This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/mdu1Exn0vcwhf2D-oUz3A06rLz0.roa File: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (raw, json) Hash identifier: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks= Subject key identifier: 99:DB:B5:13:19:F4:BD:CC:21:7F:60:FE:A1:4C:F7:03:4E:AB:2F:3D Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C673E990085000452676B12CC20511 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/mdu1Exn0vcwhf2D-oUz3A06rLz0.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41313 IP address blocks: 46.35.160.0/19 maxlen: 24 79.110.120.0/21 maxlen: 24 80.95.16.0/21 maxlen: 24 93.152.234.0/23 maxlen: 24 93.175.244.0/22 maxlen: 24 95.158.128.0/18 maxlen: 24 95.158.140.0/23 maxlen: 24 151.252.192.0/20 maxlen: 24 185.18.228.0/22 maxlen: 24 185.40.164.0/22 maxlen: 24 212.21.128.0/19 maxlen: 24 2a00:e200::/32 maxlen: 48 2a0d:3b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:73:e9:90:08:50:00:45:26:76:b1:2c:c2:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99dbb51319f4bdcc217f60fea14cf7034eab2f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:d8:ca:41:f3:f9:f3:65:26:bb:b0:49:52: 45:ce:1e:e5:ce:2e:89:89:76:5c:44:07:8c:ef:97: d2:66:50:17:b5:70:c6:dc:15:52:a0:8b:a8:39:a8: 2c:08:6d:de:d6:6f:cd:d7:b1:ae:09:73:6a:f6:2c: 77:5e:cb:a5:bd:03:0f:60:70:62:bc:8d:13:8a:38: 0f:32:1f:ea:93:a2:35:52:29:e0:5c:aa:70:c9:ee: ac:37:67:4f:66:b8:e3:1d:1b:04:8a:e5:3b:c5:e1: 3f:39:17:03:15:62:04:7a:e0:55:ce:c5:17:30:f4: 1d:34:5b:cb:f8:e2:d2:bc:61:f2:84:2f:69:3d:8d: f9:3d:3b:90:d2:f3:2e:e6:53:78:67:39:eb:8f:bc: 60:ef:0d:e5:1b:68:3e:67:fe:ed:2a:98:04:91:66: 91:52:8c:77:0a:14:61:e0:2d:fd:cc:f8:4e:76:76: 54:11:de:be:c3:2c:c8:9a:1c:b5:80:ef:91:e1:9e: 98:30:85:1c:cc:46:fc:54:59:7e:50:90:56:31:e1: d0:90:3a:24:10:c6:19:ff:91:31:ad:39:51:ee:04: de:79:a7:f6:c1:9a:d5:8d:0d:56:91:89:0c:bc:8d: 39:79:04:2b:b9:86:4b:8c:38:03:5a:d9:2b:b4:6b: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:B5:13:19:F4:BD:CC:21:7F:60:FE:A1:4C:F7:03:4E:AB:2F:3D X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/mdu1Exn0vcwhf2D-oUz3A06rLz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.160.0/19 79.110.120.0/21 80.95.16.0/21 93.152.234.0/23 93.175.244.0/22 95.158.128.0/18 151.252.192.0/20 185.18.228.0/22 185.40.164.0/22 212.21.128.0/19 IPv6: 2a00:e200::/32 2a0d:3b40::/29 Signature Algorithm: sha256WithRSAEncryption 88:9b:d9:c6:45:ba:d4:ff:70:d3:e5:4c:00:6e:51:da:85:bb: 6c:8e:1c:06:9f:37:c2:dd:72:ab:5b:3f:04:ce:58:6f:c2:75: 5e:33:4b:3e:de:97:ac:e7:89:3f:68:82:8f:32:38:0f:9a:31: 56:e1:69:6d:10:98:6d:4e:5d:0c:c8:18:4d:87:af:10:75:73: 90:43:e2:61:2d:4d:78:74:65:81:e1:0f:dd:9e:61:44:3f:95: 43:97:d9:1e:6d:20:56:51:9e:f2:e9:5d:73:6d:37:e7:58:8c: 60:a2:50:31:28:94:f1:80:ac:44:6b:2d:f1:9e:9b:ba:c8:ea: 41:b2:d9:f9:1c:7d:09:02:e7:4c:de:73:2a:7c:f3:c3:4a:55: 7b:80:8e:d6:4f:a0:5d:3a:15:57:cd:bf:55:1d:8c:63:f0:99: a5:31:56:b0:3f:99:d4:77:50:d2:3d:35:f4:15:65:bb:60:46: 14:63:a7:77:7b:0b:ef:b9:4d:27:76:0e:81:d9:a3:cf:37:0e: 02:a8:b1:65:76:56:84:ec:fc:d8:c7:44:06:28:47:0a:b6:6c: 16:30:4c:06:74:24:a7:f9:ff:a6:f0:15:99:9e:31:0c:dd:ce: 8d:6e:45:d3:2a:7f:32:e2:4a:0f:00:7f:be:9b:03:b3:e8:ba: 94:1f:45:15 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt3xnPpkAhQAEUmdrEswgURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRiYjUxMzE5ZjRiZGNjMjE3ZjYwZmVhMTRjZjcwMzRlYWIyZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PYykHz+fNlJruwSVJFzh7lzi6J iXZcRAeM75fSZlAXtXDG3BVSoIuoOagsCG3e1m/N17GuCXNq9ix3XsulvQMPYHBi vI0TijgPMh/qk6I1UingXKpwye6sN2dPZrjjHRsEiuU7xeE/ORcDFWIEeuBVzsUX MPQdNFvL+OLSvGHyhC9pPY35PTuQ0vMu5lN4Zznrj7xg7w3lG2g+Z/7tKpgEkWaR Uox3ChRh4C39zPhOdnZUEd6+wyzImhy1gO+R4Z6YMIUczEb8VFl+UJBWMeHQkDok EMYZ/5ExrTlR7gTeeaf2wZrVjQ1WkYkMvI05eQQruYZLjDgDWtkrtGsOyQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFJnbtRMZ9L3MIX9g/qFM9wNOqy89MB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvbWR1MUV4bjB2Y3doZjJELW9VejNBMDZyTHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQFLiOgAwQD T254AwQDUF8QAwQBXZjqAwQCXa/0AwQGX56AAwQEl/zAAwQCuRLkAwQCuSikAwQF 1BWAMBQEAgACMA4DBQAqAOIAAwUDKg07QDANBgkqhkiG9w0BAQsFAAOCAQEAiJvZ xkW61P9w0+VMAG5R2oW7bI4cBp83wt1yq1s/BM5Yb8J1XjNLPt6XrOeJP2iCjzI4 D5oxVuFpbRCYbU5dDMgYTYevEHVzkEPiYS1NeHRlgeEP3Z5hRD+VQ5fZHm0gVlGe 8uldc20351iMYKJQMSiU8YCsRGst8Z6busjqQbLZ+Rx9CQLnTN5zKnzzw0pVe4CO 1k+gXToVV82/VR2MY/CZpTFWsD+Z1HdQ0j019BVlu2BGFGOnd3sL77lNJ3YOgdmj zzcOAqixZXZWhOz82MdEBihHCrZsFjBMBnQkp/n/pvAVmZ4xDN3OjW5F0yp/MuJK DwB/vpsDs+i6lB9FFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:46 2026 by rpki-client