This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MVMwLxOtX8LoVHq-PTAwA9JBiBw.roa File: MVMwLxOtX8LoVHq-PTAwA9JBiBw.roa (raw, json) Hash identifier: mxliYbHNa8M5FESzhnjR1WELJ7NTYGZ5yvk8RUFG1ks= Subject key identifier: 31:53:30:2F:13:AD:5F:C2:E8:54:7A:BE:3D:30:30:03:D2:41:88:1C Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85357365209A53AC12C231F8413219 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MVMwLxOtX8LoVHq-PTAwA9JBiBw.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41171 IP address blocks: 212.90.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:35:73:65:20:9a:53:ac:12:c2:31:f8:41:32:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3153302f13ad5fc2e8547abe3d303003d241881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:e2:d2:0e:b8:36:e3:b5:65:6e:ad:d6:73: ab:a8:8d:c4:a8:7e:64:79:d6:e5:26:78:ce:67:94: b2:61:96:8e:bc:06:b8:4d:c5:94:eb:7f:40:92:1b: 48:17:d2:7e:c1:d8:fa:c7:e8:f9:4a:25:7e:9d:29: 79:b3:22:65:fa:e5:8f:84:f2:81:96:74:2d:80:67: f9:f9:06:9e:18:d0:ca:d3:11:cd:4d:32:67:83:b1: af:2d:ea:aa:63:5f:af:05:3d:f6:b0:fe:86:35:86: 4f:13:cb:3f:97:71:fd:c8:e9:18:f9:c1:0d:9e:fb: 3c:f3:76:37:76:74:d5:ce:f1:da:bc:3d:4a:f6:68: e7:7c:03:43:f0:85:25:9d:d7:a3:a9:a5:98:e3:7b: 0d:43:cf:4f:7b:ec:20:e7:2e:89:8d:84:11:31:2e: 9f:a6:3b:af:99:00:02:c9:48:05:e0:f2:45:c7:52: 93:d6:49:ac:bc:6e:49:30:4b:b1:9e:a2:2b:a3:ea: b0:5a:af:11:ed:a3:29:41:83:de:b2:b6:f8:bd:0b: 31:b8:40:a2:5c:f0:95:04:aa:aa:87:2e:dc:9f:6d: be:82:6c:49:cb:ba:f3:7f:46:a7:01:1d:d4:12:72: 82:d8:6a:a3:12:17:cc:f5:c4:c6:02:4f:be:47:1a: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:53:30:2F:13:AD:5F:C2:E8:54:7A:BE:3D:30:30:03:D2:41:88:1C X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MVMwLxOtX8LoVHq-PTAwA9JBiBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.90.116.0/22 Signature Algorithm: sha256WithRSAEncryption b3:77:e4:b9:a1:96:f6:b0:45:80:1c:ca:a6:38:c2:f8:a3:59: 2d:61:f2:5e:55:18:a8:54:e7:19:e6:73:8a:02:91:8e:6e:af: c0:62:18:16:cb:ab:19:37:8e:b1:5f:b4:3a:6c:3a:44:6a:6f: 42:a6:fc:f9:d9:38:48:5c:b9:b7:15:c2:75:bb:dd:7b:be:a5: 5e:02:b8:b4:1f:2b:a7:9e:94:f4:2b:76:fa:84:42:6e:75:8d: 7f:90:66:d1:b3:aa:ac:23:53:25:13:be:57:f4:1a:17:02:a0: e9:02:a5:0e:97:e0:ea:df:7f:74:bb:1a:aa:87:8a:41:f7:a5: 05:2b:13:34:6b:92:1e:5d:b9:84:3c:f8:7c:5f:37:fd:6e:9b: 9f:9c:6d:e7:00:03:0b:f4:44:74:38:c2:24:9e:4d:64:de:a3: 33:75:29:f8:d3:e0:a2:1f:b6:70:79:9e:21:5b:c8:f1:e8:81: 41:00:e3:23:f2:9d:9f:3b:6a:1c:9b:2b:51:de:25:bb:b7:ad: 3c:97:6a:13:eb:15:d6:17:3a:5f:e7:20:a6:f6:3c:e9:36:c3: b0:28:d4:63:59:3a:73:cb:b8:89:bf:fb:c3:ea:1b:bf:7e:40: 4e:cb:a7:1f:6e:c6:69:5c:35:52:6b:71:0e:27:82:bb:1c:7e: 5a:68:59:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTVzZSCaU6wSwjH4QTIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTUzMzAyZjEzYWQ1ZmMyZTg1NDdhYmUzZDMwMzAwM2QyNDE4ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBri0g64NuO1ZW6t1nOrqI3EqH5k edblJnjOZ5SyYZaOvAa4TcWU639AkhtIF9J+wdj6x+j5SiV+nSl5syJl+uWPhPKB lnQtgGf5+QaeGNDK0xHNTTJng7GvLeqqY1+vBT32sP6GNYZPE8s/l3H9yOkY+cEN nvs883Y3dnTVzvHavD1K9mjnfAND8IUlndejqaWY43sNQ89Pe+wg5y6JjYQRMS6f pjuvmQACyUgF4PJFx1KT1kmsvG5JMEuxnqIro+qwWq8R7aMpQYPesrb4vQsxuECi XPCVBKqqhy7cn22+gmxJy7rzf0anAR3UEnKC2GqjEhfM9cTGAk++RxrVTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFTMC8TrV/C6FR6vj0wMAPSQYgcMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvTVZNd0x4T3RYOExvVkhxLVBUQXdBOUpCaUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Fp0MA0G CSqGSIb3DQEBCwUAA4IBAQCzd+S5oZb2sEWAHMqmOML4o1ktYfJeVRioVOcZ5nOK ApGObq/AYhgWy6sZN46xX7Q6bDpEam9Cpvz52ThIXLm3FcJ1u917vqVeAri0Hyun npT0K3b6hEJudY1/kGbRs6qsI1MlE75X9BoXAqDpAqUOl+Dq3390uxqqh4pB96UF KxM0a5IeXbmEPPh8Xzf9bpufnG3nAAML9ER0OMIknk1k3qMzdSn40+CiH7ZweZ4h W8jx6IFBAOMj8p2fO2ocmytR3iW7t608l2oT6xXWFzpf5yCm9jzpNsOwKNRjWTpz y7iJv/vD6hu/fkBOy6cfbsZpXDVSa3EOJ4K7HH5aaFlI -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:49 2026 by rpki-client