This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/mdt2WXNNXfXIWBr0juHcaeQiifQ.roa File: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (raw, json) Hash identifier: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8= Subject key identifier: 99:DB:76:59:73:4D:5D:F5:C8:58:1A:F4:8E:E1:DC:69:E4:22:89:F4 Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Certificate serial: 019B7D5AFA62C91EDD85D9A252AF6CE8EBA8 Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/mdt2WXNNXfXIWBr0juHcaeQiifQ.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 193.177.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:62:c9:1e:dd:85:d9:a2:52:af:6c:e8:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99db7659734d5df5c8581af48ee1dc69e42289f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:20:75:b3:29:13:8d:6f:3f:5a:29:17:b7: ed:7b:91:b9:f4:fc:e5:05:78:eb:2b:21:cf:44:44: ee:94:73:8d:06:b3:18:47:ba:58:bc:a4:dd:b9:d0: 9e:b7:7d:6e:d3:27:ad:de:69:fa:61:7b:cc:bb:8f: f3:e0:34:be:65:df:b3:e0:2e:46:8a:5a:51:12:77: 48:ce:7a:91:c4:55:94:db:76:f9:3f:3b:49:01:73: 7c:1f:61:00:3b:1e:59:e6:90:2a:e4:9b:72:39:46: 2f:4f:69:68:27:07:49:37:e4:e8:03:1b:af:a4:2e: df:fc:af:ea:bb:12:05:d3:7c:00:4a:8e:13:1f:28: 89:8a:05:f9:04:88:73:25:5c:57:a7:d8:ec:a2:18: a8:e3:3e:13:b0:a9:f4:51:c9:84:5e:bb:12:e3:a2: f4:35:89:30:7f:21:23:f3:55:7b:82:ba:4c:39:66: d0:62:c5:eb:34:da:3a:97:f0:2e:ec:4d:c9:4d:46: 70:3c:99:e6:a8:c9:f5:f7:d8:2d:5c:08:3b:a4:a9: 8a:a0:5d:47:c3:40:8c:88:e3:3e:d2:ad:b0:77:47: b5:b7:44:6d:28:45:f3:cb:f5:6c:4e:9f:b1:07:dc: ce:de:5b:90:a4:77:4e:21:77:96:80:65:e2:39:78: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:76:59:73:4D:5D:F5:C8:58:1A:F4:8E:E1:DC:69:E4:22:89:F4 X509v3 Authority Key Identifier: keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/mdt2WXNNXfXIWBr0juHcaeQiifQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.0.0/24 Signature Algorithm: sha256WithRSAEncryption 00:74:37:5c:40:9e:40:ba:fa:f2:09:ae:c6:90:48:bf:ca:93: 69:35:fe:f0:5c:5f:83:47:93:3b:55:8d:18:68:2b:07:a3:a3: 8c:f1:eb:05:9f:39:5b:7b:15:3e:1a:ef:1a:83:82:66:c9:cb: d0:fb:f4:41:a5:68:7f:ea:6d:a4:10:b2:fe:39:fe:c7:29:f2: 1b:f1:85:15:7f:64:4e:55:01:0d:4d:81:45:8f:36:9d:9c:38: 30:9e:05:ec:ac:ba:91:48:ce:43:d1:4e:3e:d5:e8:cd:95:03: f8:d4:d9:23:f0:3a:5b:92:93:36:20:4a:e3:ef:fc:e5:4d:ab: 53:f8:a8:28:02:11:21:ce:6d:f8:1b:80:0f:e9:c4:e8:6e:f8: c4:4e:84:4a:fa:68:90:65:6f:09:1b:36:d3:08:5a:fd:dd:d7: 9b:39:1f:11:49:92:e1:01:80:f9:43:24:53:37:a3:42:2c:63: 6b:c6:2d:78:4e:f6:5c:6f:46:6f:49:50:b5:ce:1b:cb:5e:34: 7e:df:c9:80:3d:eb:2d:e0:9c:1c:21:35:37:b7:04:61:a4:82: 37:9f:85:c6:1d:60:d0:77:da:e8:31:41:63:eb:78:f1:e6:69: 3e:6d:2b:2c:c4:fe:e8:e8:1a:7e:e7:fc:ad:83:17:d6:98:87: 52:70:77:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WvpiyR7dhdmiUq9s6OuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz MDJjOWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRiNzY1OTczNGQ1ZGY1Yzg1ODFhZjQ4ZWUxZGM2OWU0MjI4OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47cgdbMpE41vP1opF7fte5G59Pzl BXjrKyHPRETulHONBrMYR7pYvKTdudCet31u0yet3mn6YXvMu4/z4DS+Zd+z4C5G ilpREndIznqRxFWU23b5PztJAXN8H2EAOx5Z5pAq5JtyOUYvT2loJwdJN+ToAxuv pC7f/K/quxIF03wASo4THyiJigX5BIhzJVxXp9jsohio4z4TsKn0UcmEXrsS46L0 NYkwfyEj81V7grpMOWbQYsXrNNo6l/Au7E3JTUZwPJnmqMn199gtXAg7pKmKoF1H w0CMiOM+0q2wd0e1t0RtKEXzy/VsTp+xB9zO3luQpHdOIXeWgGXiOXjgWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnbdllzTV31yFga9I7h3GnkIon0MB8GA1UdIwQY MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt MTUwMzU0YjAwZTU1LzEvbWR0MldYTk5YZlhJV0JyMGp1SGNhZVFpaWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1 LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbEAMA0G CSqGSIb3DQEBCwUAA4IBAQAAdDdcQJ5AuvryCa7GkEi/ypNpNf7wXF+DR5M7VY0Y aCsHo6OM8esFnzlbexU+Gu8ag4JmycvQ+/RBpWh/6m2kELL+Of7HKfIb8YUVf2RO VQENTYFFjzadnDgwngXsrLqRSM5D0U4+1ejNlQP41Nkj8DpbkpM2IErj7/zlTatT +KgoAhEhzm34G4AP6cTobvjEToRK+miQZW8JGzbTCFr93debOR8RSZLhAYD5QyRT N6NCLGNrxi14TvZcb0ZvSVC1zhvLXjR+38mAPest4JwcITU3twRhpII3n4XGHWDQ d9roMUFj63jx5mk+bSssxP7o6Bp+5/ytgxfWmIdScHcG -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:19 2026 by rpki-client