This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/MPWMs16X005RVT9AI90Avga642Q.roa File: MPWMs16X005RVT9AI90Avga642Q.roa (raw, json) Hash identifier: 2eWuFyAXp4gRIWiCS/+RGWaGItW02AaBBH51MmBYwwo= Subject key identifier: 30:F5:8C:B3:5E:97:D3:4E:51:55:3F:40:23:DD:00:BE:06:BA:E3:64 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EE0A31F2FCC5566ACC60E117E247B Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/MPWMs16X005RVT9AI90Avga642Q.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59851 IP address blocks: 185.225.237.0/24 maxlen: 24 2a04:f280::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e0:a3:1f:2f:cc:55:66:ac:c6:0e:11:7e:24:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30f58cb35e97d34e51553f4023dd00be06bae364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:12:58:8a:97:c9:df:65:8d:88:07:43:28: 08:f0:70:06:04:b9:3e:f7:9f:40:be:40:46:a3:26: 93:88:ab:72:fb:d4:23:ae:34:6e:1a:b7:92:f4:27: ff:5a:4b:a0:3e:3e:98:5e:9c:2d:80:2e:a9:a7:17: 49:04:c6:d7:17:35:f4:c2:81:0e:94:fd:f6:98:c8: e0:c1:c1:e1:6f:f7:3a:bc:11:3c:91:92:35:60:43: 50:51:99:31:2a:53:34:03:2e:bd:13:27:7c:00:f8: 68:c4:2c:7d:25:96:90:55:31:52:67:84:9e:a1:c0: 41:0b:fe:55:f1:96:22:64:f1:a4:8a:c0:c7:e9:99: 73:8e:cd:d7:0a:30:de:cb:ae:f4:87:d7:45:53:a4: 53:6e:b8:c8:19:7c:2e:16:1b:13:53:ed:70:9c:c4: 75:4d:69:05:5a:75:57:e1:cd:03:e7:c8:56:72:4a: a6:63:65:c3:2b:8b:2f:97:55:05:5d:75:24:40:7b: 4a:84:1b:c9:e7:64:5d:00:33:c9:f9:cf:c9:00:67: 15:5d:aa:76:14:82:d6:ba:4c:d7:e2:43:6e:59:b8: 79:bb:79:5c:c8:1a:48:ac:9c:a5:4a:d5:72:e2:32: ce:b4:12:96:7d:ca:e6:b0:28:70:39:48:8d:bb:76: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:8C:B3:5E:97:D3:4E:51:55:3F:40:23:DD:00:BE:06:BA:E3:64 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/MPWMs16X005RVT9AI90Avga642Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.237.0/24 IPv6: 2a04:f280::/40 Signature Algorithm: sha256WithRSAEncryption ab:93:de:0b:d3:29:99:19:e6:c9:b7:1d:61:b3:99:08:6b:90: 93:eb:b3:e1:7b:e5:ed:b8:1b:30:f0:fd:a6:93:f3:19:f3:76: 77:d4:fa:97:41:1c:ce:fa:62:f6:35:f1:6f:b2:69:d7:81:cb: 55:63:2c:b1:fb:8a:66:f1:04:47:5e:94:de:dd:90:c7:f3:02: fc:e5:0f:db:10:af:43:21:51:74:7c:35:34:f7:c8:81:a1:28: 8c:10:bf:ab:39:42:92:4a:c0:0f:c7:89:f8:a9:7b:50:d5:e0: 2b:42:e0:05:ef:20:5a:4b:fc:41:c5:9c:27:85:d0:af:35:d6: e3:d5:c3:e4:90:a3:78:f3:c2:97:22:c2:90:34:60:1d:b9:17: ec:be:db:24:de:bb:86:43:7b:53:ca:ce:1b:52:7e:29:ac:cb: 69:e7:19:be:7e:86:5e:9e:19:74:3b:e4:17:54:c9:e1:9a:4a: d3:9c:f7:a5:88:f3:f5:e7:5a:b4:45:63:9f:d3:17:52:1f:5f: c4:80:d8:ae:b3:44:2e:c8:aa:d2:97:e7:f5:c6:92:9f:5c:fa: 91:84:22:70:29:01:a5:a9:4b:d3:6d:a8:3b:a5:f6:bd:bd:58: 4d:44:87:6c:ac:f1:e3:9d:50:41:2e:f8:6a:c5:93:d1:e4:b7: e9:14:1d:7d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fuCjHy/MVWasxg4RfiR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGY1OGNiMzVlOTdkMzRlNTE1NTNmNDAyM2RkMDBiZTA2YmFlMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYESWIqXyd9ljYgHQygI8HAGBLk+ 959AvkBGoyaTiKty+9QjrjRuGreS9Cf/WkugPj6YXpwtgC6ppxdJBMbXFzX0woEO lP32mMjgwcHhb/c6vBE8kZI1YENQUZkxKlM0Ay69Eyd8APhoxCx9JZaQVTFSZ4Se ocBBC/5V8ZYiZPGkisDH6Zlzjs3XCjDey670h9dFU6RTbrjIGXwuFhsTU+1wnMR1 TWkFWnVX4c0D58hWckqmY2XDK4svl1UFXXUkQHtKhBvJ52RdADPJ+c/JAGcVXap2 FILWukzX4kNuWbh5u3lcyBpIrJylStVy4jLOtBKWfcrmsChwOUiNu3bYTwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDD1jLNel9NOUVU/QCPdAL4GuuNkMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvTVBXTXMxNlgwMDVSVlQ5QUk5MEF2Z2E2NDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAueHtMA4E AgACMAgDBgAqBPKAADANBgkqhkiG9w0BAQsFAAOCAQEAq5PeC9MpmRnmybcdYbOZ CGuQk+uz4Xvl7bgbMPD9ppPzGfN2d9T6l0Eczvpi9jXxb7Jp14HLVWMssfuKZvEE R16U3t2Qx/MC/OUP2xCvQyFRdHw1NPfIgaEojBC/qzlCkkrAD8eJ+Kl7UNXgK0Lg Be8gWkv8QcWcJ4XQrzXW49XD5JCjePPClyLCkDRgHbkX7L7bJN67hkN7U8rOG1J+ KazLaecZvn6GXp4ZdDvkF1TJ4ZpK05z3pYjz9edatEVjn9MXUh9fxIDYrrNELsiq 0pfn9caSn1z6kYQicCkBpalL022oO6X2vb1YTUSHbKzx451QQS74asWT0eS36RQd fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:46 2026 by rpki-client