This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/MVvq6Rgk9g4xb6udrHASJS9rhUU.roa File: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (raw, json) Hash identifier: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q= Subject key identifier: 31:5B:EA:E9:18:24:F6:0E:31:6F:AB:9D:AC:70:12:25:2F:6B:85:45 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B7D5C8310D8EB2A1CBFC675A2FC8D7D3F Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/MVvq6Rgk9g4xb6udrHASJS9rhUU.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 195.182.218.0/23 maxlen: 32 2001:7f8:42::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:83:10:d8:eb:2a:1c:bf:c6:75:a2:fc:8d:7d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=315beae91824f60e316fab9dac7012252f6b8545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:63:ad:84:90:83:ef:89:f4:97:89:42:99: 57:bf:c5:31:09:98:0b:89:04:b9:2b:9f:db:31:21: ab:c2:bb:da:41:9c:01:2b:c3:96:71:fd:c8:f1:fc: d8:47:86:98:73:88:de:98:85:a7:14:e3:1f:f7:27: 86:6d:e0:77:84:18:b0:93:c4:93:9c:7b:9c:f9:29: a3:2c:6f:e4:e5:ec:7d:8e:0d:22:35:c3:ca:7e:00: 36:ba:0a:5f:58:18:bf:fd:05:17:4b:53:5d:eb:57: a8:eb:fc:e6:61:2a:2f:07:e6:15:7e:23:d3:6e:87: 0e:56:da:ee:d6:74:1c:6b:60:b7:63:dc:2b:1c:b7: d2:88:a9:42:82:56:d8:47:e6:88:c0:ee:bc:42:cc: 04:b9:5c:b7:fc:94:c0:15:fa:a2:ba:bf:36:58:10: fe:08:13:97:b7:f0:59:1d:f3:13:24:9e:c0:3f:d1: b2:8a:79:31:d6:66:d6:4a:b0:b9:00:0e:a1:8e:91: 3c:50:ba:52:04:7a:b2:0f:b5:18:c0:ab:29:74:be: 29:5b:29:dd:a2:ea:05:e5:30:68:ff:87:24:c0:df: 80:f4:16:8e:a7:58:2d:ed:3e:71:29:b9:5f:1b:ee: 79:8d:a4:15:1c:68:f2:46:7b:4b:0e:bf:e8:03:43: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:EA:E9:18:24:F6:0E:31:6F:AB:9D:AC:70:12:25:2F:6B:85:45 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/MVvq6Rgk9g4xb6udrHASJS9rhUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.218.0/23 IPv6: 2001:7f8:42::/48 Signature Algorithm: sha256WithRSAEncryption 7a:00:a9:e5:91:7b:47:77:82:38:73:12:49:ff:d8:07:69:45: 79:40:a7:c4:b3:89:46:ef:d4:da:05:4b:16:be:4b:7e:ef:a0: b4:4d:09:58:cf:be:e7:76:75:76:3c:41:af:e0:d3:10:5a:7a: 53:b8:2b:4a:83:f8:54:c9:95:32:6e:a8:a8:99:33:06:ec:4b: de:2c:1c:4f:c6:c1:d9:a9:0c:55:e6:34:e4:79:43:13:7c:d4: 5f:a8:c2:61:f1:42:8c:3b:f3:4b:52:ea:3b:cc:0a:1e:72:c0: 8b:ee:5a:15:77:37:d3:b7:7f:5a:4d:4d:62:a7:62:d1:75:dc: d8:78:5b:60:cf:d7:a6:38:89:f4:68:ef:ac:c6:65:05:a1:50: 56:77:8e:8d:ac:ed:15:7e:45:d7:39:46:4e:49:02:24:f7:ac: 8b:58:1d:64:fe:e9:42:5e:60:f3:a6:01:68:5b:af:94:db:25: 64:63:ee:d9:59:96:06:20:73:a1:b2:5d:a7:62:c2:fd:59:b8: a4:b4:2f:71:45:2e:04:32:82:70:d7:3f:46:b1:91:8b:2a:46: 6a:d7:50:10:c1:3b:9f:ae:0a:19:c4:a1:83:03:0a:f1:e1:77: d4:30:d9:6f:b4:f0:8f:49:41:c9:0f:ac:54:f4:dd:89:6f:3d: da:4d:17:6d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XIMQ2OsqHL/GdaL8jX0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTViZWFlOTE4MjRmNjBlMzE2ZmFiOWRhYzcwMTIyNTJmNmI4NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0NjrYSQg++J9JeJQplXv8UxCZgL iQS5K5/bMSGrwrvaQZwBK8OWcf3I8fzYR4aYc4jemIWnFOMf9yeGbeB3hBiwk8ST nHuc+SmjLG/k5ex9jg0iNcPKfgA2ugpfWBi//QUXS1Nd61eo6/zmYSovB+YVfiPT bocOVtru1nQca2C3Y9wrHLfSiKlCglbYR+aIwO68QswEuVy3/JTAFfqiur82WBD+ CBOXt/BZHfMTJJ7AP9Gyinkx1mbWSrC5AA6hjpE8ULpSBHqyD7UYwKspdL4pWynd ouoF5TBo/4ckwN+A9BaOp1gt7T5xKblfG+55jaQVHGjyRntLDr/oA0O/DwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDFb6ukYJPYOMW+rnaxwEiUva4VFMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvTVZ2cTZSZ2s5ZzR4YjZ1ZHJIQVNKUzlyaFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw7baMA8E AgACMAkDBwAgAQf4AEIwDQYJKoZIhvcNAQELBQADggEBAHoAqeWRe0d3gjhzEkn/ 2AdpRXlAp8SziUbv1NoFSxa+S37voLRNCVjPvud2dXY8Qa/g0xBaelO4K0qD+FTJ lTJuqKiZMwbsS94sHE/GwdmpDFXmNOR5QxN81F+owmHxQow780tS6jvMCh5ywIvu WhV3N9O3f1pNTWKnYtF13Nh4W2DP16Y4ifRo76zGZQWhUFZ3jo2s7RV+Rdc5Rk5J AiT3rItYHWT+6UJeYPOmAWhbr5TbJWRj7tlZlgYgc6GyXadiwv1ZuKS0L3FFLgQy gnDXP0axkYsqRmrXUBDBO5+uChnEoYMDCvHhd9Qw2W+08I9JQckPrFT03YlvPdpN F20= -----END CERTIFICATE-----Generated at Sat Jan 3 18:31:40 2026 by rpki-client