This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/MUqliOvEVeKb9JtEVUP0RYf4gIk.roa File: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (raw, json) Hash identifier: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM= Subject key identifier: 31:4A:A5:88:EB:C4:55:E2:9B:F4:9B:44:55:43:F4:45:87:F8:80:89 Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Certificate serial: 019B7E3778B80275B193623A7B72018839C9 Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/MUqliOvEVeKb9JtEVUP0RYf4gIk.roa Signing time: Fri 02 Jan 2026 10:18:43 +0000 ROA not before: Fri 02 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41942 IP address blocks: 46.31.0.0/21 maxlen: 21 46.31.4.0/24 maxlen: 24 46.31.5.0/24 maxlen: 24 46.31.6.0/24 maxlen: 24 46.31.7.0/24 maxlen: 24 91.102.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:78:b8:02:75:b1:93:62:3a:7b:72:01:88:39:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Validity Not Before: Jan 2 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=314aa588ebc455e29bf49b445543f44587f88089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:d2:66:8b:fe:c5:d9:9b:cc:bb:5c:55:03: 29:41:42:6b:5f:60:69:aa:4f:c6:f7:7a:39:ce:e1: 80:2c:1b:71:f3:2b:1e:5b:0d:f3:9d:14:3c:03:e6: ff:97:1b:91:70:7e:5f:6c:67:4d:3e:56:21:f7:5c: 12:a9:1a:16:98:6f:42:5e:10:c4:63:ce:c1:3d:9d: 1e:16:b9:49:85:ce:5e:57:39:64:5b:33:9d:fc:22: 89:e7:b2:ca:d0:67:8e:f3:2a:63:02:24:7e:7d:3f: d0:ce:f1:90:74:2e:df:8c:ae:c9:9c:a1:b0:d4:d0: 86:a7:41:ca:62:61:c7:3f:d5:4e:9f:27:03:e7:ca: 6a:2b:10:46:91:f8:93:d5:e8:c7:a7:b6:0a:5d:80: 24:b8:c7:7b:05:61:de:86:ea:10:47:b0:41:90:0e: 50:d8:71:21:db:f5:72:5b:f1:bc:c3:5e:09:07:fb: 45:90:3d:49:22:c8:0d:2b:88:f0:07:ea:f7:f1:69: f7:3a:4f:20:36:38:28:88:13:00:a0:59:63:69:db: 9d:47:38:95:bb:65:90:30:e1:ed:0c:64:bd:a7:b8: ad:cf:25:66:e1:cc:cb:3d:7f:26:b4:bc:57:08:68: 03:d2:a0:a4:08:6d:5f:e4:48:c2:8a:ee:3c:88:4c: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:A5:88:EB:C4:55:E2:9B:F4:9B:44:55:43:F4:45:87:F8:80:89 X509v3 Authority Key Identifier: keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/MUqliOvEVeKb9JtEVUP0RYf4gIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.0.0/21 91.102.200.0/21 Signature Algorithm: sha256WithRSAEncryption ba:b2:eb:6d:56:03:5d:81:73:33:b9:16:83:cb:10:5e:ef:4e: 32:e8:a3:1c:15:c6:e9:b4:9c:33:0a:14:bf:42:27:ac:51:7a: f0:f5:9a:6d:9f:be:c5:0f:dc:80:b8:65:51:5a:37:f0:bd:5c: 81:46:0a:e2:34:6d:bb:a4:c0:80:db:09:50:40:ff:52:7b:db: c3:81:3c:8e:c2:e3:cd:40:92:cc:bd:99:35:d8:df:f5:e3:69: b3:13:84:8f:65:b8:d1:6c:75:1f:c1:d6:07:66:19:26:f0:88: 10:04:c1:67:c9:6a:82:da:09:34:80:c7:7c:5f:e5:a1:29:e2: 8f:23:42:d0:e7:ac:0f:cc:bf:4b:4a:f1:eb:e8:86:3b:b4:50: 2b:d0:19:1b:7a:5e:1b:d8:4e:88:18:86:1d:e1:90:4b:ef:88: 8d:8a:ff:4d:e7:2e:1c:5e:c6:9e:52:f3:ac:91:17:e7:19:9d: 12:4a:35:cc:5e:86:8c:0b:12:0a:20:a0:f6:34:4e:9b:9f:78: c3:82:9a:d0:4b:00:e6:4b:c3:ee:2e:80:0b:46:06:8c:bb:9d: 6f:96:1a:80:fd:6a:59:4b:0a:33:1e:a5:99:45:83:73:a8:86: 53:50:e9:58:60:60:0a:e8:89:04:83:4e:67:29:f2:d7:62:07: 71:08:3e:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N3i4AnWxk2I6e3IBiDnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz ZDcxODMwHhcNMjYwMTAyMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTRhYTU4OGViYzQ1NWUyOWJmNDliNDQ1NTQzZjQ0NTg3Zjg4MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ3SZov+xdmbzLtcVQMpQUJrX2Bp qk/G93o5zuGALBtx8yseWw3znRQ8A+b/lxuRcH5fbGdNPlYh91wSqRoWmG9CXhDE Y87BPZ0eFrlJhc5eVzlkWzOd/CKJ57LK0GeO8ypjAiR+fT/QzvGQdC7fjK7JnKGw 1NCGp0HKYmHHP9VOnycD58pqKxBGkfiT1ejHp7YKXYAkuMd7BWHehuoQR7BBkA5Q 2HEh2/VyW/G8w14JB/tFkD1JIsgNK4jwB+r38Wn3Ok8gNjgoiBMAoFljadudRziV u2WQMOHtDGS9p7itzyVm4czLPX8mtLxXCGgD0qCkCG1f5EjCiu48iEw7fQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDFKpYjrxFXim/SbRFVD9EWH+ICJMB8GA1UdIwQY MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct OTUzYzY4NTA2ZDVjLzEvTVVxbGlPdkVWZUtiOUp0RVZVUDBSWWY0Z0lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh8AAwQD W2bIMA0GCSqGSIb3DQEBCwUAA4IBAQC6suttVgNdgXMzuRaDyxBe704y6KMcFcbp tJwzChS/QiesUXrw9Zptn77FD9yAuGVRWjfwvVyBRgriNG27pMCA2wlQQP9Se9vD gTyOwuPNQJLMvZk12N/142mzE4SPZbjRbHUfwdYHZhkm8IgQBMFnyWqC2gk0gMd8 X+WhKeKPI0LQ56wPzL9LSvHr6IY7tFAr0Bkbel4b2E6IGIYd4ZBL74iNiv9N5y4c XsaeUvOskRfnGZ0SSjXMXoaMCxIKIKD2NE6bn3jDgprQSwDmS8PuLoALRgaMu51v lhqA/WpZSwozHqWZRYNzqIZTUOlYYGAK6IkEg05nKfLXYgdxCD56 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:13 2026 by rpki-client