This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/MUqDsVkna7G4MyO1lSn72i-Jbow.roa File: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (raw, json) Hash identifier: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc= Subject key identifier: 31:4A:83:B1:59:27:6B:B1:B8:33:23:B5:95:29:FB:DA:2F:89:6E:8C Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019B7CEE3D9267350C7C26BC9C9CDDF576A4 Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/MUqDsVkna7G4MyO1lSn72i-Jbow.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51945 IP address blocks: 185.190.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:92:67:35:0c:7c:26:bc:9c:9c:dd:f5:76:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=314a83b159276bb1b83323b59529fbda2f896e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:45:af:c8:96:e1:f2:46:80:ae:8c:80:70: 97:46:1c:b1:24:3a:74:6d:ab:4a:70:ca:5c:8c:75: b1:64:7e:b1:3c:20:d8:22:d9:50:31:3b:a5:c6:76: 47:73:8d:00:e4:02:b0:9c:55:00:a2:b8:67:66:fc: c4:5c:fa:5a:20:e0:f8:65:ff:85:68:52:09:c8:e4: 6c:7a:6a:b9:6e:86:12:58:28:75:1b:30:09:5a:e4: 02:c2:d0:c8:fc:25:a8:54:1d:48:4c:55:95:95:80: 25:e5:bc:98:ba:a4:8b:99:bd:89:b4:a7:b5:04:23: 7a:5d:c0:2a:18:e3:d4:34:2e:54:b4:df:6d:0e:5e: 8e:00:61:fc:96:b6:ec:ac:ea:2a:7f:f3:d9:5f:3f: 32:5f:cb:01:7d:de:ff:9d:00:4e:5e:d4:37:e4:32: 46:e3:3f:39:27:ea:40:15:d2:ba:45:54:dd:77:20: 55:8d:51:bf:69:d5:97:30:13:ae:5d:7b:f1:15:3a: f5:7f:b1:82:b4:c4:4b:07:c6:c7:0a:a0:eb:d7:6f: 23:26:be:f2:47:0c:f1:fb:90:2b:23:88:61:68:c2: 0c:bf:ac:d5:0a:97:cf:db:ca:15:95:2e:45:80:b9: 51:5d:8c:8f:d8:47:1c:13:1b:16:10:96:69:ba:69: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:83:B1:59:27:6B:B1:B8:33:23:B5:95:29:FB:DA:2F:89:6E:8C X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/MUqDsVkna7G4MyO1lSn72i-Jbow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.37.0/24 Signature Algorithm: sha256WithRSAEncryption 63:48:1c:a0:4d:3a:00:24:a9:06:ed:eb:0e:d2:1a:04:a9:05: 4d:32:ca:63:b5:29:92:62:58:14:3b:b5:8c:c8:f4:a3:33:7c: 2f:77:48:96:33:d7:7e:d0:f4:95:d8:8f:34:20:b8:68:7d:b5: 86:5b:5f:46:2c:cc:5c:21:30:0b:f0:e1:2c:68:4d:07:6c:f4: a7:b9:c7:38:0f:6f:13:63:a4:da:c7:d3:80:84:d3:b7:1c:12: 95:2d:e8:68:d6:72:31:19:ce:6a:fb:7c:32:97:49:91:e0:ff: 91:11:ea:03:1f:15:85:8c:40:be:a5:82:28:3c:de:08:f1:e8: f8:ec:dc:0a:a3:e5:fb:73:cb:7b:5e:19:10:e5:00:4c:e4:9d: 0b:f1:6e:3f:88:f9:c4:9e:44:50:17:7f:00:82:10:03:47:d0: e9:69:7e:a7:95:86:de:17:bf:57:bf:26:78:89:00:82:34:0c: 18:6d:01:aa:a0:d0:4d:27:68:b2:cc:a5:ac:cf:3c:34:06:ad: a3:ab:8d:ea:8e:e1:53:a3:cc:63:83:70:90:20:32:4a:35:d0: cf:64:35:0c:c0:03:96:e3:fc:57:3e:01:cc:11:83:d7:b1:21: b6:20:fd:95:44:a8:94:34:64:e7:71:b1:ac:57:c2:59:63:25: ad:bc:4b:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j2SZzUMfCa8nJzd9XakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTRhODNiMTU5Mjc2YmIxYjgzMzIzYjU5NTI5ZmJkYTJmODk2ZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgpFr8iW4fJGgK6MgHCXRhyxJDp0 batKcMpcjHWxZH6xPCDYItlQMTulxnZHc40A5AKwnFUAorhnZvzEXPpaIOD4Zf+F aFIJyORsemq5boYSWCh1GzAJWuQCwtDI/CWoVB1ITFWVlYAl5byYuqSLmb2JtKe1 BCN6XcAqGOPUNC5UtN9tDl6OAGH8lrbsrOoqf/PZXz8yX8sBfd7/nQBOXtQ35DJG 4z85J+pAFdK6RVTddyBVjVG/adWXMBOuXXvxFTr1f7GCtMRLB8bHCqDr128jJr7y Rwzx+5ArI4hhaMIMv6zVCpfP28oVlS5FgLlRXYyP2EccExsWEJZpumm/PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFKg7FZJ2uxuDMjtZUp+9oviW6MMB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvTVVxRHNWa25hN0c0TXlPMWxTbjcyaS1KYm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4lMA0G CSqGSIb3DQEBCwUAA4IBAQBjSBygTToAJKkG7esO0hoEqQVNMspjtSmSYlgUO7WM yPSjM3wvd0iWM9d+0PSV2I80ILhofbWGW19GLMxcITAL8OEsaE0HbPSnucc4D28T Y6Tax9OAhNO3HBKVLeho1nIxGc5q+3wyl0mR4P+REeoDHxWFjEC+pYIoPN4I8ej4 7NwKo+X7c8t7XhkQ5QBM5J0L8W4/iPnEnkRQF38AghADR9DpaX6nlYbeF79XvyZ4 iQCCNAwYbQGqoNBNJ2iyzKWszzw0Bq2jq43qjuFTo8xjg3CQIDJKNdDPZDUMwAOW 4/xXPgHMEYPXsSG2IP2VRKiUNGTncbGsV8JZYyWtvEvm -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:29 2026 by rpki-client