This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa File: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (raw, json) Hash identifier: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w= Subject key identifier: 30:F3:BC:1D:B7:05:58:C3:9E:13:68:81:29:5B:FE:21:6A:56:3F:19 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B36486C289BFBF0361B3B0CBF3ED576 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41564 IP address blocks: 2.57.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:48:6c:28:9b:fb:f0:36:1b:3b:0c:bf:3e:d5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30f3bc1db70558c39e136881295bfe216a563f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:7b:84:87:22:23:3f:89:86:f7:ee:25:d0: 0c:d6:14:0b:2c:e4:1f:fb:f3:24:4a:4c:5e:ea:8c: 22:a7:ed:a7:4e:79:dc:35:92:32:94:43:a9:75:6a: 0e:d0:31:a8:ca:cf:fc:bd:cc:69:66:e1:26:1b:52: d6:a8:1e:b0:ec:15:cd:1e:6b:15:8b:19:00:ac:38: 9e:a9:e5:2d:98:51:f5:5d:65:95:21:2f:14:0f:7e: 4b:ac:40:09:9a:e5:9e:21:83:e9:a4:7d:ab:93:a2: f5:3b:16:98:ef:63:46:fc:9f:fe:a0:81:c2:4e:a6: 8f:39:b5:17:8b:4a:de:93:4a:c8:35:e3:29:3d:b2: 1a:8e:8c:11:3b:ba:66:e3:a9:98:8f:d8:1e:40:7b: 6e:45:42:05:25:a1:93:d6:04:54:26:1d:e3:6f:c9: 44:e8:6d:80:3f:32:2a:56:49:fe:24:6d:96:bb:5d: fb:d4:74:c2:de:47:7e:a8:3a:e4:fe:ca:e1:a6:26: ee:3a:d3:bb:a8:ac:16:23:b0:d5:41:82:e2:d1:e9: 74:fd:bb:50:c1:70:6f:30:57:63:16:54:2c:2c:80: ad:c5:ae:96:f4:c1:61:33:49:fc:4c:68:26:1f:a8: d5:7e:34:9b:8f:70:dc:dc:3f:9c:be:0f:a9:60:f1: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F3:BC:1D:B7:05:58:C3:9E:13:68:81:29:5B:FE:21:6A:56:3F:19 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.169.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:9d:1a:ee:f7:98:8e:23:01:6e:0e:5c:a3:82:88:5d:a0:4d: ef:96:c6:de:36:d2:89:19:67:5e:06:b5:5d:4c:cd:5b:0b:24: 95:4a:ed:5b:51:20:2b:da:69:71:c3:22:18:a3:e6:2d:8f:fd: cb:65:35:07:51:16:8d:8f:68:5e:28:cb:76:be:a7:bd:d8:30: a9:10:f2:9b:b3:fe:6f:c2:f6:0f:76:63:5d:85:c1:91:06:00: 90:4f:9d:c9:d9:6e:47:a5:d1:64:40:79:b7:ab:e3:38:82:c8: 9f:28:cd:a0:74:1c:2f:c9:6b:e0:7a:9c:6b:d6:03:62:58:53: 3a:4e:c3:63:62:7e:7f:5e:2e:07:92:b0:18:6e:96:e1:5c:e6: 99:e2:22:d3:f8:74:89:90:a7:2f:ee:4b:eb:01:8a:e1:06:83: 5a:fe:28:b3:32:2a:7a:d4:4d:36:80:15:79:3d:d8:35:0d:ed: aa:6b:f1:80:75:d1:2e:f0:08:8a:79:72:27:35:c0:0d:61:d7: 5e:d9:e1:11:a3:3a:49:5e:41:09:a7:dd:f7:f0:12:86:ff:37: 9b:35:fb:ec:da:85:a3:c6:96:9b:51:b7:a3:5b:5d:c6:25:30: 70:12:44:31:4f:98:54:dc:31:ef:a2:3a:85:a0:b6:c2:8e:cd: 0e:39:d1:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkhsKJv78DYbOwy/PtV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGYzYmMxZGI3MDU1OGMzOWUxMzY4ODEyOTViZmUyMTZhNTYzZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZV7hIciIz+JhvfuJdAM1hQLLOQf +/MkSkxe6owip+2nTnncNZIylEOpdWoO0DGoys/8vcxpZuEmG1LWqB6w7BXNHmsV ixkArDieqeUtmFH1XWWVIS8UD35LrEAJmuWeIYPppH2rk6L1OxaY72NG/J/+oIHC TqaPObUXi0rek0rINeMpPbIajowRO7pm46mYj9geQHtuRUIFJaGT1gRUJh3jb8lE 6G2APzIqVkn+JG2Wu1371HTC3kd+qDrk/srhpibuOtO7qKwWI7DVQYLi0el0/btQ wXBvMFdjFlQsLICtxa6W9MFhM0n8TGgmH6jVfjSbj3Dc3D+cvg+pYPFkVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDzvB23BVjDnhNogSlb/iFqVj8ZMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvTVBPOEhiY0ZXTU9lRTJpQktWdi1JV3BXUHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmpMA0G CSqGSIb3DQEBCwUAA4IBAQAvnRru95iOIwFuDlyjgohdoE3vlsbeNtKJGWdeBrVd TM1bCySVSu1bUSAr2mlxwyIYo+Ytj/3LZTUHURaNj2heKMt2vqe92DCpEPKbs/5v wvYPdmNdhcGRBgCQT53J2W5HpdFkQHm3q+M4gsifKM2gdBwvyWvgepxr1gNiWFM6 TsNjYn5/Xi4HkrAYbpbhXOaZ4iLT+HSJkKcv7kvrAYrhBoNa/iizMip61E02gBV5 Pdg1De2qa/GAddEu8AiKeXInNcANYdde2eERozpJXkEJp9338BKG/zebNfvs2oWj xpabUbejW13GJTBwEkQxT5hU3DHvojqFoLbCjs0OOdE7 -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:06 2026 by rpki-client