This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/MbiryQPvDhyE4fWE2RUNJytt6AY.roa File: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (raw, json) Hash identifier: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94= Subject key identifier: 31:B8:AB:C9:03:EF:0E:1C:84:E1:F5:84:D9:15:0D:27:2B:6D:E8:06 Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Certificate serial: 019B7B361E96020A96EA805544F1D03AD346 Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/MbiryQPvDhyE4fWE2RUNJytt6AY.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202463 IP address blocks: 87.243.71.0/24 maxlen: 24 87.243.77.0/24 maxlen: 24 87.243.79.0/24 maxlen: 24 185.49.88.0/22 maxlen: 22 185.73.236.0/24 maxlen: 24 185.73.237.0/24 maxlen: 24 185.73.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1e:96:02:0a:96:ea:80:55:44:f1:d0:3a:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31b8abc903ef0e1c84e1f584d9150d272b6de806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:a5:89:14:35:2b:55:4b:0b:c9:6d:90:f9: 8b:a6:d3:c5:94:59:2f:55:cf:dc:28:12:0e:1f:da: 79:21:37:bf:af:e7:3a:b8:b6:1f:96:c8:89:59:c5: c1:04:07:93:df:1b:d4:8f:bf:82:94:ce:e3:73:8f: 55:1f:1a:10:ce:01:cb:5f:c1:12:c7:62:28:7e:0f: 17:6d:ed:f2:ee:9c:92:1e:a4:fb:f5:26:5f:8b:d3: 15:42:cc:f4:bf:18:7b:8b:1b:44:ee:7f:5d:7a:68: 13:14:cf:b8:78:9e:b2:a6:f0:18:3e:a2:df:07:b6: f7:fd:b6:eb:f3:a2:0c:3c:56:ba:05:77:1c:1d:70: c1:e3:ae:20:97:53:42:10:4a:ea:c7:b8:28:45:59: 1d:5f:b2:3f:d2:e2:4b:22:d4:56:49:4f:05:fb:bd: f7:c0:be:f3:9d:e3:24:99:12:12:2a:94:2e:95:0a: 91:c5:3f:0c:f8:84:27:65:85:36:ca:dc:39:cb:29: 6e:f9:76:2a:6d:bc:f2:78:65:0b:2c:d6:94:d2:ac: 90:3d:e4:b0:bd:33:4f:c1:94:22:85:30:1e:0f:c3: 86:5e:25:da:a8:c4:3d:9d:11:e0:81:f7:05:db:85: eb:bd:f4:d7:ab:9f:49:38:b2:ee:55:0d:0a:41:62: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B8:AB:C9:03:EF:0E:1C:84:E1:F5:84:D9:15:0D:27:2B:6D:E8:06 X509v3 Authority Key Identifier: keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/MbiryQPvDhyE4fWE2RUNJytt6AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.243.71.0/24 87.243.77.0/24 87.243.79.0/24 185.49.88.0/22 185.73.236.0-185.73.238.255 Signature Algorithm: sha256WithRSAEncryption 06:b5:2e:d4:32:b7:17:b0:b8:ea:f5:ef:89:49:81:c4:b4:54: b6:3e:83:3c:b5:d1:ca:81:11:d2:47:c9:42:48:b2:4f:91:ef: 7f:45:6d:6d:f9:1d:20:4f:1f:56:41:e3:18:8b:a4:a6:0c:97: 3a:35:59:d3:8f:7a:51:18:d2:c2:4d:3b:8a:98:ee:27:37:cd: c8:fd:54:c8:89:e6:18:4b:68:45:9b:0e:25:84:ba:20:81:9e: e8:95:23:7d:54:99:ba:39:b8:3b:f0:c8:5b:86:b2:b4:4b:5b: 41:77:9a:49:89:13:82:78:d2:d3:b9:32:f3:f1:4f:b0:a5:69: 51:25:99:f9:48:8e:6a:39:1a:a9:f2:69:1d:e3:eb:ae:8c:d7: f9:a0:49:c5:c0:da:eb:9d:7d:d7:1e:3e:85:b5:03:b8:e6:a9: 8b:cc:6d:77:47:0b:ad:95:5f:1c:dd:73:30:48:4e:53:83:2d: 44:45:4f:bb:f9:01:19:51:00:cb:6f:ad:d0:12:58:ed:63:11: 92:34:90:00:3f:ab:d3:04:6b:65:4a:0d:52:2e:91:04:a3:55: fe:d9:fd:9b:15:f5:19:e7:cb:7c:b4:08:f8:35:aa:d4:11:bf: 95:c0:3c:c8:ef:92:d7:93:c4:a9:8b:41:29:dd:1d:39:18:14: f4:b7:54:d7 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7Nh6WAgqW6oBVRPHQOtNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2 OWM5NDkwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWI4YWJjOTAzZWYwZTFjODRlMWY1ODRkOTE1MGQyNzJiNmRlODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsyliRQ1K1VLC8ltkPmLptPFlFkv Vc/cKBIOH9p5ITe/r+c6uLYflsiJWcXBBAeT3xvUj7+ClM7jc49VHxoQzgHLX8ES x2Iofg8Xbe3y7pySHqT79SZfi9MVQsz0vxh7ixtE7n9demgTFM+4eJ6ypvAYPqLf B7b3/bbr86IMPFa6BXccHXDB464gl1NCEErqx7goRVkdX7I/0uJLItRWSU8F+733 wL7zneMkmRISKpQulQqRxT8M+IQnZYU2ytw5yylu+XYqbbzyeGULLNaU0qyQPeSw vTNPwZQihTAeD8OGXiXaqMQ9nRHggfcF24XrvfTXq59JOLLuVQ0KQWI3rQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDG4q8kD7w4chOH1hNkVDScrbegGMB8GA1UdIwQY MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct ZWQ0MmQzYTYyNWE0LzEvTWJpcnlRUHZEaHlFNGZXRTJSVU5KeXR0NkFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0 LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAV/NHAwQA V/NNAwQAV/NPAwQCuTFYMAwDBAK5SewDBAC5Se4wDQYJKoZIhvcNAQELBQADggEB AAa1LtQytxewuOr174lJgcS0VLY+gzy10cqBEdJHyUJIsk+R739FbW35HSBPH1ZB 4xiLpKYMlzo1WdOPelEY0sJNO4qY7ic3zcj9VMiJ5hhLaEWbDiWEuiCBnuiVI31U mbo5uDvwyFuGsrRLW0F3mkmJE4J40tO5MvPxT7ClaVElmflIjmo5GqnyaR3j666M 1/mgScXA2uudfdcePoW1A7jmqYvMbXdHC62VXxzdczBITlODLURFT7v5ARlRAMtv rdASWO1jEZI0kAA/q9MEa2VKDVIukQSjVf7Z/ZsV9Rnny3y0CPg1qtQRv5XAPMjv kteTxKmLQSndHTkYFPS3VNc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:25 2026 by rpki-client