This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mv252XC-r2Fp7WH9gax3y1kCf_w.roa File: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (raw, json) Hash identifier: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY= Subject key identifier: 9A:FD:B9:D9:70:BE:AF:61:69:ED:61:FD:81:AC:77:CB:59:02:7F:FC Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809AC427AC5DE441A277E3816302C0 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mv252XC-r2Fp7WH9gax3y1kCf_w.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42614 IP address blocks: 89.43.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9a:c4:27:ac:5d:e4:41:a2:77:e3:81:63:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9afdb9d970beaf6169ed61fd81ac77cb59027ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:d0:38:c3:d5:65:28:ab:7f:4f:aa:93:83: 81:c3:55:50:5b:7a:ec:a2:98:90:87:d9:cd:f7:69: cb:56:58:61:0a:13:01:c1:c4:18:7f:10:5e:44:39: 1a:06:dc:43:46:de:86:bf:0d:e7:6c:fb:27:87:0d: 78:33:5a:fe:0e:0a:5d:d9:4e:bb:ad:b9:3b:ad:bc: 03:bc:c8:d0:1c:b2:58:7d:dc:7f:51:70:f7:11:bd: 1a:8d:ce:3a:96:77:c8:e1:1d:d1:c5:c7:fa:fe:9b: 7f:08:b9:e9:42:59:40:bf:ae:6a:e0:f5:09:7f:93: 4f:d6:c0:2d:85:8b:7e:95:e3:77:8b:5f:5d:d5:09: 82:1b:d5:23:71:97:7a:bc:2a:6f:cb:16:c1:62:26: c0:6a:12:ea:6e:7a:72:9a:8e:1b:42:4a:e1:b0:3e: df:30:df:42:bc:ac:d1:98:62:ad:e2:38:5d:1c:db: 20:86:4a:c8:95:33:15:3f:b4:0e:6d:36:7a:82:60: 1c:0b:7f:64:66:67:48:f9:ab:86:3d:26:f5:aa:66: d0:e7:ea:b5:25:66:d4:c7:89:d7:9e:f2:39:80:02: 43:1e:94:8e:37:60:34:d8:f1:87:1c:27:f5:32:0e: 52:68:8e:ee:2b:aa:bb:32:18:86:9f:22:6f:e5:b9: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FD:B9:D9:70:BE:AF:61:69:ED:61:FD:81:AC:77:CB:59:02:7F:FC X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mv252XC-r2Fp7WH9gax3y1kCf_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.200.0/23 Signature Algorithm: sha256WithRSAEncryption d6:51:33:d7:eb:5f:9f:f3:32:69:46:ae:da:bd:9c:55:ff:93: 6d:c1:36:1c:38:a6:cc:d5:a6:21:50:a8:14:49:ab:67:e9:0f: 19:b3:e6:4c:9c:d9:d7:c8:62:29:34:5f:01:b6:85:57:b2:61: 65:57:ff:1d:1f:3e:cc:dd:47:70:43:3d:6c:ed:b0:0b:5a:88: 03:79:3b:c1:29:1e:c3:da:8e:65:bf:a4:8f:f3:78:1d:2a:5b: 0e:3c:f3:f4:f9:10:61:ad:ec:2d:1c:e8:1e:98:8c:40:13:9e: d4:70:8c:d2:11:79:92:a0:c7:5a:fe:30:7f:09:86:40:4a:a9: e0:af:68:e8:bb:14:8f:fb:e5:5a:9c:02:f8:63:c7:90:6e:73: 36:44:8c:1b:41:99:26:d2:70:51:a0:5e:a0:50:ff:6e:3c:d6: 14:5e:08:40:09:64:70:d7:fd:aa:a5:21:37:63:e4:e1:1d:94: e1:c0:83:b7:a9:f7:8c:b9:7f:26:cb:fa:6d:e7:4e:3d:9f:44: 2a:80:25:20:c1:77:16:1e:c8:b0:f8:05:c5:f0:30:6c:6b:40: 52:ec:a9:39:05:14:e8:be:ef:f4:ff:d5:35:2d:36:40:bc:96: 0f:a0:1f:33:db:11:09:29:61:3f:3c:2f:4e:6c:08:79:83:af: 41:cc:d5:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJrEJ6xd5EGid+OBYwLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWZkYjlkOTcwYmVhZjYxNjllZDYxZmQ4MWFjNzdjYjU5MDI3ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApITQOMPVZSirf0+qk4OBw1VQW3rs opiQh9nN92nLVlhhChMBwcQYfxBeRDkaBtxDRt6Gvw3nbPsnhw14M1r+Dgpd2U67 rbk7rbwDvMjQHLJYfdx/UXD3Eb0ajc46lnfI4R3Rxcf6/pt/CLnpQllAv65q4PUJ f5NP1sAthYt+leN3i19d1QmCG9UjcZd6vCpvyxbBYibAahLqbnpymo4bQkrhsD7f MN9CvKzRmGKt4jhdHNsghkrIlTMVP7QObTZ6gmAcC39kZmdI+auGPSb1qmbQ5+q1 JWbUx4nXnvI5gAJDHpSON2A02PGHHCf1Mg5SaI7uK6q7MhiGnyJv5bnLTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJr9udlwvq9hae1h/YGsd8tZAn/8MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvbXYyNTJYQy1yMkZwN1dIOWdheDN5MWtDZl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSvIMA0G CSqGSIb3DQEBCwUAA4IBAQDWUTPX61+f8zJpRq7avZxV/5NtwTYcOKbM1aYhUKgU Satn6Q8Zs+ZMnNnXyGIpNF8BtoVXsmFlV/8dHz7M3UdwQz1s7bALWogDeTvBKR7D 2o5lv6SP83gdKlsOPPP0+RBhrewtHOgemIxAE57UcIzSEXmSoMda/jB/CYZASqng r2jouxSP++VanAL4Y8eQbnM2RIwbQZkm0nBRoF6gUP9uPNYUXghACWRw1/2qpSE3 Y+ThHZThwIO3qfeMuX8my/pt5049n0QqgCUgwXcWHsiw+AXF8DBsa0BS7Kk5BRTo vu/0/9U1LTZAvJYPoB8z2xEJKWE/PC9ObAh5g69BzNWz -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:45 2026 by rpki-client