This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mruhzeBHmfwapmZBx5Il9aU7Hto.roa File: mruhzeBHmfwapmZBx5Il9aU7Hto.roa (raw, json) Hash identifier: yoX0Xy7ZITjHqOQCybZXS9aMnH6CqsLyZLhou26RIwY= Subject key identifier: 9A:BB:A1:CD:E0:47:99:FC:1A:A6:66:41:C7:92:25:F5:A5:3B:1E:DA Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B7A5B193720FC8B4394BE82CE548E5B16 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mruhzeBHmfwapmZBx5Il9aU7Hto.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 31.14.38.0/23 maxlen: 23 45.132.25.0/24 maxlen: 24 185.155.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:37:20:fc:8b:43:94:be:82:ce:54:8e:5b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9abba1cde04799fc1aa66641c79225f5a53b1eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:11:5f:f5:42:ed:82:91:42:c7:29:40:3b: c2:3c:6e:26:4c:93:11:fe:44:53:ea:88:96:20:11: d1:07:5f:40:07:78:ff:d8:81:a9:d0:5f:5c:15:0d: dd:f3:98:a3:a7:fe:15:75:e6:c3:3a:eb:7e:49:1e: 13:f5:0e:c4:ec:cd:8b:e8:ab:ea:32:91:1e:15:5d: 25:07:e9:e1:d0:8c:44:e2:80:54:97:8c:5e:93:e0: 37:91:9b:2f:88:9c:57:3c:bd:8e:dd:81:44:47:b3: d7:f9:58:1d:5d:2f:28:6b:9a:0a:24:d3:db:2f:57: 57:8b:e3:29:b3:c6:4a:99:fa:98:05:97:eb:54:dc: 46:f0:a6:bb:23:33:e7:34:7f:41:d6:7b:7e:08:47: 46:78:e4:ca:bb:1a:21:eb:2f:0f:67:a1:f8:d2:44: 7e:c8:8a:0e:8e:92:d3:a1:51:4b:a6:18:aa:90:02: 04:77:c0:54:22:3f:6c:90:a7:a4:19:6c:56:34:0f: e0:09:c6:f3:53:92:d3:52:cc:cc:d1:4e:4b:4d:2b: c6:22:f7:00:0a:aa:02:07:1f:72:33:46:71:67:1e: 11:92:6e:a4:0b:e8:77:6b:5e:53:69:34:79:1a:1b: a2:f8:48:bf:9e:91:e1:6e:4e:32:a9:93:38:7c:00: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BB:A1:CD:E0:47:99:FC:1A:A6:66:41:C7:92:25:F5:A5:3B:1E:DA X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mruhzeBHmfwapmZBx5Il9aU7Hto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.38.0/23 45.132.25.0/24 185.155.54.0/23 Signature Algorithm: sha256WithRSAEncryption 37:d9:c2:47:96:1d:af:13:11:26:26:9b:79:88:df:d2:18:69: 5a:06:2c:86:39:5d:7c:77:1a:3c:69:f7:7e:1e:e7:f3:c3:6d: 28:5f:2b:5a:a4:0d:6a:8e:18:fa:da:83:54:b1:af:b3:11:90: 02:51:09:2d:f4:18:9c:df:fb:f8:a3:8f:07:e5:0f:6a:8b:17: a3:6c:be:11:82:64:7a:c1:5a:a0:1b:71:34:e1:d9:24:71:5b: c6:fb:b2:3e:9b:f6:c4:58:40:d5:7f:ef:35:6e:24:1b:2b:0f: 2f:42:49:fd:f4:20:bd:02:17:9d:ea:b9:11:4b:d4:a4:d2:d8: e4:2f:c0:b9:fe:af:49:cd:b2:45:11:79:23:93:49:9a:e9:2e: 4e:cd:3b:e6:1b:e9:ae:e7:48:0e:91:91:16:60:c6:cb:5e:f8: 04:2a:4e:10:f5:10:57:09:96:d2:38:ba:43:7b:f1:3d:6d:17: 3b:75:37:e9:1a:95:be:53:ac:5b:68:ac:46:48:e7:63:21:06: c0:f5:e6:07:e4:aa:56:f4:7f:54:4a:b2:31:9b:0c:ad:17:51: a7:8c:b8:45:e8:39:22:72:ca:09:24:22:57:b5:fa:79:5f:63: e3:5f:0b:65:3c:c8:d4:a3:4c:87:e9:2e:e4:85:dd:95:5f:93: e5:99:4a:9d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wxk3IPyLQ5S+gs5UjlsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJiYTFjZGUwNDc5OWZjMWFhNjY2NDFjNzkyMjVmNWE1M2IxZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiwRX/VC7YKRQscpQDvCPG4mTJMR /kRT6oiWIBHRB19AB3j/2IGp0F9cFQ3d85ijp/4VdebDOut+SR4T9Q7E7M2L6Kvq MpEeFV0lB+nh0IxE4oBUl4xek+A3kZsviJxXPL2O3YFER7PX+VgdXS8oa5oKJNPb L1dXi+Mps8ZKmfqYBZfrVNxG8Ka7IzPnNH9B1nt+CEdGeOTKuxoh6y8PZ6H40kR+ yIoOjpLToVFLphiqkAIEd8BUIj9skKekGWxWNA/gCcbzU5LTUszM0U5LTSvGIvcA CqoCBx9yM0ZxZx4Rkm6kC+h3a15TaTR5Ghui+Ei/npHhbk4yqZM4fAAFhQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJq7oc3gR5n8GqZmQceSJfWlOx7aMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvbXJ1aHplQkhtZndhcG1aQng1SWw5YVU3SHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHw4mAwQA LYQZAwQBuZs2MA0GCSqGSIb3DQEBCwUAA4IBAQA32cJHlh2vExEmJpt5iN/SGGla BiyGOV18dxo8afd+Hufzw20oXytapA1qjhj62oNUsa+zEZACUQkt9Bic3/v4o48H 5Q9qixejbL4RgmR6wVqgG3E04dkkcVvG+7I+m/bEWEDVf+81biQbKw8vQkn99CC9 Ahed6rkRS9Sk0tjkL8C5/q9JzbJFEXkjk0ma6S5OzTvmG+mu50gOkZEWYMbLXvgE Kk4Q9RBXCZbSOLpDe/E9bRc7dTfpGpW+U6xbaKxGSOdjIQbA9eYH5KpW9H9USrIx mwytF1GnjLhF6DkicsoJJCJXtfp5X2PjXwtlPMjUo0yH6S7khd2VX5PlmUqd -----END CERTIFICATE-----Generated at Wed Feb 4 03:44:39 2026 by rpki-client