This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa File: MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa (raw, json) Hash identifier: jmYre0cvNWduC7MGqKdKXsaIMO8Tset9JAHfEBid25c= Subject key identifier: 31:74:8B:A3:A2:D0:AC:83:FE:29:2A:95:B1:3E:15:8B:7D:58:BB:B6 Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Certificate serial: 019B7E39100663F2413034C93793AB121E0F Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47913 IP address blocks: 109.68.210.0/23 maxlen: 23 185.117.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:06:63:f2:41:30:34:c9:37:93:ab:12:1e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31748ba3a2d0ac83fe292a95b13e158b7d58bbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:ec:84:75:0c:4b:99:40:ea:8b:25:b7:83: 1a:75:aa:a1:02:09:8a:96:71:b2:98:6a:1f:3f:67: 59:54:9e:e6:6d:7f:f2:12:9e:87:0a:44:95:59:74: 95:2c:8b:62:f5:ff:95:c7:7c:a4:a8:5f:d2:ed:4c: 32:9c:ed:7f:09:59:05:d5:12:32:b4:78:1d:f8:08: 4a:73:12:1f:3c:28:65:af:4d:ec:3f:41:aa:da:15: 28:e6:1f:24:da:1b:7e:ec:6f:1d:78:e3:28:f3:62: 0a:e9:b0:f6:af:13:ce:d0:29:23:dc:ae:a4:64:61: 8a:7c:90:3b:4c:86:21:cc:bc:42:43:fc:ab:03:f2: 73:21:a9:00:30:84:7c:ee:40:41:e9:43:f7:6d:a9: 17:fd:47:cd:80:41:55:8c:77:f9:15:97:30:01:b3: f8:90:4b:df:6c:02:a2:8a:57:31:d6:f4:e7:47:ae: 93:8c:25:9e:bd:cd:19:f3:a8:1b:22:2e:74:3d:3e: d7:28:4a:2a:2d:40:5a:fa:bb:ce:38:2f:31:ed:98: e7:59:3c:93:18:fd:c3:e9:75:06:fe:ad:8c:4d:80: f0:f7:b5:84:9c:ee:8b:56:d3:f9:fb:8f:9c:d0:98: d1:47:1b:a2:2b:ba:8c:77:22:d0:5c:14:85:0b:81: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:8B:A3:A2:D0:AC:83:FE:29:2A:95:B1:3E:15:8B:7D:58:BB:B6 X509v3 Authority Key Identifier: keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.210.0/23 185.117.28.0/23 Signature Algorithm: sha256WithRSAEncryption a1:97:98:c2:2b:54:5d:ec:f3:64:e3:6c:f9:f3:dc:70:07:c4: af:ee:1f:c4:8e:79:a3:37:82:9b:11:a3:29:a3:b6:5b:ec:60: 38:d6:1c:cb:b8:7e:bc:63:c9:8e:bd:30:6c:0b:f9:74:da:7b: 35:8b:d8:7a:00:40:eb:da:b8:34:6e:4e:cf:1c:16:ea:ae:23: b8:cc:38:a4:7a:f3:5a:bf:f6:0a:5e:73:9e:f6:b6:dd:4f:c2: 4b:3a:e6:89:7c:f1:67:59:74:85:55:8e:6f:a0:cd:59:04:48: d8:e1:e7:46:68:44:da:f0:7f:ac:23:6c:27:97:d2:05:3b:6b: d2:5d:1b:97:e0:92:b0:2f:41:93:59:e7:dd:c4:d2:45:87:b8: bf:c9:dd:8d:bb:ca:57:a3:76:12:06:b2:7f:53:88:cf:bb:b2: de:4f:da:74:d4:36:e9:d3:4f:0c:ee:d2:28:4e:b6:d6:2c:69: 58:e2:c6:a4:71:9c:4b:3b:3b:69:59:7e:66:ae:32:1c:0b:ed: e4:8b:3b:99:1b:e4:f7:f3:9e:27:40:ce:1f:2e:a1:2e:6e:1e: 0a:70:ab:61:0a:c2:52:cd:14:e9:c6:75:ee:55:f1:ce:ac:41: 45:72:88:66:0c:9f:66:70:a8:8f:01:e9:06:0b:ef:3a:3c:f0: 03:69:c7:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ORAGY/JBMDTJN5OrEh4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTVjMGY5NWFiN2JlOGI4NWY3MTFmYTQzMzY2NWMxNGU2 ZTkzNTkwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTc0OGJhM2EyZDBhYzgzZmUyOTJhOTViMTNlMTU4YjdkNThiYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLTshHUMS5lA6oslt4MadaqhAgmK lnGymGofP2dZVJ7mbX/yEp6HCkSVWXSVLIti9f+Vx3ykqF/S7UwynO1/CVkF1RIy tHgd+AhKcxIfPChlr03sP0Gq2hUo5h8k2ht+7G8deOMo82IK6bD2rxPO0Ckj3K6k ZGGKfJA7TIYhzLxCQ/yrA/JzIakAMIR87kBB6UP3bakX/UfNgEFVjHf5FZcwAbP4 kEvfbAKiilcx1vTnR66TjCWevc0Z86gbIi50PT7XKEoqLUBa+rvOOC8x7ZjnWTyT GP3D6XUG/q2MTYDw97WEnO6LVtP5+4+c0JjRRxuiK7qMdyLQXBSFC4FWOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDF0i6Oi0KyD/ikqlbE+FYt9WLu2MB8GA1UdIwQY MBaAFH7lwPlat76LhfcR+kM2ZcFObpNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEt OTAxOTRiZDY4NDI4LzEvTVhTTG82TFFySVAtS1NxVnNUNFZpMzFZdTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEtOTAxOTRiZDY4NDI4 LzEvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbUTSAwQB uXUcMA0GCSqGSIb3DQEBCwUAA4IBAQChl5jCK1Rd7PNk42z589xwB8Sv7h/Ejnmj N4KbEaMpo7Zb7GA41hzLuH68Y8mOvTBsC/l02ns1i9h6AEDr2rg0bk7PHBbqriO4 zDikevNav/YKXnOe9rbdT8JLOuaJfPFnWXSFVY5voM1ZBEjY4edGaETa8H+sI2wn l9IFO2vSXRuX4JKwL0GTWefdxNJFh7i/yd2Nu8pXo3YSBrJ/U4jPu7LeT9p01Dbp 008M7tIoTrbWLGlY4sakcZxLOztpWX5mrjIcC+3kizuZG+T3854nQM4fLqEubh4K cKthCsJSzRTpxnXuVfHOrEFFcohmDJ9mcKiPAekGC+86PPADacdp -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:45 2026 by rpki-client