This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/MXpmWhbVyPq4rmweRCFwVrTv_-A.roa File: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (raw, json) Hash identifier: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc= Subject key identifier: 31:7A:66:5A:16:D5:C8:FA:B8:AE:6C:1E:44:21:70:56:B4:EF:FF:E0 Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb Certificate serial: 019B7AC7B397D62DCBE195B2B50CD6C41A02 Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/MXpmWhbVyPq4rmweRCFwVrTv_-A.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 193.41.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b3:97:d6:2d:cb:e1:95:b2:b5:0c:d6:c4:1a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=317a665a16d5c8fab8ae6c1e44217056b4efffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:3a:60:50:bc:c9:3c:ba:8b:96:ea:4f:1b: 1b:9f:14:88:10:ad:ec:17:5f:84:f0:49:6a:8f:4a: 06:70:0f:37:83:61:c6:68:c6:d7:af:dd:6c:fb:44: 4a:9d:3d:8f:74:67:3c:46:83:03:ef:7c:3b:25:bf: 58:aa:27:7a:29:9a:2d:9b:54:5d:87:2d:58:1d:af: f3:5d:ae:ae:3b:43:f4:8d:3f:84:c3:73:2d:30:6c: e3:bf:1a:07:d0:37:e4:fa:9f:ed:fa:c2:96:e3:53: 7f:3e:a6:ff:d3:0e:5e:cc:cc:00:a8:26:43:04:b0: dc:50:2f:8b:e8:c8:6e:63:a5:ba:77:21:ce:7c:c7: 55:51:45:13:7b:68:40:54:e7:86:d5:36:3d:75:41: b8:e8:67:79:6d:57:bd:c0:2c:74:32:42:bd:ea:4e: 8b:50:3f:cc:ba:92:96:87:12:68:a9:c9:c3:e4:56: 38:f8:b1:21:b5:c6:d6:4f:a5:a5:bd:ca:8f:31:dd: 05:55:76:81:3a:5d:df:69:81:32:ba:be:18:bb:09: 57:6c:95:43:4e:0e:f9:c2:64:02:74:d6:65:f9:d2: fe:9a:0f:51:03:29:b5:4c:f9:be:27:08:e4:12:0c: 3a:9f:3a:f3:53:9e:72:ec:34:7b:a5:df:a2:62:27: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7A:66:5A:16:D5:C8:FA:B8:AE:6C:1E:44:21:70:56:B4:EF:FF:E0 X509v3 Authority Key Identifier: keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/MXpmWhbVyPq4rmweRCFwVrTv_-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.193.0/24 Signature Algorithm: sha256WithRSAEncryption 07:26:1e:62:27:5a:47:47:4a:db:97:3c:28:1c:71:a3:ab:4c: 90:0e:54:58:47:e6:a6:02:6c:61:d5:a3:45:ee:86:be:42:66: ff:d6:1e:8d:86:f0:65:4f:3b:01:20:58:50:a4:5d:60:1b:1e: cf:34:f1:13:ee:64:4c:c2:a0:58:30:2f:f1:4a:ca:9a:fc:98: cf:ed:c3:f6:c7:49:d1:87:ae:77:b5:33:a0:e8:d2:9b:05:8a: 89:c2:4c:8d:f2:25:24:45:17:b3:ca:01:d8:67:a7:4c:36:2e: 64:14:73:c2:df:20:36:54:b1:fa:1d:a4:b7:0d:7f:1e:04:6d: 7c:19:2f:39:13:e0:57:0c:40:98:82:5e:2e:a7:0c:91:47:b1: 7c:d2:fa:c6:1b:96:25:04:c1:fd:0a:87:b6:71:3a:8c:48:af: 8c:ab:e8:bc:d9:e1:39:ec:dc:33:98:62:77:54:66:bb:26:66: 45:c7:f5:68:f6:6d:3e:37:a6:ad:8b:9b:48:51:70:5d:fa:6e: 62:a9:96:b3:31:6c:72:af:14:d0:d1:0b:8a:69:a5:d1:ad:ed: 06:86:00:74:f5:1a:5c:02:4e:dc:e1:dd:a3:f8:e7:8e:03:f7: 86:d8:56:86:71:21:af:4f:57:76:86:a1:80:f4:00:92:ec:c6: 5c:8b:cb:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7OX1i3L4ZWytQzWxBoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTI0NTRjMTY2OTY0ODZjZjA3MWVkMThlNzk3NmUzNDA0 OTA5ZmIwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTdhNjY1YTE2ZDVjOGZhYjhhZTZjMWU0NDIxNzA1NmI0ZWZmZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS06YFC8yTy6i5bqTxsbnxSIEK3s F1+E8Elqj0oGcA83g2HGaMbXr91s+0RKnT2PdGc8RoMD73w7Jb9Yqid6KZotm1Rd hy1YHa/zXa6uO0P0jT+Ew3MtMGzjvxoH0Dfk+p/t+sKW41N/Pqb/0w5ezMwAqCZD BLDcUC+L6MhuY6W6dyHOfMdVUUUTe2hAVOeG1TY9dUG46Gd5bVe9wCx0MkK96k6L UD/MupKWhxJoqcnD5FY4+LEhtcbWT6WlvcqPMd0FVXaBOl3faYEyur4YuwlXbJVD Tg75wmQCdNZl+dL+mg9RAym1TPm+JwjkEgw6nzrzU55y7DR7pd+iYifvswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDF6ZloW1cj6uK5sHkQhcFa07//gMB8GA1UdIwQY MBaAFLaSRUwWaWSGzwce0Y55duNASQn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYt NGE2ZjcxN2M3NTY0LzEvTVhwbVdoYlZ5UHE0cm13ZVJDRndWclR2Xy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYtNGE2ZjcxN2M3NTY0 LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSnBMA0G CSqGSIb3DQEBCwUAA4IBAQAHJh5iJ1pHR0rblzwoHHGjq0yQDlRYR+amAmxh1aNF 7oa+Qmb/1h6NhvBlTzsBIFhQpF1gGx7PNPET7mRMwqBYMC/xSsqa/JjP7cP2x0nR h653tTOg6NKbBYqJwkyN8iUkRRezygHYZ6dMNi5kFHPC3yA2VLH6HaS3DX8eBG18 GS85E+BXDECYgl4upwyRR7F80vrGG5YlBMH9Coe2cTqMSK+Mq+i82eE57NwzmGJ3 VGa7JmZFx/Vo9m0+N6ati5tIUXBd+m5iqZazMWxyrxTQ0QuKaaXRre0GhgB09Rpc Ak7c4d2j+OeOA/eG2FaGcSGvT1d2hqGA9ACS7MZci8s6 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:06 2026 by rpki-client