This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/mwdbhh4MkK3UW3MoUj-OSpitJtg.roa File: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (raw, json) Hash identifier: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA= Subject key identifier: 9B:07:5B:86:1E:0C:90:AD:D4:5B:73:28:52:3F:8E:4A:98:AD:26:D8 Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18 Certificate serial: 019B7C7F184CF7DB775FA441D8BBEA3A58AF Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/mwdbhh4MkK3UW3MoUj-OSpitJtg.roa Signing time: Fri 02 Jan 2026 02:17:42 +0000 ROA not before: Fri 02 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 178.18.28.0/24 maxlen: 24 178.18.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:18:4c:f7:db:77:5f:a4:41:d8:bb:ea:3a:58:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50f88e05c898796c82ff0147568816e933420e18 Validity Not Before: Jan 2 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b075b861e0c90add45b7328523f8e4a98ad26d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:54:b0:87:bd:4b:35:8b:44:74:3a:3f:33: 30:57:cf:47:37:39:4b:f3:6b:22:cf:42:e2:a0:9c: a2:8f:7c:ed:b1:31:9b:84:ad:cd:3a:97:ee:9f:c7: 2f:b9:17:6e:73:b9:76:23:de:0b:61:b8:21:58:c5: 65:a4:2d:02:31:e8:5a:72:2a:89:37:b3:9e:e3:06: d3:f3:6f:e2:26:5f:26:26:0c:24:2c:6f:71:e5:a0: 09:03:9f:83:26:d2:73:e3:26:42:82:f8:ac:b8:12: ba:74:b6:34:88:13:7f:15:c2:37:aa:1b:eb:af:ba: 0c:f0:f5:b6:f2:9d:5b:26:db:5f:93:73:b5:f1:84: 34:e5:a5:07:77:e1:67:db:75:f4:a0:81:6f:ae:b2: 54:c6:16:5d:41:47:a8:87:1b:ac:c4:b2:b6:b7:e0: ee:8b:99:ae:51:06:78:f1:42:8d:3a:e7:71:87:b7: 31:4f:1b:5f:08:c2:5b:a3:9e:15:e3:fc:7c:e4:b9: c5:1c:48:1d:d2:ac:b9:21:e4:de:03:14:c2:5d:72: f6:55:a9:06:8c:3a:98:06:14:da:e6:34:4a:c6:08: 13:aa:96:a1:26:07:f9:3b:93:ae:34:b8:3a:52:ae: ca:30:5c:68:6e:66:17:19:71:89:e9:96:69:4d:9c: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:07:5B:86:1E:0C:90:AD:D4:5B:73:28:52:3F:8E:4A:98:AD:26:D8 X509v3 Authority Key Identifier: keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/mwdbhh4MkK3UW3MoUj-OSpitJtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.18.28.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:29:76:e5:f5:ee:62:83:26:6b:d9:e1:99:30:b0:75:3e:24: d7:03:37:29:6c:85:8a:0f:e8:15:5b:8a:f0:99:06:e3:83:4b: 62:cd:c9:c5:a4:98:e9:64:b5:f8:94:97:cc:43:e0:b1:e9:bf: b4:9b:b2:10:0a:e0:36:21:62:9c:72:9b:34:8d:12:ef:69:67: 17:53:69:1e:e1:a8:d2:11:96:3d:ba:63:7e:e2:c4:5f:de:33: fe:96:43:3d:ae:94:19:ef:46:31:76:f5:d7:59:91:08:1e:49: b3:90:d9:24:38:9b:06:23:06:32:c1:d5:91:9a:e4:68:96:f9: 74:69:31:c0:bc:66:27:a9:8e:fa:c9:86:e8:c5:0f:93:08:23: 4f:7d:53:0c:23:c9:7b:24:7b:ca:0d:d5:b0:fc:1e:2d:cc:4a: 30:23:7b:7e:29:cc:4f:da:1b:da:b2:1f:64:8a:89:13:23:29: a6:b1:02:96:2f:68:e2:2d:2e:ef:8f:1f:8c:17:f8:40:70:d2: d3:ae:7d:81:02:77:a6:93:09:53:42:c7:2a:a2:a4:af:f7:f5: 55:21:1b:84:d2:f8:64:c1:7e:89:83:54:ed:7c:8b:32:34:b8: 81:0a:5d:2d:e3:f8:44:4a:63:f3:72:fc:70:59:eb:fb:c2:5a: 64:3f:8e:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fxhM99t3X6RB2LvqOlivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZjg4ZTA1Yzg5ODc5NmM4MmZmMDE0NzU2ODgxNmU5MzM0 MjBlMTgwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjA3NWI4NjFlMGM5MGFkZDQ1YjczMjg1MjNmOGU0YTk4YWQyNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44VUsIe9SzWLRHQ6PzMwV89HNzlL 82siz0LioJyij3ztsTGbhK3NOpfun8cvuRduc7l2I94LYbghWMVlpC0CMehaciqJ N7Oe4wbT82/iJl8mJgwkLG9x5aAJA5+DJtJz4yZCgvisuBK6dLY0iBN/FcI3qhvr r7oM8PW28p1bJttfk3O18YQ05aUHd+Fn23X0oIFvrrJUxhZdQUeohxusxLK2t+Du i5muUQZ48UKNOudxh7cxTxtfCMJbo54V4/x85LnFHEgd0qy5IeTeAxTCXXL2VakG jDqYBhTa5jRKxggTqpahJgf5O5OuNLg6Uq7KMFxobmYXGXGJ6ZZpTZxqzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsHW4YeDJCt1FtzKFI/jkqYrSbYMB8GA1UdIwQY MBaAFFD4jgXImHlsgv8BR1aIFukzQg4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYt ZmVkYmQ0YzY2YTBlLzEvbXdkYmhoNE1rSzNVVzNNb1VqLU9TcGl0SnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYtZmVkYmQ0YzY2YTBl LzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBshIcMA0G CSqGSIb3DQEBCwUAA4IBAQBcKXbl9e5igyZr2eGZMLB1PiTXAzcpbIWKD+gVW4rw mQbjg0tizcnFpJjpZLX4lJfMQ+Cx6b+0m7IQCuA2IWKccps0jRLvaWcXU2ke4ajS EZY9umN+4sRf3jP+lkM9rpQZ70YxdvXXWZEIHkmzkNkkOJsGIwYywdWRmuRolvl0 aTHAvGYnqY76yYboxQ+TCCNPfVMMI8l7JHvKDdWw/B4tzEowI3t+KcxP2hvash9k iokTIymmsQKWL2jiLS7vjx+MF/hAcNLTrn2BAnemkwlTQscqoqSv9/VVIRuE0vhk wX6Jg1TtfIsyNLiBCl0t4/hESmPzcvxwWev7wlpkP44A -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:39 2026 by rpki-client