This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa File: MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa (raw, json) Hash identifier: UqToIY/uIMk+vJNVcNlL0gMCWXoA/1adspZCvbwaa/A= Subject key identifier: 31:DB:94:C7:98:51:8E:32:9B:2D:A4:B2:D9:40:CB:7B:53:71:A7:8B Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab Certificate serial: 019B797F223E64B6E0D9A29DB20156CE1DC0 Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.159.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:22:3e:64:b6:e0:d9:a2:9d:b2:01:56:ce:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31db94c798518e329b2da4b2d940cb7b5371a78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:96:ac:7b:7a:83:49:f7:00:9c:09:6a:7a: 12:72:78:1a:1b:d4:08:09:bd:b1:0e:5b:ab:e3:56: 0e:64:1b:2e:fa:11:63:ac:ec:76:a2:8f:2b:77:bc: 56:2f:cc:07:78:ad:c2:43:e3:41:3c:92:57:49:77: 38:8f:78:81:1e:3b:f3:c5:e9:9c:4e:92:c9:ff:61: 42:c1:67:db:56:03:35:ca:88:d5:1e:6b:3c:6a:f5: 88:56:85:a2:a0:9c:c5:5b:30:6b:77:33:72:fb:d3: e8:8a:4d:bf:6e:8f:4a:8f:a8:1b:df:28:af:02:18: fb:6a:ca:cd:dc:0b:03:7e:33:50:5d:d5:60:94:71: 06:27:c0:49:01:69:90:e4:5b:1b:d2:52:3d:be:5f: 99:fc:7e:05:8e:1e:04:ee:80:48:aa:94:fe:2a:48: 8c:75:14:d4:6d:95:91:bd:05:36:5e:d1:2c:c3:0c: 69:80:58:76:1b:ae:13:2d:ac:b8:7d:54:ee:6d:2a: 0e:b5:f2:52:64:07:48:c4:9d:7d:cc:df:2c:6a:42: 71:40:94:9d:6d:0d:51:ff:18:9f:81:29:c8:c8:7b: 36:12:8f:24:5d:b8:0a:39:5e:88:62:ef:87:d4:76: 26:c2:e1:d1:b1:fe:8a:ec:c3:60:0e:f7:a4:f9:4d: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DB:94:C7:98:51:8E:32:9B:2D:A4:B2:D9:40:CB:7B:53:71:A7:8B X509v3 Authority Key Identifier: keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.34.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ac:5a:f3:ec:49:54:7e:59:11:86:f4:80:e1:d4:c0:39:a1: 76:e8:40:28:4d:f7:fc:ad:15:3e:a4:51:7b:08:b0:30:e4:c5: 50:3a:3f:c5:52:eb:cb:8e:77:f8:8c:c2:af:a8:fd:eb:35:02: 45:8c:7c:51:33:25:0e:28:80:53:58:d2:a6:40:97:4a:e4:9b: 6c:a3:7e:5d:24:e0:9b:dd:54:b5:a9:56:2d:20:de:21:5e:c3: a3:1d:ed:af:7f:b1:34:3c:fd:72:fb:bc:9b:b5:8f:96:c7:29: a5:15:9f:c0:39:7b:49:47:a8:7b:b6:b6:24:a6:52:a1:4b:a3: 3d:a7:b4:64:9c:22:39:e7:eb:aa:68:9f:77:72:a8:5e:1d:21: 2d:ba:cb:03:eb:49:80:06:1c:14:1a:31:82:7b:24:b4:ac:19: e8:0e:9d:43:76:30:bc:1f:d9:35:3f:86:1b:72:e8:aa:05:2b: 32:23:f2:e7:93:26:55:fc:d5:c1:a9:6e:3a:7d:56:84:85:a7: 46:5d:65:a0:0c:b2:65:33:c5:2c:c4:f6:c5:5c:22:97:c8:37: 5d:02:72:84:17:94:6c:78:86:4b:a1:6d:cb:3a:56:f2:9c:04: 1c:85:aa:29:b4:c5:7a:d2:29:bf:d8:58:a6:9b:6b:42:4e:53: d3:23:a6:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyI+ZLbg2aKdsgFWzh3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDZjOGYyMjQ3ZDIyMDQxYzgyZTU1NTY2Nzg4MWU1MGY5 MTU0YWIwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRiOTRjNzk4NTE4ZTMyOWIyZGE0YjJkOTQwY2I3YjUzNzFhNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZaWrHt6g0n3AJwJanoScngaG9QI Cb2xDlur41YOZBsu+hFjrOx2oo8rd7xWL8wHeK3CQ+NBPJJXSXc4j3iBHjvzxemc TpLJ/2FCwWfbVgM1yojVHms8avWIVoWioJzFWzBrdzNy+9Poik2/bo9Kj6gb3yiv Ahj7asrN3AsDfjNQXdVglHEGJ8BJAWmQ5Fsb0lI9vl+Z/H4Fjh4E7oBIqpT+KkiM dRTUbZWRvQU2XtEswwxpgFh2G64TLay4fVTubSoOtfJSZAdIxJ19zN8sakJxQJSd bQ1R/xifgSnIyHs2Eo8kXbgKOV6IYu+H1HYmwuHRsf6K7MNgDvek+U03xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHblMeYUY4ymy2kstlAy3tTcaeLMB8GA1UdIwQY MBaAFKsGyPIkfSIEHILlVWZ4geUPkVSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQt MWFlMzZhNDQ2OWZkLzEvTWR1VXg1aFJqaktiTGFTeTJVRExlMU54cDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQtMWFlMzZhNDQ2OWZk LzEvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8iMA0G CSqGSIb3DQEBCwUAA4IBAQCirFrz7ElUflkRhvSA4dTAOaF26EAoTff8rRU+pFF7 CLAw5MVQOj/FUuvLjnf4jMKvqP3rNQJFjHxRMyUOKIBTWNKmQJdK5Jtso35dJOCb 3VS1qVYtIN4hXsOjHe2vf7E0PP1y+7ybtY+WxymlFZ/AOXtJR6h7trYkplKhS6M9 p7RknCI55+uqaJ93cqheHSEtussD60mABhwUGjGCeyS0rBnoDp1DdjC8H9k1P4Yb cuiqBSsyI/LnkyZV/NXBqW46fVaEhadGXWWgDLJlM8UsxPbFXCKXyDddAnKEF5Rs eIZLoW3LOlbynAQchaoptMV60im/2Fimm2tCTlPTI6bv -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:38 2026 by rpki-client