This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/MWLpiVxWcWWUUdGUSxmvFDLug7k.roa File: MWLpiVxWcWWUUdGUSxmvFDLug7k.roa (raw, json) Hash identifier: TjifywfqXO+0J3DrMt294xq7aAK4JktGnM6U0rfLh1g= Subject key identifier: 31:62:E9:89:5C:56:71:65:94:51:D1:94:4B:19:AF:14:32:EE:83:B9 Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Certificate serial: 019B7F14851E9E2ECB21A1BFCFA9DEACCC18 Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/MWLpiVxWcWWUUdGUSxmvFDLug7k.roa Signing time: Fri 02 Jan 2026 14:20:09 +0000 ROA not before: Fri 02 Jan 2026 14:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 78.40.176.0/24 maxlen: 24 78.40.177.0/24 maxlen: 24 78.40.178.0/24 maxlen: 24 78.40.179.0/24 maxlen: 24 78.40.180.0/24 maxlen: 24 78.40.181.0/24 maxlen: 24 78.40.182.0/24 maxlen: 24 78.40.183.0/24 maxlen: 24 185.87.168.0/24 maxlen: 24 185.87.170.0/24 maxlen: 24 185.87.171.0/24 maxlen: 24 185.160.224.0/24 maxlen: 24 185.160.225.0/24 maxlen: 24 185.160.226.0/24 maxlen: 24 185.160.227.0/24 maxlen: 24 2a0b:8e80::/48 maxlen: 48 2a0b:8e80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:85:1e:9e:2e:cb:21:a1:bf:cf:a9:de:ac:cc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Validity Not Before: Jan 2 14:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3162e9895c5671659451d1944b19af1432ee83b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:2b:5f:a1:17:9c:a4:c1:8a:f8:9b:a3:8f: a3:62:93:e6:05:f1:ee:60:64:f1:64:50:64:f2:33: f6:5e:05:00:f3:87:fd:16:22:02:50:a8:36:c4:58: 6a:f1:e8:fe:7c:b4:79:90:84:ba:30:33:43:26:cb: af:d8:10:d0:81:19:b2:72:c8:40:d3:d5:cd:4b:11: 39:a9:fa:56:e3:19:2e:fc:3e:53:c0:b4:aa:be:2e: c8:57:c8:40:1c:24:be:c8:66:58:7c:60:fe:93:ab: b9:eb:31:10:8c:02:e7:74:be:df:c1:ac:98:f0:73: da:a0:9c:23:56:a6:01:5d:62:c1:9d:21:ba:e9:61: de:bb:3b:52:ee:86:3d:98:da:3b:a5:d7:fc:71:4c: 74:94:13:d6:07:db:c4:ea:e7:95:33:ef:9c:2f:89: 97:b8:86:53:04:2e:f4:4d:bb:3d:b1:b9:2a:a6:9c: 8c:b4:f0:f6:27:54:24:dd:e6:5b:78:ee:d9:49:38: 6b:ae:a4:55:23:9c:2f:57:d1:37:83:3a:ca:1d:71: c7:05:7e:25:41:5a:cd:97:e0:ed:88:7a:0e:5c:0c: a8:41:18:51:7c:c5:bd:19:66:e9:77:28:26:08:34: 07:9d:fc:9e:a3:8a:6a:6b:06:a8:3a:9d:c6:bf:90: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:62:E9:89:5C:56:71:65:94:51:D1:94:4B:19:AF:14:32:EE:83:B9 X509v3 Authority Key Identifier: keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/MWLpiVxWcWWUUdGUSxmvFDLug7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.176.0/21 