This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/MfK3J8d6JDG2EdxGQjDs_QmItjo.roa File: MfK3J8d6JDG2EdxGQjDs_QmItjo.roa (raw, json) Hash identifier: pDVrLIM1RHcabDMFgVfQl0IuaUP7qq92scXq2Oj0FzI= Subject key identifier: 31:F2:B7:27:C7:7A:24:31:B6:11:DC:46:42:30:EC:FD:09:88:B6:3A Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775900A500C0E0912DE8F89756544A5C Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/MfK3J8d6JDG2EdxGQjDs_QmItjo.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200670 IP address blocks: 85.31.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:a5:00:c0:e0:91:2d:e8:f8:97:56:54:4a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31f2b727c77a2431b611dc464230ecfd0988b63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:90:d5:fd:40:0f:76:b5:da:60:ce:74:47: d3:e7:1a:bd:cc:53:32:77:88:21:35:16:66:04:4a: 67:c8:9d:7a:78:46:0b:8a:f1:20:59:e5:e6:31:21: 40:bc:8c:73:2a:c4:a3:39:56:3f:fc:2d:b6:06:df: 9e:61:3f:c2:e6:bb:a1:b2:47:31:e6:08:3f:3b:14: f6:e2:6a:7b:79:17:fe:1a:08:be:ea:3c:52:76:b0: 17:c9:63:ea:d2:2e:7f:c4:62:bf:29:a2:09:99:fe: 97:b8:51:f9:cf:1a:7d:84:0a:cf:b8:7f:a4:e3:95: ca:20:dd:65:96:95:58:4e:f3:4f:1b:ee:3c:cd:55: 0e:49:21:d4:2f:5d:c6:c9:cb:22:20:76:a5:c4:3e: 6b:46:5c:29:47:26:c0:21:25:74:cd:e5:f0:49:39: 51:7f:7e:b7:69:06:15:48:fb:e7:11:b7:e3:06:26: b3:d1:65:8c:c4:1f:93:e1:70:5c:88:8b:4e:31:cd: 06:1a:a9:43:02:41:60:e9:c7:59:51:a4:33:91:79: e7:e4:05:30:09:65:31:47:0e:a7:bd:ad:92:96:4a: 15:d5:eb:df:24:18:c7:97:ab:bf:04:9d:ab:25:56: 76:33:bd:e6:97:73:ff:67:8b:13:88:d4:bc:a5:54: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F2:B7:27:C7:7A:24:31:B6:11:DC:46:42:30:EC:FD:09:88:B6:3A X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/MfK3J8d6JDG2EdxGQjDs_QmItjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.243.0/24 Signature Algorithm: sha256WithRSAEncryption 27:97:d0:9c:13:56:5a:c7:43:8b:26:36:c3:59:b4:e8:18:3a: b3:66:56:fe:4f:5a:3d:99:b5:f3:9f:b0:4e:c1:b5:01:a4:74: fe:df:11:bb:e7:c7:ac:a4:3f:0a:79:f1:a2:5d:e1:3f:cf:51: 12:d7:f1:1c:1e:98:52:60:a8:a9:4f:8f:18:d7:51:25:20:c5: 46:a9:7c:6f:9a:5d:22:f7:8e:31:d3:fb:ce:4e:cf:07:1a:99: 5c:43:c2:0d:2f:8a:f5:cc:30:13:98:a7:2e:31:b9:8b:ae:b5: c1:63:c3:b4:8a:c1:46:96:36:8f:a6:f1:38:c5:24:0d:0f:e0: b9:1d:da:e6:cc:3b:57:3b:b7:e2:e0:af:c7:2f:5c:36:b1:14: 71:42:be:3b:37:3c:6c:95:f7:0a:20:8f:eb:6d:c2:bb:db:8f: 63:4d:e7:39:17:7a:23:63:bb:e7:c3:3f:3e:c6:4d:8b:a8:77: af:4f:b9:37:3b:1a:e6:04:d9:ba:a1:7f:f4:b4:46:e9:a0:05: 20:1e:be:96:f6:b8:e1:31:b2:c4:e3:58:31:27:54:e5:7e:a5: b1:00:64:03:a6:e8:9d:36:e8:5e:07:13:b6:06:f8:05:5b:4f: 31:d0:bd:30:69:5b:c4:e9:5f:93:f3:40:f0:9f:e2:1b:0a:94: e2:e3:da:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQClAMDgkS3o+JdWVEpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWYyYjcyN2M3N2EyNDMxYjYxMWRjNDY0MjMwZWNmZDA5ODhiNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qOQ1f1AD3a12mDOdEfT5xq9zFMy d4ghNRZmBEpnyJ16eEYLivEgWeXmMSFAvIxzKsSjOVY//C22Bt+eYT/C5ruhskcx 5gg/OxT24mp7eRf+Ggi+6jxSdrAXyWPq0i5/xGK/KaIJmf6XuFH5zxp9hArPuH+k 45XKIN1llpVYTvNPG+48zVUOSSHUL13GycsiIHalxD5rRlwpRybAISV0zeXwSTlR f363aQYVSPvnEbfjBiaz0WWMxB+T4XBciItOMc0GGqlDAkFg6cdZUaQzkXnn5AUw CWUxRw6nva2SlkoV1evfJBjHl6u/BJ2rJVZ2M73ml3P/Z4sTiNS8pVTJDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHytyfHeiQxthHcRkIw7P0JiLY6MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvTWZLM0o4ZDZKREcyRWR4R1FqRHNfUW1JdGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/zMA0G CSqGSIb3DQEBCwUAA4IBAQAnl9CcE1Zax0OLJjbDWbToGDqzZlb+T1o9mbXzn7BO wbUBpHT+3xG758espD8KefGiXeE/z1ES1/EcHphSYKipT48Y11ElIMVGqXxvml0i 944x0/vOTs8HGplcQ8INL4r1zDATmKcuMbmLrrXBY8O0isFGljaPpvE4xSQND+C5 HdrmzDtXO7fi4K/HL1w2sRRxQr47NzxslfcKII/rbcK7249jTec5F3ojY7vnwz8+ xk2LqHevT7k3OxrmBNm6oX/0tEbpoAUgHr6W9rjhMbLE41gxJ1TlfqWxAGQDpuid NuheBxO2BvgFW08x0L0waVvE6V+T80Dwn+IbCpTi49p8 -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:08 2026 by rpki-client