This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa File: MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa (raw, json) Hash identifier: gDgNzdOYz3KjBH95RxNa3YAdnlDk82nruMEoI3Ezi38= Subject key identifier: 32:FA:53:4B:8F:61:D0:64:6F:63:44:E3:D9:81:30:2D:B6:92:D9:C3 Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012 Certificate serial: 019B7CEE5ACD7CFC88B656830D740F7A51F8 Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198352 IP address blocks: 88.151.120.0/21 maxlen: 21 185.132.252.0/22 maxlen: 22 2a0c:b4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5a:cd:7c:fc:88:b6:56:83:0d:74:0f:7a:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32fa534b8f61d0646f6344e3d981302db692d9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:b0:f2:2b:ea:a8:11:f1:dd:e6:c0:9a:74: 33:0c:1a:75:ff:a5:4d:1e:23:9b:d1:3a:87:09:65: 89:62:70:af:70:4f:cc:d4:8d:5b:60:45:4a:fb:2a: 4a:55:6c:e4:89:42:ac:94:e2:bb:af:27:e2:fb:bc: 59:f3:99:34:a3:88:99:16:0c:8d:56:c4:7f:5b:36: 25:fb:c4:36:e5:4e:3f:64:65:ed:86:53:91:14:9b: 1d:68:ce:80:8e:94:c5:6f:a9:be:03:78:20:0a:47: fe:50:ea:1d:6b:04:f8:d7:55:19:10:fe:1a:f3:24: 64:a6:e4:30:47:0c:97:de:a6:9d:9c:d0:15:d4:b0: cd:22:ba:ed:cf:a0:ad:c0:36:c2:33:e0:6d:5c:e0: 6a:56:89:04:bc:9a:2f:0c:a0:ce:57:83:73:6a:ba: 54:28:28:9b:fc:bb:d0:63:69:d0:b4:0e:33:ac:5e: c0:94:d3:5f:de:a0:61:f0:fa:d7:a1:9a:40:c9:f9: a5:eb:12:b7:ab:b2:64:66:72:0a:4a:ff:93:b2:53: f1:0e:21:fa:6d:6a:cb:a3:56:a0:f6:08:94:be:ae: 7e:37:29:68:a5:98:1a:59:d2:e6:8a:e8:84:f0:b4: e4:34:c1:1a:7f:67:c8:c1:b1:9e:2b:de:10:97:90: d0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:53:4B:8F:61:D0:64:6F:63:44:E3:D9:81:30:2D:B6:92:D9:C3 X509v3 Authority Key Identifier: keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.120.0/21 185.132.252.0/22 IPv6: 2a0c:b4c0::/29 Signature Algorithm: sha256WithRSAEncryption 61:da:10:25:fc:8a:b2:a2:f4:c8:fe:20:59:5e:b4:15:3c:d5: 91:0c:d3:74:ef:2e:9a:7c:ab:a1:30:ec:2c:4b:28:ff:53:6e: 9c:b9:b8:29:95:2c:c0:aa:10:e7:06:f6:d6:fd:98:8b:ee:07: 08:19:45:a5:7b:3a:bd:05:12:be:3a:c0:50:56:c5:0f:09:c2: a3:73:8a:06:36:e8:c6:f6:c7:f1:a0:05:bd:29:28:35:d6:56: 16:a8:a5:cd:fc:9c:70:9f:05:ca:9e:37:8d:1d:e5:8e:c3:6f: 9b:f2:7e:28:ff:49:df:7a:16:d4:12:a2:1f:25:92:ec:cc:45: ec:06:98:62:c7:af:1e:db:f6:60:d2:19:29:42:e7:27:d2:5c: 5c:da:0a:09:0c:f0:d8:7e:8b:70:89:2c:d7:53:14:c6:e1:71: ba:0e:72:74:9c:27:15:ce:52:d5:dc:dc:ea:dd:d3:b7:a1:16: bb:1e:72:d3:5e:9b:1d:e7:98:85:88:8c:73:86:1b:d4:da:03: 5c:08:48:cd:a3:6b:9e:eb:c1:df:a6:c2:80:90:17:f1:dc:50: 9a:78:ea:45:a5:58:b8:0a:f5:c9:da:c6:d4:ac:b1:c6:d0:b8: f3:c4:a8:b5:13:10:58:5c:fa:64:c7:4d:06:08:6c:a5:7b:c9: e3:8c:32:cd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87lrNfPyItlaDDXQPelH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZGRjN2Q5ZTAyZDQ0YzZiZjhjNjM1YzFkMDcxNWY2ZTg5 YzEwMTIwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmZhNTM0YjhmNjFkMDY0NmY2MzQ0ZTNkOTgxMzAyZGI2OTJkOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qqw8ivqqBHx3ebAmnQzDBp1/6VN HiOb0TqHCWWJYnCvcE/M1I1bYEVK+ypKVWzkiUKslOK7ryfi+7xZ85k0o4iZFgyN VsR/WzYl+8Q25U4/ZGXthlORFJsdaM6AjpTFb6m+A3ggCkf+UOodawT411UZEP4a 8yRkpuQwRwyX3qadnNAV1LDNIrrtz6CtwDbCM+BtXOBqVokEvJovDKDOV4NzarpU KCib/LvQY2nQtA4zrF7AlNNf3qBh8PrXoZpAyfml6xK3q7JkZnIKSv+TslPxDiH6 bWrLo1ag9giUvq5+NylopZgaWdLmiuiE8LTkNMEaf2fIwbGeK94Ql5DQRQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDL6U0uPYdBkb2NE49mBMC22ktnDMB8GA1UdIwQY MBaAFJHdx9ngLUTGv4xjXB0HFfbonBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2QzSDJlQXRSTWFfakdOY0hRY1Y5dWljRUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2FmYmMtYjg4NS00NzU1LThkMTUt ODkzYjhkZDJkMmIwLzEvTXZwVFM0OWgwR1J2WTBUajJZRXdMYmFTMmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2FmYmMtYjg4NS00NzU1LThkMTUtODkzYjhkZDJkMmIw LzEva2QzSDJlQXRSTWFfakdOY0hRY1Y5dWljRUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDWJd4AwQC uYT8MA0EAgACMAcDBQMqDLTAMA0GCSqGSIb3DQEBCwUAA4IBAQBh2hAl/IqyovTI /iBZXrQVPNWRDNN07y6afKuhMOwsSyj/U26cubgplSzAqhDnBvbW/ZiL7gcIGUWl ezq9BRK+OsBQVsUPCcKjc4oGNujG9sfxoAW9KSg11lYWqKXN/JxwnwXKnjeNHeWO w2+b8n4o/0nfehbUEqIfJZLszEXsBphix68e2/Zg0hkpQucn0lxc2goJDPDYfotw iSzXUxTG4XG6DnJ0nCcVzlLV3Nzq3dO3oRa7HnLTXpsd55iFiIxzhhvU2gNcCEjN o2ue68HfpsKAkBfx3FCaeOpFpVi4CvXJ2sbUrLHG0LjzxKi1ExBYXPpkx00GCGyl e8njjDLN -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:51 2026 by rpki-client