This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/MBwRKSHfxRIenZ6VTtp6s77mU-g.roa File: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (raw, json) Hash identifier: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA= Subject key identifier: 30:1C:11:29:21:DF:C5:12:1E:9D:9E:95:4E:DA:7A:B3:BE:E6:53:E8 Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019B7DCB5A3CDAA35D1E7E1A2D97851D9D02 Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/MBwRKSHfxRIenZ6VTtp6s77mU-g.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2134 IP address blocks: 62.164.0.0/17 maxlen: 24 193.127.0.0/16 maxlen: 24 193.201.108.0/24 maxlen: 24 195.234.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:3c:da:a3:5d:1e:7e:1a:2d:97:85:1d:9d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301c112921dfc5121e9d9e954eda7ab3bee653e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:4e:8e:37:a5:82:64:17:47:1b:e2:d8:80: d7:f4:e4:4e:a3:9f:58:f7:7a:93:30:26:43:6d:0e: 5e:bd:76:db:8e:06:ab:a7:d0:52:91:7a:c8:5d:f1: b3:98:99:96:6b:06:cd:75:dd:5b:4a:4b:76:d9:fe: 19:4f:ad:b2:65:8d:50:cd:cc:c7:99:fe:db:fc:01: a4:50:f9:6e:54:05:07:6c:a2:ce:bb:d1:d2:35:a5: 3a:2d:3a:44:fa:b6:f9:30:0c:7b:de:f3:a1:c3:53: d9:23:55:90:1d:3c:32:f2:f5:d9:92:0a:c0:df:75: c0:1c:1f:9e:0f:30:2d:df:9b:20:76:f6:2b:8b:6a: 2b:51:f6:96:92:c5:65:63:b1:85:1c:89:10:14:02: 1a:fc:09:2d:28:76:0d:ae:06:2d:6c:3f:78:f1:22: a4:2a:e4:49:57:cb:e1:73:16:61:6d:99:30:1e:f7: 99:08:40:70:39:3e:d8:33:ba:85:d1:b2:5b:51:4c: 6c:a9:17:bd:91:3c:64:7d:a3:07:35:9d:cb:d5:f4: eb:d9:f1:29:02:62:3a:fd:55:04:f2:22:9d:72:5e: 4a:50:58:26:b7:7f:e0:d8:3f:8b:7b:f3:dc:2d:c8: 89:c3:27:86:96:af:0e:90:86:7a:b1:e1:a5:71:15: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1C:11:29:21:DF:C5:12:1E:9D:9E:95:4E:DA:7A:B3:BE:E6:53:E8 X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/MBwRKSHfxRIenZ6VTtp6s77mU-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.0.0/17 193.127.0.0/16 193.201.108.0/24 195.234.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:5a:62:83:60:28:1a:cc:54:5f:90:3c:7d:07:ad:ae:9a:71: dc:66:11:4d:c3:99:e2:b5:9a:1d:9a:3c:12:a3:91:f2:92:76: 9e:a9:f7:0f:08:43:9c:fd:b1:ab:95:65:18:47:9c:59:92:01: 78:e8:c1:ea:77:57:e0:c5:1d:50:ef:61:4a:21:d8:3f:43:a7: 01:30:93:e1:a2:6e:c4:26:7d:a1:bb:2a:d9:9d:7b:73:8a:dd: 3e:59:0a:6b:18:ad:3e:ee:7c:4b:2f:db:18:16:3a:83:a2:13: d7:16:66:ea:21:7b:d3:36:8d:ff:04:b0:bd:47:b8:73:75:17: c1:c3:5e:78:92:2e:03:72:8b:c7:7b:ae:90:8a:14:3b:c3:89: 92:c8:af:cc:8f:01:e1:74:6d:77:4f:f3:bf:43:40:c4:05:6f: dd:99:ed:55:63:d1:b5:07:fd:3b:36:30:f0:48:5c:3c:79:57: 0d:ee:a9:08:99:0b:69:06:ff:bf:ad:1d:ed:96:ea:f9:ba:75: a7:86:06:c4:76:5d:5b:31:12:c5:6e:90:d7:0b:de:ab:5f:18: 42:c7:51:48:91:8c:5a:88:d5:59:0d:14:a6:37:c2:80:b2:03: 65:d2:5a:bc:78:68:fa:70:38:83:9d:e9:13:34:73:ae:94:74: 0e:a0:96:38 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9y1o82qNdHn4aLZeFHZ0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFjMTEyOTIxZGZjNTEyMWU5ZDllOTU0ZWRhN2FiM2JlZTY1M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcpOjjelgmQXRxvi2IDX9OROo59Y 93qTMCZDbQ5evXbbjgarp9BSkXrIXfGzmJmWawbNdd1bSkt22f4ZT62yZY1QzczH mf7b/AGkUPluVAUHbKLOu9HSNaU6LTpE+rb5MAx73vOhw1PZI1WQHTwy8vXZkgrA 33XAHB+eDzAt35sgdvYri2orUfaWksVlY7GFHIkQFAIa/AktKHYNrgYtbD948SKk KuRJV8vhcxZhbZkwHveZCEBwOT7YM7qF0bJbUUxsqRe9kTxkfaMHNZ3L1fTr2fEp AmI6/VUE8iKdcl5KUFgmt3/g2D+Le/PcLciJwyeGlq8OkIZ6seGlcRUjWwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDAcESkh38USHp2elU7aerO+5lPoMB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvTUJ3UktTSGZ4Ukllblo2VlR0cDZzNzdtVS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQHPqQAAwMA wX8DBADByWwDBADD6qYwDQYJKoZIhvcNAQELBQADggEBAEpaYoNgKBrMVF+QPH0H ra6acdxmEU3DmeK1mh2aPBKjkfKSdp6p9w8IQ5z9sauVZRhHnFmSAXjowep3V+DF HVDvYUoh2D9DpwEwk+GibsQmfaG7Ktmde3OK3T5ZCmsYrT7ufEsv2xgWOoOiE9cW Zuohe9M2jf8EsL1HuHN1F8HDXniSLgNyi8d7rpCKFDvDiZLIr8yPAeF0bXdP879D QMQFb92Z7VVj0bUH/Ts2MPBIXDx5Vw3uqQiZC2kG/7+tHe2W6vm6daeGBsR2XVsx EsVukNcL3qtfGELHUUiRjFqI1VkNFKY3woCyA2XSWrx4aPpwOIOd6RM0c66UdA6g ljg= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:29 2026 by rpki-client