This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/MUNO72hvtYB3fmRkFtv1rgwIrrI.roa
File: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (raw, json)
Hash identifier: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=
Subject key identifier: 31:43:4E:EF:68:6F:B5:80:77:7E:64:64:16:DB:F5:AE:0C:08:AE:B2
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019B7B3697F9CD11B6E24997F76BB3C1B9E9
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/MUNO72hvtYB3fmRkFtv1rgwIrrI.roa
Signing time: Thu 01 Jan 2026 20:18:54 +0000
ROA not before: Thu 01 Jan 2026 20:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 85.203.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:97:f9:cd:11:b6:e2:49:97:f7:6b:b3:c1:b9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jan 1 20:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31434eef686fb580777e646416dbf5ae0c08aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:0c:7f:a0:f8:c4:54:ac:e3:1f:08:82:3c:
83:5e:e7:cf:06:45:53:c5:32:e7:16:dd:3d:0f:fc:
a7:09:1b:9e:c2:76:59:61:b0:ec:c4:78:f4:56:47:
95:6f:0f:27:29:57:a0:fb:6b:1d:41:48:8d:aa:f2:
78:1a:55:67:f7:4d:b1:a9:32:90:73:ed:d9:0a:3b:
7a:78:0e:a8:c6:ba:bb:7a:26:87:a0:8c:30:02:4e:
7f:18:f9:74:26:f3:00:8d:71:ca:af:e9:9a:c0:0c:
e7:e2:fe:3a:86:9d:9f:45:39:5b:c4:d3:02:72:1b:
0f:97:f2:d1:9d:2c:81:be:44:41:41:16:24:2b:a2:
7a:6e:02:6f:44:92:97:b9:a8:8a:4c:2c:de:75:d0:
d0:d4:38:cf:75:89:4e:35:1b:8b:47:dd:60:76:50:
a5:08:01:bd:21:2c:fb:f0:4c:85:6d:52:72:4f:51:
aa:87:31:2e:fa:7f:97:3b:68:1e:ab:dc:91:ac:10:
fd:b0:83:11:4a:dd:ae:2b:70:a5:b7:55:7f:ca:58:
ea:5b:d5:b5:39:47:9e:98:30:63:46:53:4d:72:e7:
f7:a5:e5:e1:c7:d6:ed:7f:61:17:a0:11:48:3b:c3:
23:dd:00:db:32:29:e2:32:36:ae:cb:40:8d:e5:4f:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:4E:EF:68:6F:B5:80:77:7E:64:64:16:DB:F5:AE:0C:08:AE:B2
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/MUNO72hvtYB3fmRkFtv1rgwIrrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ed:38:8f:01:52:88:57:16:90:1a:70:5f:82:45:27:ba:ca:
41:0d:c9:c0:b7:b3:d3:ec:1c:ef:ba:58:4c:0f:bf:15:7d:81:
a6:29:cd:95:4b:08:a1:8a:ad:00:1b:79:c0:8f:63:f4:e5:d8:
b1:92:26:c0:e8:27:4f:b6:82:fe:a8:79:30:55:7f:ee:6f:8f:
13:ca:9d:1e:1f:70:f9:32:e4:e2:ff:b2:04:d8:57:c9:38:e5:
6f:2b:ec:0d:eb:4a:18:cb:0e:c5:0c:0d:85:1c:f8:89:54:73:
09:19:7e:56:f2:f7:e7:fc:6c:09:21:82:7f:79:39:c0:f9:35:
6d:1d:9a:13:1b:29:4e:f1:7d:9e:17:18:fc:0c:a2:ef:83:0d:
cf:d8:7c:a4:ba:b3:7a:30:46:fa:01:cc:5f:8e:94:c6:b2:9a:
a5:4a:d5:e8:6f:1a:13:38:67:5e:01:ec:b2:fa:c6:58:90:a9:
41:db:1a:71:f6:e9:0b:4a:ac:6b:ff:88:41:64:8c:cf:f3:73:
dc:24:68:0e:54:ef:99:b7:c2:8b:78:d3:f3:db:04:d7:4a:2b:
55:0d:d0:63:64:00:2e:e7:24:50:6c:ec:8c:e2:bb:b9:d3:8b:
58:ef:a5:d6:08:4f:27:76:70:1c:27:0c:76:38:a2:1c:a7:49:
52:0d:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 02:50:05 2026 by rpki-client