This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/MnDYEmNyAQzBpzR98qjs2sOtO_c.roa File: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (raw, json) Hash identifier: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw= Subject key identifier: 32:70:D8:12:63:72:01:0C:C1:A7:34:7D:F2:A8:EC:DA:C3:AD:3B:F7 Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837 Certificate serial: 019B797DE8B98D9B706CAB2F222FC3182572 Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/MnDYEmNyAQzBpzR98qjs2sOtO_c.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 95.175.68.0/22 maxlen: 22 95.175.72.0/22 maxlen: 22 95.175.76.0/22 maxlen: 22 195.66.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e8:b9:8d:9b:70:6c:ab:2f:22:2f:c3:18:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3270d8126372010cc1a7347df2a8ecdac3ad3bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:0e:61:83:6b:15:e9:72:5b:22:47:15:73: 68:6d:f2:f1:fe:2d:d9:86:d6:d2:f6:70:4f:9f:8a: e7:49:57:d8:e5:f6:56:f8:53:c8:49:5b:51:61:08: 37:c0:1f:35:80:14:8c:28:b7:1d:c1:76:8e:f8:9b: a6:c6:59:8d:09:55:b3:ca:76:b9:df:ed:b0:8f:2b: 3b:24:04:7a:94:b7:18:a0:c2:0c:36:f3:45:1e:0b: ee:3f:f7:d4:94:f9:37:25:c7:0d:11:77:47:d3:ad: f2:e6:7e:ba:28:73:f4:0b:17:e4:fd:d7:a9:60:a2: f1:18:0e:e5:87:18:91:01:5c:07:e2:c3:4e:1b:69: 8e:82:b7:22:48:0c:c0:29:e5:ef:7f:af:db:0c:00: 10:3d:ae:fe:a5:2c:c2:01:d7:73:21:e3:87:b7:54: 45:b1:af:d6:7f:d8:0d:c7:af:7f:41:9d:d4:ae:ee: 3e:f6:71:f7:be:7e:76:44:6e:89:07:ac:c5:c1:68: b2:fb:39:b7:96:44:f7:d6:54:e1:22:02:e3:90:52: 87:06:4e:97:b7:4a:46:4a:75:c8:06:6f:7d:77:92: 16:ba:21:41:d8:4c:91:ce:ab:fa:ba:e0:4c:c4:2f: ed:8c:9d:f2:d2:50:26:5d:9b:0c:d9:4a:9a:42:6b: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:D8:12:63:72:01:0C:C1:A7:34:7D:F2:A8:EC:DA:C3:AD:3B:F7 X509v3 Authority Key Identifier: keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/MnDYEmNyAQzBpzR98qjs2sOtO_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.175.68.0-95.175.79.255 195.66.218.0/23 Signature Algorithm: sha256WithRSAEncryption 93:6c:6f:6d:1f:a4:28:22:be:ed:bd:62:da:91:f7:59:83:a0: 18:2d:d6:62:7a:23:aa:ea:7f:78:94:d6:7a:a4:8e:4c:cc:6d: e0:fc:35:db:0f:d3:90:0e:5e:e7:d6:45:c3:fb:5b:fe:14:2d: c0:51:67:3e:44:59:e3:62:ac:bc:72:ba:74:6b:c6:3e:78:3a: e4:9d:47:37:cf:89:8e:e3:c0:79:63:c3:53:b1:c3:6d:90:dd: 89:68:6f:06:28:ca:22:be:d3:14:9b:4f:a4:c2:5e:6b:8c:a1: 6f:ee:47:bd:8d:f2:30:0f:6a:21:c1:78:5c:f9:20:5b:5d:31: b9:7a:77:ce:3c:85:98:a2:53:ec:f8:01:da:04:ff:84:9a:2d: ac:66:28:aa:ba:71:c7:2f:fc:66:16:42:9c:72:f2:e3:de:2d: 53:33:85:6b:cc:99:0f:75:5c:df:bc:b9:c6:5c:dc:9c:86:a9: a5:6c:91:8e:f3:f6:93:96:3a:e3:13:f1:bd:9c:6f:57:e1:9d: 0e:9a:ed:e9:94:70:21:3a:5b:aa:de:a5:09:18:4b:d5:ba:2c: 23:9d:52:9b:83:d2:bf:57:9e:c5:f4:35:45:79:a4:b9:b9:af: ac:12:ab:68:72:68:e7:54:77:4a:e9:db:46:29:fe:91:50:ca: 72:42:62:d2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fei5jZtwbKsvIi/DGCVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2 YmM4MzcwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjcwZDgxMjYzNzIwMTBjYzFhNzM0N2RmMmE4ZWNkYWMzYWQzYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUIOYYNrFelyWyJHFXNobfLx/i3Z htbS9nBPn4rnSVfY5fZW+FPISVtRYQg3wB81gBSMKLcdwXaO+JumxlmNCVWzyna5 3+2wjys7JAR6lLcYoMIMNvNFHgvuP/fUlPk3JccNEXdH063y5n66KHP0Cxfk/dep YKLxGA7lhxiRAVwH4sNOG2mOgrciSAzAKeXvf6/bDAAQPa7+pSzCAddzIeOHt1RF sa/Wf9gNx69/QZ3Uru4+9nH3vn52RG6JB6zFwWiy+zm3lkT31lThIgLjkFKHBk6X t0pGSnXIBm99d5IWuiFB2EyRzqv6uuBMxC/tjJ3y0lAmXZsM2UqaQmujTQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDJw2BJjcgEMwac0ffKo7NrDrTv3MB8GA1UdIwQY MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt MjYyZWIzOWJiZTc2LzEvTW5EWUVtTnlBUXpCcHpSOThxanMyc090T19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2 LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJfr0QD BARfr0ADBAHDQtowDQYJKoZIhvcNAQELBQADggEBAJNsb20fpCgivu29YtqR91mD oBgt1mJ6I6rqf3iU1nqkjkzMbeD8NdsP05AOXufWRcP7W/4ULcBRZz5EWeNirLxy unRrxj54OuSdRzfPiY7jwHljw1Oxw22Q3YlobwYoyiK+0xSbT6TCXmuMoW/uR72N 8jAPaiHBeFz5IFtdMbl6d848hZiiU+z4AdoE/4SaLaxmKKq6cccv/GYWQpxy8uPe LVMzhWvMmQ91XN+8ucZc3JyGqaVskY7z9pOWOuMT8b2cb1fhnQ6a7emUcCE6W6re pQkYS9W6LCOdUpuD0r9XnsX0NUV5pLm5r6wSq2hyaOdUd0rp20Yp/pFQynJCYtI= -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:33 2026 by rpki-client