This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MBje2Kaa62IBDG3vLdQ11jbu-BY.roa File: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (raw, json) Hash identifier: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU= Subject key identifier: 30:18:DE:D8:A6:9A:EB:62:01:0C:6D:EF:2D:D4:35:D6:36:EE:F8:16 Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3 Certificate serial: 019B7DCA5CE9E18B7D9230F788C83F3DEF21 Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MBje2Kaa62IBDG3vLdQ11jbu-BY.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3178 IP address blocks: 5.8.240.0/21 maxlen: 21 5.8.240.0/23 maxlen: 23 5.8.240.0/24 maxlen: 24 5.8.241.0/24 maxlen: 24 5.8.242.0/23 maxlen: 23 5.8.242.0/24 maxlen: 24 5.8.243.0/24 maxlen: 24 5.8.244.0/23 maxlen: 23 5.8.244.0/24 maxlen: 24 5.8.245.0/24 maxlen: 24 5.8.246.0/24 maxlen: 24 5.8.247.0/24 maxlen: 24 185.56.192.0/22 maxlen: 22 185.56.192.0/24 maxlen: 24 185.56.193.0/24 maxlen: 24 185.56.194.0/24 maxlen: 24 185.56.195.0/24 maxlen: 24 2a01:aa20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5c:e9:e1:8b:7d:92:30:f7:88:c8:3f:3d:ef:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3018ded8a69aeb62010c6def2dd435d636eef816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:dd:0f:1a:a4:70:a6:31:01:3b:d4:1b:8a: fd:57:ef:92:8d:38:6b:f4:be:c4:5e:48:63:c1:a4: b4:f5:79:a7:17:a0:43:df:2c:13:ab:79:a1:1d:32: 03:23:b8:9a:81:db:28:7c:03:e8:83:a1:d7:05:ba: e7:32:cf:16:f8:9b:d3:8f:1d:a7:48:84:35:43:55: 99:46:e3:90:e3:94:8b:9b:9e:b3:cc:05:d7:5a:a3: 86:8e:44:41:5b:1c:1c:ac:c5:02:5d:34:20:82:c6: 9c:db:1d:f4:4c:27:64:50:e1:e7:bb:8d:a5:55:8d: 05:70:a8:06:38:24:3a:19:05:a0:9f:a1:2e:16:3c: ed:9d:59:eb:73:37:01:c2:fc:58:09:cb:4d:ee:92: 60:d9:0a:49:f0:ab:a4:9e:b3:11:93:a1:a6:f0:60: 6d:51:e4:d4:96:70:b5:05:9d:10:d1:b3:02:a2:71: fd:3d:0e:de:c1:b1:2a:7c:65:d2:b9:95:99:91:a8: 5c:37:b1:8a:95:31:87:c0:5f:6a:c8:78:9f:56:f5: 0c:e6:d6:c0:08:c2:62:7c:93:50:f8:03:de:f4:17: 83:3b:da:6d:6b:a2:0f:ec:a6:19:c0:ad:04:b5:18: 07:ee:74:f4:3c:6a:30:1a:16:a7:a5:d6:4d:ba:5f: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:18:DE:D8:A6:9A:EB:62:01:0C:6D:EF:2D:D4:35:D6:36:EE:F8:16 X509v3 Authority Key Identifier: keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MBje2Kaa62IBDG3vLdQ11jbu-BY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.240.0/21 185.56.192.0/22 IPv6: 2a01:aa20::/32 Signature Algorithm: sha256WithRSAEncryption 91:c1:78:99:7a:99:a7:1f:f9:ba:60:a3:9a:8e:4d:43:95:53: cf:5b:d8:52:3e:93:cd:44:ee:7b:ff:01:a2:5c:15:12:78:8f: 8b:6d:a6:1b:a5:3b:1d:ab:0f:35:e7:b8:a3:8b:7c:ff:f4:7a: e7:c5:c8:c8:76:45:b4:0c:85:d6:18:14:28:6e:88:5c:20:47: 64:ca:8f:99:a3:2c:da:49:2e:20:83:2a:d1:83:fa:d6:71:1d: 27:4a:55:2d:18:89:36:1a:8d:10:eb:a6:4f:b8:f7:90:2c:65: 88:1b:52:d0:b6:47:fa:6a:d6:39:7b:3a:ce:6e:02:bf:a2:4e: ca:f1:1c:15:b4:81:a4:a9:ba:72:a3:d6:25:1e:58:79:0a:0e: 31:29:63:ab:67:93:39:b6:3e:bf:f5:c0:3f:86:13:75:68:38: c0:f2:40:f1:19:45:b5:25:23:f3:f2:ab:35:96:48:d3:9c:8a: fb:08:3d:bc:4f:a7:ca:ed:65:d1:9b:a1:9d:69:69:03:64:0a: 7b:7b:97:f5:05:d1:21:ce:98:ad:7e:39:3b:49:79:21:9a:f5: c8:0d:ec:40:d2:03:40:0c:9a:ea:8a:36:8c:65:75:85:9c:db: 5d:82:dd:42:c4:63:ed:77:c9:cd:62:56:7b:61:00:5d:50:ca: 11:ef:58:69 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ylzp4Yt9kjD3iMg/Pe8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw YTBhYzMwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDE4ZGVkOGE2OWFlYjYyMDEwYzZkZWYyZGQ0MzVkNjM2ZWVmODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGfdDxqkcKYxATvUG4r9V++SjThr 9L7EXkhjwaS09XmnF6BD3ywTq3mhHTIDI7iagdsofAPog6HXBbrnMs8W+JvTjx2n SIQ1Q1WZRuOQ45SLm56zzAXXWqOGjkRBWxwcrMUCXTQggsac2x30TCdkUOHnu42l VY0FcKgGOCQ6GQWgn6EuFjztnVnrczcBwvxYCctN7pJg2QpJ8KuknrMRk6Gm8GBt UeTUlnC1BZ0Q0bMConH9PQ7ewbEqfGXSuZWZkahcN7GKlTGHwF9qyHifVvUM5tbA CMJifJNQ+APe9BeDO9pta6IP7KYZwK0EtRgH7nT0PGowGhanpdZNul994wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDAY3timmutiAQxt7y3UNdY27vgWMB8GA1UdIwQY MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt YjRkOGMyYjdhMTAzLzEvTUJqZTJLYWE2MklCREczdkxkUTExamJ1LUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBQjwAwQC uTjAMA0EAgACMAcDBQAqAaogMA0GCSqGSIb3DQEBCwUAA4IBAQCRwXiZepmnH/m6 YKOajk1DlVPPW9hSPpPNRO57/wGiXBUSeI+LbaYbpTsdqw8157iji3z/9HrnxcjI dkW0DIXWGBQobohcIEdkyo+ZoyzaSS4ggyrRg/rWcR0nSlUtGIk2Go0Q66ZPuPeQ LGWIG1LQtkf6atY5ezrObgK/ok7K8RwVtIGkqbpyo9YlHlh5Cg4xKWOrZ5M5tj6/ 9cA/hhN1aDjA8kDxGUW1JSPz8qs1lkjTnIr7CD28T6fK7WXRm6GdaWkDZAp7e5f1 BdEhzpitfjk7SXkhmvXIDexA0gNADJrqijaMZXWFnNtdgt1CxGPtd8nNYlZ7YQBd UMoR71hp -----END CERTIFICATE-----Generated at Tue Jan 20 15:01:04 2026 by rpki-client