This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa
File: mpJtsbgETmC7dBt4ggwDy82h6R0.roa (raw, json)
Hash identifier: E+0fFewOuAbiSOJJdk0VjGz9UYn9lB3tMo/+quCRNnk=
Subject key identifier: 9A:92:6D:B1:B8:04:4E:60:BB:74:1B:78:82:0C:03:CB:CD:A1:E9:1D
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 019B7BA47785508D8FBDBE77299C2DA075BE
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa
Signing time: Thu 01 Jan 2026 22:18:54 +0000
ROA not before: Thu 01 Jan 2026 22:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49381
IP address blocks: 91.229.196.0/22 maxlen: 22
193.169.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:77:85:50:8d:8f:bd:be:77:29:9c:2d:a0:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Jan 1 22:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a926db1b8044e60bb741b78820c03cbcda1e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:4c:63:0e:a5:6a:66:32:31:86:68:03:49:
bf:6b:e8:1c:27:9a:49:fa:5b:92:5d:3a:2e:6b:1b:
bf:d9:57:03:41:ca:32:9c:74:27:9a:96:14:02:18:
97:72:8a:d5:e9:f8:a7:bf:e3:fd:52:02:36:f1:ff:
bf:ce:01:80:5f:27:af:99:a0:96:53:f1:07:db:bd:
3d:ed:35:1e:68:f3:23:f6:f0:d8:42:06:c7:6b:dd:
85:56:62:25:9d:75:d3:f2:a6:81:06:09:10:75:a3:
e7:96:0e:cf:8e:11:bb:4d:5a:e1:61:b5:a5:63:28:
2b:c2:e9:04:50:3e:71:f2:47:39:03:49:ed:50:af:
bf:71:35:14:cc:dc:c9:45:eb:63:84:b4:64:77:20:
8f:5a:c1:ff:07:62:c4:01:a7:87:78:27:92:c2:6e:
44:f8:e0:79:a4:56:28:19:e7:9b:73:38:78:81:16:
51:1b:98:41:a4:85:a5:b0:32:5b:68:07:a9:dd:71:
8a:c6:f4:50:96:65:8c:c8:bf:87:00:4f:b9:02:f1:
57:25:ac:5c:c1:f3:c4:4b:c5:20:e8:04:c1:45:84:
40:b6:74:df:97:8e:28:7c:97:ef:e8:1d:44:5f:26:
6c:85:12:44:eb:79:f8:8d:44:4f:3d:6e:75:a9:1d:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:6D:B1:B8:04:4E:60:BB:74:1B:78:82:0C:03:CB:CD:A1:E9:1D
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.196.0/22
193.169.44.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c4:26:8b:bb:f3:9b:ea:b0:b9:b7:87:2c:21:cb:69:13:ab:
8d:aa:3f:f5:44:ff:68:84:62:56:e0:fc:81:1e:dd:cd:0c:81:
d2:31:7d:68:2a:fd:39:42:4b:d2:ab:68:13:fb:22:83:e9:c4:
da:b6:db:a7:e9:d7:91:7c:14:9a:1a:e6:5d:8a:39:a4:ef:ad:
4d:4b:b0:70:6c:2c:bf:4d:e6:45:72:56:e0:dc:5a:b2:1c:cd:
4b:b7:f3:65:c4:a4:59:12:47:28:38:70:db:54:5b:5f:e5:1f:
98:fb:f7:0c:70:d5:9d:04:86:21:fd:ad:da:94:36:21:2a:6b:
5d:cc:75:2b:a3:e0:83:fe:85:06:66:5f:d4:0e:01:7b:7d:e8:
4d:ce:18:d5:7c:c4:7d:07:82:87:91:d3:8b:ee:57:02:82:e1:
3b:8f:71:2f:82:51:32:fb:74:0c:b6:ef:1f:ed:70:ee:3d:8b:
bf:08:8f:81:72:0c:13:5f:a9:b6:34:9d:c0:94:36:42:f5:c6:
b1:08:62:fc:aa:6f:2d:b3:6b:ac:e9:71:5b:43:97:0b:eb:93:
07:85:78:6b:2c:7d:61:84:67:93:d8:24:da:7f:2e:d2:90:f1:
99:b1:d3:3a:72:09:c5:28:88:c5:51:a0:de:d8:5d:b4:3e:75:
50:3b:02:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7pHeFUI2Pvb53KZwtoHW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc2NzU4NWRjZWY3M2UxZmE5ZjY0ZGE2YzdmMjc2ZWQ4
N2E3MWYwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTkyNmRiMWI4MDQ0ZTYwYmI3NDFiNzg4MjBjMDNjYmNkYTFlOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp1MYw6lamYyMYZoA0m/a+gcJ5pJ
+luSXTouaxu/2VcDQcoynHQnmpYUAhiXcorV6finv+P9UgI28f+/zgGAXyevmaCW
U/EH27097TUeaPMj9vDYQgbHa92FVmIlnXXT8qaBBgkQdaPnlg7PjhG7TVrhYbWl
YygrwukEUD5x8kc5A0ntUK+/cTUUzNzJRetjhLRkdyCPWsH/B2LEAaeHeCeSwm5E
+OB5pFYoGeebczh4gRZRG5hBpIWlsDJbaAep3XGKxvRQlmWMyL+HAE+5AvFXJaxc
wfPES8Ug6ATBRYRAtnTfl44ofJfv6B1EXyZshRJE63n4jURPPW51qR0eEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJqSbbG4BE5gu3QbeIIMA8vNoekdMB8GA1UdIwQY
MBaAFBaXZ1hdzvc+H6n2TabH8nbth6cfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAt
NDdiNjMwOTUzYzUwLzEvbXBKdHNiZ0VUbUM3ZEJ0NGdnd0R5ODJoNlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAtNDdiNjMwOTUzYzUw
LzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+XEAwQB
waksMA0GCSqGSIb3DQEBCwUAA4IBAQBZxCaLu/Ob6rC5t4csIctpE6uNqj/1RP9o
hGJW4PyBHt3NDIHSMX1oKv05QkvSq2gT+yKD6cTattun6deRfBSaGuZdijmk761N
S7BwbCy/TeZFclbg3FqyHM1Lt/NlxKRZEkcoOHDbVFtf5R+Y+/cMcNWdBIYh/a3a
lDYhKmtdzHUro+CD/oUGZl/UDgF7fehNzhjVfMR9B4KHkdOL7lcCguE7j3EvglEy
+3QMtu8f7XDuPYu/CI+BcgwTX6m2NJ3AlDZC9caxCGL8qm8ts2us6XFbQ5cL65MH
hXhrLH1hhGeT2CTafy7SkPGZsdM6cgnFKIjFUaDe2F20PnVQOwLc
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:15 2026 by rpki-client