This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TO-MX31464XquIswMEV6cGHh_w8.roa File: TO-MX31464XquIswMEV6cGHh_w8.roa (raw, json) Hash identifier: /AfPYZmdQe4omZ1h/EodKDq6TmcJZ+mM+XQcj5cbhvQ= Subject key identifier: 4C:EF:8C:5F:7D:78:EB:85:EA:B8:8B:30:30:45:7A:70:61:E1:FF:0F Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C698081D1F97385D9D1351426ECE21 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TO-MX31464XquIswMEV6cGHh_w8.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31566 IP address blocks: 188.130.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:08:1d:1f:97:38:5d:9d:13:51:42:6e:ce:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cef8c5f7d78eb85eab88b3030457a7061e1ff0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:e0:cb:3d:31:77:6f:44:06:f0:b3:99:43: 05:a9:10:a6:9f:44:e6:10:b6:8e:3c:30:56:1c:ec: e7:6a:e9:80:c9:c1:3d:da:31:6a:b7:bb:36:69:c8: eb:60:af:a1:29:93:98:59:bb:fa:b4:4a:54:8a:2e: ed:80:4e:cc:4a:60:93:9f:9e:74:9a:64:e7:8c:eb: 0a:f4:fc:d1:6f:2c:26:02:cb:90:80:ea:f6:d0:62: 52:19:d0:89:18:91:b9:07:a4:ea:fc:b7:0b:1b:9c: f2:10:29:e3:8f:d3:55:41:5f:1e:81:e6:24:d9:ba: f4:4f:ea:7e:67:47:51:1d:a5:6f:f1:9b:18:42:70: 6b:ff:ef:3f:9c:56:04:16:d6:4e:3f:24:0f:31:9c: 55:b0:ec:95:6b:cc:65:91:79:37:64:09:29:9c:ae: 0b:23:05:93:3a:77:b5:1c:02:ae:39:03:f3:4c:20: 39:32:5e:1f:84:7e:5d:24:51:c5:79:f2:40:65:07: 3e:fd:ad:e7:bc:5c:d1:5a:41:75:10:4d:d9:40:dd: 68:fb:6e:ea:d1:2b:6b:e3:69:6e:fa:b7:58:74:9b: 92:32:54:55:43:c8:3d:bc:e6:41:74:cd:53:52:a5: 41:0b:02:e8:a9:a5:e3:79:38:a5:38:d2:0e:54:cd: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:8C:5F:7D:78:EB:85:EA:B8:8B:30:30:45:7A:70:61:E1:FF:0F X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TO-MX31464XquIswMEV6cGHh_w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.174.0/24 Signature Algorithm: sha256WithRSAEncryption 72:af:28:f9:03:f6:8a:02:dc:bc:ca:fc:12:a2:bf:f8:bb:ad: a3:7e:c7:ae:ef:67:3a:f4:98:9c:73:f6:c0:9a:86:a7:a4:95: 68:b7:a4:19:d9:50:8f:b1:b3:de:26:dd:54:c8:aa:39:d3:98: 27:b9:29:df:76:9c:2a:88:24:5e:cb:34:ed:5f:b5:14:77:7e: bc:d7:33:5b:e6:5a:50:f5:a0:a2:13:77:4a:fb:65:22:7d:3c: 54:89:b0:0f:9e:37:3a:c8:7b:4d:9b:d5:06:09:0f:cf:4e:a3: 8e:ad:51:6c:05:0e:7a:19:57:25:b3:89:33:e7:8f:0e:af:25: 78:b1:4c:7b:ef:37:dd:3d:d4:80:0d:2b:46:45:97:fa:9e:07: ab:fc:6b:77:d4:c2:ca:e3:18:43:fe:b9:e1:e7:75:e3:8c:c4: b4:4d:32:c9:99:78:62:a6:02:46:78:69:38:31:c5:36:10:e3: 0b:38:7a:07:43:c5:3a:1f:bd:2b:c3:6e:b1:05:98:00:2b:6f: f0:78:37:d6:7a:12:29:64:29:58:93:61:7d:b7:47:d3:b3:a9: 06:63:55:73:1a:9b:07:10:5b:eb:85:2a:44:a0:86:96:1c:7b: 41:d7:02:ef:52:5b:1e:94:f3:d9:35:48:1d:88:39:16:95:3f: 3e:61:12:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpgIHR+XOF2dE1FCbs4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2VmOGM1ZjdkNzhlYjg1ZWFiODhiMzAzMDQ1N2E3MDYxZTFmZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDgyz0xd29EBvCzmUMFqRCmn0Tm ELaOPDBWHOznaumAycE92jFqt7s2acjrYK+hKZOYWbv6tEpUii7tgE7MSmCTn550 mmTnjOsK9PzRbywmAsuQgOr20GJSGdCJGJG5B6Tq/LcLG5zyECnjj9NVQV8egeYk 2br0T+p+Z0dRHaVv8ZsYQnBr/+8/nFYEFtZOPyQPMZxVsOyVa8xlkXk3ZAkpnK4L IwWTOne1HAKuOQPzTCA5Ml4fhH5dJFHFefJAZQc+/a3nvFzRWkF1EE3ZQN1o+27q 0Str42lu+rdYdJuSMlRVQ8g9vOZBdM1TUqVBCwLoqaXjeTilONIOVM2PPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzvjF99eOuF6riLMDBFenBh4f8PMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvVE8tTVgzMTQ2NFhxdUlzd01FVjZjR0hoX3c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIKuMA0G CSqGSIb3DQEBCwUAA4IBAQByryj5A/aKAty8yvwSor/4u62jfseu72c69Jicc/bA moanpJVot6QZ2VCPsbPeJt1UyKo505gnuSnfdpwqiCReyzTtX7UUd3681zNb5lpQ 9aCiE3dK+2UifTxUibAPnjc6yHtNm9UGCQ/PTqOOrVFsBQ56GVcls4kz548OryV4 sUx77zfdPdSADStGRZf6nger/Gt31MLK4xhD/rnh53XjjMS0TTLJmXhipgJGeGk4 McU2EOMLOHoHQ8U6H70rw26xBZgAK2/weDfWehIpZClYk2F9t0fTs6kGY1VzGpsH EFvrhSpEoIaWHHtB1wLvUlselPPZNUgdiDkWlT8+YRIW -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:41 2026 by rpki-client