This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/MmwxwXtvbBi5TfpYulx_NsdGK8I.roa File: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (raw, json) Hash identifier: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0= Subject key identifier: 32:6C:31:C1:7B:6F:6C:18:B9:4D:FA:58:BA:5C:7F:36:C7:46:2B:C2 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F824901BC8049080590D69D34F910CE Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/MmwxwXtvbBi5TfpYulx_NsdGK8I.roa Signing time: Fri 02 Jan 2026 16:20:03 +0000 ROA not before: Fri 02 Jan 2026 16:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55256 IP address blocks: 31.186.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:49:01:bc:80:49:08:05:90:d6:9d:34:f9:10:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=326c31c17b6f6c18b94dfa58ba5c7f36c7462bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:3e:8b:29:82:d8:6a:d4:fa:de:38:24:d1: 77:83:69:ed:95:e6:d4:42:83:91:72:a0:8c:97:d3: 23:b2:f6:c5:84:fc:94:82:4f:42:37:b1:74:61:b7: 5c:05:43:36:59:d4:08:ec:f8:0b:12:dc:3d:5b:46: ca:a5:86:69:78:c5:10:f9:04:c9:1c:02:96:fa:29: ec:99:23:12:76:2b:d1:a3:66:42:61:58:84:09:ef: f2:03:62:21:f1:62:a5:0b:3d:f7:4a:e8:68:9a:20: 6b:00:8b:89:6e:06:fb:f2:3c:a5:8a:fc:07:dc:08: e2:2e:ae:aa:b5:8d:fd:f3:78:45:b5:19:ad:30:8d: 48:5b:45:af:8d:40:04:96:41:1c:57:b1:3f:9a:c1: d4:f4:aa:34:4f:e3:b9:20:9e:3e:57:a0:8c:7c:66: 6e:d9:7e:d0:ff:92:9e:8e:90:12:39:52:21:1e:cb: 6b:c7:b3:5c:d9:4d:5f:f4:5e:89:a2:24:cf:26:7f: a6:b8:4c:3c:4b:c7:ef:42:e0:9a:04:18:5f:b2:4f: ed:77:52:65:7b:a0:b1:c4:63:3e:a8:44:b4:4d:5b: 53:9c:64:08:d9:7c:70:63:e0:dc:8c:89:c6:ac:e3: ec:07:66:f7:57:75:88:9f:39:a7:4d:0a:e2:cb:28: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6C:31:C1:7B:6F:6C:18:B9:4D:FA:58:BA:5C:7F:36:C7:46:2B:C2 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/MmwxwXtvbBi5TfpYulx_NsdGK8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.239.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ce:7a:d8:87:1a:e4:2f:48:ee:63:1b:c8:70:7f:84:e1:6b: 1e:24:1c:54:e6:f2:fb:20:c7:db:8c:c5:4f:40:1b:7d:dd:0e: ab:db:f6:28:5a:25:de:77:62:36:01:ad:df:ca:b8:06:9d:c5: c5:51:26:8b:0d:59:36:7c:57:37:2e:ff:c4:a5:eb:b5:03:13: ca:c3:d9:3d:40:d5:5d:96:b0:7d:da:b2:59:1a:80:d4:e2:d1: 0b:5a:35:70:be:40:70:71:80:76:53:67:9c:22:69:85:d5:5b: 1b:a6:ce:7c:03:49:fe:0f:54:d7:08:30:8c:e6:82:4e:d7:a1: 0d:48:56:5b:3b:97:a9:f6:3e:95:3c:36:3a:ac:72:97:cf:6f: 6d:ab:6e:17:55:15:e9:89:1f:11:68:b2:0e:d9:98:a6:70:59: 9a:a1:7c:16:77:45:ee:e7:0f:d1:f7:54:39:b3:b0:9c:1b:ee: a7:d3:d2:96:1e:40:e9:2b:ef:d0:5e:85:8c:d5:ad:b6:de:51: e3:47:59:e7:93:41:0a:e7:f8:2a:84:55:f4:63:81:2d:a7:47: 7a:cd:15:73:2a:be:f3:b7:74:70:01:c8:0f:08:c4:2f:9d:77: 18:46:a8:db:6d:67:79:82:01:74:5a:ad:73:0d:59:a4:ec:b5: b6:2e:73:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkkBvIBJCAWQ1p00+RDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjZjMzFjMTdiNmY2YzE4Yjk0ZGZhNThiYTVjN2YzNmM3NDYyYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9M+iymC2GrU+t44JNF3g2ntlebU QoORcqCMl9MjsvbFhPyUgk9CN7F0YbdcBUM2WdQI7PgLEtw9W0bKpYZpeMUQ+QTJ HAKW+insmSMSdivRo2ZCYViECe/yA2Ih8WKlCz33SuhomiBrAIuJbgb78jylivwH 3AjiLq6qtY3983hFtRmtMI1IW0WvjUAElkEcV7E/msHU9Ko0T+O5IJ4+V6CMfGZu 2X7Q/5KejpASOVIhHstrx7Nc2U1f9F6JoiTPJn+muEw8S8fvQuCaBBhfsk/td1Jl e6CxxGM+qES0TVtTnGQI2XxwY+DcjInGrOPsB2b3V3WInzmnTQriyyhRFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJsMcF7b2wYuU36WLpcfzbHRivCMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvTW13eHdYdHZiQmk1VGZwWXVseF9Oc2RHSzhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7rvMA0G CSqGSIb3DQEBCwUAA4IBAQAMznrYhxrkL0juYxvIcH+E4WseJBxU5vL7IMfbjMVP QBt93Q6r2/YoWiXed2I2Aa3fyrgGncXFUSaLDVk2fFc3Lv/Epeu1AxPKw9k9QNVd lrB92rJZGoDU4tELWjVwvkBwcYB2U2ecImmF1Vsbps58A0n+D1TXCDCM5oJO16EN SFZbO5ep9j6VPDY6rHKXz29tq24XVRXpiR8RaLIO2ZimcFmaoXwWd0Xu5w/R91Q5 s7CcG+6n09KWHkDpK+/QXoWM1a223lHjR1nnk0EK5/gqhFX0Y4Etp0d6zRVzKr7z t3RwAcgPCMQvnXcYRqjbbWd5ggF0Wq1zDVmk7LW2LnM/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:31 2026 by rpki-client