This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/Muw91QFF1gZnvIhmwJGxe0JW4UM.roa File: Muw91QFF1gZnvIhmwJGxe0JW4UM.roa (raw, json) Hash identifier: uuXLdfsOuVDa4QD34/Jn4ShZlQdSH9Vf/9OOXP9hBVk= Subject key identifier: 32:EC:3D:D5:01:45:D6:06:67:BC:88:66:C0:91:B1:7B:42:56:E1:43 Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a Certificate serial: 019B7910B02DD3C4F57152364DB18E431222 Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/Muw91QFF1gZnvIhmwJGxe0JW4UM.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205289 IP address blocks: 2.57.192.0/22 maxlen: 22 185.222.244.0/22 maxlen: 22 2a14:d400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:2d:d3:c4:f5:71:52:36:4d:b1:8e:43:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32ec3dd50145d60667bc8866c091b17b4256e143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:72:40:9b:84:cc:ad:33:87:9b:98:97:10: 9a:1f:db:a3:c7:0c:d4:fa:e0:81:a5:2d:3e:70:d3: 64:1d:eb:15:81:a0:2f:d5:8e:25:d0:4f:c9:aa:85: b2:e0:7f:15:de:70:8c:d7:94:b8:00:52:fb:3e:aa: f8:5a:92:fd:a4:2d:e2:ef:73:a7:a7:6e:ee:58:b9: 95:03:79:4d:c6:18:e0:d8:d2:41:50:05:65:40:8d: f5:9c:61:de:da:3e:70:49:05:96:d4:1c:52:a0:70: 16:65:10:11:8f:e4:fc:18:bc:ac:7e:8f:fc:87:ea: 3d:e7:2e:ff:17:9b:02:74:de:7f:26:9e:6c:50:f5: c5:03:f8:5b:3e:cb:b9:e3:26:03:8f:4a:47:b7:70: b2:4d:cc:46:be:40:d7:b9:3f:86:49:31:72:e4:ab: 06:67:41:66:4d:93:6e:30:03:a0:7a:fe:e7:d3:e6: 42:39:ac:57:9b:71:24:3d:44:11:f2:fa:55:6c:15: b4:18:d6:cd:6c:91:89:5a:f5:55:69:96:2b:11:0f: 49:f7:fc:df:92:3c:39:f2:09:af:2d:83:06:e4:0b: b1:e9:e3:5d:d7:93:5b:7c:21:81:79:1d:d8:8a:47: 9a:59:37:76:32:43:e5:8f:e5:47:68:93:f3:1e:0c: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:3D:D5:01:45:D6:06:67:BC:88:66:C0:91:B1:7B:42:56:E1:43 X509v3 Authority Key Identifier: keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/Muw91QFF1gZnvIhmwJGxe0JW4UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.192.0/22 185.222.244.0/22 IPv6: 2a14:d400::/29 Signature Algorithm: sha256WithRSAEncryption 54:8e:f4:05:67:4e:df:5d:18:4d:bd:07:72:d1:57:b2:55:a5: ca:40:ea:5f:ff:63:74:07:2e:0d:c3:dd:e3:92:77:f5:eb:91: f3:c4:d9:f7:84:3e:67:06:a5:fd:bf:2a:b6:15:92:86:5c:30: 87:74:96:f1:62:2e:0f:34:78:b3:63:38:97:1f:4b:d7:cf:c0: b8:06:7e:04:39:c9:c8:9e:57:67:03:e7:00:86:60:57:66:b8: d2:7f:a2:9d:7d:f8:ef:16:cd:5e:b5:92:90:db:ee:5d:3e:64: 07:b9:d4:ee:9c:77:af:68:00:0c:d6:f5:77:0d:19:78:fc:d1: 55:56:f8:cf:e2:9b:6c:7a:33:d6:80:db:95:66:17:3e:9e:83: 44:e4:ab:24:19:1d:60:dd:5c:45:9f:d7:ed:38:5e:5c:0e:bc: 46:7c:c6:60:c3:03:e0:d1:f7:bc:59:e8:5d:c0:03:92:1d:44: 5e:13:65:dc:b7:98:13:00:b1:01:4f:6c:9a:d9:67:f3:d7:cf: b7:f8:92:6d:dd:a6:65:1d:ff:fc:c7:c7:32:f4:86:f7:82:10: 76:6b:75:43:d7:da:66:ce:31:2b:22:ff:e5:ce:c3:79:4e:73: b8:13:b9:1a:6c:14:c2:25:6e:f3:c0:2d:d0:0b:74:cd:ce:05: 0f:8f:60:1e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ELAt08T1cVI2TbGOQxIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YWNkZjZiMzcwY2YxMDRjODcyY2M0ZGJhZWI3MzcxYjJm N2M2OGEwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmVjM2RkNTAxNDVkNjA2NjdiYzg4NjZjMDkxYjE3YjQyNTZlMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs45yQJuEzK0zh5uYlxCaH9ujxwzU +uCBpS0+cNNkHesVgaAv1Y4l0E/JqoWy4H8V3nCM15S4AFL7Pqr4WpL9pC3i73On p27uWLmVA3lNxhjg2NJBUAVlQI31nGHe2j5wSQWW1BxSoHAWZRARj+T8GLysfo/8 h+o95y7/F5sCdN5/Jp5sUPXFA/hbPsu54yYDj0pHt3CyTcxGvkDXuT+GSTFy5KsG Z0FmTZNuMAOgev7n0+ZCOaxXm3EkPUQR8vpVbBW0GNbNbJGJWvVVaZYrEQ9J9/zf kjw58gmvLYMG5Aux6eNd15NbfCGBeR3YikeaWTd2MkPlj+VHaJPzHgwlewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDLsPdUBRdYGZ7yIZsCRsXtCVuFDMB8GA1UdIwQY MBaAFBes32s3DPEEyHLMTbrrc3Gy98aKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYt ZGZjODVhZTM3OWQ0LzEvTXV3OTFRRkYxZ1pudklobXdKR3hlMEpXNFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYtZGZjODVhZTM3OWQ0 LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjnAAwQC ud70MA0EAgACMAcDBQMqFNQAMA0GCSqGSIb3DQEBCwUAA4IBAQBUjvQFZ07fXRhN vQdy0VeyVaXKQOpf/2N0By4Nw93jknf165HzxNn3hD5nBqX9vyq2FZKGXDCHdJbx Yi4PNHizYziXH0vXz8C4Bn4EOcnInldnA+cAhmBXZrjSf6KdffjvFs1etZKQ2+5d PmQHudTunHevaAAM1vV3DRl4/NFVVvjP4ptsejPWgNuVZhc+noNE5KskGR1g3VxF n9ftOF5cDrxGfMZgwwPg0fe8WehdwAOSHUReE2Xct5gTALEBT2ya2Wfz18+3+JJt 3aZlHf/8x8cy9Ib3ghB2a3VD19pmzjErIv/lzsN5TnO4E7kabBTCJW7zwC3QC3TN zgUPj2Ae -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:07 2026 by rpki-client