This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MU2iqeWOhhwT4iMzTSOGfqjY9tY.roa File: MU2iqeWOhhwT4iMzTSOGfqjY9tY.roa (raw, json) Hash identifier: mQVjqYgZHfYYxpAkEs1wXmkjAT3YzWbo5uJSzbgWA44= Subject key identifier: 31:4D:A2:A9:E5:8E:86:1C:13:E2:23:33:4D:23:86:7E:A8:D8:F6:D6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B6951D9D27967B9686BD69291BD2D5C6F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MU2iqeWOhhwT4iMzTSOGfqjY9tY.roa Signing time: Mon 29 Dec 2025 08:55:30 +0000 ROA not before: Mon 29 Dec 2025 08:55:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401322 IP address blocks: 163.5.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:51:d9:d2:79:67:b9:68:6b:d6:92:91:bd:2d:5c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 29 08:55:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=314da2a9e58e861c13e223334d23867ea8d8f6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:19:12:21:7d:48:8d:40:c2:b1:d0:a0:b4: f7:40:8d:50:17:de:e5:2a:36:d4:56:52:37:ff:c6: 41:ce:26:f1:5f:82:af:87:ed:2f:31:0d:96:46:ae: 4d:ac:b9:c0:ae:d4:9f:41:96:4a:a4:0e:35:cc:a7: 9f:94:43:7d:eb:d3:bb:86:c5:03:a9:da:e4:2f:b0: 70:33:02:c1:da:f6:08:06:e2:b2:12:ff:62:3e:1e: a6:fa:80:78:70:f9:29:52:37:12:a5:15:10:70:94: bd:75:ba:78:64:9e:bd:12:08:20:86:55:00:1f:25: db:71:8d:26:29:58:89:11:f6:e2:3b:a8:f0:b6:ae: 43:c4:0c:a5:6b:47:2f:21:b3:87:1c:61:4d:75:60: b0:05:d2:61:c5:94:ce:15:fc:b7:ae:1f:17:be:2f: 37:aa:a8:ed:4c:35:1a:19:0d:88:2f:67:ec:99:8d: a3:6c:08:5b:f7:fc:e8:f9:c9:ff:a7:f1:c6:9a:c8: 12:59:9b:2b:73:26:41:12:b5:0b:a5:7d:be:54:73: d5:74:00:66:67:3e:bf:d9:2c:e4:55:66:49:85:48: 7c:1b:cb:46:a9:fc:5e:43:46:1a:83:4b:da:ba:39: 92:ba:69:1b:df:61:8d:66:0c:5f:72:c0:45:82:d6: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4D:A2:A9:E5:8E:86:1C:13:E2:23:33:4D:23:86:7E:A8:D8:F6:D6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MU2iqeWOhhwT4iMzTSOGfqjY9tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.47.0/24 Signature Algorithm: sha256WithRSAEncryption a0:13:cf:12:2b:d4:aa:a1:b2:74:61:e2:47:e6:8b:28:cb:43: db:5b:ac:f7:db:47:0c:37:f1:4b:52:3c:8a:3f:7f:4b:96:fc: da:48:b5:3f:30:f3:1f:dc:22:d2:c9:8f:fd:6c:29:ab:c1:98: 31:3a:e7:4b:00:d2:58:cd:28:31:0d:b5:40:f0:e2:56:b7:36: 60:69:df:90:96:8d:b2:11:2f:20:c1:fb:e6:0f:4b:be:cf:a2: 69:d7:9e:92:51:39:2d:e1:e1:59:e9:06:f0:65:53:bb:ce:3a: cb:48:a8:e5:4c:b9:b5:75:d0:6a:c3:66:a1:db:6d:92:9b:96: 18:81:f5:d9:a5:96:47:f3:1b:7f:c3:ad:f9:9e:d6:a5:53:2b: 11:0d:5d:03:bd:fd:39:17:9d:a1:fd:38:15:39:b5:72:0e:97: 3d:6b:68:0d:f6:e0:84:5c:8e:19:05:e7:71:87:8a:32:7f:c0: 9a:46:75:9c:13:cc:08:97:f9:79:5b:3e:ba:29:fb:16:5f:a2: f0:ec:32:f7:96:d8:55:40:61:1d:7f:d8:91:ec:ab:42:0d:cf: 65:6c:2c:e4:d0:51:d7:5c:26:61:18:ef:04:44:bf:a1:86:8a: d5:e8:86:cb:5b:43:21:c5:8f:73:c2:f7:3c:38:52:47:04:93: 86:55:88:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtpUdnSeWe5aGvWkpG9LVxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjI5MDg1NTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTRkYTJhOWU1OGU4NjFjMTNlMjIzMzM0ZDIzODY3ZWE4ZDhmNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukcZEiF9SI1AwrHQoLT3QI1QF97l KjbUVlI3/8ZBzibxX4Kvh+0vMQ2WRq5NrLnArtSfQZZKpA41zKeflEN969O7hsUD qdrkL7BwMwLB2vYIBuKyEv9iPh6m+oB4cPkpUjcSpRUQcJS9dbp4ZJ69EggghlUA HyXbcY0mKViJEfbiO6jwtq5DxAyla0cvIbOHHGFNdWCwBdJhxZTOFfy3rh8Xvi83 qqjtTDUaGQ2IL2fsmY2jbAhb9/zo+cn/p/HGmsgSWZsrcyZBErULpX2+VHPVdABm Zz6/2SzkVWZJhUh8G8tGqfxeQ0Yag0vaujmSumkb32GNZgxfcsBFgtYaswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFNoqnljoYcE+IjM00jhn6o2PbWMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTVUyaXFlV09oaHdUNGlNelRTT0dmcWpZOXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUvMA0G CSqGSIb3DQEBCwUAA4IBAQCgE88SK9SqobJ0YeJH5osoy0PbW6z320cMN/FLUjyK P39LlvzaSLU/MPMf3CLSyY/9bCmrwZgxOudLANJYzSgxDbVA8OJWtzZgad+Qlo2y ES8gwfvmD0u+z6Jp156SUTkt4eFZ6QbwZVO7zjrLSKjlTLm1ddBqw2ah222Sm5YY gfXZpZZH8xt/w635ntalUysRDV0Dvf05F52h/TgVObVyDpc9a2gN9uCEXI4ZBedx h4oyf8CaRnWcE8wIl/l5Wz66KfsWX6Lw7DL3lthVQGEdf9iR7KtCDc9lbCzk0FHX XCZhGO8ERL+hhorV6IbLW0MhxY9zwvc8OFJHBJOGVYgZ -----END CERTIFICATE-----Generated at Wed Dec 31 07:55:53 2025 by rpki-client