This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MdXllBZP0mMZ0dXI6p75TCwhxPo.roa File: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (raw, json) Hash identifier: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo= Subject key identifier: 31:D5:E5:94:16:4F:D2:63:19:D1:D5:C8:EA:9E:F9:4C:2C:21:C4:FA Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3CE1E51C6AB65FC0DA0EE13C71F5 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MdXllBZP0mMZ0dXI6p75TCwhxPo.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 43.229.8.0/22 maxlen: 22 185.48.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:e1:e5:1c:6a:b6:5f:c0:da:0e:e1:3c:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d5e594164fd26319d1d5c8ea9ef94c2c21c4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:7d:bb:12:5e:ff:2f:49:e0:5f:53:24:29: c6:47:19:79:b7:ad:4f:ef:17:77:62:aa:7d:08:b7: 28:b7:d2:0f:a4:33:d0:32:c2:cd:95:97:53:ee:39: fd:dd:72:c4:10:bc:87:f3:2a:e5:4f:1f:3e:0b:de: eb:09:26:0c:41:57:7b:99:67:7c:68:29:e3:18:6f: 5b:c7:b3:e7:0f:16:6c:01:74:ee:eb:14:e4:a9:06: b2:ad:9a:d1:1d:6d:0a:4f:c3:48:2e:15:23:8a:32: 46:82:07:f9:ef:1c:09:bb:4d:e3:1f:68:e3:3f:6b: 48:78:96:53:8d:f6:53:ff:a3:29:cd:20:87:e3:5a: b1:86:ea:4a:55:04:c7:b5:c7:77:cc:68:22:9d:a2: bc:f9:a2:7c:47:00:f5:1d:91:d7:b0:27:23:4f:4a: f3:42:23:15:a1:6d:99:c2:54:d8:7f:3f:49:be:e5: 65:cb:f2:d4:85:90:8f:9c:dd:e5:6c:4f:24:0d:45: 12:74:9e:b5:11:65:6a:a3:32:8e:a0:13:8d:84:4b: ec:df:10:8f:0a:b0:77:33:37:dd:03:ca:cc:f7:7a: 66:a1:02:2e:31:f2:9c:46:a2:94:13:56:75:a2:12: 2b:c2:67:47:99:ab:5a:38:cf:06:2f:3a:60:ac:25: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D5:E5:94:16:4F:D2:63:19:D1:D5:C8:EA:9E:F9:4C:2C:21:C4:FA X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MdXllBZP0mMZ0dXI6p75TCwhxPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.8.0/22 185.48.52.0/22 Signature Algorithm: sha256WithRSAEncryption 00:25:d6:ca:8a:ce:e1:f3:aa:08:d1:ed:05:65:ea:09:2b:35: 2b:89:f4:5f:e1:8a:b9:70:16:0c:34:ff:94:02:88:ac:99:c8: 95:40:d4:c3:d8:67:e5:b2:0f:6f:4c:7c:75:d5:0f:a3:66:e9: f9:81:e5:c1:32:56:28:84:d2:6e:57:a4:7f:fe:82:2c:c2:b7: bd:ef:ef:1e:98:15:4f:47:ec:af:fe:00:f2:e5:ba:25:3d:11: a0:12:1a:ad:f3:9b:60:dc:30:e8:fb:dc:05:96:98:c4:cb:69: c4:96:fe:d9:23:31:09:ca:0e:01:45:e4:48:a6:2c:46:6e:ac: 83:c3:58:14:70:10:15:ed:c7:a3:aa:15:69:8e:15:af:6a:b9: ee:19:5f:75:4a:1a:21:67:2b:6b:c9:9b:aa:e4:04:15:de:9e: 00:2c:5a:7a:9f:d7:a6:5c:10:42:3e:9e:5c:b6:af:56:3a:62: 04:bf:69:19:a7:76:cd:fa:91:78:8b:51:44:96:ff:a8:54:80: a0:f4:48:1a:cf:18:7f:42:79:8d:b5:af:05:30:6b:f4:6d:77: 8d:56:ef:38:27:0f:57:33:ce:da:12:b9:a8:43:ab:0c:31:37: f2:cc:92:d8:57:7e:2d:fe:80:d1:52:06:31:a1:68:a2:67:27: 1f:ae:b8:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Tzh5Rxqtl/A2g7hPHH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ1ZTU5NDE2NGZkMjYzMTlkMWQ1YzhlYTllZjk0YzJjMjFjNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLl9uxJe/y9J4F9TJCnGRxl5t61P 7xd3Yqp9CLcot9IPpDPQMsLNlZdT7jn93XLEELyH8yrlTx8+C97rCSYMQVd7mWd8 aCnjGG9bx7PnDxZsAXTu6xTkqQayrZrRHW0KT8NILhUjijJGggf57xwJu03jH2jj P2tIeJZTjfZT/6MpzSCH41qxhupKVQTHtcd3zGginaK8+aJ8RwD1HZHXsCcjT0rz QiMVoW2ZwlTYfz9JvuVly/LUhZCPnN3lbE8kDUUSdJ61EWVqozKOoBONhEvs3xCP CrB3MzfdA8rM93pmoQIuMfKcRqKUE1Z1ohIrwmdHmataOM8GLzpgrCWibQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDHV5ZQWT9JjGdHVyOqe+UwsIcT6MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvTWRYbGxCWlAwbU1aMGRYSTZwNzVUQ3doeFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK+UIAwQC uTA0MA0GCSqGSIb3DQEBCwUAA4IBAQAAJdbKis7h86oI0e0FZeoJKzUrifRf4Yq5 cBYMNP+UAoismciVQNTD2Gflsg9vTHx11Q+jZun5geXBMlYohNJuV6R//oIswre9 7+8emBVPR+yv/gDy5bolPRGgEhqt85tg3DDo+9wFlpjEy2nElv7ZIzEJyg4BReRI pixGbqyDw1gUcBAV7cejqhVpjhWvarnuGV91ShohZytryZuq5AQV3p4ALFp6n9em XBBCPp5ctq9WOmIEv2kZp3bN+pF4i1FElv+oVICg9Egazxh/QnmNta8FMGv0bXeN Vu84Jw9XM87aErmoQ6sMMTfyzJLYV34t/oDRUgYxoWiiZycfrrjk -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:15 2026 by rpki-client