This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MO41iuuYvhgDM5jyOCd9wHz8ZzA.roa File: MO41iuuYvhgDM5jyOCd9wHz8ZzA.roa (raw, json) Hash identifier: S53sZy6NNBSReBovpcz4KJ73zQOL+GVvtE23ytIJ6UU= Subject key identifier: 30:EE:35:8A:EB:98:BE:18:03:33:98:F2:38:27:7D:C0:7C:FC:67:30 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35672F8571DE65C8ED4B918C4EC62E Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MO41iuuYvhgDM5jyOCd9wHz8ZzA.roa Signing time: Thu 01 Jan 2026 20:17:35 +0000 ROA not before: Thu 01 Jan 2026 20:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34358 IP address blocks: 81.180.200.0/24 maxlen: 24 85.120.35.0/24 maxlen: 24 85.121.136.0/23 maxlen: 23 217.156.42.0/24 maxlen: 24 217.156.44.0/23 maxlen: 23 217.156.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:67:2f:85:71:de:65:c8:ed:4b:91:8c:4e:c6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30ee358aeb98be18033398f238277dc07cfc6730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:5d:d6:d0:20:76:d9:95:59:4b:96:8b:84: b5:7c:ca:73:1f:c2:2a:5b:d2:8f:af:c9:d0:70:a0: 0d:84:4d:14:e9:c6:77:cd:80:1e:d9:6c:e3:4d:f9: a4:d9:62:9a:d3:ab:c9:20:d0:bd:94:3e:8d:b9:02: 92:2f:40:8c:2f:d5:44:43:43:93:33:c4:c1:53:4d: 4b:64:c6:c3:5d:66:81:1b:66:13:f2:c0:a3:48:ed: d5:84:ca:8c:01:6c:36:8b:37:e1:c5:0b:18:b5:f5: f5:fd:bb:eb:72:a9:f9:ef:45:7a:47:81:01:69:63: 8a:c3:08:8d:1b:dd:66:61:1b:ad:fc:58:d5:a2:94: 90:ad:fa:40:82:fe:08:e4:71:5b:13:d8:3f:58:84: 0e:9e:68:b3:c0:73:87:67:28:82:c7:09:8c:47:29: fd:a6:f8:d3:8a:c9:fb:35:c7:a5:90:54:70:07:d9: 8d:83:61:98:ba:c2:b5:c7:84:14:67:a7:ac:a8:15: 4f:b2:67:a8:80:70:72:30:8a:69:8b:69:2c:0b:b2: 31:d5:28:d8:51:31:c0:5d:a7:77:07:82:08:38:bb: fc:43:cf:76:42:97:fd:c0:a8:28:72:db:8d:3c:56: 60:67:8c:33:2b:d5:26:6f:1e:e9:29:5d:f3:6c:7f: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EE:35:8A:EB:98:BE:18:03:33:98:F2:38:27:7D:C0:7C:FC:67:30 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MO41iuuYvhgDM5jyOCd9wHz8ZzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.180.200.0/24 85.120.35.0/24 85.121.136.0/23 217.156.42.0/24 217.156.44.0/23 217.156.103.0/24 Signature Algorithm: sha256WithRSAEncryption 18:26:ff:a4:60:21:2e:18:90:8b:fd:a0:6e:93:0d:b0:04:1f: 44:37:59:5d:74:88:19:99:79:a3:be:0a:f1:80:4b:d9:0a:36: a9:fa:5f:f5:38:2f:4e:20:54:aa:7d:5d:62:7e:22:3f:99:ab: b0:37:02:22:10:d8:b2:7c:89:82:c4:e8:ff:19:9d:f1:ae:46: 96:46:9a:83:d1:a7:1e:d4:9c:91:26:0e:1a:98:5b:76:ec:88: 55:09:d2:7f:3d:d4:6e:15:71:60:22:2f:95:87:e9:c1:65:12: 02:cf:c1:60:a5:0a:e6:a5:08:ee:15:01:6d:0b:03:0e:1f:ba: 95:ab:80:db:a5:c0:c7:73:93:15:25:46:59:77:a9:fc:36:48: f0:70:4a:cc:66:9e:8a:1f:2f:5f:75:fa:32:a1:70:fa:bd:9b: 23:9f:ec:b5:72:a7:9c:02:94:31:20:9d:37:82:a1:a9:a7:d9: 75:72:16:19:3c:41:a1:26:f3:b7:d1:76:f5:ae:91:c0:5d:97: 25:e3:3a:bf:35:01:01:27:2e:10:16:9d:2e:10:9e:ab:51:96: 17:4a:d0:13:23:ad:b5:32:0d:e6:b0:78:88:b2:d5:da:b4:07: db:12:49:9a:60:fe:78:1c:f4:01:17:0f:86:15:6c:ca:79:1e: 78:09:09:2a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7NWcvhXHeZcjtS5GMTsYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGVlMzU4YWViOThiZTE4MDMzMzk4ZjIzODI3N2RjMDdjZmM2NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQhd1tAgdtmVWUuWi4S1fMpzH8Iq W9KPr8nQcKANhE0U6cZ3zYAe2WzjTfmk2WKa06vJINC9lD6NuQKSL0CML9VEQ0OT M8TBU01LZMbDXWaBG2YT8sCjSO3VhMqMAWw2izfhxQsYtfX1/bvrcqn570V6R4EB aWOKwwiNG91mYRut/FjVopSQrfpAgv4I5HFbE9g/WIQOnmizwHOHZyiCxwmMRyn9 pvjTisn7NcelkFRwB9mNg2GYusK1x4QUZ6esqBVPsmeogHByMIppi2ksC7Ix1SjY UTHAXad3B4IIOLv8Q892Qpf9wKgoctuNPFZgZ4wzK9Umbx7pKV3zbH+KjQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDDuNYrrmL4YAzOY8jgnfcB8/GcwMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTU80MWl1dVl2aGdETTVqeU9DZDl3SHo4WnpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUbTIAwQA VXgjAwQBVXmIAwQA2ZwqAwQB2ZwsAwQA2ZxnMA0GCSqGSIb3DQEBCwUAA4IBAQAY Jv+kYCEuGJCL/aBukw2wBB9EN1lddIgZmXmjvgrxgEvZCjap+l/1OC9OIFSqfV1i fiI/mauwNwIiENiyfImCxOj/GZ3xrkaWRpqD0ace1JyRJg4amFt27IhVCdJ/PdRu FXFgIi+Vh+nBZRICz8FgpQrmpQjuFQFtCwMOH7qVq4DbpcDHc5MVJUZZd6n8Nkjw cErMZp6KHy9fdfoyoXD6vZsjn+y1cqecApQxIJ03gqGpp9l1chYZPEGhJvO30Xb1 rpHAXZcl4zq/NQEBJy4QFp0uEJ6rUZYXStATI621Mg3msHiIstXatAfbEkmaYP54 HPQBFw+GFWzKeR54CQkq -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:57 2026 by rpki-client