This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/MWww8mg4IAuQ7tfubwcnBwcN-wc.roa File: MWww8mg4IAuQ7tfubwcnBwcN-wc.roa (raw, json) Hash identifier: h5+JwC9CF+2XnTKrJ979fW9yKh/yquKOOiCoaTps0Lw= Subject key identifier: 31:6C:30:F2:68:38:20:0B:90:EE:D7:EE:6F:07:27:07:07:0D:FB:07 Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73 Certificate serial: 019B7759459A233BDC60B1B984DA7A312225 Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/MWww8mg4IAuQ7tfubwcnBwcN-wc.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 91.142.133.0/24 maxlen: 24 91.193.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:45:9a:23:3b:dc:60:b1:b9:84:da:7a:31:22:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=316c30f26838200b90eed7ee6f072707070dfb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:70:61:da:bf:d9:a9:9f:ef:bd:ba:cb:8b: 6d:d8:28:b4:2c:20:a2:ba:f6:ac:89:4d:d8:d1:62: a8:56:31:a8:9a:9c:a0:73:f8:61:3f:c3:19:d6:9f: 30:87:69:1e:19:ce:f2:e4:7e:2e:b6:f2:73:dd:57: 00:f4:30:68:10:7e:24:3b:cb:43:6b:d4:07:25:cb: 46:9c:09:17:4f:8c:99:4b:ee:e8:0b:c5:3d:2d:11: c5:e5:33:97:e9:92:35:ab:ae:99:8e:ed:88:b6:88: fd:c4:55:1f:57:db:23:d0:ca:be:08:3d:6f:20:4a: 69:54:4d:4b:ad:3c:69:49:e6:4e:75:ac:8c:87:41: e9:89:f0:4f:30:91:b4:4c:7b:60:1b:2e:9d:60:a8: 12:d3:ef:c0:be:22:4a:2b:ea:43:4d:47:27:05:25: 71:2d:97:b6:70:80:34:07:a9:58:b0:16:6a:a5:e8: 81:8e:ad:c2:35:1d:45:c0:ad:d1:f8:0e:71:56:e4: a9:9c:0b:32:53:5d:8b:68:98:63:e4:03:14:64:c7: 14:6a:7d:be:6f:b4:12:d0:b6:7e:24:49:c5:de:f1: ef:5b:70:ac:58:b9:82:2e:ff:92:cf:2c:0d:37:ed: 2e:63:f3:eb:67:80:5a:84:fd:57:43:79:04:83:66: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:30:F2:68:38:20:0B:90:EE:D7:EE:6F:07:27:07:07:0D:FB:07 X509v3 Authority Key Identifier: keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/MWww8mg4IAuQ7tfubwcnBwcN-wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.133.0/24 91.193.74.0/24 Signature Algorithm: sha256WithRSAEncryption c9:ba:60:7a:10:4c:ce:94:10:de:88:87:26:fb:de:0c:cc:67: ce:08:75:cb:e6:08:5b:01:f3:bb:3f:3b:76:8e:9f:53:fc:37: 1c:6f:8c:53:b8:76:92:e9:33:63:77:02:24:77:69:5b:3c:b7: 13:a5:7a:18:24:d0:4d:ee:a0:e0:27:b6:ee:86:56:67:7a:1f: 97:b6:ec:c6:5c:40:c4:82:e5:e5:60:8a:58:56:af:1c:89:03: a4:54:22:26:f2:70:42:1e:47:7c:79:09:a9:35:87:15:0e:a1: 9c:bd:54:dc:6f:28:45:a8:bf:15:97:e7:fe:b8:7d:6f:c0:0c: 5a:ca:f3:9b:de:60:7d:36:1e:fe:16:34:64:cf:3d:13:c0:45: b0:83:8a:2c:27:d9:e6:3b:e0:7d:3a:16:9e:3e:49:df:0e:f6: 0d:39:0b:29:96:aa:9c:40:84:d9:d3:a8:5b:55:f9:57:c1:25: db:77:8d:93:e9:b1:e9:33:84:be:c8:2a:74:9e:04:f9:06:94: 4c:5f:9c:69:9f:dc:51:10:68:00:c0:2c:20:03:27:d3:21:e7: b4:e2:e4:87:a1:41:30:05:25:ea:e0:0c:42:1a:bf:6e:ed:bf: e6:31:31:f8:2d:41:88:fd:4a:08:d4:ea:35:19:38:85:a7:0b: d8:8f:e0:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WUWaIzvcYLG5hNp6MSIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGY0ODAzZTU0YjA4NGE5OWNiN2JiMDQ0YmY3OTEzMjc1 OTRiNzMwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTZjMzBmMjY4MzgyMDBiOTBlZWQ3ZWU2ZjA3MjcwNzA3MGRmYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJdwYdq/2amf7726y4tt2Ci0LCCi uvasiU3Y0WKoVjGompygc/hhP8MZ1p8wh2keGc7y5H4utvJz3VcA9DBoEH4kO8tD a9QHJctGnAkXT4yZS+7oC8U9LRHF5TOX6ZI1q66Zju2Itoj9xFUfV9sj0Mq+CD1v IEppVE1LrTxpSeZOdayMh0HpifBPMJG0THtgGy6dYKgS0+/AviJKK+pDTUcnBSVx LZe2cIA0B6lYsBZqpeiBjq3CNR1FwK3R+A5xVuSpnAsyU12LaJhj5AMUZMcUan2+ b7QS0LZ+JEnF3vHvW3CsWLmCLv+SzywNN+0uY/PrZ4BahP1XQ3kEg2YdvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDFsMPJoOCALkO7X7m8HJwcHDfsHMB8GA1UdIwQY MBaAFNHfSAPlSwhKmct7sES/eRMnWUtzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5Nzct NDhmNWU4NzY3ZDAyLzEvTVd3dzhtZzRJQXVRN3RmdWJ3Y25Cd2NOLXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5NzctNDhmNWU4NzY3ZDAy LzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW46FAwQA W8FKMA0GCSqGSIb3DQEBCwUAA4IBAQDJumB6EEzOlBDeiIcm+94MzGfOCHXL5ghb AfO7Pzt2jp9T/Dccb4xTuHaS6TNjdwIkd2lbPLcTpXoYJNBN7qDgJ7buhlZneh+X tuzGXEDEguXlYIpYVq8ciQOkVCIm8nBCHkd8eQmpNYcVDqGcvVTcbyhFqL8Vl+f+ uH1vwAxayvOb3mB9Nh7+FjRkzz0TwEWwg4osJ9nmO+B9OhaePknfDvYNOQsplqqc QITZ06hbVflXwSXbd42T6bHpM4S+yCp0ngT5BpRMX5xpn9xREGgAwCwgAyfTIee0 4uSHoUEwBSXq4AxCGr9u7b/mMTH4LUGI/UoI1Oo1GTiFpwvYj+BK -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client