This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/MTWvaT-KZib9yb4FWgpaDciaIa4.roa File: MTWvaT-KZib9yb4FWgpaDciaIa4.roa (raw, json) Hash identifier: udiDof62oIqMZQkTZswgaISYaPILO26piyBTi1c5Vbg= Subject key identifier: 31:35:AF:69:3F:8A:66:26:FD:C9:BE:05:5A:0A:5A:0D:C8:9A:21:AE Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868 Certificate serial: 019B79EC661A78654BEAA7D42963137E5830 Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/MTWvaT-KZib9yb4FWgpaDciaIa4.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214254 IP address blocks: 194.116.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:66:1a:78:65:4b:ea:a7:d4:29:63:13:7e:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3135af693f8a6626fdc9be055a0a5a0dc89a21ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:5f:a2:c0:39:e3:c5:bc:4a:95:bb:3f:e2: 2b:b4:20:6c:82:73:f2:85:82:af:d2:9b:01:32:36: 50:29:4e:33:c1:94:b8:00:11:9c:59:be:3b:f5:96: d6:59:81:ba:49:f3:d6:73:f3:f8:cd:c3:aa:d9:f5: f4:ee:53:ba:2e:37:37:0a:96:a3:e4:e2:e9:df:65: 81:a1:1d:7f:d5:13:6b:7f:01:9a:cf:74:25:bb:2f: ec:3a:49:4f:68:18:c7:dc:a3:c2:e9:d4:12:cf:aa: d7:a4:70:c7:a8:74:07:58:ab:cb:61:af:6b:da:24: a8:d0:52:b6:ae:49:12:09:e8:09:23:d4:c3:79:c2: 68:08:35:07:05:88:bc:6b:03:21:cc:a5:e7:fa:02: fc:4e:fb:99:7e:d3:62:e1:1e:78:e6:62:db:c7:0a: e5:f0:fb:6f:e1:59:6e:15:6a:5c:0b:20:0b:2c:a8: f4:2f:2d:a6:83:8b:db:81:49:8a:8f:03:af:73:02: 76:d2:df:82:e6:3b:10:1e:2d:b1:46:57:0a:73:ce: 88:2d:00:71:d4:3b:6b:78:0b:11:91:33:81:7c:2a: bb:9b:84:0b:ad:8e:19:c9:c7:76:13:f8:54:82:d0: d8:56:d7:00:dd:d5:ce:f5:b9:bd:d9:ab:e3:68:3d: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:AF:69:3F:8A:66:26:FD:C9:BE:05:5A:0A:5A:0D:C8:9A:21:AE X509v3 Authority Key Identifier: keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/MTWvaT-KZib9yb4FWgpaDciaIa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.146.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:4c:a3:c6:c9:48:a0:4c:6b:ba:e1:2f:0c:28:d1:54:b5:36: 2c:b8:cb:be:01:8b:f2:59:8c:7a:aa:e9:cb:46:0e:82:b4:21: 1f:04:e1:83:3a:1c:80:b7:33:90:57:2c:e5:0d:de:d1:1d:e3: 69:97:bb:0b:12:c2:c4:81:4c:1e:31:75:42:95:44:07:6a:1c: bb:ce:42:61:48:cb:5c:fa:27:6f:ca:85:b4:1e:f2:c5:1a:4b: b9:c5:3c:17:b9:c4:e8:af:83:c1:4e:f2:ee:b6:e5:6b:cc:1d: bf:a2:be:07:9d:51:50:12:c7:d8:ca:7d:7e:4e:72:d5:40:5e: 7e:98:28:72:4d:9b:a1:05:ec:3a:8f:56:3c:15:82:57:b2:66: 71:70:b0:02:f3:d9:b0:59:95:10:9b:d3:a7:58:dc:8a:d3:f3: 22:16:8d:5b:e0:3f:d7:60:06:4a:bb:69:51:0f:bf:b1:7c:c0: f4:e3:79:cf:70:ad:bf:60:89:1d:ce:a5:8d:6b:45:74:25:85: d2:61:a9:2b:f1:15:ea:c8:ea:57:2a:73:0e:82:35:b9:4a:13: cd:64:fd:91:f8:c6:04:13:28:4d:2f:22:5e:8b:87:6d:c2:2e: f1:89:79:31:53:b8:ea:2e:f2:c7:a5:94:a7:cb:1f:c5:08:da: e0:9f:01:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GYaeGVL6qfUKWMTflgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw MmY4NjgwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTM1YWY2OTNmOGE2NjI2ZmRjOWJlMDU1YTBhNWEwZGM4OWEyMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGRfosA548W8SpW7P+IrtCBsgnPy hYKv0psBMjZQKU4zwZS4ABGcWb479ZbWWYG6SfPWc/P4zcOq2fX07lO6Ljc3Cpaj 5OLp32WBoR1/1RNrfwGaz3Qluy/sOklPaBjH3KPC6dQSz6rXpHDHqHQHWKvLYa9r 2iSo0FK2rkkSCegJI9TDecJoCDUHBYi8awMhzKXn+gL8TvuZftNi4R545mLbxwrl 8Ptv4VluFWpcCyALLKj0Ly2mg4vbgUmKjwOvcwJ20t+C5jsQHi2xRlcKc86ILQBx 1DtreAsRkTOBfCq7m4QLrY4Zycd2E/hUgtDYVtcA3dXO9bm92avjaD0VlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDE1r2k/imYm/cm+BVoKWg3ImiGuMB8GA1UdIwQY MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt ZTU4NGNkNWY4ZDExLzEvTVRXdmFULUtaaWI5eWI0RldncGFEY2lhSWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnSSMA0G CSqGSIb3DQEBCwUAA4IBAQBvTKPGyUigTGu64S8MKNFUtTYsuMu+AYvyWYx6qunL Rg6CtCEfBOGDOhyAtzOQVyzlDd7RHeNpl7sLEsLEgUweMXVClUQHahy7zkJhSMtc +idvyoW0HvLFGku5xTwXucTor4PBTvLutuVrzB2/or4HnVFQEsfYyn1+TnLVQF5+ mChyTZuhBew6j1Y8FYJXsmZxcLAC89mwWZUQm9OnWNyK0/MiFo1b4D/XYAZKu2lR D7+xfMD043nPcK2/YIkdzqWNa0V0JYXSYakr8RXqyOpXKnMOgjW5ShPNZP2R+MYE EyhNLyJei4dtwi7xiXkxU7jqLvLHpZSnyx/FCNrgnwE0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:29 2026 by rpki-client