This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/MwxPjEKsyukIW9UgrbKug1OUrD0.roa File: MwxPjEKsyukIW9UgrbKug1OUrD0.roa (raw, json) Hash identifier: hFFWhkDQsz4xhLvtRVUNZgMK+EMIxF7IR1hHUl7v5Zs= Subject key identifier: 33:0C:4F:8C:42:AC:CA:E9:08:5B:D5:20:AD:B2:AE:83:53:94:AC:3D Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104 Certificate serial: 019B79ED2B1121AD41FB34E7E5A9841B2B38 Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/MwxPjEKsyukIW9UgrbKug1OUrD0.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197840 IP address blocks: 91.227.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:11:21:ad:41:fb:34:e7:e5:a9:84:1b:2b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=330c4f8c42accae9085bd520adb2ae835394ac3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:bf:3f:bd:fe:b0:63:3a:3f:8c:43:8e:ef: e4:cf:a5:32:c2:7b:d8:c6:bd:74:f3:ab:b0:f3:0b: d7:a7:ab:db:c8:79:e4:5f:b4:96:33:18:cb:9a:fd: 27:a9:f0:ec:9f:17:d4:61:ba:fc:ea:77:89:39:e1: 91:84:ab:cc:33:d9:22:64:8a:32:1f:4f:80:d8:9c: 08:03:8c:a2:85:a0:60:ac:b6:22:9a:88:5d:18:be: 16:46:9b:79:4a:2f:81:17:1a:32:44:43:5c:56:98: 59:27:bb:c4:3e:81:0b:57:7e:4f:18:cd:1f:38:00: 99:b7:c7:c0:e2:a2:77:67:bf:77:55:4c:e1:f6:1a: 55:e8:8a:fb:9e:67:82:6f:c3:99:d2:55:23:e8:76: 9c:2f:27:ec:96:71:30:1a:4e:8a:1b:7c:ae:cf:ee: 7e:8a:07:12:5b:67:0d:b5:3e:9c:ff:48:0a:af:21: b6:c3:f2:2a:25:94:ca:cb:e9:58:06:dd:19:26:69: a1:f6:82:d1:cd:df:db:58:60:e3:bd:fe:90:66:1c: 28:37:cc:73:bd:21:e4:37:bd:80:f2:e0:95:17:cc: c3:fb:34:a3:14:dc:f9:3a:52:29:46:41:61:b8:b6: 98:e7:c8:f2:25:11:0e:a7:c8:69:96:81:bc:04:4b: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0C:4F:8C:42:AC:CA:E9:08:5B:D5:20:AD:B2:AE:83:53:94:AC:3D X509v3 Authority Key Identifier: keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/MwxPjEKsyukIW9UgrbKug1OUrD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.216.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:65:74:50:ac:a4:29:f1:94:88:65:b6:40:54:1c:e2:43:d7: 8b:03:0c:fc:c3:7c:20:61:75:7e:a1:99:f5:7e:e4:9f:b0:85: c9:65:8f:93:24:91:7f:06:46:20:3d:6a:95:75:c3:67:4e:b8: b5:11:b7:2e:cf:a5:ae:37:be:37:ea:d6:6f:2b:05:a7:60:e1: 3f:e2:a8:7e:8e:3f:b2:ac:9c:e0:5a:35:ee:f4:75:8c:ce:d0: bd:b9:5f:a0:b6:36:20:63:02:24:5c:7e:d6:bf:72:13:c9:b8: 0c:23:90:fa:f8:ee:c1:cf:96:4f:84:b2:ae:bd:4a:5b:e0:df: 54:f2:7c:76:08:4e:5d:58:80:46:6c:a1:53:a7:80:12:0d:3d: 67:e2:47:32:61:1b:05:68:25:ef:2f:64:f2:6a:74:04:b1:bf: 2c:b5:97:e4:d7:1f:ee:95:20:61:e6:1a:d5:25:16:7e:d7:9f: 36:32:22:b8:9a:16:fb:9e:04:dc:2c:cb:bf:66:3d:cc:49:b5: 17:13:b9:50:7c:7c:0b:ac:9f:b4:c1:a7:dd:ea:93:c8:0f:b9: 72:bc:4b:a5:c5:cd:04:fb:9b:b3:17:c4:78:e5:6b:40:c0:09: 73:8c:57:8b:79:c8:7e:96:97:74:d3:2c:0a:9d:b0:27:12:79: 95:35:4b:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SsRIa1B+zTn5amEGys4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjI3ODc1OTlmMTc5OGUyNDVmOTkzZjhjYjgxODJmOTlj ZmQxMDQwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzBjNGY4YzQyYWNjYWU5MDg1YmQ1MjBhZGIyYWU4MzUzOTRhYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9O/P73+sGM6P4xDju/kz6UywnvY xr1086uw8wvXp6vbyHnkX7SWMxjLmv0nqfDsnxfUYbr86neJOeGRhKvMM9kiZIoy H0+A2JwIA4yihaBgrLYimohdGL4WRpt5Si+BFxoyRENcVphZJ7vEPoELV35PGM0f OACZt8fA4qJ3Z793VUzh9hpV6Ir7nmeCb8OZ0lUj6HacLyfslnEwGk6KG3yuz+5+ igcSW2cNtT6c/0gKryG2w/IqJZTKy+lYBt0ZJmmh9oLRzd/bWGDjvf6QZhwoN8xz vSHkN72A8uCVF8zD+zSjFNz5OlIpRkFhuLaY58jyJREOp8hploG8BEslDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMMT4xCrMrpCFvVIK2yroNTlKw9MB8GA1UdIwQY MBaAFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUt MGEyNDZhYjA1OTQ2LzEvTXd4UGpFS3N5dWtJVzlVZ3JiS3VnMU9VckQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUtMGEyNDZhYjA1OTQ2 LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+PYMA0G CSqGSIb3DQEBCwUAA4IBAQCMZXRQrKQp8ZSIZbZAVBziQ9eLAwz8w3wgYXV+oZn1 fuSfsIXJZY+TJJF/BkYgPWqVdcNnTri1Ebcuz6WuN7436tZvKwWnYOE/4qh+jj+y rJzgWjXu9HWMztC9uV+gtjYgYwIkXH7Wv3ITybgMI5D6+O7Bz5ZPhLKuvUpb4N9U 8nx2CE5dWIBGbKFTp4ASDT1n4kcyYRsFaCXvL2TyanQEsb8stZfk1x/ulSBh5hrV JRZ+1582MiK4mhb7ngTcLMu/Zj3MSbUXE7lQfHwLrJ+0wafd6pPID7lyvEulxc0E +5uzF8R45WtAwAlzjFeLech+lpd00ywKnbAnEnmVNUuF -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:23 2026 by rpki-client