This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/MwCkZw46V56EbDdpsFrBOWOZkt4.roa File: MwCkZw46V56EbDdpsFrBOWOZkt4.roa (raw, json) Hash identifier: 3J3DHw+6tojy7fNaTLRG180mDndrsXFRPZKmpNmiMfc= Subject key identifier: 33:00:A4:67:0E:3A:57:9E:84:6C:37:69:B0:5A:C1:39:63:99:92:DE Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa Certificate serial: 019B77C7205996686C731D3D8988AF63E352 Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/MwCkZw46V56EbDdpsFrBOWOZkt4.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49121 IP address blocks: 193.200.243.0/24 maxlen: 24 2a06:18c0:1::/48 maxlen: 48 2a06:18c0:2::/48 maxlen: 48 2a06:18c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:20:59:96:68:6c:73:1d:3d:89:88:af:63:e3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3300a4670e3a579e846c3769b05ac139639992de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:37:5b:e9:c8:ad:e8:1d:3d:57:0f:e6:b0: d6:f7:9f:cc:8a:ca:ef:e2:10:4b:8f:62:01:e8:d1: 5f:b5:22:de:c1:bf:4a:8d:bc:c7:b3:42:bb:49:50: 9b:78:6d:31:92:48:a7:f0:17:b0:88:14:f3:fa:ac: bf:88:a9:60:b4:ab:f8:6d:44:d2:94:cd:4a:df:26: 49:68:f1:cc:94:3c:1d:38:87:2f:22:24:99:21:36: 75:71:da:90:bc:20:58:e4:f6:8d:ad:d3:45:cd:65: 95:82:5a:86:ab:dd:72:dc:c3:22:4f:bf:16:1e:97: fe:a0:ac:97:76:7f:06:83:9b:0f:12:3e:ad:07:14: 07:6b:45:7a:bd:25:79:7c:50:d3:31:88:f7:a4:e6: 24:6a:8b:30:22:f2:93:fd:4b:2f:22:1b:6d:63:8f: 15:3b:f5:26:29:cc:03:2a:db:a2:84:e5:bc:36:1f: ac:20:a3:fe:b1:c5:a9:88:da:3d:96:43:6a:42:10: 91:0b:53:8d:2a:33:62:f6:d3:e6:dd:b7:d8:c0:cb: c3:a3:f9:6a:4b:38:cb:a6:b4:cd:97:44:a0:10:48: c0:66:05:60:ca:7a:ad:b4:4e:cc:77:34:1a:00:d8: 6e:02:0a:1a:cc:42:d3:3f:e6:0c:7a:0c:3d:ae:aa: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:A4:67:0E:3A:57:9E:84:6C:37:69:B0:5A:C1:39:63:99:92:DE X509v3 Authority Key Identifier: keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/MwCkZw46V56EbDdpsFrBOWOZkt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.243.0/24 IPv6: 2a06:18c0:1::-2a06:18c0:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:cc:6e:3a:4b:c9:64:54:94:c9:49:3d:52:89:24:ee:72:59: 01:23:81:35:7e:37:b7:60:13:54:35:8c:17:84:91:30:6b:fc: ab:a8:04:7c:2d:e3:6b:9a:35:2e:ed:5e:21:5e:42:48:aa:2e: 28:b5:91:ce:23:0b:33:35:d4:94:90:dc:9e:88:78:ec:d0:57: 99:d4:6d:bc:a7:c9:a7:c7:f3:28:48:81:23:76:07:e6:f5:81: 79:a6:25:2c:02:58:27:dc:67:4c:26:5b:43:6b:76:64:0a:8e: 28:1a:89:99:97:f5:15:03:fc:09:e0:c8:4f:e1:0a:39:9a:db: 3b:ac:fd:d1:07:4a:4e:de:4f:76:1d:6e:68:c6:5d:ec:89:51: 41:3d:49:08:7f:42:93:f1:7b:20:73:eb:af:9e:54:8f:13:0b: 49:da:13:6c:16:55:26:6e:1e:ae:bf:8b:b6:1e:56:d6:c3:0d: 0a:49:99:bd:fa:7c:ea:e8:ff:1e:23:2e:77:37:0e:a7:8f:03: 77:50:ba:32:d3:4e:e3:1f:11:ed:1a:7a:a4:b1:94:f1:a7:94: 17:19:86:53:ec:24:57:87:6e:cc:7e:21:87:73:66:e9:d3:4c: 38:de:ff:51:7d:ee:43:b0:58:bb:89:81:78:51:88:4d:c1:2a: 97:4d:e4:a6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3xyBZlmhscx09iYivY+NSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl NDE5YWEwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzAwYTQ2NzBlM2E1NzllODQ2YzM3NjliMDVhYzEzOTYzOTk5MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdc3W+nIregdPVcP5rDW95/Misrv 4hBLj2IB6NFftSLewb9KjbzHs0K7SVCbeG0xkkin8BewiBTz+qy/iKlgtKv4bUTS lM1K3yZJaPHMlDwdOIcvIiSZITZ1cdqQvCBY5PaNrdNFzWWVglqGq91y3MMiT78W Hpf+oKyXdn8Gg5sPEj6tBxQHa0V6vSV5fFDTMYj3pOYkaoswIvKT/UsvIhttY48V O/UmKcwDKtuihOW8Nh+sIKP+scWpiNo9lkNqQhCRC1ONKjNi9tPm3bfYwMvDo/lq SzjLprTNl0SgEEjAZgVgynqttE7MdzQaANhuAgoazELTP+YMegw9rqoRCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDMApGcOOleehGw3abBawTljmZLeMB8GA1UdIwQY MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt ZTRkMDI0Y2RhZTBjLzEvTXdDa1p3NDZWNTZFYkRkcHNGckJPV09aa3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAwcjzMBoE AgACMBQwEgMHACoGGMAAAQMHAioGGMAAADANBgkqhkiG9w0BAQsFAAOCAQEANsxu OkvJZFSUyUk9Uokk7nJZASOBNX43t2ATVDWMF4SRMGv8q6gEfC3ja5o1Lu1eIV5C SKouKLWRziMLMzXUlJDcnoh47NBXmdRtvKfJp8fzKEiBI3YH5vWBeaYlLAJYJ9xn TCZbQ2t2ZAqOKBqJmZf1FQP8CeDIT+EKOZrbO6z90QdKTt5Pdh1uaMZd7IlRQT1J CH9Ck/F7IHPrr55UjxMLSdoTbBZVJm4err+Lth5W1sMNCkmZvfp86uj/HiMudzcO p48Dd1C6MtNO4x8R7Rp6pLGU8aeUFxmGU+wkV4duzH4hh3Nm6dNMON7/UX3uQ7BY u4mBeFGITcEql03kpg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:50 2026 by rpki-client