This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MPVcKlD-iuokL8rIMuKFlXK86Wo.roa File: MPVcKlD-iuokL8rIMuKFlXK86Wo.roa (raw, json) Hash identifier: uyVc21WBSdHyyxz8NOMjc2FltFq7eppj5kGSM4TBCV4= Subject key identifier: 30:F5:5C:2A:50:FE:8A:EA:24:2F:CA:C8:32:E2:85:95:72:BC:E9:6A Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2633609CC1F8FD706A2B26CB608A7 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MPVcKlD-iuokL8rIMuKFlXK86Wo.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.110.0/23 maxlen: 24 212.135.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:63:36:09:cc:1f:8f:d7:06:a2:b2:6c:b6:08:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30f55c2a50fe8aea242fcac832e2859572bce96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:ca:a4:a1:9d:f0:d4:01:d6:2c:de:c9:cd: da:b8:ba:0c:90:b0:20:85:cb:be:58:00:c2:d5:c6: 64:1e:67:e7:f1:0b:c0:61:c2:9c:b7:7c:63:7a:2b: d8:f8:df:79:3d:dc:62:a1:7e:e8:9c:91:75:94:21: 85:a4:c5:59:94:0d:2d:cc:49:38:43:f0:ea:d0:c5: 3c:44:69:fe:07:30:c9:a6:46:b0:f5:a8:26:75:3d: 0c:7a:2a:a8:d4:54:2c:b0:5f:f5:29:b1:84:2e:6e: 34:6b:d7:1a:c5:39:74:9d:f9:3e:8e:36:03:af:33: 8c:e5:0e:0f:27:d8:a3:00:ff:49:86:99:aa:03:aa: 94:bb:95:d3:cf:f8:ba:6e:ff:8c:cd:a2:d1:42:da: f3:b9:0e:93:0d:63:38:50:c2:d0:a3:37:a8:2d:06: f1:73:5f:b5:63:ce:0b:d2:93:38:d7:29:ab:5e:57: 8d:04:42:ce:a2:b4:0a:3e:43:90:97:3d:79:92:7e: ab:1a:7c:31:93:c2:e9:d7:c6:51:b4:84:7e:7b:cf: b3:9b:fc:2f:90:93:b2:78:a6:a7:7a:51:ba:4d:35: 6e:02:2b:76:4e:db:32:74:25:cb:5c:6c:dc:9b:4e: c8:41:a3:04:4a:9b:f6:6d:f6:9a:b6:7e:84:fc:7d: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:5C:2A:50:FE:8A:EA:24:2F:CA:C8:32:E2:85:95:72:BC:E9:6A X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MPVcKlD-iuokL8rIMuKFlXK86Wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.98.0/23 212.134.104.0/23 212.134.110.0/23 212.135.200.0/22 Signature Algorithm: sha256WithRSAEncryption 52:86:e7:73:2f:7c:43:d8:21:22:b5:4a:02:95:7b:9f:fb:09: 24:27:43:2a:86:cf:2c:76:40:b7:d6:9b:a0:fd:57:0d:1e:d6: c8:3a:31:b7:24:62:6b:7a:36:39:bb:0d:75:c0:e5:35:66:f6: 89:db:2d:5a:32:87:be:5c:36:84:d4:de:bb:fc:26:e2:39:15: 4f:ef:0a:01:57:63:0f:16:15:f1:59:fa:7c:2a:13:83:cd:9f: 3b:d0:37:c9:c4:a3:d6:7d:84:64:8f:27:3d:9c:ee:46:81:1f: 88:96:0f:49:71:9e:63:7c:dd:85:a2:19:9a:d0:13:a0:94:30: 20:d5:b8:39:1b:15:a6:1d:a0:93:b2:d7:a4:06:44:54:d2:ed: 14:65:91:f0:2b:65:05:d8:a6:eb:0c:93:87:d5:71:b0:dc:ac: 6f:bc:8a:c5:c3:b9:11:ce:4a:80:54:17:31:65:6b:9f:57:c4: 36:d3:d4:b2:5d:46:60:14:b9:22:88:8c:cb:52:2d:38:0d:c1: 00:2d:b4:e8:e9:71:ef:20:4d:63:9b:56:c4:50:a4:9f:fc:9e: 46:38:84:88:de:85:3f:c4:47:1b:2b:a3:ce:e2:70:5c:f2:82: c0:2d:fb:ee:fe:bc:68:2b:5b:f6:4d:d8:38:c7:94:54:c3:a9: 71:4d:6e:e9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4omM2Ccwfj9cGorJstginMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGY1NWMyYTUwZmU4YWVhMjQyZmNhYzgzMmUyODU5NTcyYmNlOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi63KpKGd8NQB1izeyc3auLoMkLAg hcu+WADC1cZkHmfn8QvAYcKct3xjeivY+N95PdxioX7onJF1lCGFpMVZlA0tzEk4 Q/Dq0MU8RGn+BzDJpkaw9agmdT0Meiqo1FQssF/1KbGELm40a9caxTl0nfk+jjYD rzOM5Q4PJ9ijAP9JhpmqA6qUu5XTz/i6bv+MzaLRQtrzuQ6TDWM4UMLQozeoLQbx c1+1Y84L0pM41ymrXleNBELOorQKPkOQlz15kn6rGnwxk8Lp18ZRtIR+e8+zm/wv kJOyeKanelG6TTVuAit2TtsydCXLXGzcm07IQaMESpv2bfaatn6E/H3vjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDD1XCpQ/orqJC/KyDLihZVyvOlqMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvTVBWY0tsRC1pdW9rTDhySU11S0ZsWEs4NldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQB1IZiAwQB 1IZoAwQB1IZuAwQC1IfIMA0GCSqGSIb3DQEBCwUAA4IBAQBShudzL3xD2CEitUoC lXuf+wkkJ0Mqhs8sdkC31pug/VcNHtbIOjG3JGJrejY5uw11wOU1ZvaJ2y1aMoe+ XDaE1N67/CbiORVP7woBV2MPFhXxWfp8KhODzZ870DfJxKPWfYRkjyc9nO5GgR+I lg9JcZ5jfN2Fohma0BOglDAg1bg5GxWmHaCTstekBkRU0u0UZZHwK2UF2KbrDJOH 1XGw3KxvvIrFw7kRzkqAVBcxZWufV8Q209SyXUZgFLkiiIzLUi04DcEALbTo6XHv IE1jm1bEUKSf/J5GOISI3oU/xEcbK6PO4nBc8oLALfvu/rxoK1v2Tdg4x5RUw6lx TW7p -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client