This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/MKFoAsHr3TV5czrMUEU2-S68gz8.roa File: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (raw, json) Hash identifier: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8= Subject key identifier: 30:A1:68:02:C1:EB:DD:35:79:73:3A:CC:50:45:36:F9:2E:BC:83:3F Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Certificate serial: 019B7C80C3B8D2019C04D8EC21C82A523956 Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/MKFoAsHr3TV5czrMUEU2-S68gz8.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211225 IP address blocks: 37.205.0.0/24 maxlen: 24 37.205.1.0/24 maxlen: 24 37.205.2.0/24 maxlen: 24 37.205.3.0/24 maxlen: 24 37.205.4.0/24 maxlen: 24 37.205.5.0/24 maxlen: 24 37.205.6.0/24 maxlen: 24 37.205.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c3:b8:d2:01:9c:04:d8:ec:21:c8:2a:52:39:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a16802c1ebdd3579733acc504536f92ebc833f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:d0:3b:69:02:38:d0:cd:9f:12:16:0d:8c: 67:26:b5:f7:c1:30:12:df:bc:15:d5:5c:f5:2e:b7: d5:94:57:89:43:5b:71:de:bf:36:85:76:24:bc:93: 1d:33:dd:18:ca:73:b0:f4:be:65:48:e7:8b:81:ac: 46:f8:36:b7:15:ea:c0:49:b6:07:49:95:6b:23:4e: cf:f8:1c:27:62:ee:8f:f3:7e:76:9d:f3:d8:e7:c7: ad:15:f9:af:b1:ba:4b:11:c6:61:3f:c9:4b:2e:97: 2c:ef:de:20:96:84:ad:a9:c3:bc:59:f6:a3:46:8a: 6e:2c:25:fa:08:49:3e:5a:62:1e:5d:80:19:eb:6d: 80:c0:fe:f4:19:d3:14:24:90:1b:1f:91:38:99:fe: 42:26:8b:13:7c:d1:71:60:5e:8c:b9:48:2d:40:85: 5d:cb:50:57:c7:4a:f0:46:98:23:93:d9:8e:c4:b7: 0d:6c:d3:aa:8d:c5:51:0a:a3:40:32:57:1e:24:57: 98:a9:74:ff:7b:35:ad:9a:6d:c9:47:90:f9:fd:dd: c3:f3:40:8b:cb:06:9a:13:b9:6d:41:f0:09:d3:e9: 15:6f:22:24:6c:cb:e7:b9:3d:16:5e:19:77:21:52: da:a2:10:22:b9:77:fd:27:f3:06:3a:9d:e7:54:33: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:68:02:C1:EB:DD:35:79:73:3A:CC:50:45:36:F9:2E:BC:83:3F X509v3 Authority Key Identifier: keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/MKFoAsHr3TV5czrMUEU2-S68gz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.0.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:e2:57:db:86:1a:c8:70:83:9d:ca:32:13:f1:42:6f:12:0f: 6c:07:61:99:f1:4a:81:b2:a1:c3:57:e3:e7:0c:37:15:95:e5: be:94:c1:22:2a:93:7c:d4:96:37:23:76:b4:54:8c:d3:8e:b4: 6d:d9:98:58:2a:06:6f:d5:0d:e8:49:4b:0a:10:de:12:f4:c7: 84:69:c8:ed:f2:7c:0a:c8:47:53:ea:a7:00:03:b8:4d:97:91: af:51:09:02:47:a7:75:cd:a3:03:79:93:0d:73:4a:8a:43:9f: 2a:9f:61:4b:91:2c:19:16:13:6b:3e:54:45:22:ab:e6:69:5d: 73:2f:5b:80:4a:78:02:f5:aa:21:1f:cb:50:aa:fd:cf:4c:16: d7:3c:6c:1d:da:83:91:51:be:19:97:70:ff:5a:62:e4:e1:6b: 2a:62:ee:ae:05:9a:9e:0c:6f:78:4f:76:c1:01:01:8e:3f:af: 4c:c1:05:07:4a:44:50:73:27:26:d8:bb:37:7f:d0:26:f9:7a: d1:2c:db:b5:61:7c:a6:48:e0:c9:c8:84:be:23:b1:a5:b8:c4: f8:b3:cb:13:bf:d0:51:d6:d0:d5:50:31:15:13:98:5a:e7:09: fd:f0:34:ac:db:e8:70:35:f7:c3:b6:26:d4:13:b5:58:9e:9a: 54:66:92:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMO40gGcBNjsIcgqUjlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm NWY1MTkwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGExNjgwMmMxZWJkZDM1Nzk3MzNhY2M1MDQ1MzZmOTJlYmM4MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvLQO2kCONDNnxIWDYxnJrX3wTAS 37wV1Vz1LrfVlFeJQ1tx3r82hXYkvJMdM90YynOw9L5lSOeLgaxG+Da3FerASbYH SZVrI07P+BwnYu6P8352nfPY58etFfmvsbpLEcZhP8lLLpcs794gloStqcO8Wfaj RopuLCX6CEk+WmIeXYAZ622AwP70GdMUJJAbH5E4mf5CJosTfNFxYF6MuUgtQIVd y1BXx0rwRpgjk9mOxLcNbNOqjcVRCqNAMlceJFeYqXT/ezWtmm3JR5D5/d3D80CL ywaaE7ltQfAJ0+kVbyIkbMvnuT0WXhl3IVLaohAiuXf9J/MGOp3nVDMyhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDChaALB6901eXM6zFBFNvkuvIM/MB8GA1UdIwQY MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt Zjc4YmRiNmY2MGMyLzEvTUtGb0FzSHIzVFY1Y3pyTVVFVTItUzY4Z3o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJc0AMA0G CSqGSIb3DQEBCwUAA4IBAQCP4lfbhhrIcIOdyjIT8UJvEg9sB2GZ8UqBsqHDV+Pn DDcVleW+lMEiKpN81JY3I3a0VIzTjrRt2ZhYKgZv1Q3oSUsKEN4S9MeEacjt8nwK yEdT6qcAA7hNl5GvUQkCR6d1zaMDeZMNc0qKQ58qn2FLkSwZFhNrPlRFIqvmaV1z L1uASngC9aohH8tQqv3PTBbXPGwd2oORUb4Zl3D/WmLk4WsqYu6uBZqeDG94T3bB AQGOP69MwQUHSkRQcycm2Ls3f9Am+XrRLNu1YXymSODJyIS+I7GluMT4s8sTv9BR 1tDVUDEVE5ha5wn98DSs2+hwNffDtibUE7VYnppUZpJU -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:37 2026 by rpki-client