This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa File: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (raw, json) Hash identifier: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho= Subject key identifier: 31:DC:74:C0:F2:88:9A:3B:B6:AF:A5:A7:FA:C4:E4:3E:FD:97:5C:29 Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e Certificate serial: 019B77C67D72D67B67CE56E0F79E5FDF0809 Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21489 IP address blocks: 91.223.21.0/24 maxlen: 24 185.45.52.0/24 maxlen: 24 185.45.53.0/24 maxlen: 24 185.45.54.0/24 maxlen: 24 185.45.55.0/24 maxlen: 24 192.101.252.0/24 maxlen: 24 193.110.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7d:72:d6:7b:67:ce:56:e0:f7:9e:5f:df:08:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31dc74c0f2889a3bb6afa5a7fac4e43efd975c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:b9:29:25:ed:6e:dc:ec:5c:21:4a:dc:fb: 3c:3a:b3:66:60:5f:77:4a:c6:15:43:f6:e0:f7:44: 87:e3:a0:c5:c5:a8:47:4e:ff:dc:3b:e2:6f:c3:0c: 47:6a:00:13:ed:ed:70:8d:f2:b5:af:0a:34:00:01: 1f:91:ef:c8:4b:20:cf:ab:16:d7:a1:3d:ed:28:e5: 3e:16:fb:19:61:c4:99:0b:33:cd:4f:36:6b:92:c5: 18:7b:c6:32:13:ed:b6:88:02:22:fb:df:51:78:25: 3a:4d:c7:45:47:21:11:33:fb:d3:42:cd:03:34:1b: f5:c4:6a:21:20:56:c1:83:03:e6:ab:92:8d:99:c5: 84:c8:cb:5b:a6:61:c2:79:eb:60:0d:b1:40:62:e8: ba:4e:8a:7e:45:fb:9d:eb:ea:b2:d0:fa:af:36:b6: 83:6e:9a:fa:e6:bb:12:a4:48:fa:20:f1:d7:d0:d0: 45:0e:fa:9d:61:f5:58:bc:89:b4:7f:24:b7:14:fb: 9a:49:95:9f:0c:b6:55:97:99:80:3f:34:a9:f3:07: 72:ac:44:af:07:1a:d7:15:15:88:3b:03:38:9f:e0: 21:9b:a8:d6:6d:d9:98:3e:a8:b7:31:94:63:2f:65: 43:0f:83:33:f6:cb:91:fc:e9:ab:89:3a:e3:a9:2d: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:74:C0:F2:88:9A:3B:B6:AF:A5:A7:FA:C4:E4:3E:FD:97:5C:29 X509v3 Authority Key Identifier: keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.21.0/24 185.45.52.0/22 192.101.252.0/24 193.110.130.0/24 Signature Algorithm: sha256WithRSAEncryption 46:74:c6:8a:9c:68:bf:ee:9d:98:9f:1d:28:14:32:ca:7c:27: 43:64:3b:fe:21:42:21:93:5a:f4:e2:fd:d7:3a:82:cc:f2:f7: 6a:9b:0c:e2:a9:b7:ca:d3:03:94:7c:b6:f4:a9:7c:bc:fb:60: a5:b5:85:0d:3f:3f:3c:30:ca:e6:ce:83:1f:87:3b:f6:01:d4: d8:b6:79:15:b4:db:42:d1:47:ca:ac:ed:32:04:4b:6c:42:3f: 3d:86:da:f0:24:ef:ff:35:ce:af:dd:be:08:22:05:a1:da:25: 17:66:68:30:0b:5f:a4:51:61:26:23:3c:74:8a:02:bc:e7:e6: 04:ab:73:9a:5b:c4:59:dd:5e:62:22:e1:a2:39:5d:51:ba:b6: f9:4f:50:a3:48:05:0c:a7:28:da:d7:d6:0b:18:54:a3:db:08: 3b:b5:43:77:c9:b8:8b:84:2b:5f:c4:f6:14:bc:4a:ab:c6:a9: 8b:f4:b5:2e:72:74:58:a1:04:68:15:0e:c5:14:a3:4e:95:22: 46:b8:5b:70:18:a4:f6:3b:41:a7:37:c5:06:4f:2a:f0:42:f4: a2:ea:4f:5e:66:8d:3d:45:7a:d6:28:e3:44:44:84:4d:f1:a7: 0f:57:88:93:f7:04:d4:11:5e:f5:3d:44:4f:c1:c5:6e:15:1a: ba:9b:6c:13 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xn1y1ntnzlbg955f3wgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MWNkMDcxZGM5NjBiZGM4MjliMGJlN2UzNGI2YjYxY2Y4 YjBiMWUwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRjNzRjMGYyODg5YTNiYjZhZmE1YTdmYWM0ZTQzZWZkOTc1YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqK5KSXtbtzsXCFK3Ps8OrNmYF93 SsYVQ/bg90SH46DFxahHTv/cO+JvwwxHagAT7e1wjfK1rwo0AAEfke/ISyDPqxbX oT3tKOU+FvsZYcSZCzPNTzZrksUYe8YyE+22iAIi+99ReCU6TcdFRyERM/vTQs0D NBv1xGohIFbBgwPmq5KNmcWEyMtbpmHCeetgDbFAYui6Top+Rfud6+qy0PqvNraD bpr65rsSpEj6IPHX0NBFDvqdYfVYvIm0fyS3FPuaSZWfDLZVl5mAPzSp8wdyrESv BxrXFRWIOwM4n+Ahm6jWbdmYPqi3MZRjL2VDD4Mz9suR/OmriTrjqS38ywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDHcdMDyiJo7tq+lp/rE5D79l1wpMB8GA1UdIwQY MBaAFGcc0HHclgvcgpsL5+NLa2HPiwseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnh6UWNkeVdDOXlDbXd2bjQwdHJZYy1MQ3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zNWE5YTYtNjBjZC00ZjI0LThlZjAt N2RjNjk0MzBkMzUyLzEvTWR4MHdQS0ltanUycjZXbi1zVGtQdjJYWENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zNWE5YTYtNjBjZC00ZjI0LThlZjAtN2RjNjk0MzBkMzUy LzEvWnh6UWNkeVdDOXlDbXd2bjQwdHJZYy1MQ3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW98VAwQC uS00AwQAwGX8AwQAwW6CMA0GCSqGSIb3DQEBCwUAA4IBAQBGdMaKnGi/7p2Ynx0o FDLKfCdDZDv+IUIhk1r04v3XOoLM8vdqmwziqbfK0wOUfLb0qXy8+2CltYUNPz88 MMrmzoMfhzv2AdTYtnkVtNtC0UfKrO0yBEtsQj89htrwJO//Nc6v3b4IIgWh2iUX ZmgwC1+kUWEmIzx0igK85+YEq3OaW8RZ3V5iIuGiOV1Rurb5T1CjSAUMpyja19YL GFSj2wg7tUN3ybiLhCtfxPYUvEqrxqmL9LUucnRYoQRoFQ7FFKNOlSJGuFtwGKT2 O0GnN8UGTyrwQvSi6k9eZo09RXrWKONERIRN8acPV4iT9wTUEV71PURPwcVuFRq6 m2wT -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:42 2026 by rpki-client