This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/MwBfnIeh4icyMtphU38ylCMXamk.roa File: MwBfnIeh4icyMtphU38ylCMXamk.roa (raw, json) Hash identifier: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c= Subject key identifier: 33:00:5F:9C:87:A1:E2:27:32:32:DA:61:53:7F:32:94:23:17:6A:69 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019B7835441B2113D70BCC7688BFD4653833 Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/MwBfnIeh4icyMtphU38ylCMXamk.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 176.100.130.0/24 maxlen: 24 176.100.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:44:1b:21:13:d7:0b:cc:76:88:bf:d4:65:38:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33005f9c87a1e2273232da61537f329423176a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:25:8d:eb:49:31:78:a3:4d:18:2e:a5:cb: 5f:fa:75:4f:ea:73:9f:c2:66:f6:57:0b:21:58:65: c4:73:a7:c8:0e:38:db:4b:3f:fe:f4:ff:bb:3f:e4: fa:68:d5:b1:f9:3d:58:20:18:2d:e2:49:69:41:d1: 33:45:f0:48:35:b6:56:37:06:b7:d7:c7:3c:b8:ab: b1:9b:d2:b6:b9:c8:92:2e:f9:e2:92:1b:a5:6f:ec: d0:d8:07:27:7f:2f:c3:a2:a0:ec:9f:24:c4:72:7e: a9:b2:65:35:d9:f3:02:a4:23:2f:df:b4:9d:79:96: c9:29:a6:8c:c3:b3:c9:4d:f9:ad:3e:a8:83:0b:45: 4f:7a:a0:c1:a0:8a:7e:95:c6:a2:12:d5:4a:02:e3: d5:d9:e5:a0:27:57:e7:0d:61:80:73:f7:bd:5e:fe: ef:10:70:aa:b2:6a:bc:5c:cc:01:0b:2f:df:c0:8a: 07:b7:0f:69:30:d8:0a:61:24:fb:2c:94:15:db:38: 1b:ef:89:87:5d:fc:d8:19:22:d6:2d:2f:0a:e7:67: 5a:d4:1c:03:86:c0:d4:96:18:33:58:f6:a9:ab:b0: 05:b0:bb:61:e2:29:e4:08:79:96:1d:3b:d5:dd:31: d7:2f:4b:f9:b3:c8:9d:4a:92:d4:ee:a7:4f:9b:2c: 2b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:5F:9C:87:A1:E2:27:32:32:DA:61:53:7F:32:94:23:17:6A:69 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/MwBfnIeh4icyMtphU38ylCMXamk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.130.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:79:47:d7:cc:9c:85:0f:31:8d:2f:36:79:95:97:4d:44:16: 66:ae:1a:72:98:c4:61:09:aa:db:76:28:54:1c:80:f4:e6:57: 61:72:b8:d4:5c:c8:c3:05:d7:89:3e:74:da:ba:39:14:bb:79: b9:52:eb:10:e5:d7:c5:ac:d3:54:d0:3f:2d:42:60:f4:d6:47: f7:ca:b7:a6:8d:b7:4d:0e:41:7a:ca:85:64:f1:58:f3:6b:70: fd:6d:34:1b:4a:48:cd:06:a9:95:a9:5f:db:e7:4b:05:6c:1e: 91:94:3c:3f:dd:bc:b3:24:d0:76:12:19:db:48:f8:50:80:d3: 21:dd:2e:90:3a:12:5a:ba:3a:ca:32:f4:a8:b4:0c:e5:cc:da: f6:fd:10:e1:55:ec:eb:ae:08:fb:1c:87:e9:b3:fe:2a:da:1f: 75:20:34:1d:78:12:d6:f5:1a:e9:a0:7a:e2:50:05:69:01:68: 5a:98:fc:f8:4e:a6:97:e7:ca:35:08:7e:a3:65:ee:20:44:8a: 3e:ed:2b:a8:21:bd:a5:7a:6c:c6:34:8d:b4:ea:79:a0:99:1d: ad:3f:f2:ec:ec:77:74:2d:00:c5:6d:27:3d:fd:6a:21:1b:2b: 69:18:bf:55:a1:56:99:08:61:4f:25:56:72:42:46:b2:bf:18: 69:32:b5:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUQbIRPXC8x2iL/UZTgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzAwNWY5Yzg3YTFlMjI3MzIzMmRhNjE1MzdmMzI5NDIzMTc2YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qUljetJMXijTRgupctf+nVP6nOf wmb2VwshWGXEc6fIDjjbSz/+9P+7P+T6aNWx+T1YIBgt4klpQdEzRfBINbZWNwa3 18c8uKuxm9K2uciSLvnikhulb+zQ2Acnfy/DoqDsnyTEcn6psmU12fMCpCMv37Sd eZbJKaaMw7PJTfmtPqiDC0VPeqDBoIp+lcaiEtVKAuPV2eWgJ1fnDWGAc/e9Xv7v EHCqsmq8XMwBCy/fwIoHtw9pMNgKYST7LJQV2zgb74mHXfzYGSLWLS8K52da1BwD hsDUlhgzWPapq7AFsLth4inkCHmWHTvV3THXL0v5s8idSpLU7qdPmywrJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMAX5yHoeInMjLaYVN/MpQjF2ppMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvTXdCZm5JZWg0aWN5TXRwaFUzOHlsQ01YYW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGSCMA0G CSqGSIb3DQEBCwUAA4IBAQAbeUfXzJyFDzGNLzZ5lZdNRBZmrhpymMRhCarbdihU HID05ldhcrjUXMjDBdeJPnTaujkUu3m5UusQ5dfFrNNU0D8tQmD01kf3yremjbdN DkF6yoVk8Vjza3D9bTQbSkjNBqmVqV/b50sFbB6RlDw/3byzJNB2EhnbSPhQgNMh 3S6QOhJaujrKMvSotAzlzNr2/RDhVezrrgj7HIfps/4q2h91IDQdeBLW9RrpoHri UAVpAWhamPz4TqaX58o1CH6jZe4gRIo+7SuoIb2lemzGNI206nmgmR2tP/Ls7Hd0 LQDFbSc9/WohGytpGL9VoVaZCGFPJVZyQkayvxhpMrW/ -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:09 2026 by rpki-client