This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MwKzbDbFpzXVT-QfGjXhHTsq-EA.roa File: MwKzbDbFpzXVT-QfGjXhHTsq-EA.roa (raw, json) Hash identifier: M83WhGTo9Beh4ahoqpwinet196PrtggVRL0p+bpIp4c= Subject key identifier: 33:02:B3:6C:36:C5:A7:35:D5:4F:E4:1F:1A:35:E1:1D:3B:2A:F8:40 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594286FD1FBF176876F70A17D9E25F Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MwKzbDbFpzXVT-QfGjXhHTsq-EA.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34353 IP address blocks: 188.210.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:42:86:fd:1f:bf:17:68:76:f7:0a:17:d9:e2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3302b36c36c5a735d54fe41f1a35e11d3b2af840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2c:be:b7:ff:b8:a8:af:b8:94:5b:2e:3f:b2: ae:80:e9:94:5d:ef:94:2b:b3:12:6a:a3:80:3a:f2: 32:16:48:14:6f:1f:8a:69:48:4a:88:e0:e3:2a:f4: 0d:e2:85:49:6e:d9:7e:5b:a7:86:98:69:67:b4:6a: 8b:c6:39:97:35:d4:f7:2e:73:d6:fe:f7:c3:d6:de: d1:ee:e9:04:ce:b0:ad:98:0b:30:db:47:39:7d:e1: 75:6d:d3:af:30:86:27:2c:89:11:2e:64:72:c2:21: 12:16:19:03:2b:93:68:2b:b5:7d:67:56:73:84:ea: 0b:fe:4d:a9:35:1d:f2:e7:a0:b7:a8:1e:68:82:f8: 13:a7:4e:98:1e:4a:bc:ae:12:8a:c6:80:58:a8:87: 18:81:36:da:52:ee:3d:b4:ea:8d:9e:bb:5a:3b:09: 76:4e:20:86:f1:db:a9:ca:3f:74:b7:db:ce:ee:a7: 19:fb:38:36:71:8f:d5:68:67:70:1f:f9:70:5c:ae: d6:59:74:8c:30:21:ea:16:5d:64:b2:24:08:fa:b0: 69:51:f2:e7:87:5f:e2:9a:c5:1b:c8:f6:34:cf:14: e3:52:6b:26:40:79:83:5d:37:ab:57:04:92:61:ab: fc:96:20:88:6a:30:4e:d9:5a:2d:be:10:64:29:23: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:B3:6C:36:C5:A7:35:D5:4F:E4:1F:1A:35:E1:1D:3B:2A:F8:40 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MwKzbDbFpzXVT-QfGjXhHTsq-EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.210.237.0/24 Signature Algorithm: sha256WithRSAEncryption 37:e1:58:a4:a6:ae:36:3c:1a:7f:8f:e1:93:19:9b:d8:1f:a2: e9:4e:f9:26:77:d7:12:47:84:40:3b:6e:b3:36:c9:20:91:c6: 6c:11:5e:f8:1b:4c:6a:bd:09:cf:c3:58:ad:a0:b0:e7:5b:58: 63:1a:7e:d8:b0:d8:80:35:09:4e:63:6a:23:5d:38:28:ac:f9: ed:27:ed:3d:5d:e0:59:e2:8f:d9:eb:95:45:01:b3:6a:76:ea: ab:42:8a:9e:3b:ca:9d:ee:f3:cc:78:03:c2:e2:8e:d6:cd:f3: 3d:d8:fa:2d:48:88:26:a7:e4:a7:89:a3:04:d5:65:e5:99:1e: 2f:a3:75:71:40:c4:00:e4:b9:98:20:a6:10:87:02:2e:5d:c2: 13:e1:15:33:c9:49:0e:d4:c8:52:75:a4:dd:b7:d9:46:ad:34: a7:9a:ab:04:c6:fa:93:2e:f8:ac:69:29:ba:34:79:d6:ff:11: 1b:48:9d:f1:a4:45:6a:ef:d8:27:0a:b8:40:d2:c1:f7:53:b0: 34:f9:2e:1e:99:13:c6:61:6c:f5:e0:58:5b:98:5a:8e:83:82: 2e:15:ab:52:f4:ce:cf:1f:52:9c:16:61:a0:4b:a6:59:06:47: 7a:c9:17:91:c9:9b:47:0f:20:50:20:ba:7a:e4:13:73:c7:c5: 41:26:86:45 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUKG/R+/F2h29woX2eJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzAyYjM2YzM2YzVhNzM1ZDU0ZmU0MWYxYTM1ZTExZDNiMmFmODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iy+t/+4qK+4lFsuP7KugOmUXe+U K7MSaqOAOvIyFkgUbx+KaUhKiODjKvQN4oVJbtl+W6eGmGlntGqLxjmXNdT3LnPW /vfD1t7R7ukEzrCtmAsw20c5feF1bdOvMIYnLIkRLmRywiESFhkDK5NoK7V9Z1Zz hOoL/k2pNR3y56C3qB5ogvgTp06YHkq8rhKKxoBYqIcYgTbaUu49tOqNnrtaOwl2 TiCG8dupyj90t9vO7qcZ+zg2cY/VaGdwH/lwXK7WWXSMMCHqFl1ksiQI+rBpUfLn h1/imsUbyPY0zxTjUmsmQHmDXTerVwSSYav8liCIajBO2VotvhBkKSNH7QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDMCs2w2xac11U/kHxo14R07KvhAMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL013S3piRGJGcHpYVlQtUWZHalhoSFRzcS1FQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80u0w DQYJKoZIhvcNAQELBQADggEBADfhWKSmrjY8Gn+P4ZMZm9gfoulO+SZ31xJHhEA7 brM2ySCRxmwRXvgbTGq9Cc/DWK2gsOdbWGMaftiw2IA1CU5jaiNdOCis+e0n7T1d 4Fnij9nrlUUBs2p26qtCip47yp3u88x4A8LijtbN8z3Y+i1IiCan5KeJowTVZeWZ Hi+jdXFAxADkuZggphCHAi5dwhPhFTPJSQ7UyFJ1pN232UatNKeaqwTG+pMu+Kxp Kbo0edb/ERtInfGkRWrv2CcKuEDSwfdTsDT5Lh6ZE8ZhbPXgWFuYWo6Dgi4Vq1L0 zs8fUpwWYaBLplkGR3rJF5HJm0cPIFAgunrkE3PHxUEmhkU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:08 2026 by rpki-client