This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa File: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (raw, json) Hash identifier: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY= Subject key identifier: 31:68:95:EE:0A:DA:40:B7:AE:C3:80:18:80:9E:19:1C:80:40:B9:91 Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019B7E384D12004D0BB0520A918F7442D20F Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 80.93.193.0/24 maxlen: 24 80.93.199.0/24 maxlen: 24 80.93.203.0/24 maxlen: 24 80.93.204.0/24 maxlen: 24 80.93.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4d:12:00:4d:0b:b0:52:0a:91:8f:74:42:d2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=316895ee0ada40b7aec38018809e191c8040b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:35:79:65:59:5a:ff:55:f4:0d:6f:20:e9: a1:2e:99:cd:71:c7:35:81:d2:e0:1a:8d:14:28:cb: 35:a1:70:6a:ef:93:3b:97:77:51:9f:dd:80:c8:40: e7:dc:93:45:fa:cb:0d:06:ba:06:93:80:6c:c0:a3: a2:38:4a:36:75:96:61:73:ad:b7:88:cc:02:ff:8d: 2f:2c:32:d5:64:22:1a:9c:c8:a0:c2:61:42:3f:2d: dd:fa:82:a6:fe:06:aa:97:7e:48:ee:4b:85:9f:0d: db:b1:9b:46:b5:5e:dd:7f:3f:77:49:19:8b:f6:d9: 83:0f:67:a5:c5:73:37:39:4f:d0:71:3b:67:24:4a: c4:ec:1b:b5:ad:c2:b3:91:c6:bb:f8:36:ac:44:e8: ef:da:ee:df:4f:4b:9f:f2:e8:ed:9f:2e:4e:ee:f9: 75:32:1f:45:eb:e0:eb:e3:40:dd:29:18:5a:a3:4e: 4e:28:53:c5:54:d6:7c:15:d6:c0:71:80:04:7d:bd: 12:0f:6e:5c:8d:72:f5:d9:6b:4b:aa:85:52:70:4e: 37:46:fc:7f:d3:1d:45:d5:97:5b:92:1f:83:87:0f: 3f:6c:fb:6c:9f:bb:d7:5d:c3:fe:43:dc:d5:a4:16: 0f:eb:41:10:ee:b5:e7:2c:ae:9f:c6:84:81:11:6f: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:68:95:EE:0A:DA:40:B7:AE:C3:80:18:80:9E:19:1C:80:40:B9:91 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.193.0/24 80.93.199.0/24 80.93.203.0-80.93.205.255 Signature Algorithm: sha256WithRSAEncryption 7f:c9:13:a9:77:85:1a:24:6a:11:b3:46:42:98:14:2d:4a:6c: 88:7d:d4:55:47:60:24:2c:1c:e7:24:6b:8d:77:1e:32:8a:5f: 4c:fa:e5:e6:78:42:aa:9b:91:d8:bf:3c:bd:bd:2c:14:95:4a: 23:8e:d6:a1:52:06:4a:23:6d:10:06:91:02:99:ce:77:d6:ef: 25:67:f4:5e:65:fb:a0:2d:bb:48:a3:a5:25:40:4b:68:1b:c5: 56:60:75:a4:47:a3:50:05:37:ec:4f:47:58:3b:aa:4b:15:64: 21:bb:c7:15:3f:4d:15:5a:e8:2e:85:69:76:68:aa:bb:d7:86: 4d:78:3b:4e:e1:b7:ce:cf:21:ba:e1:75:1d:a4:dc:d6:76:8a: bd:e7:3e:d4:7a:12:fe:f2:5d:64:96:3f:07:7f:d2:4c:8c:0d: e0:f9:fa:c7:e6:27:9d:0a:b9:f0:e2:41:8e:b5:76:69:b1:a9: 68:f8:9e:46:23:64:31:64:c0:21:99:af:2c:32:51:79:c1:f5: 0b:0c:e9:cd:05:0d:28:d1:d8:3b:ef:e6:32:7f:0d:0c:ee:80: e1:ab:f3:90:9d:a7:21:3c:27:b7:12:dd:58:c4:eb:92:4a:85: db:3f:1b:48:41:5b:f1:5b:cb:58:a3:28:60:1a:2b:55:5a:a4: da:3f:1d:4e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OE0SAE0LsFIKkY90QtIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTY4OTVlZTBhZGE0MGI3YWVjMzgwMTg4MDllMTkxYzgwNDBiOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMk1eWVZWv9V9A1vIOmhLpnNccc1 gdLgGo0UKMs1oXBq75M7l3dRn92AyEDn3JNF+ssNBroGk4BswKOiOEo2dZZhc623 iMwC/40vLDLVZCIanMigwmFCPy3d+oKm/gaql35I7kuFnw3bsZtGtV7dfz93SRmL 9tmDD2elxXM3OU/QcTtnJErE7Bu1rcKzkca7+DasROjv2u7fT0uf8ujtny5O7vl1 Mh9F6+Dr40DdKRhao05OKFPFVNZ8FdbAcYAEfb0SD25cjXL12WtLqoVScE43Rvx/ 0x1F1Zdbkh+Dhw8/bPtsn7vXXcP+Q9zVpBYP60EQ7rXnLK6fxoSBEW8AmQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDFole4K2kC3rsOAGICeGRyAQLmRMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvTVdpVjdncmFRTGV1dzRBWWdKNFpISUJBdVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUF3BAwQA UF3HMAwDBABQXcsDBAFQXcwwDQYJKoZIhvcNAQELBQADggEBAH/JE6l3hRokahGz RkKYFC1KbIh91FVHYCQsHOcka413HjKKX0z65eZ4Qqqbkdi/PL29LBSVSiOO1qFS BkojbRAGkQKZznfW7yVn9F5l+6Atu0ijpSVAS2gbxVZgdaRHo1AFN+xPR1g7qksV ZCG7xxU/TRVa6C6FaXZoqrvXhk14O07ht87PIbrhdR2k3NZ2ir3nPtR6Ev7yXWSW Pwd/0kyMDeD5+sfmJ50KufDiQY61dmmxqWj4nkYjZDFkwCGZrywyUXnB9QsM6c0F DSjR2Dvv5jJ/DQzugOGr85CdpyE8J7cS3VjE65JKhds/G0hBW/Fby1ijKGAaK1Va pNo/HU4= -----END CERTIFICATE-----Generated at Thu Jan 8 14:20:52 2026 by rpki-client