e5:8e:4f:ba:4b:aa:47:dd:0a:78:34: 94:2c:80:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57N95RvhDAJOsKw0CYbICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi ZGMzNDMwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmU5NGM1ZTQwOGMwMTQ5ZjU3MTI5OGZmMzg0MGQyOWQ0ZTdhYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqOpX1rGThvXhEQkOnWuWHq8ZKXz tcyr3+iTzawfK/QD2IapGMh2Je2rQ3r2W9KQXx+TbJBx/Q+Qw6uD3l2lz7FQp6TP Eko1zP06ab5ftQXHJUXPCUi1RZOdB1QCuM/OkN/MjDEvrRzw7s+DrGd0dliSkb+L 9MeShbmn9pCoKWYj4hVdslwTa44hG/JRuwyBKssp/cPCmKTIhfgVsT1QJY+FqMff FBn5t4kPC+0pbb94Fqna9wr/u/8MOU53DylOGar4UllsazZ+jJXKLRWAkGcxbw02 C3HjmycmpPrpCHLcBhA5rwdioWs1TJlb/YOfwk+xLnHvsl0n3DoKGm8aaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/pTF5AjAFJ9XEpj/OEDSnU56sxMB8GA1UdIwQY MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt OTkyODI1Y2QzMjE0LzEvVC1sTVhrQ01BVW4xY1NtUDg0UU5LZFRucXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0 LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZckMA0G CSqGSIb3DQEBCwUAA4IBAQBI7HZmXb7IHFBxwjkUikCWDaymZPaqlUy7VbQZSXx+ 1KeEcibmHlyTEwmLaEENTXfptq6b+IN6fpiKQ52mMp1J1OGVdL6+ucwTm+Urtvjo w/6wwKds9ZpJwWnfgmhhzbjlky8Ej0gf0UTOjdLEv1rd5dbKKKqOe1Wr5iY6We3o nP7wy2Bx1VDn6h812iLinvlZlhJU0l3XKiPcIpZmdXOTe3+JjzkdOEuMmWyqt8cx fs3VKxrZMOpt8z4OqTIeZX2uOdD02Rjs0rHZm48EshnyIKAhGKh7dj2g8G4vBR6y fG5qA+8muvRMs+AZLeQItj6g5Y5PukuqR90KeDSULIAc -----END CERTIFICATE-----Generated at Mon Jan 12 06:53:42 2026 by rpki-client