This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/mccsr8m8ho2_mF3Ywy_9oaBImlk.roa File: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (raw, json) Hash identifier: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk= Subject key identifier: 99:C7:2C:AF:C9:BC:86:8D:BF:98:5D:D8:C3:2F:FD:A1:A0:48:9A:59 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B7910292AF8C5A2553D0874A667556609 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/mccsr8m8ho2_mF3Ywy_9oaBImlk.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212707 IP address blocks: 46.31.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:29:2a:f8:c5:a2:55:3d:08:74:a6:67:55:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c72cafc9bc868dbf985dd8c32ffda1a0489a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:ad:34:65:65:ea:56:ea:fc:89:66:b9:07: 94:97:2a:c1:0b:38:e9:89:18:80:65:d3:0c:42:6a: 83:3e:ae:13:f5:9e:fd:98:e4:2f:0c:e3:4c:03:38: f3:a6:11:21:69:fe:b5:76:24:f7:c3:04:a1:49:35: 51:4c:a5:47:e4:32:e6:b0:70:ff:5a:2e:d6:2f:d0: 59:63:b8:af:3f:d5:92:70:96:56:99:7d:9e:b6:b7: 6c:c0:86:43:24:b2:55:47:8a:f9:e3:b5:de:70:eb: 2a:9b:ce:ab:26:e0:2f:d2:5a:77:07:9e:93:93:b6: db:4c:79:51:e3:e9:32:87:76:5c:55:7c:07:75:6b: ae:ed:4a:56:01:10:c6:9f:4f:4e:66:67:2b:b4:1e: ab:de:fb:e3:03:87:53:4a:82:a4:1e:f2:21:a8:cf: ce:8e:04:a4:e5:5c:61:34:e5:75:8c:33:88:e1:32: e6:6e:a3:9b:5d:62:2a:1a:98:27:dd:28:f0:d7:04: 97:22:d3:38:ed:5a:b1:ed:08:1c:3a:23:bf:a6:9d: c8:8e:1e:79:7d:f4:da:0c:9c:cb:03:6d:da:1d:4a: 06:f5:4e:b0:df:ef:48:6b:8c:67:a6:8b:cc:9d:f4: fc:ec:58:2c:09:2c:dc:ed:b4:62:be:18:d7:62:1a: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:2C:AF:C9:BC:86:8D:BF:98:5D:D8:C3:2F:FD:A1:A0:48:9A:59 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/mccsr8m8ho2_mF3Ywy_9oaBImlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.180.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:b4:c1:d2:68:d7:65:47:0c:be:92:06:91:c6:41:f6:ea:5c: 4f:75:5f:c1:5e:55:5a:54:e6:dd:8b:0b:50:c2:16:ed:cc:d5: 8d:71:01:76:5f:80:c3:02:61:5b:12:09:f7:5c:1f:9d:ce:9c: 67:6b:98:00:60:ed:1f:96:29:be:83:12:64:11:c5:ec:49:80: a1:d8:a8:b9:d3:d1:7a:be:fd:be:f4:09:b9:b7:a6:39:c2:ae: 5e:b9:f0:8c:64:1c:77:a5:9b:a1:a1:9d:b3:a3:69:8a:67:ce: 81:a4:2d:6f:0f:1b:63:7f:7f:de:dc:bb:19:a8:da:8d:97:c4: d6:aa:3f:20:ad:4e:d3:8b:37:3e:2e:6c:3c:da:18:68:59:e7: 81:1f:6d:61:2c:29:5f:b8:15:11:91:ce:63:62:9a:b0:4e:cf: b3:e2:9c:4d:8d:7a:1c:3b:3d:36:c5:c3:af:3c:d8:8b:45:8a: 30:bf:cd:0f:d9:0c:17:2d:0b:fa:60:33:01:34:81:bc:68:d8: b3:6a:2d:9c:2c:28:d6:a1:73:8e:5e:b6:50:aa:c5:dd:00:07: da:60:33:67:40:63:b9:b9:71:54:e2:c8:eb:a7:94:e8:32:0a: 0e:d2:c5:80:df:1a:a9:b2:18:54:be:10:b6:b1:b4:01:ac:06: 08:65:f8:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECkq+MWiVT0IdKZnVWYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM3MmNhZmM5YmM4NjhkYmY5ODVkZDhjMzJmZmRhMWEwNDg5YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr2tNGVl6lbq/IlmuQeUlyrBCzjp iRiAZdMMQmqDPq4T9Z79mOQvDONMAzjzphEhaf61diT3wwShSTVRTKVH5DLmsHD/ Wi7WL9BZY7ivP9WScJZWmX2etrdswIZDJLJVR4r547XecOsqm86rJuAv0lp3B56T k7bbTHlR4+kyh3ZcVXwHdWuu7UpWARDGn09OZmcrtB6r3vvjA4dTSoKkHvIhqM/O jgSk5VxhNOV1jDOI4TLmbqObXWIqGpgn3Sjw1wSXItM47Vqx7QgcOiO/pp3Ijh55 ffTaDJzLA23aHUoG9U6w3+9Ia4xnpovMnfT87FgsCSzc7bRivhjXYhoLBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnHLK/JvIaNv5hd2MMv/aGgSJpZMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvbWNjc3I4bThobzJfbUYzWXd5XzlvYUJJbWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh+0MA0G CSqGSIb3DQEBCwUAA4IBAQBMtMHSaNdlRwy+kgaRxkH26lxPdV/BXlVaVObdiwtQ whbtzNWNcQF2X4DDAmFbEgn3XB+dzpxna5gAYO0flim+gxJkEcXsSYCh2Ki509F6 vv2+9Am5t6Y5wq5eufCMZBx3pZuhoZ2zo2mKZ86BpC1vDxtjf3/e3LsZqNqNl8TW qj8grU7Tizc+Lmw82hhoWeeBH21hLClfuBURkc5jYpqwTs+z4pxNjXocOz02xcOv PNiLRYowv80P2QwXLQv6YDMBNIG8aNizai2cLCjWoXOOXrZQqsXdAAfaYDNnQGO5 uXFU4sjrp5ToMgoO0sWA3xqpshhUvhC2sbQBrAYIZfgH -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:08 2026 by rpki-client