This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/M42LSua2udU0z-Ed1Owf0hnzc8E.roa File: M42LSua2udU0z-Ed1Owf0hnzc8E.roa (raw, json) Hash identifier: Vh2KORAQuLgb5drD8rWPfjKUMu8mwj0caxltbTREMss= Subject key identifier: 33:8D:8B:4A:E6:B6:B9:D5:34:CF:E1:1D:D4:EC:1F:D2:19:F3:73:C1 Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf Certificate serial: 019B7B358EA53877D119F65BC984A6468368 Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/M42LSua2udU0z-Ed1Owf0hnzc8E.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202170 IP address blocks: 185.51.92.0/24 maxlen: 24 185.51.93.0/24 maxlen: 24 185.51.94.0/24 maxlen: 24 185.51.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8e:a5:38:77:d1:19:f6:5b:c9:84:a6:46:83:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338d8b4ae6b6b9d534cfe11dd4ec1fd219f373c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:e6:9b:fa:1f:d5:9b:e8:34:3f:45:51:58: 99:5c:1e:73:e1:75:a4:42:f6:e0:d0:1b:0e:55:98: 54:26:97:a3:04:96:56:55:05:a4:20:45:91:0b:f2: 08:e8:51:95:a8:97:93:78:32:9e:be:93:62:fc:df: f9:87:79:85:27:ba:c0:f3:d5:5c:83:3b:2a:eb:30: 01:92:22:00:a4:7d:43:42:da:e3:f6:b3:cd:98:e0: 3e:16:8b:3b:ad:cc:2a:f1:58:29:f6:25:5e:38:48: 2e:9c:e5:3a:2a:89:20:15:32:1b:40:4b:3e:2f:9b: 8a:2f:65:d2:a7:b9:58:fc:fa:47:8d:c8:55:18:fc: 4a:fa:b3:7c:ef:14:5f:5d:9c:77:a0:b8:53:ae:30: b2:41:b6:d7:11:b1:ee:87:84:1c:42:b4:67:9d:91: e2:c9:ee:86:24:18:d1:9d:8a:57:61:fd:c2:d6:af: 9f:62:b3:f1:68:74:82:74:56:a4:59:e2:bc:f0:a5: 70:40:8c:80:3a:a9:90:84:37:ca:95:7d:e4:d8:ac: 0d:6e:16:9b:14:ab:30:dd:12:47:e0:c3:91:7d:3b: 72:11:98:e0:52:d7:76:5d:f1:da:d3:4c:7a:c5:83: da:46:0d:bf:2d:c1:a4:5f:01:ea:ee:8d:4c:5d:80: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:8B:4A:E6:B6:B9:D5:34:CF:E1:1D:D4:EC:1F:D2:19:F3:73:C1 X509v3 Authority Key Identifier: keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/M42LSua2udU0z-Ed1Owf0hnzc8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.92.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:7e:7a:77:56:28:1f:b1:bd:3c:10:b2:fb:f1:f4:4d:ca:bd: 6f:6d:4f:e7:92:39:fa:20:35:5b:17:3c:8b:9c:f0:4f:0f:8f: 6e:00:18:aa:3b:cd:09:f6:fe:34:63:62:47:56:4f:cb:a5:38: b6:2f:85:21:31:0a:f7:61:45:82:d2:87:33:a0:84:03:c6:a5: 14:5f:9f:85:d4:af:2a:a6:7e:7f:85:bb:1c:dc:91:bc:fb:9d: 42:dc:f2:05:c0:01:7b:2f:8d:f9:aa:05:3c:a9:3c:61:25:73: 06:ed:ee:88:53:8d:e4:02:94:04:7e:ac:8e:5c:68:70:fc:1b: 35:cf:73:20:03:13:bf:3f:3e:18:6f:12:36:74:8d:2f:af:0c: 19:f1:c9:66:65:b8:74:e1:3a:75:90:3f:60:e9:99:cd:8d:e7: 8b:9b:d1:e3:3d:6f:a9:93:c9:45:4d:4a:0a:67:5a:18:c7:13: 0c:22:a8:2a:36:7d:ab:5f:b8:6c:e6:3f:44:3f:3c:30:01:8d: da:d9:aa:e8:56:b5:29:fc:6b:b9:98:b4:ff:3c:61:52:0f:77: e6:96:f0:68:66:ba:0f:92:b6:72:33:29:40:0e:3a:22:96:b7: 1f:12:47:52:05:ad:b2:56:0f:31:d0:17:21:ee:bf:bc:1b:3f: 3c:97:ed:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NY6lOHfRGfZbyYSmRoNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWE3NDU1MTEyN2U5MGQ3M2EyZDNiMjk1ZjFhNmZmNTE1 MTlmZGYwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzhkOGI0YWU2YjZiOWQ1MzRjZmUxMWRkNGVjMWZkMjE5ZjM3M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/mm/of1ZvoND9FUViZXB5z4XWk Qvbg0BsOVZhUJpejBJZWVQWkIEWRC/II6FGVqJeTeDKevpNi/N/5h3mFJ7rA89Vc gzsq6zABkiIApH1DQtrj9rPNmOA+Fos7rcwq8Vgp9iVeOEgunOU6KokgFTIbQEs+ L5uKL2XSp7lY/PpHjchVGPxK+rN87xRfXZx3oLhTrjCyQbbXEbHuh4QcQrRnnZHi ye6GJBjRnYpXYf3C1q+fYrPxaHSCdFakWeK88KVwQIyAOqmQhDfKlX3k2KwNbhab FKsw3RJH4MORfTtyEZjgUtd2XfHa00x6xYPaRg2/LcGkXwHq7o1MXYBfkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDONi0rmtrnVNM/hHdTsH9IZ83PBMB8GA1UdIwQY MBaAFFcadFURJ+kNc6LTspXxpv9RUZ/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2Yt NmViMDQ4MzIzNmRmLzEvTTQyTFN1YTJ1ZFUwei1FZDFPd2YwaG56YzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2YtNmViMDQ4MzIzNmRm LzEvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTNcMA0G CSqGSIb3DQEBCwUAA4IBAQAqfnp3Vigfsb08ELL78fRNyr1vbU/nkjn6IDVbFzyL nPBPD49uABiqO80J9v40Y2JHVk/LpTi2L4UhMQr3YUWC0oczoIQDxqUUX5+F1K8q pn5/hbsc3JG8+51C3PIFwAF7L435qgU8qTxhJXMG7e6IU43kApQEfqyOXGhw/Bs1 z3MgAxO/Pz4YbxI2dI0vrwwZ8clmZbh04Tp1kD9g6ZnNjeeLm9HjPW+pk8lFTUoK Z1oYxxMMIqgqNn2rX7hs5j9EPzwwAY3a2aroVrUp/Gu5mLT/PGFSD3fmlvBoZroP krZyMylADjoilrcfEkdSBa2yVg8x0Bch7r+8Gz88l+0M -----END CERTIFICATE-----Generated at Mon Jan 12 03:31:34 2026 by rpki-client