This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa
File: MrmCJmCL1gfXLcSkz8EW4VADkrA.roa (raw, json)
Hash identifier: AvL+Rn21G66LGq2DcqoK6FUvK6Pi1mjvtoyB2LWH/sk=
Subject key identifier: 32:B9:82:26:60:8B:D6:07:D7:2D:C4:A4:CF:C1:16:E1:50:03:92:B0
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019B797EBA93A29A17491B13998665A1805F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa
Signing time: Thu 01 Jan 2026 12:18:27 +0000
ROA not before: Thu 01 Jan 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42794
IP address blocks: 82.103.112.0/24 maxlen: 24
88.203.208.0/23 maxlen: 23
88.203.210.0/23 maxlen: 23
88.203.212.0/24 maxlen: 24
88.203.213.0/24 maxlen: 24
88.203.214.0/24 maxlen: 24
88.203.215.0/24 maxlen: 24
88.203.232.0/24 maxlen: 24
88.203.233.0/24 maxlen: 24
92.247.120.0/22 maxlen: 22
92.247.124.0/24 maxlen: 24
92.247.125.0/24 maxlen: 24
92.247.126.0/24 maxlen: 24
92.247.127.0/24 maxlen: 24
92.247.128.0/23 maxlen: 23
212.36.17.0/24 maxlen: 24
2a01:288:4004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:ba:93:a2:9a:17:49:1b:13:99:86:65:a1:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32b98226608bd607d72dc4a4cfc116e1500392b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:45:52:d5:dd:2d:3f:ff:c6:b6:dd:31:9c:
f0:ae:d2:8c:77:73:f1:8f:80:4f:8f:6c:bd:d8:df:
63:73:8b:42:39:eb:b1:03:00:f5:62:58:9e:75:da:
50:c1:c0:bd:b5:53:42:c8:83:b1:98:7f:ab:54:27:
e6:a2:e2:a0:6e:1b:2f:e7:e8:3f:da:5b:4d:b5:e2:
34:62:9a:39:a0:f5:cc:88:c4:95:b1:ec:13:bc:9a:
f4:fd:ee:12:32:bf:30:07:49:72:60:18:96:13:4a:
63:65:79:74:78:c4:07:67:7e:21:0d:a9:00:01:82:
20:0c:48:fe:84:73:42:3b:46:ef:d6:93:c9:ee:bb:
96:3d:69:99:b4:b3:f4:3f:ff:e9:b7:ac:73:c9:5a:
ed:21:98:77:cd:9e:81:14:d7:3d:3a:6e:db:b2:22:
cf:b7:08:27:da:16:0f:b6:92:43:fc:57:de:07:98:
9e:81:d7:cb:5a:cb:c2:bf:9e:b4:ec:27:36:85:e2:
3b:54:83:cc:26:b3:6d:43:4c:ef:99:ec:44:9d:13:
83:f6:b7:7f:e1:a6:dd:ed:a0:d4:fa:6c:f5:f4:a8:
e9:41:b4:6a:53:c7:2e:f6:47:be:d8:39:ca:d6:cf:
ca:72:97:55:92:73:a6:b1:4a:a7:2c:2f:69:e4:20:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:82:26:60:8B:D6:07:D7:2D:C4:A4:CF:C1:16:E1:50:03:92:B0
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.112.0/24
88.203.208.0/21
88.203.232.0/23
92.247.120.0-92.247.129.255
212.36.17.0/24
IPv6:
2a01:288:4004::/48
Signature Algorithm: sha256WithRSAEncryption
6d:4b:20:a2:74:78:db:fb:48:8d:7a:e4:ec:77:18:31:a6:e4:
bc:92:a7:64:8f:85:84:95:51:4e:4c:73:47:ed:ce:25:56:05:
c0:0e:88:5f:39:21:50:f7:1e:6e:40:11:06:8f:88:65:6a:31:
93:63:da:cd:63:64:67:ad:30:48:94:24:34:96:c1:c0:9e:13:
8d:e0:35:1e:f6:29:4c:09:c4:31:e3:16:38:43:e9:ce:5c:12:
f4:cc:4e:e4:30:e8:cd:93:bf:6d:16:eb:b6:06:f3:9a:e3:84:
36:3f:57:70:c5:d4:4a:e2:52:a4:f2:31:f5:a4:b3:a1:ec:bd:
89:cf:6c:4a:a1:12:fb:2e:e5:19:81:15:66:b1:da:e3:4e:fb:
3e:3d:89:57:c7:6a:bc:35:8f:36:c7:ad:f0:f3:1a:af:9c:a5:
f0:8f:1d:bd:a4:3c:63:64:eb:2e:87:8b:38:c9:1e:7c:6f:77:
21:6b:e3:c1:9d:e5:46:c4:0f:8f:60:4f:d0:46:97:8b:62:27:
ae:e2:c9:da:56:10:79:cc:3f:6c:54:b6:ae:e0:5f:43:72:84:
8b:fd:10:39:1b:f5:60:47:ea:77:68:fb:2a:70:c6:50:90:90:
bc:a6:79:24:d9:5d:96:c7:a5:e7:f7:f7:54:d4:0e:f8:5c:f3:
23:cf:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:26 2026 by rpki-client