This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/MvE_ASHksIA5Hihl4HjNkYFAKXs.roa File: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (raw, json) Hash identifier: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk= Subject key identifier: 32:F1:3F:01:21:E4:B0:80:39:1E:28:65:E0:78:CD:91:81:40:29:7B Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c Certificate serial: 019B7B36E4FE511600D8685799F332C59B13 Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/MvE_ASHksIA5Hihl4HjNkYFAKXs.roa Signing time: Thu 01 Jan 2026 20:19:13 +0000 ROA not before: Thu 01 Jan 2026 20:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49072 IP address blocks: 77.246.217.0/24 maxlen: 24 77.246.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e4:fe:51:16:00:d8:68:57:99:f3:32:c5:9b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f13f0121e4b080391e2865e078cd918140297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:56:92:50:17:c6:c7:bc:84:76:db:d2:f5: 9e:d4:81:2b:7a:39:12:4f:b7:e6:ec:dd:f9:03:55: 96:74:28:92:7f:c5:d6:35:8b:15:ca:7e:0e:b6:e2: a4:a3:19:30:16:d3:18:61:81:66:3c:b3:7c:1b:11: 91:c7:2c:77:88:39:9d:c4:0e:f3:ee:a3:7d:c6:d3: 6c:fb:8b:a9:98:22:63:b7:f5:da:6a:09:73:cd:d5: 9c:0a:93:49:88:d0:94:d4:d6:08:51:3f:eb:4c:a7: 9c:e6:27:26:2b:25:cf:a6:ec:f4:e2:bc:0f:c5:eb: c8:91:e3:e4:b0:b5:19:26:07:53:3f:05:72:35:81: 65:bd:4a:27:52:70:1f:a1:7e:fa:5a:78:a3:57:4e: d4:52:3d:5a:cd:33:15:76:da:65:0f:8c:ec:d2:83: c2:d2:b0:cb:7f:5d:03:a8:57:7d:7c:23:05:6f:38: f3:27:81:85:b2:55:95:c5:9d:85:e2:03:96:a0:23: df:1c:06:fa:b7:5b:56:4c:0d:ec:ed:39:79:e7:fa: 61:59:58:e3:ab:ea:dc:3b:50:d8:53:47:a0:9d:b5: 66:db:aa:16:fa:36:e7:3f:f9:dc:e8:2e:04:ed:05: 35:31:ed:e1:de:c2:77:9b:8e:f3:67:6a:c3:44:ed: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F1:3F:01:21:E4:B0:80:39:1E:28:65:E0:78:CD:91:81:40:29:7B X509v3 Authority Key Identifier: keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/MvE_ASHksIA5Hihl4HjNkYFAKXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.217.0-77.246.218.255 Signature Algorithm: sha256WithRSAEncryption 49:2d:82:c9:d7:61:13:41:38:ba:57:b0:40:44:1e:69:c7:6b: a7:3b:45:66:e8:c5:22:8e:7f:d9:5a:20:8e:dc:43:ee:6c:5a: 5b:31:e0:e4:e3:41:5c:6e:1c:a6:2b:1a:b4:55:05:70:57:6f: 98:a2:dd:94:de:ba:38:e5:16:6a:bc:b6:a6:07:2d:b5:bd:88: 38:c1:28:49:d2:b8:fb:0d:82:6d:de:2e:3e:44:57:99:4d:01: b4:2a:61:56:39:31:0d:96:1e:51:43:f9:bf:86:9a:e9:f1:62: ca:a4:34:45:d8:f1:f4:20:9d:26:79:ab:1c:e9:4f:6f:f2:88: 2a:16:18:84:b1:f7:e0:8b:22:6b:61:be:c1:80:4d:1a:08:db: ee:58:66:a0:4a:07:6b:47:30:7c:18:c2:ed:c4:3d:c8:bd:6c: 40:c1:e0:d2:d2:df:36:81:db:27:04:49:78:15:b1:30:04:2c: 31:e8:13:18:17:06:b3:b4:d0:80:da:8d:df:9a:96:cd:66:e0: 1c:c4:f0:9b:3e:67:bc:38:09:c8:51:43:62:33:3e:6f:20:dd: 99:49:8d:19:7f:00:84:bf:ba:c4:56:64:fd:1e:41:97:d0:a3: dd:92:cb:24:d0:5e:85:76:4b:ce:c9:21:2d:4f:3b:fc:fe:64: 2d:6b:59:dc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NuT+URYA2GhXmfMyxZsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx ZGUxMWMwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmYxM2YwMTIxZTRiMDgwMzkxZTI4NjVlMDc4Y2Q5MTgxNDAyOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0pWklAXxse8hHbb0vWe1IErejkS T7fm7N35A1WWdCiSf8XWNYsVyn4OtuKkoxkwFtMYYYFmPLN8GxGRxyx3iDmdxA7z 7qN9xtNs+4upmCJjt/XaaglzzdWcCpNJiNCU1NYIUT/rTKec5icmKyXPpuz04rwP xevIkePksLUZJgdTPwVyNYFlvUonUnAfoX76WnijV07UUj1azTMVdtplD4zs0oPC 0rDLf10DqFd9fCMFbzjzJ4GFslWVxZ2F4gOWoCPfHAb6t1tWTA3s7Tl55/phWVjj q+rcO1DYU0egnbVm26oW+jbnP/nc6C4E7QU1Me3h3sJ3m47zZ2rDRO3zYwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDLxPwEh5LCAOR4oZeB4zZGBQCl7MB8GA1UdIwQY MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et ZmRlMDczNTg4ZjBmLzEvTXZFX0FTSGtzSUE1SGlobDRIak5rWUZBS1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABN9tkD BABN9towDQYJKoZIhvcNAQELBQADggEBAEktgsnXYRNBOLpXsEBEHmnHa6c7RWbo xSKOf9laII7cQ+5sWlsx4OTjQVxuHKYrGrRVBXBXb5ii3ZTeujjlFmq8tqYHLbW9 iDjBKEnSuPsNgm3eLj5EV5lNAbQqYVY5MQ2WHlFD+b+GmunxYsqkNEXY8fQgnSZ5 qxzpT2/yiCoWGISx9+CLImthvsGATRoI2+5YZqBKB2tHMHwYwu3EPci9bEDB4NLS 3zaB2ycESXgVsTAELDHoExgXBrO00IDajd+als1m4BzE8Js+Z7w4CchRQ2IzPm8g 3ZlJjRl/AIS/usRWZP0eQZfQo92SyyTQXoV2S87JIS1PO/z+ZC1rWdw= -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:46 2026 by rpki-client