This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/MDrbORic-T38FR83kdivFTffx_U.roa File: MDrbORic-T38FR83kdivFTffx_U.roa (raw, json) Hash identifier: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4= Subject key identifier: 30:3A:DB:39:18:9C:F9:3D:FC:15:1F:37:91:D8:AF:15:37:DF:C7:F5 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019B7CED863AE58176E95CD3FABEAA611BF1 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/MDrbORic-T38FR83kdivFTffx_U.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47630 IP address blocks: 46.19.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:86:3a:e5:81:76:e9:5c:d3:fa:be:aa:61:1b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=303adb39189cf93dfc151f3791d8af1537dfc7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:76:2c:7b:de:a3:fa:ba:b9:c5:51:0d:87: ad:c3:7e:03:4b:2b:6e:fc:08:19:ac:f9:ba:e0:f8: ee:fb:9a:19:01:28:46:3e:20:45:a0:8a:73:bb:00: 1d:0e:ff:c8:95:cd:b7:34:50:8d:24:1e:dd:53:c9: 07:ab:fb:dd:6e:60:93:7a:e8:05:51:f0:cc:8a:b1: 02:7b:6d:60:ca:55:9a:5c:e2:35:31:c6:fb:22:29: ad:d0:91:6d:af:63:53:64:d8:40:81:48:56:c0:fd: 97:29:27:41:2c:4e:b4:be:1e:7c:32:2e:6b:ef:dd: 8e:e0:2d:76:bf:42:37:70:bb:62:99:34:24:5d:de: ea:6c:0d:a5:f4:29:c5:00:90:56:bf:87:95:be:20: 77:8c:7c:de:dd:f7:08:27:74:5a:9f:31:ea:8d:a2: fe:35:c4:b8:fe:fe:81:cc:7b:c0:ac:58:89:8e:fa: 27:a4:5e:03:34:9d:ed:31:17:78:b6:2e:44:ca:ff: 7d:bb:80:a3:27:b9:01:e0:90:ab:3b:62:1d:88:b9: 05:3f:7d:19:d9:18:aa:b7:2f:d2:e7:db:a7:5c:23: 9d:9a:42:91:ae:7c:72:79:09:38:bb:75:9d:bb:f2: 4f:99:07:ce:78:6c:a6:42:a8:37:23:dc:ca:d5:5e: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:DB:39:18:9C:F9:3D:FC:15:1F:37:91:D8:AF:15:37:DF:C7:F5 X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/MDrbORic-T38FR83kdivFTffx_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.6.0/24 Signature Algorithm: sha256WithRSAEncryption 19:2f:a9:cb:e5:c3:e6:ec:af:dd:38:e5:28:24:02:20:3e:cf: da:5f:cb:b3:de:23:3b:16:03:7c:35:3b:8c:1a:3c:e6:fe:81: 5d:ab:41:7f:ab:d7:7f:f7:bd:6b:20:c4:64:e3:ed:37:63:64: 61:0f:9c:31:5a:b0:ef:88:ce:d2:d8:80:2b:16:43:f2:43:e4: 25:5c:71:8f:f5:12:d0:97:1b:1f:b8:6a:fc:fd:1d:7e:cc:3b: c0:67:62:dc:e3:ff:f1:94:40:67:ee:d1:bd:c8:8c:ad:da:d2: 80:91:8a:ba:be:5a:5d:32:d8:a9:de:a8:7a:17:68:9d:ff:5a: d6:c7:c6:66:b3:cb:0d:36:cd:77:0d:a4:d1:86:f1:b3:dd:be: 30:83:b7:90:d0:6a:be:71:a0:b3:67:76:09:79:f8:0f:4a:a5: fb:ca:df:d1:03:7e:5c:37:10:0a:dd:a1:31:85:ef:93:29:b0: e5:73:09:e8:3f:b6:ce:9d:a3:43:7b:a8:9c:a8:c3:25:c0:d2: 8f:fe:46:c7:8a:c9:2d:76:ec:1e:5d:e7:fd:69:9e:5f:1e:0c: 51:6e:8d:93:e1:75:cb:98:2b:23:fe:4f:6c:4d:2f:30:37:af: c3:f8:6b:e4:f5:aa:1d:b3:c8:b2:bc:42:a8:58:37:4a:f7:32: bb:fe:da:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YY65YF26VzT+r6qYRvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDNhZGIzOTE4OWNmOTNkZmMxNTFmMzc5MWQ4YWYxNTM3ZGZjN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZZ2LHveo/q6ucVRDYetw34DSytu /AgZrPm64Pju+5oZAShGPiBFoIpzuwAdDv/Ilc23NFCNJB7dU8kHq/vdbmCTeugF UfDMirECe21gylWaXOI1Mcb7Iimt0JFtr2NTZNhAgUhWwP2XKSdBLE60vh58Mi5r 792O4C12v0I3cLtimTQkXd7qbA2l9CnFAJBWv4eVviB3jHze3fcIJ3RanzHqjaL+ NcS4/v6BzHvArFiJjvonpF4DNJ3tMRd4ti5Eyv99u4CjJ7kB4JCrO2IdiLkFP30Z 2Riqty/S59unXCOdmkKRrnxyeQk4u3Wdu/JPmQfOeGymQqg3I9zK1V57kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDA62zkYnPk9/BUfN5HYrxU338f1MB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvTURyYk9SaWMtVDM4RlI4M2tkaXZGVGZmeF9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhMGMA0G CSqGSIb3DQEBCwUAA4IBAQAZL6nL5cPm7K/dOOUoJAIgPs/aX8uz3iM7FgN8NTuM Gjzm/oFdq0F/q9d/971rIMRk4+03Y2RhD5wxWrDviM7S2IArFkPyQ+QlXHGP9RLQ lxsfuGr8/R1+zDvAZ2Lc4//xlEBn7tG9yIyt2tKAkYq6vlpdMtip3qh6F2id/1rW x8Zms8sNNs13DaTRhvGz3b4wg7eQ0Gq+caCzZ3YJefgPSqX7yt/RA35cNxAK3aEx he+TKbDlcwnoP7bOnaNDe6icqMMlwNKP/kbHisktduweXef9aZ5fHgxRbo2T4XXL mCsj/k9sTS8wN6/D+Gvk9aods8iyvEKoWDdK9zK7/tp+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:14 2026 by rpki-client