This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa File: MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa (raw, json) Hash identifier: TCJSYgPCBj82L62nMaeEdJ0VmNDiGeeuJdnCuR6MdlA= Subject key identifier: 30:5B:B8:88:84:BC:50:B8:59:9D:8E:05:C6:73:1D:EE:B4:E3:1C:11 Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83 Certificate serial: 019B783495055C9E20437500EF0EE8DE0330 Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201607 IP address blocks: 185.64.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:95:05:5c:9e:20:43:75:00:ef:0e:e8:de:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305bb88884bc50b8599d8e05c6731deeb4e31c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:4f:b6:7e:36:5c:9d:b8:71:1a:12:dc:a4: e0:db:10:5f:87:cc:2a:f8:a9:39:0f:6b:b4:2a:c6: 96:a3:45:fa:65:e6:71:a1:9e:58:33:cd:e8:7c:cf: 20:74:1f:e5:35:b3:56:13:72:01:c1:19:8c:03:6b: 29:26:c8:85:17:f7:65:ac:7d:0c:7d:86:ae:ab:7e: 1d:04:89:56:fd:86:dd:c7:62:f0:cc:7d:24:79:ae: 01:8f:ce:d1:d6:d7:a2:af:b5:98:1d:9a:c5:ec:41: ba:62:96:5d:40:74:7a:58:a6:83:20:c1:97:14:e8: 64:01:52:de:2c:4e:89:44:6e:aa:01:5e:0f:fa:72: 18:db:c7:c1:64:d7:05:0c:4c:71:41:6f:2f:7d:83: 8f:82:c6:e3:b3:2f:ba:ad:f8:df:94:5e:81:84:40: 97:35:13:c8:ba:78:c8:5a:6a:db:4e:9e:b4:a7:46: 1d:32:c6:11:5b:57:c3:07:48:43:e7:b7:8d:ce:e2: 1c:b6:32:98:a3:18:97:ce:ab:6a:6f:09:a2:5c:f8: 49:82:3d:49:a3:12:85:a4:b1:16:e9:f2:c5:9e:58: 0f:1a:4a:1a:81:bb:c7:43:dd:28:bd:81:ff:49:84: b1:fb:00:66:6b:e5:b2:85:ef:cf:22:86:ac:9d:d7: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:B8:88:84:BC:50:B8:59:9D:8E:05:C6:73:1D:EE:B4:E3:1C:11 X509v3 Authority Key Identifier: keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.16.0/22 Signature Algorithm: sha256WithRSAEncryption b9:c4:94:3e:cb:47:02:a4:ea:a6:f9:aa:df:15:be:3a:42:7d: 53:7a:cc:9f:e6:7a:49:3a:d7:e2:2a:d5:3c:22:d4:c2:f1:e7: 7f:6f:1a:a0:e2:3d:e2:c9:35:c7:b6:71:f9:1f:cd:59:e8:ca: 54:45:88:31:e7:83:68:c9:f1:5f:c7:71:05:11:a3:3e:d9:da: ff:d0:27:16:30:fc:a1:7b:d4:88:ad:c3:02:7d:e9:2b:89:07: 5a:cf:33:85:61:e0:b7:ad:4c:e0:c0:e5:bf:a3:e0:c7:08:5d: 15:9c:7c:0f:b4:cd:51:09:4b:0d:3d:b1:af:75:7d:3c:e0:3f: 21:df:6c:d9:07:65:d1:67:e4:b3:5e:02:f9:4b:35:27:c1:2f: c0:36:7b:70:dd:83:62:8a:ed:cf:8a:32:5d:01:f2:43:35:33: 42:85:82:12:5f:5a:7e:74:4c:32:25:46:54:02:25:1a:3f:21: 8b:43:76:55:17:70:f5:a0:67:8f:57:08:5a:46:f2:20:1f:12: 2d:3f:7e:1e:d8:bd:eb:ab:17:12:fc:e2:df:b2:a7:a4:b8:70: 27:aa:33:22:ea:e3:60:87:86:ce:c9:34:cc:7d:b4:03:32:66: cb:56:41:ce:5c:05:23:f1:5e:cd:47:83:6f:33:f9:84:56:48: 3f:ed:fa:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJUFXJ4gQ3UA7w7o3gMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj N2ZmODMwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDViYjg4ODg0YmM1MGI4NTk5ZDhlMDVjNjczMWRlZWI0ZTMxYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17pPtn42XJ24cRoS3KTg2xBfh8wq +Kk5D2u0KsaWo0X6ZeZxoZ5YM83ofM8gdB/lNbNWE3IBwRmMA2spJsiFF/dlrH0M fYauq34dBIlW/Ybdx2LwzH0kea4Bj87R1teir7WYHZrF7EG6YpZdQHR6WKaDIMGX FOhkAVLeLE6JRG6qAV4P+nIY28fBZNcFDExxQW8vfYOPgsbjsy+6rfjflF6BhECX NRPIunjIWmrbTp60p0YdMsYRW1fDB0hD57eNzuIctjKYoxiXzqtqbwmiXPhJgj1J oxKFpLEW6fLFnlgPGkoagbvHQ90ovYH/SYSx+wBma+Wyhe/PIoasnddTuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBbuIiEvFC4WZ2OBcZzHe604xwRMB8GA1UdIwQY MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt NGIzMTEzMjZjMjMwLzEvTUZ1NGlJUzhVTGhablk0RnhuTWQ3clRqSEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUAQMA0G CSqGSIb3DQEBCwUAA4IBAQC5xJQ+y0cCpOqm+arfFb46Qn1Tesyf5npJOtfiKtU8 ItTC8ed/bxqg4j3iyTXHtnH5H81Z6MpURYgx54NoyfFfx3EFEaM+2dr/0CcWMPyh e9SIrcMCfekriQdazzOFYeC3rUzgwOW/o+DHCF0VnHwPtM1RCUsNPbGvdX084D8h 32zZB2XRZ+SzXgL5SzUnwS/ANntw3YNiiu3PijJdAfJDNTNChYISX1p+dEwyJUZU AiUaPyGLQ3ZVF3D1oGePVwhaRvIgHxItP34e2L3rqxcS/OLfsqekuHAnqjMi6uNg h4bOyTTMfbQDMmbLVkHOXAUj8V7NR4NvM/mEVkg/7fqV -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:53 2026 by rpki-client