This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa File: MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa (raw, json) Hash identifier: 1RlOpJPGUwPySnoc4bJ92X2BUeJ9PgaVyLOke+PwpWY= Subject key identifier: 30:1F:DF:C7:24:68:BC:D0:C4:D4:0A:3F:B2:A5:EF:30:2C:AF:B0:7B Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439 Certificate serial: 019B79EC518BCC665AA693CAA3CBA432EB56 Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa Signing time: Thu 01 Jan 2026 14:18:09 +0000 ROA not before: Thu 01 Jan 2026 14:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43713 IP address blocks: 91.198.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:51:8b:cc:66:5a:a6:93:ca:a3:cb:a4:32:eb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439 Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301fdfc72468bcd0c4d40a3fb2a5ef302cafb07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:04:34:08:f9:a4:a4:20:37:69:fb:2c:80: 0f:0d:a1:9d:9f:e3:16:36:32:39:2e:5e:23:2b:7e: ed:31:86:f0:d7:ce:fb:fc:d3:cc:b6:d5:6f:95:43: 81:7c:6d:c2:71:dc:fd:86:4c:c3:59:6b:bf:10:66: ad:f1:a7:31:0d:ac:ae:76:e4:eb:e5:eb:6a:81:98: 73:9a:75:4f:9b:84:ca:e5:52:c2:a1:1a:97:65:72: ae:b1:f7:35:47:05:51:87:cd:32:e2:f4:62:c7:ff: 53:de:19:51:aa:cd:5b:ff:05:ac:1e:ad:3a:19:d8: ae:05:17:4d:c9:b1:03:33:4a:e7:9e:d7:52:2d:97: ea:13:17:a7:60:0b:87:1a:8a:d3:6f:f4:39:8e:45: e3:19:5b:25:9e:40:37:08:9d:58:3d:69:dd:87:19: fe:c3:88:fb:db:d1:3e:6f:6f:eb:63:4d:ea:5b:73: aa:06:75:50:05:ce:15:62:c9:bd:00:6a:93:bf:c8: b3:2b:6d:b7:d4:c1:f5:43:e6:a1:1b:60:b4:e5:a7: 97:49:a5:79:6b:39:ff:14:23:2a:d0:04:e8:20:71: bc:cc:43:0f:f0:34:d7:a3:45:a5:11:69:88:81:3d: e4:a0:a9:0e:63:5e:fc:e8:9f:57:f4:fd:f4:a3:af: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:DF:C7:24:68:BC:D0:C4:D4:0A:3F:B2:A5:EF:30:2C:AF:B0:7B X509v3 Authority Key Identifier: keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.119.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:49:e3:1b:90:c3:14:d4:c3:8b:8f:89:1f:da:57:fc:e4:12: 9f:6b:f2:47:da:77:d5:72:58:52:5d:1f:76:7b:8a:03:8a:e5: 50:9e:54:72:bf:d4:12:e4:4e:e9:a6:f1:44:ad:0c:1a:12:86: a5:80:80:18:9d:33:bc:aa:0c:a7:43:8e:9a:5f:de:84:3b:20: 00:10:0b:05:11:13:c3:97:d9:d8:74:83:35:a4:b2:c0:0c:b4: de:0d:89:86:57:4b:3a:c3:9c:55:88:91:9e:58:2f:47:97:97: 86:b7:0c:92:9e:c0:cb:68:36:a0:72:bd:6a:0e:6b:65:b0:ae: 45:98:f0:52:3c:c8:11:eb:ad:ef:14:6e:4a:79:1e:79:ae:ae: 65:6a:8a:b2:06:5a:50:d8:84:8e:f9:57:e5:9c:fb:f0:8e:61: f9:e6:bd:42:b1:4e:85:ed:46:d8:08:91:35:11:d0:7e:2c:54: 13:12:b0:68:76:83:5f:b0:ef:a2:36:1e:f3:67:c5:e0:86:3e: 2b:cb:d2:66:ba:d1:53:36:64:66:b0:83:18:16:30:fe:e7:65: 5b:44:bf:33:68:bf:10:36:d3:bd:a5:78:a3:1d:a1:b2:ac:96: ee:93:d7:5d:2f:63:3c:0d:86:27:67:8f:48:39:64:5a:d4:00: f7:ec:ca:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FGLzGZappPKo8ukMutWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NTdhMTVhYTk4OTNmMWM5MTViNDQ5N2ViZjkyYThhMzNk NWU0MzkwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFmZGZjNzI0NjhiY2QwYzRkNDBhM2ZiMmE1ZWYzMDJjYWZiMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2kENAj5pKQgN2n7LIAPDaGdn+MW NjI5Ll4jK37tMYbw1877/NPMttVvlUOBfG3Ccdz9hkzDWWu/EGat8acxDayuduTr 5etqgZhzmnVPm4TK5VLCoRqXZXKusfc1RwVRh80y4vRix/9T3hlRqs1b/wWsHq06 GdiuBRdNybEDM0rnntdSLZfqExenYAuHGorTb/Q5jkXjGVslnkA3CJ1YPWndhxn+ w4j729E+b2/rY03qW3OqBnVQBc4VYsm9AGqTv8izK2231MH1Q+ahG2C05aeXSaV5 azn/FCMq0AToIHG8zEMP8DTXo0WlEWmIgT3koKkOY1786J9X9P30o6+ECwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDAf38ckaLzQxNQKP7Kl7zAsr7B7MB8GA1UdIwQY MBaAFJlXoVqpiT8ckVtEl+v5Kooz1eQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGIt YmNkZGM0NGIwM2FiLzEvTUJfZnh5Um92TkRFMUFvX3NxWHZNQ3l2c0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGItYmNkZGM0NGIwM2Fi LzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z3MA0G CSqGSIb3DQEBCwUAA4IBAQBrSeMbkMMU1MOLj4kf2lf85BKfa/JH2nfVclhSXR92 e4oDiuVQnlRyv9QS5E7ppvFErQwaEoalgIAYnTO8qgynQ46aX96EOyAAEAsFERPD l9nYdIM1pLLADLTeDYmGV0s6w5xViJGeWC9Hl5eGtwySnsDLaDagcr1qDmtlsK5F mPBSPMgR663vFG5KeR55rq5laoqyBlpQ2ISO+VflnPvwjmH55r1CsU6F7UbYCJE1 EdB+LFQTErBodoNfsO+iNh7zZ8Xghj4ry9JmutFTNmRmsIMYFjD+52VbRL8zaL8Q NtO9pXijHaGyrJbuk9ddL2M8DYYnZ49IOWRa1AD37Mrx -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:35 2026 by rpki-client