This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/MUOyRWPN46PNKkdduP0g7nQfNok.roa File: MUOyRWPN46PNKkdduP0g7nQfNok.roa (raw, json) Hash identifier: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc= Subject key identifier: 31:43:B2:45:63:CD:E3:A3:CD:2A:47:5D:B8:FD:20:EE:74:1F:36:89 Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044 Certificate serial: 019B7C1248CC149E3274B4BBF6E1B94E2E3E Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/MUOyRWPN46PNKkdduP0g7nQfNok.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198058 IP address blocks: 91.199.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:48:cc:14:9e:32:74:b4:bb:f6:e1:b9:4e:2e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044 Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3143b24563cde3a3cd2a475db8fd20ee741f3689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:c6:48:64:9d:6e:35:8a:8e:f0:ab:49:43: 92:74:56:a9:db:5a:db:60:41:93:4f:23:3c:ff:82: a1:d5:43:8a:49:98:66:ac:ec:cf:b2:a5:bd:a9:d6: e4:77:4e:ce:6b:bd:21:dd:f0:33:b6:55:ee:1d:21: 31:95:87:b4:38:ee:cd:ea:d7:a2:87:39:2d:d0:da: ed:d7:5a:1b:46:7e:0b:36:f7:04:04:5d:f7:3a:02: 8a:bd:ba:0c:8c:e5:0f:e7:5f:af:95:9c:e9:67:b0: 08:78:0c:45:d3:3d:08:bc:68:c6:a8:2f:52:76:e9: 15:ca:44:ed:4e:8b:12:8e:a9:50:76:0f:36:b6:b2: a9:82:98:79:ce:45:37:ea:21:b2:30:e9:ca:bb:91: 19:ba:62:ca:ec:3d:d6:f6:79:60:dc:55:b5:b7:79: b8:1e:22:e5:83:19:ea:90:6a:4e:75:a1:b6:36:70: 9a:4a:7b:0c:26:3a:2d:36:23:89:dd:38:23:eb:f4: 35:ef:3a:72:92:a4:57:34:09:e4:0b:b3:da:64:3b: ef:58:19:63:4d:64:2e:67:44:f4:f9:db:45:b8:74: bd:2a:a1:61:a8:39:b5:c3:15:c1:91:5a:32:2a:1a: 07:6e:56:a2:57:8b:51:c5:82:8e:25:06:3f:51:2f: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:43:B2:45:63:CD:E3:A3:CD:2A:47:5D:B8:FD:20:EE:74:1F:36:89 X509v3 Authority Key Identifier: keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/MUOyRWPN46PNKkdduP0g7nQfNok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.219.0/24 Signature Algorithm: sha256WithRSAEncryption c2:e2:43:d7:06:da:fc:d8:35:55:f5:ec:f8:4b:b5:5c:b6:0e: 03:13:bd:66:f2:31:87:d4:8a:92:97:9c:5c:f4:c0:6c:a5:b4: 22:38:33:07:a2:06:de:d7:cd:01:57:f8:bd:ef:49:77:5d:b6: 4d:38:e0:e2:16:da:d0:e9:ea:df:86:55:6a:b4:75:bc:61:fe: 71:54:b8:2d:2f:d9:46:96:02:fb:7b:12:91:c2:34:e5:c8:d2: 8a:8e:a7:d2:e9:9a:84:97:dc:9e:b1:ad:e6:51:6b:7b:5a:c6: 32:f3:6a:6c:58:6d:d2:f9:ee:df:4e:2f:db:d6:43:78:78:85: 50:6d:a9:8e:f2:9d:2e:f7:7e:1d:a7:e7:fc:ed:5b:d6:85:14: b0:90:14:7e:38:5c:2b:8d:5a:78:57:7d:f0:e8:73:de:b3:f0: b1:7b:86:a9:67:83:82:a7:96:ea:e4:a2:cf:c6:34:ee:8c:3f: 7b:4c:4f:44:97:cd:e9:45:e9:ec:90:8d:4c:ad:3c:ce:ea:8a: 3e:9c:a9:2a:2c:ad:ff:41:11:15:4b:ea:36:90:74:67:53:a1: dc:3d:87:47:5a:b5:f6:d1:75:29:be:b1:9c:49:76:b9:bb:8d: c7:8a:94:c9:31:19:dc:d1:78:18:2d:9f:8b:6e:a8:5a:b6:e7: 34:15:c5:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkjMFJ4ydLS79uG5Ti4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh YTMwNDQwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTQzYjI0NTYzY2RlM2EzY2QyYTQ3NWRiOGZkMjBlZTc0MWYzNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugLGSGSdbjWKjvCrSUOSdFap21rb YEGTTyM8/4Kh1UOKSZhmrOzPsqW9qdbkd07Oa70h3fAztlXuHSExlYe0OO7N6tei hzkt0Nrt11obRn4LNvcEBF33OgKKvboMjOUP51+vlZzpZ7AIeAxF0z0IvGjGqC9S dukVykTtTosSjqlQdg82trKpgph5zkU36iGyMOnKu5EZumLK7D3W9nlg3FW1t3m4 HiLlgxnqkGpOdaG2NnCaSnsMJjotNiOJ3Tgj6/Q17zpykqRXNAnkC7PaZDvvWBlj TWQuZ0T0+dtFuHS9KqFhqDm1wxXBkVoyKhoHblaiV4tRxYKOJQY/US9GmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFDskVjzeOjzSpHXbj9IO50HzaJMB8GA1UdIwQY MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt YWZiZGJkYWQ1OGE1LzEvTVVPeVJXUE40NlBOS2tkZHVQMGc3blFmTm9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1 LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8fbMA0G CSqGSIb3DQEBCwUAA4IBAQDC4kPXBtr82DVV9ez4S7Vctg4DE71m8jGH1IqSl5xc 9MBspbQiODMHogbe180BV/i970l3XbZNOODiFtrQ6erfhlVqtHW8Yf5xVLgtL9lG lgL7exKRwjTlyNKKjqfS6ZqEl9yesa3mUWt7WsYy82psWG3S+e7fTi/b1kN4eIVQ bamO8p0u934dp+f87VvWhRSwkBR+OFwrjVp4V33w6HPes/Cxe4apZ4OCp5bq5KLP xjTujD97TE9El83pRenskI1MrTzO6oo+nKkqLK3/QREVS+o2kHRnU6HcPYdHWrX2 0XUpvrGcSXa5u43HipTJMRnc0XgYLZ+Lbqhatuc0FcWO -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:50 2026 by rpki-client