This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Msw4QAzhVzirVa4vbu0sL9GLmEA.roa
File: Msw4QAzhVzirVa4vbu0sL9GLmEA.roa (raw, json)
Hash identifier: hn4t9cjFs7NiQ3v0G2Px0OcckV4yXR0oBV7igGZK67Q=
Subject key identifier: 32:CC:38:40:0C:E1:57:38:AB:55:AE:2F:6E:ED:2C:2F:D1:8B:98:40
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019B7F15B61F54F04704034BB6F90AEAD360
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Msw4QAzhVzirVa4vbu0sL9GLmEA.roa
Signing time: Fri 02 Jan 2026 14:21:27 +0000
ROA not before: Fri 02 Jan 2026 14:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16371
IP address blocks: 81.46.192.0/20 maxlen: 20
81.46.192.0/21 maxlen: 21
81.46.200.0/21 maxlen: 21
81.46.208.0/21 maxlen: 21
81.46.208.0/22 maxlen: 22
81.46.212.0/22 maxlen: 22
81.46.215.0/24 maxlen: 24
81.46.216.0/21 maxlen: 21
81.46.216.0/22 maxlen: 22
81.46.220.0/22 maxlen: 22
81.46.224.0/20 maxlen: 20
81.46.224.0/21 maxlen: 21
81.46.232.0/21 maxlen: 21
81.46.240.0/21 maxlen: 21
81.46.240.0/22 maxlen: 22
81.46.244.0/22 maxlen: 22
195.55.104.0/22 maxlen: 22
195.55.104.0/23 maxlen: 23
195.55.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:b6:1f:54:f0:47:04:03:4b:b6:f9:0a:ea:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 14:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32cc38400ce15738ab55ae2f6eed2c2fd18b9840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:73:78:d1:bf:b1:37:40:82:65:45:b6:87:
a3:99:b6:ca:52:5b:a5:60:a0:e3:c7:f1:2a:b9:4f:
4d:4f:72:8a:84:35:ba:08:5e:b4:82:d2:bf:0c:5c:
8e:9d:bf:a8:41:df:f0:08:83:bd:7a:40:4c:c0:07:
1e:b1:bf:a9:32:d3:2f:7d:2a:87:01:d9:c9:b0:1a:
95:44:a9:b0:15:c2:34:10:12:8e:13:36:5f:af:8c:
2b:12:1a:26:54:16:ee:63:88:8c:60:66:97:b7:28:
39:ba:c5:fa:8e:8e:b1:25:1f:37:3f:83:f8:20:7e:
e4:d5:ec:c9:ec:05:c5:fc:da:d6:62:f3:a3:e4:b5:
45:81:eb:fc:9d:9b:17:f2:9b:b8:01:c2:ef:28:f0:
85:6b:97:7e:52:43:3d:5d:a8:ed:30:01:c9:c9:8a:
b6:9f:6d:7f:35:8c:e5:63:ca:bb:ce:dd:2e:bb:e8:
16:fa:52:67:ba:31:42:f4:42:6d:9a:06:ea:10:ad:
e2:c6:2e:48:7e:77:c9:a9:39:79:d2:08:32:57:16:
25:3a:0c:29:a9:fb:be:60:51:4e:dc:02:85:91:aa:
e1:b2:69:b7:d8:92:f1:cd:1c:4b:c7:1c:4e:dc:34:
55:fd:52:13:71:7e:df:e2:a0:46:82:f6:e8:68:43:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:38:40:0C:E1:57:38:AB:55:AE:2F:6E:ED:2C:2F:D1:8B:98:40
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Msw4QAzhVzirVa4vbu0sL9GLmEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.46.192.0-81.46.247.255
195.55.104.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f3:f8:cd:08:b7:7b:14:6e:01:ff:19:74:94:6b:05:54:9a:
a4:8f:ab:85:d9:ca:b5:0b:d0:1d:d7:81:6a:f6:4f:1f:25:af:
3a:a9:80:2f:a3:ab:32:3d:52:0e:20:e8:ad:88:e5:56:af:a4:
5b:92:62:8e:b2:fd:37:ea:ea:ac:92:de:08:cc:7b:22:05:d5:
39:3a:ba:2b:8c:61:36:59:00:4a:53:e8:f4:e9:0e:30:0a:b5:
5b:87:1b:39:86:2e:af:7f:85:f8:f1:7d:1f:ea:d1:fa:b2:c6:
f9:de:de:75:8e:b3:d6:91:c8:96:7c:9e:6e:ef:4e:76:1e:f6:
ab:4e:00:f4:13:d5:ce:25:eb:94:b5:72:5d:e3:db:45:39:29:
08:78:fa:17:c4:9b:e1:ca:5c:78:8f:ac:1b:cf:89:45:48:b8:
31:53:8f:95:91:cf:68:f8:63:65:e9:f3:1e:5c:cd:d6:b6:90:
fc:11:b0:06:a2:6b:5a:06:6d:a3:5e:5e:be:07:9d:ea:87:3b:
cd:a3:94:6d:cd:a6:31:01:a7:84:f5:44:01:08:90:c6:5a:3c:
95:8a:a4:ef:cc:cd:b6:df:62:5e:8c:d1:e6:c4:97:dd:1a:2c:
d2:c7:bf:aa:8e:ba:df:c9:34:14:a9:76:f9:65:16:1f:ed:67:
d8:18:eb:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:03:03 2026 by rpki-client