This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/MubSAvvOIfUrTY4iMx5XpqvxFEw.roa File: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (raw, json) Hash identifier: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw= Subject key identifier: 32:E6:D2:02:FB:CE:21:F5:2B:4D:8E:22:33:1E:57:A6:AB:F1:14:4C Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Certificate serial: 019B7EA72B16E2BB9E37D032F979F98B02F5 Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/MubSAvvOIfUrTY4iMx5XpqvxFEw.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 91.208.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2b:16:e2:bb:9e:37:d0:32:f9:79:f9:8b:02:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32e6d202fbce21f52b4d8e22331e57a6abf1144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:e9:4f:31:7a:b4:7a:0a:18:86:34:75:1f: 1f:ed:29:3f:33:dd:db:ea:aa:fb:84:90:71:08:cb: 4c:32:2a:9d:08:f8:49:5a:2d:02:19:47:21:24:de: 8e:5f:cb:7f:83:0a:d5:b4:25:82:ad:ad:5e:97:59: ac:14:b7:0c:8e:6a:f4:9d:7c:ed:88:2c:7e:21:e4: a3:0f:5f:2c:19:98:b5:88:5c:d2:79:7b:c0:0e:28: 75:5b:ef:e7:05:12:f6:52:76:19:15:57:a4:3c:64: b1:5a:53:85:e4:53:a9:9d:a5:67:5e:25:03:d6:50: f3:60:8d:4c:5d:91:e1:27:7d:5e:81:8c:35:86:b3: 6b:2f:bc:01:22:1c:b7:74:0a:ce:62:6b:0f:cd:01: b8:a4:6b:42:5c:ed:55:a0:c3:bd:d1:b2:49:94:48: bc:9b:14:6e:c2:d5:f1:76:35:13:90:35:14:e3:dd: 41:0f:e3:bc:39:52:f5:f4:9c:4d:f4:cb:81:ee:c7: b7:bc:f7:87:2f:55:16:11:39:22:46:8a:da:2f:4a: db:69:6a:be:28:d4:cf:cc:80:52:38:b3:48:21:4c: 6a:c1:82:df:95:d4:e9:ba:0d:b2:ee:6d:e3:9a:92: 6c:1f:61:08:6d:a5:09:97:91:ef:32:85:57:c9:64: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:D2:02:FB:CE:21:F5:2B:4D:8E:22:33:1E:57:A6:AB:F1:14:4C X509v3 Authority Key Identifier: keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/MubSAvvOIfUrTY4iMx5XpqvxFEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.5.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:f5:2e:8a:32:50:85:e6:08:52:26:09:c4:c6:f4:76:0f:a7: fb:a4:19:f8:1b:2b:c3:40:4e:9d:a1:a7:76:30:42:55:99:f7: 4c:34:78:6c:c0:e9:c9:79:4d:36:b2:96:bf:19:07:bf:f4:7f: ea:37:84:44:fb:e9:44:3c:63:76:1d:f4:5c:15:9a:3c:fb:89: 50:55:2f:0e:da:46:de:d2:db:0d:a9:8e:d6:3e:d1:d6:0e:c7: de:da:74:55:82:95:d2:6f:67:7b:c7:20:4d:1d:01:f3:e1:f6: 95:dd:f9:2c:0b:47:df:71:f4:b9:bc:66:27:ac:13:31:80:a9: a8:5a:8c:74:a7:d4:98:83:63:75:24:aa:5a:6a:ba:ee:66:7c: e7:1f:3e:7f:6c:81:7c:45:68:94:6f:f6:c8:11:1c:64:84:7c: 0c:a3:a3:0c:c5:6f:35:99:ec:81:d6:00:19:f5:9a:57:65:f3: af:5b:d5:85:2b:f7:e5:b9:75:b4:69:a2:a9:dd:f5:4a:eb:fd: 5b:b6:e0:43:4d:b4:7b:b4:bb:80:a8:f9:e2:35:cf:21:18:22: d4:31:e7:c3:e3:34:23:84:79:6c:c7:49:fe:79:47:f2:ab:3b: 1c:c4:dc:3d:89:0f:f8:9f:c7:a1:b3:5e:7e:a1:e2:f7:d2:f0: cd:a0:d5:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pysW4rueN9Ay+Xn5iwL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh MDRjYmYwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmU2ZDIwMmZiY2UyMWY1MmI0ZDhlMjIzMzFlNTdhNmFiZjExNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkTpTzF6tHoKGIY0dR8f7Sk/M93b 6qr7hJBxCMtMMiqdCPhJWi0CGUchJN6OX8t/gwrVtCWCra1el1msFLcMjmr0nXzt iCx+IeSjD18sGZi1iFzSeXvADih1W+/nBRL2UnYZFVekPGSxWlOF5FOpnaVnXiUD 1lDzYI1MXZHhJ31egYw1hrNrL7wBIhy3dArOYmsPzQG4pGtCXO1VoMO90bJJlEi8 mxRuwtXxdjUTkDUU491BD+O8OVL19JxN9MuB7se3vPeHL1UWETkiRoraL0rbaWq+ KNTPzIBSOLNIIUxqwYLfldTpug2y7m3jmpJsH2EIbaUJl5HvMoVXyWSSvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLm0gL7ziH1K02OIjMeV6ar8RRMMB8GA1UdIwQY MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt NWM3ODYzOTI2NGFhLzEvTXViU0F2dk9JZlVyVFk0aU14NVhwcXZ4RkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AFMA0G CSqGSIb3DQEBCwUAA4IBAQBu9S6KMlCF5ghSJgnExvR2D6f7pBn4GyvDQE6doad2 MEJVmfdMNHhswOnJeU02spa/GQe/9H/qN4RE++lEPGN2HfRcFZo8+4lQVS8O2kbe 0tsNqY7WPtHWDsfe2nRVgpXSb2d7xyBNHQHz4faV3fksC0ffcfS5vGYnrBMxgKmo Wox0p9SYg2N1JKpaarruZnznHz5/bIF8RWiUb/bIERxkhHwMo6MMxW81meyB1gAZ 9ZpXZfOvW9WFK/fluXW0aaKp3fVK6/1btuBDTbR7tLuAqPniNc8hGCLUMefD4zQj hHlsx0n+eUfyqzscxNw9iQ/4n8ehs15+oeL30vDNoNXo -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:51 2026 by rpki-client