This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/MXmi4elQgkZloOXKc5KxZJXFILw.roa File: MXmi4elQgkZloOXKc5KxZJXFILw.roa (raw, json) Hash identifier: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ= Subject key identifier: 31:79:A2:E1:E9:50:82:46:65:A0:E5:CA:73:92:B1:64:95:C5:20:BC Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Certificate serial: 019B76EB6C9BA776A0C0A6F352FC79FC9F56 Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/MXmi4elQgkZloOXKc5KxZJXFILw.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 188.95.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6c:9b:a7:76:a0:c0:a6:f3:52:fc:79:fc:9f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3179a2e1e950824665a0e5ca7392b16495c520bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:7d:76:c7:6c:7c:73:c1:59:e2:b8:d8:31: 0e:94:77:c0:01:76:33:03:f2:be:d0:55:ac:49:8c: 41:ad:3a:bc:7a:0b:6c:af:25:07:b0:01:02:6b:b4: d4:78:2c:f2:c3:d5:74:cb:29:57:5f:4d:3f:17:5e: 35:ca:96:00:19:0b:f8:8c:af:28:ed:77:32:d9:13: ee:5b:2e:14:a7:0e:2a:87:c2:27:b4:e2:b1:87:f3: 86:73:d2:da:ab:b4:07:c3:d3:16:25:a9:1a:16:c8: bc:37:d5:e9:2a:73:03:f3:39:89:97:bf:24:0b:0d: 79:92:b1:a4:94:41:51:68:2a:f8:cc:64:3f:ea:4d: 39:5c:88:e9:f9:25:c9:cb:24:f9:a8:da:70:ba:56: 34:73:94:87:0e:5f:13:ee:14:b5:e1:1e:79:87:65: a8:38:91:b0:3c:30:cc:40:3f:18:f1:6c:2d:39:5d: 1b:98:b7:9c:61:a1:82:54:f7:f4:cb:39:a7:2d:ee: 4d:1c:97:f7:18:7d:f4:8d:2b:b7:30:0b:9b:36:b3: e9:8a:63:a9:69:4a:4b:3f:32:b9:14:1e:13:97:ff: be:c7:11:80:5b:dd:9a:d1:fb:52:db:8e:e6:67:40: 3b:ad:2a:4b:2d:e5:05:45:16:cd:14:61:92:01:b4: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:A2:E1:E9:50:82:46:65:A0:E5:CA:73:92:B1:64:95:C5:20:BC X509v3 Authority Key Identifier: keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/MXmi4elQgkZloOXKc5KxZJXFILw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.91.0/24 Signature Algorithm: sha256WithRSAEncryption a0:64:6a:9e:c7:77:f1:03:66:81:88:f5:e1:2b:2a:1a:e2:47: 07:5a:0f:59:bf:de:dd:b1:d9:db:52:38:f7:0e:3e:12:21:0c: e6:fa:a4:f1:80:66:1f:08:ee:db:8f:b5:f1:34:49:67:06:8b: 84:28:71:7a:05:b8:f6:14:7b:2c:09:74:78:3e:73:18:40:59: 9f:50:d8:64:5c:8c:7a:45:b1:18:9a:f0:b4:be:14:33:b8:ae: 77:b8:66:bd:8a:12:52:43:c0:ab:7c:a2:2a:1c:18:f2:5a:be: ae:ac:19:3d:88:42:00:87:c0:71:5a:25:c6:5e:6b:1b:d6:39: ee:63:8c:e8:f5:a8:ad:78:4c:44:c0:70:0e:00:23:d9:2a:6d: a7:f9:83:a7:01:2c:dd:58:d3:7a:ef:d1:1e:f2:bc:a3:0d:05: 38:af:c6:09:67:b9:38:9f:a4:0c:6a:ee:d4:05:62:59:21:63: d3:d7:de:05:a6:eb:17:bd:e3:2d:52:b6:f1:c5:52:45:bb:9f: 45:82:5d:19:57:49:ce:21:9a:7f:22:b5:bd:6f:a2:e3:63:81: d8:53:c9:80:ab:6b:57:56:93:6c:50:cf:7c:6f:01:7e:c4:5e: b6:0a:4a:1a:43:0c:bf:f7:da:38:03:30:7c:0d:ac:a5:03:d5: 88:b6:16:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262ybp3agwKbzUvx5/J9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl NzkzNWEwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTc5YTJlMWU5NTA4MjQ2NjVhMGU1Y2E3MzkyYjE2NDk1YzUyMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZ9dsdsfHPBWeK42DEOlHfAAXYz A/K+0FWsSYxBrTq8egtsryUHsAECa7TUeCzyw9V0yylXX00/F141ypYAGQv4jK8o 7Xcy2RPuWy4Upw4qh8IntOKxh/OGc9Laq7QHw9MWJakaFsi8N9XpKnMD8zmJl78k Cw15krGklEFRaCr4zGQ/6k05XIjp+SXJyyT5qNpwulY0c5SHDl8T7hS14R55h2Wo OJGwPDDMQD8Y8WwtOV0bmLecYaGCVPf0yzmnLe5NHJf3GH30jSu3MAubNrPpimOp aUpLPzK5FB4Tl/++xxGAW92a0ftS247mZ0A7rSpLLeUFRRbNFGGSAbRNmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDF5ouHpUIJGZaDlynOSsWSVxSC8MB8GA1UdIwQY MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt MGQzOGRkZGIwNzgwLzEvTVhtaTRlbFFna1psb09YS2M1S3haSlhGSUx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9bMA0G CSqGSIb3DQEBCwUAA4IBAQCgZGqex3fxA2aBiPXhKyoa4kcHWg9Zv97dsdnbUjj3 Dj4SIQzm+qTxgGYfCO7bj7XxNElnBouEKHF6Bbj2FHssCXR4PnMYQFmfUNhkXIx6 RbEYmvC0vhQzuK53uGa9ihJSQ8CrfKIqHBjyWr6urBk9iEIAh8BxWiXGXmsb1jnu Y4zo9aiteExEwHAOACPZKm2n+YOnASzdWNN679Ee8ryjDQU4r8YJZ7k4n6QMau7U BWJZIWPT194FpusXveMtUrbxxVJFu59Fgl0ZV0nOIZp/IrW9b6LjY4HYU8mAq2tX VpNsUM98bwF+xF62CkoaQwy/99o4AzB8DaylA9WIthbx -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:54 2026 by rpki-client