This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa File: MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa (raw, json) Hash identifier: 6+se8GWynfFcWjVvzZnWa9acPijPMo+xD9nNkmbbk70= Subject key identifier: 31:47:1B:D4:D2:EE:15:F6:3B:31:D1:7D:5F:97:F4:75:F4:D9:46:11 Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1 Certificate serial: 019B7F852FD3C1FD7409863535C576CB9E0A Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51607 IP address blocks: 109.235.191.0/24 maxlen: 24 185.30.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2f:d3:c1:fd:74:09:86:35:35:c5:76:cb:9e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31471bd4d2ee15f63b31d17d5f97f475f4d94611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:36:b3:cf:24:12:aa:28:06:d1:01:be:d8: 1f:25:1f:13:8e:e4:d1:77:32:2c:64:76:1e:f0:60: 81:b3:11:07:d0:27:3d:38:76:be:ef:5a:51:0a:6d: f2:04:5c:c6:ca:6d:af:f6:29:68:b0:80:c2:0d:e6: d7:73:f6:7f:6f:f9:3b:c5:7d:53:e4:9f:28:3f:ff: 8a:04:77:28:22:83:ca:71:c5:43:15:84:5e:05:40: cc:fd:12:89:72:33:44:55:fb:96:4e:cf:ab:af:ff: 20:f0:7f:3e:f2:f3:c2:29:7e:c1:74:e4:7d:63:eb: 54:d2:01:02:8f:7a:c9:05:bc:35:62:d2:03:aa:77: bc:ba:fa:1c:fb:76:8f:79:8c:2d:2e:ac:bb:3c:52: d6:6a:9e:d5:08:08:1d:10:84:2b:24:64:89:4c:2e: a8:4f:10:2c:8d:35:e8:b1:21:b2:ae:a9:aa:e0:8c: 49:a0:05:c1:29:8e:e3:56:9e:1f:36:23:7e:02:c0: ec:ad:96:0c:91:c8:5f:fe:54:22:ac:c4:3b:36:e3: 0e:41:bc:dd:15:53:74:71:c0:6e:1e:30:dc:60:c9: 4a:87:43:7e:68:4f:58:a8:4d:2d:0c:71:00:ac:4a: fe:8f:9a:f1:9f:d4:22:57:54:62:9c:72:7e:ff:f1: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:1B:D4:D2:EE:15:F6:3B:31:D1:7D:5F:97:F4:75:F4:D9:46:11 X509v3 Authority Key Identifier: keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.191.0/24 185.30.118.0/23 Signature Algorithm: sha256WithRSAEncryption 18:be:d2:ad:36:39:8b:8b:42:60:d0:cd:82:b7:ae:4c:b6:0b: a8:ce:b0:b2:df:8c:59:7f:55:05:86:1e:3d:25:04:eb:91:75: 86:ca:84:7f:2c:ef:a7:00:fe:3f:76:6c:5e:6c:8a:19:66:62: 7c:e8:d9:ff:a1:60:be:a1:0e:e6:1d:01:a9:f0:a4:6c:a3:55: 39:ea:c6:8a:1f:35:73:ec:67:e7:51:66:97:8b:8d:bc:16:c7: 5a:66:07:3f:18:39:d1:b4:46:dc:46:74:7f:cf:a7:0c:a3:81: 3d:2a:b9:30:bb:16:1d:0d:b3:06:9a:8f:a0:de:01:9c:9e:3c: 84:d3:e3:b1:f6:7e:96:02:3e:0f:2e:b4:32:d8:5a:e8:b6:29: a2:ef:68:33:57:a6:fc:79:a0:83:3c:2c:f4:55:38:fb:bb:e1: ae:06:35:2b:15:f9:c0:a0:89:0d:a5:55:80:c1:cb:d1:2d:fa: f8:26:7d:3b:ca:e6:3b:3e:c4:e8:bd:3c:74:c6:cd:a2:32:60: 8e:09:41:0d:1c:36:18:5b:6e:b3:b6:33:2a:0d:c5:f3:96:bb: 4b:5b:63:fd:e2:a1:88:04:1f:05:c9:e4:dc:75:e7:ca:17:db: 01:0c:1d:0a:db:a5:07:df:1c:be:f7:13:0b:e0:a3:2e:d9:c7: b4:e9:31:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hS/Twf10CYY1NcV2y54KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz YzMyZTEwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTQ3MWJkNGQyZWUxNWY2M2IzMWQxN2Q1Zjk3ZjQ3NWY0ZDk0NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOo2s88kEqooBtEBvtgfJR8TjuTR dzIsZHYe8GCBsxEH0Cc9OHa+71pRCm3yBFzGym2v9ilosIDCDebXc/Z/b/k7xX1T 5J8oP/+KBHcoIoPKccVDFYReBUDM/RKJcjNEVfuWTs+rr/8g8H8+8vPCKX7BdOR9 Y+tU0gECj3rJBbw1YtIDqne8uvoc+3aPeYwtLqy7PFLWap7VCAgdEIQrJGSJTC6o TxAsjTXosSGyrqmq4IxJoAXBKY7jVp4fNiN+AsDsrZYMkchf/lQirMQ7NuMOQbzd FVN0ccBuHjDcYMlKh0N+aE9YqE0tDHEArEr+j5rxn9QiV1RinHJ+//G4HwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDFHG9TS7hX2OzHRfV+X9HX02UYRMB8GA1UdIwQY MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et MThiZGZlOGNjMGNkLzEvTVVjYjFOTHVGZlk3TWRGOVg1ZjBkZlRaUmhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2EtMThiZGZlOGNjMGNk LzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbeu/AwQB uR52MA0GCSqGSIb3DQEBCwUAA4IBAQAYvtKtNjmLi0Jg0M2Ct65MtguozrCy34xZ f1UFhh49JQTrkXWGyoR/LO+nAP4/dmxebIoZZmJ86Nn/oWC+oQ7mHQGp8KRso1U5 6saKHzVz7GfnUWaXi428FsdaZgc/GDnRtEbcRnR/z6cMo4E9KrkwuxYdDbMGmo+g 3gGcnjyE0+Ox9n6WAj4PLrQy2Frotimi72gzV6b8eaCDPCz0VTj7u+GuBjUrFfnA oIkNpVWAwcvRLfr4Jn07yuY7PsTovTx0xs2iMmCOCUENHDYYW26ztjMqDcXzlrtL W2P94qGIBB8FyeTcdefKF9sBDB0K26UH3xy+9xML4KMu2ce06TH4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:39 2026 by rpki-client