This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MQfRDJJrZSgqpFkycABj6n_FrtE.roa File: MQfRDJJrZSgqpFkycABj6n_FrtE.roa (raw, json) Hash identifier: jD5YfHl05Fzwsx8CWSstttlAvXM5fX4RjE71Bo2BFa4= Subject key identifier: 31:07:D1:0C:92:6B:65:28:2A:A4:59:32:70:00:63:EA:7F:C5:AE:D1 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758EC444E079AB6451BEC2EFAAE963A Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MQfRDJJrZSgqpFkycABj6n_FrtE.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200209 IP address blocks: 178.251.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ec:44:4e:07:9a:b6:45:1b:ec:2e:fa:ae:96:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3107d10c926b65282aa45932700063ea7fc5aed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:4a:1e:fa:84:df:c4:a7:34:db:7d:06:46: 1f:14:6f:2a:ca:99:a3:da:7a:62:34:fb:ef:72:eb: d3:25:73:6e:0a:7a:df:7e:39:74:8f:7e:8f:6f:43: 27:82:83:97:1b:b7:01:2f:3c:58:bd:b8:2a:22:b7: c5:cc:c6:5f:67:b8:30:b7:bd:7d:0c:4f:10:78:4a: ea:74:08:97:1a:2a:7a:cc:e1:b9:67:da:81:5a:08: be:fc:95:3b:8a:ae:e4:5d:33:8a:de:51:04:4b:61: 9a:68:21:91:3f:d0:cf:05:e0:34:8d:ed:6e:e8:da: 8b:59:c6:1b:06:70:d2:27:f2:ad:1f:ad:b1:7b:6c: 8a:d0:f0:d1:40:82:ae:cb:22:8a:aa:70:f1:f7:ea: d6:a8:aa:90:5b:88:66:c4:c5:b7:13:e9:28:b6:dd: 2c:66:11:d3:8e:f5:23:41:b4:ef:9d:6d:72:a1:51: 98:08:33:9d:7a:46:7e:d6:48:81:9c:cd:5e:e0:74: ac:66:3c:6f:49:ad:16:bc:b2:5d:46:57:75:07:14: ba:a1:e4:fc:18:d9:a9:9b:46:61:f2:a6:11:83:7a: 80:b6:f5:58:0c:54:35:b1:e5:22:93:55:1c:af:c1: 92:8e:cf:b7:f2:69:4f:99:0b:15:0d:8d:f0:ba:df: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:D1:0C:92:6B:65:28:2A:A4:59:32:70:00:63:EA:7F:C5:AE:D1 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MQfRDJJrZSgqpFkycABj6n_FrtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:a0:c2:5b:bc:7d:e4:92:af:b5:09:26:2b:10:a7:5c:9d:92: 61:9a:6b:94:d5:5d:49:44:dd:53:29:05:ef:fc:25:f8:c8:e6: 5e:5e:68:e7:02:a8:2d:58:b3:08:9c:7d:66:25:2a:01:af:22: 5f:2f:16:c5:ed:95:6f:3e:90:a9:cd:38:16:3f:5c:f4:47:c1: 06:1a:87:ca:9d:61:5d:68:db:27:e5:ac:4d:c5:f9:db:f4:d9: cf:fa:a1:65:4f:1c:24:8e:e5:d3:2c:79:7f:7c:bb:cb:2f:3c: 4f:8e:de:4f:cf:32:13:8a:84:27:09:0b:0b:7d:be:6c:5a:68: 44:40:55:ac:1b:4e:5f:5d:14:7f:d6:b4:46:32:1b:87:02:61: bb:c1:47:5c:31:f4:d4:d3:bd:ea:84:33:a5:a6:df:8b:62:53: e8:3f:78:aa:5c:9b:26:f9:2f:ca:82:99:7a:28:21:c0:d0:aa: 6e:48:5b:78:e7:bc:e6:9e:f7:9f:09:72:ec:7a:48:20:a4:e9: 90:81:1e:9f:53:45:56:79:36:86:30:2d:d1:bd:df:f6:fe:8c: 00:30:5b:a8:fb:81:19:85:09:5c:73:33:24:05:4b:fe:1e:27: 30:4a:a1:eb:9c:e4:3a:64:52:0a:52:d1:1c:83:2e:e2:fe:1e: 83:b6:38:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOxETgeatkUb7C76rpY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTA3ZDEwYzkyNmI2NTI4MmFhNDU5MzI3MDAwNjNlYTdmYzVhZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywdKHvqE38SnNNt9BkYfFG8qypmj 2npiNPvvcuvTJXNuCnrffjl0j36Pb0MngoOXG7cBLzxYvbgqIrfFzMZfZ7gwt719 DE8QeErqdAiXGip6zOG5Z9qBWgi+/JU7iq7kXTOK3lEES2GaaCGRP9DPBeA0je1u 6NqLWcYbBnDSJ/KtH62xe2yK0PDRQIKuyyKKqnDx9+rWqKqQW4hmxMW3E+kott0s ZhHTjvUjQbTvnW1yoVGYCDOdekZ+1kiBnM1e4HSsZjxvSa0WvLJdRld1BxS6oeT8 GNmpm0Zh8qYRg3qAtvVYDFQ1seUik1Ucr8GSjs+38mlPmQsVDY3wut/reQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEH0QySa2UoKqRZMnAAY+p/xa7RMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTVFmUkRKSnJaU2dxcEZreWNBQmo2bl9GcnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvvnMA0G CSqGSIb3DQEBCwUAA4IBAQB+oMJbvH3kkq+1CSYrEKdcnZJhmmuU1V1JRN1TKQXv /CX4yOZeXmjnAqgtWLMInH1mJSoBryJfLxbF7ZVvPpCpzTgWP1z0R8EGGofKnWFd aNsn5axNxfnb9NnP+qFlTxwkjuXTLHl/fLvLLzxPjt5PzzITioQnCQsLfb5sWmhE QFWsG05fXRR/1rRGMhuHAmG7wUdcMfTU073qhDOlpt+LYlPoP3iqXJsm+S/Kgpl6 KCHA0KpuSFt457zmnvefCXLsekggpOmQgR6fU0VWeTaGMC3Rvd/2/owAMFuo+4EZ hQlcczMkBUv+HicwSqHrnOQ6ZFIKUtEcgy7i/h6Dtjie -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:46 2026 by rpki-client