This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/MBR4X9txb_DAPbAumwTsJqubBTw.roa File: MBR4X9txb_DAPbAumwTsJqubBTw.roa (raw, json) Hash identifier: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE= Subject key identifier: 30:14:78:5F:DB:71:6F:F0:C0:3D:B0:2E:9B:04:EC:26:AB:9B:05:3C Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501 Certificate serial: 019B7F83BE5B7A66C35B04C0E53BC30CB4D3 Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/MBR4X9txb_DAPbAumwTsJqubBTw.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50407 IP address blocks: 193.105.17.0/24 maxlen: 24 195.191.68.0/23 maxlen: 23 2001:67c:2e18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:be:5b:7a:66:c3:5b:04:c0:e5:3b:c3:0c:b4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501 Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3014785fdb716ff0c03db02e9b04ec26ab9b053c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:ee:e1:a0:eb:6d:2b:c9:a2:0c:6e:a9:de: 28:51:57:b9:2f:17:75:d6:4f:03:2b:01:34:b0:64: c7:bd:36:9a:1a:1b:9e:85:fe:22:19:d8:95:bf:04: f3:ea:50:57:58:cc:1a:6c:49:1b:12:63:24:c8:bb: 31:c3:cc:a3:e2:61:1b:f6:95:3e:1f:3b:b0:1a:b2: 57:96:49:76:03:36:1d:30:08:3c:14:0f:24:bc:85: 01:e6:ea:ac:84:6f:75:52:ee:c2:a1:02:c0:0f:85: 72:1c:ca:6e:4f:76:80:1c:4a:4a:10:b9:3c:6a:5d: bd:47:a0:ab:93:db:d2:a5:d5:18:61:00:7a:f3:a3: 45:b8:5b:98:fb:da:34:1d:f0:f0:5c:fc:3b:ee:f1: 51:b7:1c:46:65:27:9d:3e:5c:6e:d8:b8:de:3e:7f: 33:58:a1:a7:3a:db:8d:8f:a5:70:ee:c9:23:98:8d: c9:7b:88:4a:5c:98:38:c8:c1:51:bf:34:54:66:0b: c6:45:7c:c6:22:e9:eb:06:4e:75:40:ca:55:d8:bc: b0:e1:ad:20:e3:bf:7e:10:9c:5c:4c:a8:31:ac:20: 57:e8:58:8d:9d:2b:06:7a:cb:0f:17:c5:0e:a6:03: 18:a3:e5:5b:22:3c:be:ea:7d:a3:55:96:8e:8e:74: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:78:5F:DB:71:6F:F0:C0:3D:B0:2E:9B:04:EC:26:AB:9B:05:3C X509v3 Authority Key Identifier: keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/MBR4X9txb_DAPbAumwTsJqubBTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.17.0/24 195.191.68.0/23 IPv6: 2001:67c:2e18::/48 Signature Algorithm: sha256WithRSAEncryption 47:9e:28:a1:e2:46:73:7d:75:ff:dd:3a:4f:78:f8:1c:36:57: c1:84:35:93:4d:af:aa:65:be:50:a6:53:d7:6b:e1:5e:35:74: ef:06:f2:5a:43:68:a5:4c:d0:3f:09:05:77:c6:d0:f2:92:28: c6:eb:31:4b:54:b9:ae:f7:84:b0:fb:61:ef:5d:45:4d:02:a6: 5d:86:08:14:ce:ac:77:77:8d:05:b7:00:9d:ed:b3:12:a9:24: 6e:7d:10:b9:03:a4:bf:7b:f4:2c:11:61:d4:89:3d:0c:b0:5b: 1e:34:ad:83:f0:46:b1:50:9c:88:9b:54:5a:3b:94:51:3e:6c: bc:9c:84:f1:5a:a1:db:ea:f1:27:ff:8a:17:56:53:32:69:99: 41:9a:5c:06:92:7c:ec:94:6e:33:e4:6b:f5:7f:cb:b5:71:34: 56:44:cd:66:b6:da:69:6f:8e:b9:d0:cb:ef:79:bc:33:6d:ba: 0c:42:e5:2f:4f:04:39:a8:3e:0f:de:57:2f:45:32:c9:54:ba: 82:65:57:f5:69:0a:10:f4:6f:10:a2:c3:45:5a:2c:b5:c9:db: 50:f2:8d:31:af:b6:98:26:f8:c9:9a:f6:55:aa:ef:81:d4:53: 06:c4:77:31:b2:9c:5a:17:2e:52:fd:13:eb:e7:34:08:87:c6: ef:86:e0:80 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/g75bembDWwTA5TvDDLTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTIwNmIxZDZmMzkxMmE4NmViNjI4ZjYxOWM1YTU1MmM1 NTM1MDEwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDE0Nzg1ZmRiNzE2ZmYwYzAzZGIwMmU5YjA0ZWMyNmFiOWIwNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsju4aDrbSvJogxuqd4oUVe5Lxd1 1k8DKwE0sGTHvTaaGhuehf4iGdiVvwTz6lBXWMwabEkbEmMkyLsxw8yj4mEb9pU+ HzuwGrJXlkl2AzYdMAg8FA8kvIUB5uqshG91Uu7CoQLAD4VyHMpuT3aAHEpKELk8 al29R6Crk9vSpdUYYQB686NFuFuY+9o0HfDwXPw77vFRtxxGZSedPlxu2LjePn8z WKGnOtuNj6Vw7skjmI3Je4hKXJg4yMFRvzRUZgvGRXzGIunrBk51QMpV2Lyw4a0g 479+EJxcTKgxrCBX6FiNnSsGessPF8UOpgMYo+VbIjy+6n2jVZaOjnTwJQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDAUeF/bcW/wwD2wLpsE7CarmwU8MB8GA1UdIwQY MBaAFMRSBrHW85Eqhutij2GcWlUsVTUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUt NWJlNDBiMTRmOGRmLzEvTUJSNFg5dHhiX0RBUGJBdW13VHNKcXViQlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUtNWJlNDBiMTRmOGRm LzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWkRAwQB w79EMA8EAgACMAkDBwAgAQZ8LhgwDQYJKoZIhvcNAQELBQADggEBAEeeKKHiRnN9 df/dOk94+Bw2V8GENZNNr6plvlCmU9dr4V41dO8G8lpDaKVM0D8JBXfG0PKSKMbr MUtUua73hLD7Ye9dRU0Cpl2GCBTOrHd3jQW3AJ3tsxKpJG59ELkDpL979CwRYdSJ PQywWx40rYPwRrFQnIibVFo7lFE+bLychPFaodvq8Sf/ihdWUzJpmUGaXAaSfOyU bjPka/V/y7VxNFZEzWa22mlvjrnQy+95vDNtugxC5S9PBDmoPg/eVy9FMslUuoJl V/VpChD0bxCiw0VaLLXJ21DyjTGvtpgm+Mma9lWq74HUUwbEdzGynFoXLlL9E+vn NAiHxu+G4IA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:24 2026 by rpki-client