185.87.168.0/24 185.87.170.0/23 185.160.224.0/22 IPv6: 2a0b:8e80::/47 Signature Algorithm: sha256WithRSAEncryption 89:ad:a5:3b:86:51:22:61:eb:a6:66:99:5c:7a:74:2f:c0:17: 5e:1e:9f:ff:3a:df:f1:f1:0c:a8:8f:3e:ee:dd:fc:48:fd:0c: 72:5d:0d:60:56:52:94:b3:5c:6b:5c:cd:66:db:64:a1:1a:10: ff:e8:95:37:4d:1c:e5:70:36:ba:c4:af:ad:9e:c7:f1:c5:84: 12:c9:71:40:60:19:43:61:b0:72:bd:e4:12:04:06:bc:e1:d1: fa:ae:c4:9f:1a:73:3c:67:0d:d4:2d:41:f9:78:17:d1:8e:84: 31:55:e1:87:e3:4d:03:57:c2:37:23:fb:40:b6:12:d3:c7:2d: a0:0b:e6:e6:81:38:eb:54:64:4d:b3:df:21:b8:07:f5:ca:0a: fb:2f:8d:59:63:08:2e:d2:62:2f:fc:db:00:35:5f:65:5f:77: 0c:f4:6f:77:1d:a3:af:ac:ae:f3:a1:da:01:4f:c5:f9:87:c6: 7c:9b:e8:97:bb:96:45:7a:69:4c:d5:47:37:94:a0:71:a2:50: 56:f5:d0:c4:ea:34:7e:c2:c1:00:4d:e2:3e:a2:74:76:3b:af: a1:7f:56:d3:5c:d0:c3:42:fb:ca:44:f5:60:40:cf:94:ad:8f: 8c:69:18:1e:e6:11:cd:b2:c4:1f:fa:2e:82:c0:12:1b:78:18: d0:cb:9f:16 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/FIUeni7LIaG/z6nerMwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm MDQ1OWIwHhcNMjYwMTAyMTQyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTYyZTk4OTVjNTY3MTY1OTQ1MWQxOTQ0YjE5YWYxNDMyZWU4M2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviArX6EXnKTBivibo4+jYpPmBfHu YGTxZFBk8jP2XgUA84f9FiICUKg2xFhq8ej+fLR5kIS6MDNDJsuv2BDQgRmycshA 09XNSxE5qfpW4xku/D5TwLSqvi7IV8hAHCS+yGZYfGD+k6u56zEQjALndL7fwayY 8HPaoJwjVqYBXWLBnSG66WHeuztS7oY9mNo7pdf8cUx0lBPWB9vE6ueVM++cL4mX uIZTBC70Tbs9sbkqppyMtPD2J1Qk3eZbeO7ZSThrrqRVI5wvV9E3gzrKHXHHBX4l QVrNl+DtiHoOXAyoQRhRfMW9GWbpdygmCDQHnfyeo4pqawaoOp3Gv5DzcQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDFi6YlcVnFllFHRlEsZrxQy7oO5MB8GA1UdIwQY MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct MjYwYzM3N2EzMTRhLzEvTVdMcGlWeFdjV1dVVWRHVVN4bXZGREx1ZzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQDTiiwAwQA uVeoAwQBuVeqAwQCuaDgMA8EAgACMAkDBwEqC46AAAAwDQYJKoZIhvcNAQELBQAD ggEBAImtpTuGUSJh66ZmmVx6dC/AF14en/863/HxDKiPPu7d/Ej9DHJdDWBWUpSz XGtczWbbZKEaEP/olTdNHOVwNrrEr62ex/HFhBLJcUBgGUNhsHK95BIEBrzh0fqu xJ8aczxnDdQtQfl4F9GOhDFV4YfjTQNXwjcj+0C2EtPHLaAL5uaBOOtUZE2z3yG4 B/XKCvsvjVljCC7SYi/82wA1X2Vfdwz0b3cdo6+srvOh2gFPxfmHxnyb6Je7lkV6 aUzVRzeUoHGiUFb10MTqNH7CwQBN4j6idHY7r6F/VtNc0MNC+8pE9WBAz5Stj4xp GB7mEc2yxB/6LoLAEht4GNDLnxY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:52 2026 by rpki-client