This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa
File: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (raw, json)
Hash identifier: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=
Subject key identifier: 32:E4:78:68:41:85:59:EE:F0:97:75:61:D3:9D:9C:35:83:33:33:68
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 019B78A30AD8B51EC68DD8F7A09C80250BD4
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa
Signing time: Thu 01 Jan 2026 08:18:29 +0000
ROA not before: Thu 01 Jan 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207353
IP address blocks: 77.220.217.0/24 maxlen: 24
77.220.219.0/24 maxlen: 24
77.220.220.0/24 maxlen: 24
77.220.221.0/24 maxlen: 24
77.220.222.0/24 maxlen: 24
89.248.230.0/24 maxlen: 24
185.62.100.0/24 maxlen: 24
193.243.161.0/24 maxlen: 24
195.246.246.0/24 maxlen: 24
195.246.247.0/24 maxlen: 24
195.246.248.0/24 maxlen: 24
195.246.249.0/24 maxlen: 24
217.199.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:0a:d8:b5:1e:c6:8d:d8:f7:a0:9c:80:25:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e47868418559eef0977561d39d9c3583333368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:28:39:96:1a:79:be:73:7c:ef:64:ab:f4:
a2:0b:8b:59:34:54:e8:84:a5:47:0b:1a:38:a1:31:
24:8a:07:d0:7b:26:6c:84:6c:9a:b1:79:eb:d5:e3:
22:0c:f1:7a:d8:63:61:e1:c0:4a:ef:8a:be:bf:3b:
a5:9e:81:ba:65:90:ff:f7:99:58:39:34:d4:9e:3b:
c5:48:31:a6:23:45:ee:9c:75:b4:7a:73:96:4b:b6:
9e:b6:a9:49:3c:1b:5e:8f:c5:32:e8:c3:f8:4c:f0:
b1:93:a5:1a:52:89:a2:49:5a:85:b0:39:4d:06:35:
4d:68:47:e9:9a:41:26:b8:2f:3b:c0:c9:03:36:a9:
1e:d0:dc:77:2b:46:38:b0:57:08:08:51:c8:f8:28:
d3:55:45:04:c6:98:a9:e5:71:54:0e:cb:a9:95:ad:
26:46:42:ab:3f:e8:75:0f:c9:de:82:eb:a1:90:c5:
a9:64:02:e6:b8:60:0b:17:12:17:5f:ea:4f:50:19:
d9:36:ec:94:1c:4b:49:b7:b1:1f:bc:9e:31:50:4d:
7e:cc:d3:e9:34:96:19:53:17:a0:84:1d:21:1a:be:
1c:b6:84:76:d0:36:dc:85:bb:0f:c2:ab:d1:53:64:
8f:3c:7a:65:9b:39:7e:2a:63:ab:4e:cd:50:5c:de:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:78:68:41:85:59:EE:F0:97:75:61:D3:9D:9C:35:83:33:33:68
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.217.0/24
77.220.219.0-77.220.222.255
89.248.230.0/24
185.62.100.0/24
193.243.161.0/24
195.246.246.0-195.246.249.255
217.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d1:54:f3:9d:f1:34:01:c6:76:fc:23:85:d7:7d:fa:ec:68:
57:c9:20:2b:6c:5a:f0:88:dc:ed:e0:d9:1d:6d:04:87:d6:44:
e8:44:75:8c:7d:0e:b6:ed:fa:4a:6f:5a:3b:68:f8:56:59:e7:
c8:81:e6:bc:8e:db:37:f0:a5:14:34:21:b2:40:6b:84:3c:bf:
b3:40:e7:cd:83:7b:71:3d:a0:3e:c3:f7:b5:b4:92:2f:41:7f:
1a:78:ba:79:13:35:e4:2d:c2:b1:a1:3e:16:e9:36:94:2a:c2:
17:56:5e:90:14:f4:ad:d5:8d:ba:51:3e:48:d9:12:a1:cb:4f:
f1:5f:2a:17:72:ba:11:fe:48:e1:e4:2c:30:3e:60:1b:c3:a3:
54:99:f3:fe:5d:79:af:d9:40:55:a6:59:4d:37:0a:dc:db:9c:
f3:47:8c:83:9c:51:b3:99:2e:21:2a:50:84:e7:1a:28:f7:96:
8a:08:c4:64:2f:80:84:8e:1c:fe:a4:0f:7d:52:36:49:09:f0:
a2:8b:a3:a8:d1:f7:28:3f:88:32:61:a1:67:2f:38:3a:eb:40:
0f:93:98:e3:6b:ed:85:41:07:66:5c:c7:a1:1f:7d:9b:aa:e8:
a3:aa:03:64:8c:b7:93:be:5f:ce:9c:3e:ff:e7:86:01:45:22:
4a:48:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:51 2026 by rpki-client