This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MBFPvIPgNySe2urpIvFCDePV9Y4.roa File: MBFPvIPgNySe2urpIvFCDePV9Y4.roa (raw, json) Hash identifier: f5+yNK9LhJwsFZqjTx+HKOKeKNubN7GeN8d0fxuo2LI= Subject key identifier: 30:11:4F:BC:83:E0:37:24:9E:DA:EA:E9:22:F1:42:0D:E3:D5:F5:8E Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F146B407D2F03E23FBE3C03A88ED79F Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MBFPvIPgNySe2urpIvFCDePV9Y4.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216234 IP address blocks: 109.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6b:40:7d:2f:03:e2:3f:be:3c:03:a8:8e:d7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30114fbc83e037249edaeae922f1420de3d5f58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:d5:e3:b7:1e:f9:3e:21:a6:c2:d6:a6:db: ef:e2:1a:29:5b:5e:1d:c5:1f:0e:31:5f:7b:74:79: 41:3a:77:5a:ea:0c:e6:64:0f:13:f1:c2:55:38:cc: 8b:a0:58:62:d8:6f:ee:40:c1:63:d5:bf:52:c4:b8: 29:99:e9:f0:b6:c8:37:e4:0d:07:7e:f1:18:05:a4: b8:9e:13:55:39:0c:7d:0e:fd:69:56:22:05:d9:06: 94:07:c7:d7:b5:05:47:dc:cb:aa:fb:18:2f:e4:ce: 6e:03:6a:32:90:22:f2:eb:3f:c1:0e:99:9c:6b:03: 3b:24:86:fa:d5:ba:61:6d:89:a4:4e:87:38:af:a4: c3:b0:53:ec:47:eb:dc:21:8c:28:ca:a9:8f:4c:94: af:8d:58:1f:eb:8e:2e:39:aa:97:5a:b0:85:4d:0d: ad:ab:9e:81:c0:eb:c0:dd:2b:3a:e3:3e:c4:90:2f: a3:25:af:71:8f:cf:2d:76:bf:8a:5d:4f:7b:54:31: 03:ff:b8:a2:22:fa:ff:c8:59:13:d1:9a:85:60:b4: 9a:f1:67:6e:3b:b8:b6:6d:09:d4:a2:e5:cb:8d:0c: 04:87:f2:47:be:5f:ef:45:12:bd:63:d4:51:ab:40: 4a:d3:70:12:c9:20:95:6f:3b:b1:ea:ee:19:11:f9: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:4F:BC:83:E0:37:24:9E:DA:EA:E9:22:F1:42:0D:E3:D5:F5:8E X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MBFPvIPgNySe2urpIvFCDePV9Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.144.0/24 Signature Algorithm: sha256WithRSAEncryption a6:38:65:c1:f3:cd:9e:49:6b:1c:fb:a4:d2:da:b5:c9:0c:aa: 07:53:64:44:a8:b7:d2:2d:4d:1d:b0:64:53:1e:92:66:4d:5d: 86:62:0d:f2:2d:1e:17:1e:72:fa:d9:8d:ac:eb:72:b2:fc:d3: 7a:45:7a:0f:c9:cb:83:8f:7b:b4:d0:f4:36:a3:5f:b2:79:ef: 1f:5f:51:0b:47:68:d8:eb:13:c8:d3:d2:14:c6:2f:0a:d8:00: 15:b7:d9:39:af:7d:7d:e9:fb:cd:dd:9b:74:d8:38:2f:d2:68: 00:bb:db:bb:cf:79:09:23:47:12:93:e0:f0:dd:95:28:44:57: 52:3f:bc:5d:69:cd:4a:a1:9a:5f:41:24:3b:79:f0:98:f8:88: 5e:e6:60:79:94:96:eb:7b:3d:70:d9:fc:33:5a:5d:5a:af:68: 64:2e:08:4a:5a:0c:f8:d2:dd:d1:17:d4:5d:a0:48:ac:b0:02: e0:82:a3:21:f0:c8:43:e7:4c:b2:27:fe:c4:70:0f:58:94:56: 95:e2:67:f4:2a:30:d8:eb:13:fd:4b:fc:38:a9:cc:45:2b:f2: 05:11:9e:e8:d2:68:77:30:6e:5b:89:3c:72:f3:72:d2:74:c8: c6:59:c4:1f:b3:64:f8:56:04:33:70:74:fb:1b:48:53:fc:3b: 91:bc:44:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGtAfS8D4j++PAOojtefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDExNGZiYzgzZTAzNzI0OWVkYWVhZTkyMmYxNDIwZGUzZDVmNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eXV47ce+T4hpsLWptvv4hopW14d xR8OMV97dHlBOnda6gzmZA8T8cJVOMyLoFhi2G/uQMFj1b9SxLgpmenwtsg35A0H fvEYBaS4nhNVOQx9Dv1pViIF2QaUB8fXtQVH3Muq+xgv5M5uA2oykCLy6z/BDpmc awM7JIb61bphbYmkToc4r6TDsFPsR+vcIYwoyqmPTJSvjVgf644uOaqXWrCFTQ2t q56BwOvA3Ss64z7EkC+jJa9xj88tdr+KXU97VDED/7iiIvr/yFkT0ZqFYLSa8Wdu O7i2bQnUouXLjQwEh/JHvl/vRRK9Y9RRq0BK03ASySCVbzux6u4ZEfkXcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDART7yD4Dckntrq6SLxQg3j1fWOMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvTUJGUHZJUGdOeVNlMnVycEl2RkNEZVBWOVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiQMA0G CSqGSIb3DQEBCwUAA4IBAQCmOGXB882eSWsc+6TS2rXJDKoHU2REqLfSLU0dsGRT HpJmTV2GYg3yLR4XHnL62Y2s63Ky/NN6RXoPycuDj3u00PQ2o1+yee8fX1ELR2jY 6xPI09IUxi8K2AAVt9k5r3196fvN3Zt02Dgv0mgAu9u7z3kJI0cSk+Dw3ZUoRFdS P7xdac1KoZpfQSQ7efCY+Ihe5mB5lJbrez1w2fwzWl1ar2hkLghKWgz40t3RF9Rd oEissALggqMh8MhD50yyJ/7EcA9YlFaV4mf0KjDY6xP9S/w4qcxFK/IFEZ7o0mh3 MG5biTxy83LSdMjGWcQfs2T4VgQzcHT7G0hT/DuRvETU -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:27 2026 by rpki-client