This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/_MW7W40W598GgASR5Eoa_4tP1ko.roa File: _MW7W40W598GgASR5Eoa_4tP1ko.roa (raw, json) Hash identifier: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss= Subject key identifier: FC:C5:BB:5B:8D:16:E7:DF:06:80:04:91:E4:4A:1A:FF:8B:4F:D6:4A Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019B7CEE63CC93006FF94E2510A1A953CC2E Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/_MW7W40W598GgASR5Eoa_4tP1ko.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42580 IP address blocks: 80.243.88.0/21 maxlen: 21 185.224.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:63:cc:93:00:6f:f9:4e:25:10:a1:a9:53:cc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcc5bb5b8d16e7df06800491e44a1aff8b4fd64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:3b:4c:e4:f1:4f:6e:55:c5:3e:04:09:4e: 2e:c6:5d:cf:37:37:c9:80:b2:90:0c:b9:fb:7a:75: 29:1b:26:04:db:7b:75:0f:20:4d:f5:ea:26:ea:67: 7b:71:b5:c1:42:57:33:31:94:4b:f5:70:7f:62:08: 36:07:fe:85:88:b5:37:df:49:be:b3:9a:2e:dd:7d: a4:fe:49:65:6e:9b:c9:48:6b:ee:e0:93:76:68:de: 79:b3:04:76:69:86:c3:bc:d0:e6:a8:b0:7b:07:f9: ba:ab:20:17:8b:c5:18:fa:6e:44:ca:de:4b:c4:c9: 3a:71:a9:05:89:87:50:2b:e9:dc:11:6d:7a:e6:b9: 5a:7e:62:6b:37:22:23:e1:34:45:e9:a7:34:a9:30: 37:9a:35:3f:6c:8d:45:27:f7:65:1a:01:e7:08:e3: 08:64:bb:27:bf:40:7f:19:db:15:54:02:c2:f3:ea: 8c:70:f7:49:38:a1:eb:bb:a9:81:6f:dc:cf:84:06: 0e:68:d2:dc:88:4f:ee:a4:1c:d9:b6:53:8a:5c:74: 6d:1e:3d:0a:39:0b:b0:ca:73:bf:8a:a1:6d:9a:7a: 8d:94:9e:01:e8:57:57:50:c2:da:81:7a:17:c5:d8: cc:ba:bd:4d:49:d4:da:41:4b:68:33:f3:d8:db:5b: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C5:BB:5B:8D:16:E7:DF:06:80:04:91:E4:4A:1A:FF:8B:4F:D6:4A X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/_MW7W40W598GgASR5Eoa_4tP1ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.243.88.0/21 185.224.164.0/22 Signature Algorithm: sha256WithRSAEncryption 96:27:0f:86:f1:8f:5b:0d:cc:d8:59:0a:6b:9a:94:90:c3:93: 40:8a:b8:e3:cb:95:22:10:a6:ea:2d:50:3c:3f:6e:92:78:ac: f5:16:5e:be:f0:89:d9:19:77:fc:c8:b7:20:1c:15:fb:75:b0: 19:11:b2:53:fb:58:9d:60:67:07:28:35:11:be:9b:8d:fc:19: d7:10:52:1f:2a:6f:3a:88:4c:4d:07:b2:0a:06:d8:54:c4:40: 5f:a8:11:be:e2:e8:2c:f5:ac:88:25:a0:9e:bf:23:e9:c8:ad: 83:5d:da:ed:03:85:bc:1b:ca:57:bb:c2:44:13:7e:42:67:93: e2:94:b4:49:dd:fc:a2:7d:c0:a2:57:c9:b7:94:d7:63:70:75: dc:49:1b:52:e5:fe:e9:e3:14:2a:13:10:26:52:e3:77:12:0e: 4f:2b:e8:fa:9e:60:d4:f1:b0:a4:be:bf:3e:3a:be:27:e3:38: 6e:1a:da:f6:12:e5:98:21:48:44:32:b2:43:c0:e2:0f:a5:16: fe:d6:98:f9:ea:af:7f:7f:f4:98:ab:b9:05:0b:d4:e2:9f:46: 7c:bf:22:30:ee:3a:0d:8a:86:14:8c:7c:03:e2:30:da:83:ac: b3:01:25:d8:94:ba:2d:a0:4a:80:3a:23:6c:56:cf:26:67:2d: 51:63:95:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87mPMkwBv+U4lEKGpU8wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2M1YmI1YjhkMTZlN2RmMDY4MDA0OTFlNDRhMWFmZjhiNGZkNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh47TOTxT25VxT4ECU4uxl3PNzfJ gLKQDLn7enUpGyYE23t1DyBN9eom6md7cbXBQlczMZRL9XB/Ygg2B/6FiLU330m+ s5ou3X2k/kllbpvJSGvu4JN2aN55swR2aYbDvNDmqLB7B/m6qyAXi8UY+m5Eyt5L xMk6cakFiYdQK+ncEW165rlafmJrNyIj4TRF6ac0qTA3mjU/bI1FJ/dlGgHnCOMI ZLsnv0B/GdsVVALC8+qMcPdJOKHru6mBb9zPhAYOaNLciE/upBzZtlOKXHRtHj0K OQuwynO/iqFtmnqNlJ4B6FdXUMLagXoXxdjMur1NSdTaQUtoM/PY21ueCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPzFu1uNFuffBoAEkeRKGv+LT9ZKMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvX01XN1c0MFc1OThHZ0FTUjVFb2FfNHRQMWtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUPNYAwQC ueCkMA0GCSqGSIb3DQEBCwUAA4IBAQCWJw+G8Y9bDczYWQprmpSQw5NAirjjy5Ui EKbqLVA8P26SeKz1Fl6+8InZGXf8yLcgHBX7dbAZEbJT+1idYGcHKDURvpuN/BnX EFIfKm86iExNB7IKBthUxEBfqBG+4ugs9ayIJaCevyPpyK2DXdrtA4W8G8pXu8JE E35CZ5PilLRJ3fyifcCiV8m3lNdjcHXcSRtS5f7p4xQqExAmUuN3Eg5PK+j6nmDU 8bCkvr8+Or4n4zhuGtr2EuWYIUhEMrJDwOIPpRb+1pj56q9/f/SYq7kFC9Tin0Z8 vyIw7joNioYUjHwD4jDag6yzASXYlLotoEqAOiNsVs8mZy1RY5Xw -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:08 2026 by rpki-client