This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/MDRHnTjt9DlUVua8sWg9_JbxY2U.roa File: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (raw, json) Hash identifier: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA= Subject key identifier: 30:34:47:9D:38:ED:F4:39:54:56:E6:BC:B1:68:3D:FC:96:F1:63:65 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019B7D5B4B26C41552575C10B6A988BED3AE Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/MDRHnTjt9DlUVua8sWg9_JbxY2U.roa Signing time: Fri 02 Jan 2026 06:18:13 +0000 ROA not before: Fri 02 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 158.173.41.0/24 maxlen: 24 158.173.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:4b:26:c4:15:52:57:5c:10:b6:a9:88:be:d3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 2 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3034479d38edf4395456e6bcb1683dfc96f16365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:73:2c:24:c4:fe:de:9d:93:ce:eb:6e:79: cb:79:8d:98:a4:26:f8:22:b5:c7:b3:be:6c:f0:0c: fb:53:5f:e8:c0:c3:2a:c9:47:3e:04:61:58:d9:b0: 20:3b:f5:c9:ba:e6:2b:6c:72:14:51:0c:93:28:9e: 9e:d2:2e:bb:4a:f2:ce:0d:8a:c6:5a:21:21:fd:7f: 8e:a1:19:fb:4e:b7:fa:e8:b0:f2:8e:3a:2e:2d:4a: 1f:27:8f:9d:c3:3c:14:2d:98:24:3b:f3:40:ce:52: 8c:cb:5d:b1:51:7e:66:71:21:2e:40:26:dc:9f:36: 86:70:3f:1b:f0:e9:1c:c9:db:fd:df:69:2a:e5:d7: 95:b0:8c:96:af:19:f8:02:b3:6b:76:a2:05:91:75: 4d:33:84:ea:b9:41:9f:f4:88:c3:e8:16:ba:3d:16: 78:dd:bd:52:71:9a:0b:12:f9:3d:f5:d7:a9:d3:20: 57:44:85:76:d6:a5:8e:d3:4e:d5:ca:b5:57:2d:ec: 0a:a8:4f:ef:53:c4:65:61:7a:02:d8:65:58:4a:68: e2:ca:e3:24:a2:1a:ba:34:1c:41:04:00:39:c5:c3: 4c:3a:6c:08:10:f4:a5:75:d6:a2:8c:09:0b:ff:38: 19:b1:37:e1:62:74:50:e7:60:29:3f:d9:c4:fc:a2: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:34:47:9D:38:ED:F4:39:54:56:E6:BC:B1:68:3D:FC:96:F1:63:65 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/MDRHnTjt9DlUVua8sWg9_JbxY2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.41.0/24 158.173.46.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:fa:6d:d7:06:de:9a:e0:1f:09:2f:1d:ec:ff:3a:0a:7d:a3: 1d:4b:76:a0:4c:08:05:53:d8:0f:53:f0:d2:29:da:46:59:b7: c1:64:8b:d9:cb:c6:ec:bf:a8:72:08:89:f3:e1:47:7c:28:d1: 51:6d:06:7a:c3:30:d1:bb:e4:f8:4e:ad:dc:72:48:13:2b:1e: ea:59:c4:1a:20:09:f0:df:fd:3c:20:16:e8:82:82:5c:b6:93: 97:e2:47:a6:d6:a0:c9:a8:3c:6a:1e:f6:fb:33:21:15:31:eb: ba:41:ed:20:b7:4f:5a:9e:15:5d:dc:6d:39:fe:97:ee:a5:85: 40:32:2b:67:56:49:c0:ef:64:dc:2c:2f:9f:b0:a2:d5:f9:4a: 30:16:67:ac:26:67:d5:4b:e2:19:5e:1d:8d:1f:bb:94:d2:9d: 6f:17:16:36:eb:0b:e6:54:78:25:f0:07:89:ba:fb:1c:f6:3a: 95:c7:81:a3:78:2f:1f:37:4b:0a:6e:32:19:a3:e5:f8:c0:0a: a6:3f:40:2b:83:e9:67:55:a4:cb:51:4c:31:bf:03:7a:c6:64: ac:b0:d7:04:cf:26:d9:2c:cd:17:1a:a6:55:e4:15:da:3c:e7: a6:97:e5:a9:07:38:a3:94:5e:b4:a5:bb:68:ee:8c:c2:4a:2f: 0b:23:07:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W0smxBVSV1wQtqmIvtOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTAyMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDM0NDc5ZDM4ZWRmNDM5NTQ1NmU2YmNiMTY4M2RmYzk2ZjE2MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtpzLCTE/t6dk87rbnnLeY2YpCb4 IrXHs75s8Az7U1/owMMqyUc+BGFY2bAgO/XJuuYrbHIUUQyTKJ6e0i67SvLODYrG WiEh/X+OoRn7Trf66LDyjjouLUofJ4+dwzwULZgkO/NAzlKMy12xUX5mcSEuQCbc nzaGcD8b8Okcydv932kq5deVsIyWrxn4ArNrdqIFkXVNM4TquUGf9IjD6Ba6PRZ4 3b1ScZoLEvk99dep0yBXRIV21qWO007VyrVXLewKqE/vU8RlYXoC2GVYSmjiyuMk ohq6NBxBBAA5xcNMOmwIEPSlddaijAkL/zgZsTfhYnRQ52ApP9nE/KKg5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDA0R5047fQ5VFbmvLFoPfyW8WNlMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvTURSSG5UanQ5RGxVVnVhOHNXZzlfSmJ4WTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq0pAwQA nq0uMA0GCSqGSIb3DQEBCwUAA4IBAQA6+m3XBt6a4B8JLx3s/zoKfaMdS3agTAgF U9gPU/DSKdpGWbfBZIvZy8bsv6hyCInz4Ud8KNFRbQZ6wzDRu+T4Tq3cckgTKx7q WcQaIAnw3/08IBbogoJctpOX4kem1qDJqDxqHvb7MyEVMeu6Qe0gt09anhVd3G05 /pfupYVAMitnVknA72TcLC+fsKLV+UowFmesJmfVS+IZXh2NH7uU0p1vFxY26wvm VHgl8AeJuvsc9jqVx4GjeC8fN0sKbjIZo+X4wAqmP0Arg+lnVaTLUUwxvwN6xmSs sNcEzybZLM0XGqZV5BXaPOeml+WpBzijlF60pbto7ozCSi8LIweJ -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:30 2026 by rpki-client