This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MBYio_Qoaso94h65-BMBKpn-udo.roa File: MBYio_Qoaso94h65-BMBKpn-udo.roa (raw, json) Hash identifier: 2e9hHLiNZpTCrd1tSzRVgQq/pPiKvZXWb+IPEY/VdQQ= Subject key identifier: 30:16:22:A3:F4:28:6A:CA:3D:E2:1E:B9:F8:13:01:2A:99:FE:B9:DA Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DEB9C0E2929DF09571247FC27D67E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MBYio_Qoaso94h65-BMBKpn-udo.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 45.87.120.0/24 maxlen: 24 91.132.49.0/24 maxlen: 24 128.0.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:eb:9c:0e:29:29:df:09:57:12:47:fc:27:d6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301622a3f4286aca3de21eb9f813012a99feb9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:a9:5f:6e:37:ef:b6:a1:0a:e0:ce:bc:9f: 59:16:4e:38:3c:fa:ed:82:28:bd:70:66:6c:d6:1b: b9:56:a3:75:14:13:b1:ac:49:ed:68:3d:57:7f:79: 43:af:e5:22:f1:d6:93:9c:b1:fc:3e:cd:9f:d3:78: 92:cf:c1:8c:4d:e2:27:20:54:c1:4e:dd:03:f8:27: 2a:03:07:6f:8a:53:cf:7f:06:45:d5:0d:a4:94:96: b4:35:64:b1:b4:28:fd:26:d7:12:c6:d8:0b:ba:71: 7a:be:28:78:8d:1d:86:91:97:28:24:d3:96:fd:e3: d1:69:fa:3f:cc:11:c9:56:11:9d:bb:12:d5:9c:d1: c1:42:35:82:15:90:80:fa:4f:28:bb:3a:e1:c6:d4: 94:0c:b6:16:d1:b0:ba:bb:29:c1:8a:28:9c:8f:ae: 5b:ea:82:c4:e2:65:6d:48:5c:40:fc:11:8b:14:8a: b5:10:05:1f:1d:b5:1e:02:1b:b9:15:16:ec:3e:bd: 6e:14:21:16:19:4b:4f:e0:84:43:ab:2b:af:b6:7d: de:3d:60:3d:04:52:16:26:9d:ab:45:fa:45:fd:b4: b3:6f:6d:ef:d2:34:8b:e4:d9:ad:15:97:64:93:d7: 15:b4:5a:12:6c:02:68:72:44:22:3a:33:1f:6a:a7: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:22:A3:F4:28:6A:CA:3D:E2:1E:B9:F8:13:01:2A:99:FE:B9:DA X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MBYio_Qoaso94h65-BMBKpn-udo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.120.0/24 91.132.49.0/24 128.0.1.0/24 Signature Algorithm: sha256WithRSAEncryption 91:14:90:fd:22:24:1d:a2:68:85:f8:fd:c9:8d:28:41:90:ba: f4:a0:d8:9c:1a:ab:95:54:19:fa:2a:ed:d8:79:0d:7f:ac:e6: 52:df:1a:fc:4a:15:d9:f4:55:77:8d:8b:ad:30:97:6b:68:da: d3:5a:6e:b7:4d:5c:64:53:aa:10:5c:df:6c:b6:3b:8b:cb:d7: 9a:47:41:1e:76:2c:a8:96:b1:53:24:b6:b9:6e:97:93:93:67: 79:e1:8f:29:67:79:13:51:19:c5:a5:ba:60:2b:84:bb:de:5f: 94:97:f2:69:90:5e:da:07:12:c4:05:1e:b5:64:8b:ab:83:40: 4e:b4:c7:9e:96:ef:a6:5b:24:e0:42:be:e4:2d:9f:46:b0:9e: 47:d1:d8:ca:a6:58:a3:2b:8e:93:66:63:33:02:16:2d:37:a1: 8b:f4:9c:74:a8:13:c3:1b:b2:f6:2d:79:bd:19:b9:80:90:02: b8:bb:5e:23:9d:e9:ef:fb:1d:97:fe:f0:ca:08:b2:c5:ff:f7: 60:b1:f9:53:90:cc:59:27:f7:66:d4:96:88:cb:1e:82:e8:9c: 57:6d:d4:24:d9:71:8c:53:40:78:a7:b3:4d:35:70:0d:da:83: 9b:05:09:4e:1a:5a:20:c8:59:2c:ef:26:24:b1:32:94:cf:4d: ce:29:2c:ce -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5feucDikp3wlXEkf8J9Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDE2MjJhM2Y0Mjg2YWNhM2RlMjFlYjlmODEzMDEyYTk5ZmViOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyISpX24377ahCuDOvJ9ZFk44PPrt gii9cGZs1hu5VqN1FBOxrEntaD1Xf3lDr+Ui8daTnLH8Ps2f03iSz8GMTeInIFTB Tt0D+CcqAwdvilPPfwZF1Q2klJa0NWSxtCj9JtcSxtgLunF6vih4jR2GkZcoJNOW /ePRafo/zBHJVhGduxLVnNHBQjWCFZCA+k8ouzrhxtSUDLYW0bC6uynBiiicj65b 6oLE4mVtSFxA/BGLFIq1EAUfHbUeAhu5FRbsPr1uFCEWGUtP4IRDqyuvtn3ePWA9 BFIWJp2rRfpF/bSzb23v0jSL5NmtFZdkk9cVtFoSbAJockQiOjMfaqdm9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDAWIqP0KGrKPeIeufgTASqZ/rnaMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTUJZaW9fUW9hc285NGg2NS1CTUJLcG4tdWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVd4AwQA W4QxAwQAgAABMA0GCSqGSIb3DQEBCwUAA4IBAQCRFJD9IiQdomiF+P3JjShBkLr0 oNicGquVVBn6Ku3YeQ1/rOZS3xr8ShXZ9FV3jYutMJdraNrTWm63TVxkU6oQXN9s tjuLy9eaR0EediyolrFTJLa5bpeTk2d54Y8pZ3kTURnFpbpgK4S73l+Ul/JpkF7a BxLEBR61ZIurg0BOtMeelu+mWyTgQr7kLZ9GsJ5H0djKplijK46TZmMzAhYtN6GL 9Jx0qBPDG7L2LXm9GbmAkAK4u14jnenv+x2X/vDKCLLF//dgsflTkMxZJ/dm1JaI yx6C6JxXbdQk2XGMU0B4p7NNNXAN2oObBQlOGlogyFks7yYksTKUz03OKSzO -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client