This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa
File: MM5bwtQVjNMLa24HAAsYzVkMO-0.roa (raw, json)
Hash identifier: PyAylfGi7oxHc9wTlMze4kzyfLTmAD3thM2tfRQ1RLY=
Subject key identifier: 30:CE:5B:C2:D4:15:8C:D3:0B:6B:6E:07:00:0B:18:CD:59:0C:3B:ED
Certificate issuer: /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial: 019B7FF276989BB9C5CDB6E0B49A866FF61D
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa
Signing time: Fri 02 Jan 2026 18:22:35 +0000
ROA not before: Fri 02 Jan 2026 18:22:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28932
IP address blocks: 194.113.176.0/24 maxlen: 32
194.113.177.0/24 maxlen: 32
194.113.178.0/24 maxlen: 32
194.113.179.0/24 maxlen: 32
195.22.136.0/24 maxlen: 32
195.22.137.0/24 maxlen: 32
195.49.156.0/24 maxlen: 32
195.49.157.0/24 maxlen: 32
195.49.158.0/24 maxlen: 32
195.49.159.0/24 maxlen: 32
195.238.160.0/24 maxlen: 32
195.238.161.0/24 maxlen: 32
195.238.162.0/24 maxlen: 32
195.238.163.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:76:98:9b:b9:c5:cd:b6:e0:b4:9a:86:6f:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Validity
Not Before: Jan 2 18:22:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ce5bc2d4158cd30b6b6e07000b18cd590c3bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:75:d5:14:a4:fa:c7:2f:e4:4d:f0:fa:9d:
36:46:6c:8b:78:ed:ff:b1:27:df:5c:dc:3d:28:44:
60:45:51:fa:a6:74:99:b3:78:d7:be:f3:f4:d6:f4:
a9:2f:fe:c3:82:28:93:84:eb:db:ed:45:b8:29:d8:
68:fa:8e:4b:4b:e8:14:52:ba:d2:18:75:75:89:b8:
cc:7b:ac:7a:bd:7a:57:80:99:5e:56:47:b3:83:1e:
11:c3:fa:7e:73:89:b3:1d:04:a9:5a:4a:cd:cc:d5:
d4:49:6a:bb:79:10:47:7b:ad:f5:df:39:33:4a:a4:
64:9a:3d:0e:ab:69:b3:f2:21:b3:d4:e8:a4:bf:fa:
0d:de:e0:6e:54:cb:ca:53:58:a8:02:4f:d3:b9:b2:
d4:e0:8f:7f:2d:02:46:54:b3:dc:0f:3a:fb:02:70:
b5:2e:7c:64:a1:d6:12:35:cb:9f:88:4a:0c:b3:b1:
bc:d8:e7:27:21:24:34:d8:34:b2:d5:09:05:d6:d1:
23:f5:d1:0e:c1:fd:9d:ad:a5:ca:e4:bf:e5:87:71:
1d:51:b7:28:3e:1c:14:86:f2:7b:fe:d8:4b:7c:3e:
73:90:a3:a2:3a:e1:7b:a6:d5:82:cf:56:37:c6:d9:
bb:73:80:1f:73:23:9b:0e:56:e7:95:0b:a8:66:3a:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:5B:C2:D4:15:8C:D3:0B:6B:6E:07:00:0B:18:CD:59:0C:3B:ED
X509v3 Authority Key Identifier:
keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.176.0/22
195.22.136.0/23
195.49.156.0/22
195.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
64:5f:c8:ca:76:18:03:c7:91:66:ec:ae:d9:ad:83:20:aa:d1:
80:c8:6e:1d:90:2c:d8:c6:7d:3c:7f:7b:2b:95:12:f7:8d:ca:
ce:3d:86:d2:29:f5:f9:2e:be:f1:10:72:96:87:e1:7e:0b:0d:
d9:a1:f5:63:06:4a:c9:57:b2:90:1e:f4:87:1d:cb:ef:3f:1b:
08:5a:92:45:93:f2:05:cb:30:63:de:44:2e:4b:89:67:07:1c:
5c:c3:39:db:e2:7d:45:25:a0:ce:b8:3f:0f:bb:4d:48:0e:f5:
13:5a:fe:6f:6b:ff:c1:27:5e:d4:1d:0a:5c:a2:92:6d:d0:3f:
7c:8a:88:4b:a4:2c:16:9b:f4:0a:b4:c6:59:09:af:99:2b:38:
4a:ad:17:4b:44:94:dd:8b:9d:f4:91:66:fa:95:ce:95:d0:ba:
d1:42:b1:cd:c6:e1:cb:eb:fd:50:0e:7f:34:e4:16:6b:36:96:
ca:f4:2a:59:ad:17:94:09:dd:2b:3d:4f:ab:df:87:3d:e4:e5:
bd:d0:12:4a:72:97:3e:5b:b6:85:f9:f6:39:fb:51:8a:35:eb:
3a:b3:9d:ef:bf:12:4e:b4:37:86:10:b5:ae:ff:ef:50:28:ae:
e4:29:f0:23:cb:57:e4:17:11:f0:0f:f6:9d:24:ca:a3:58:11:
e3:2f:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:34 2026 by rpki-client