This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/MBsdxh-LXbNXykKWto175FvyeUQ.roa File: MBsdxh-LXbNXykKWto175FvyeUQ.roa (raw, json) Hash identifier: BP/WY6c9buETJzS18HNplpCeUeRUolXnAY6xufbABdU= Subject key identifier: 30:1B:1D:C6:1F:8B:5D:B3:57:CA:42:96:B6:8D:7B:E4:5B:F2:79:44 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36108095AE96F42B5A9421787019F2 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/MBsdxh-LXbNXykKWto175FvyeUQ.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61059 IP address blocks: 89.44.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:80:95:ae:96:f4:2b:5a:94:21:78:70:19:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301b1dc61f8b5db357ca4296b68d7be45bf27944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:40:8e:09:3f:ba:9f:a4:12:b8:c3:c2:18: 50:65:39:7b:f1:5a:93:45:16:cc:ca:6a:e7:7c:c7: e7:d1:cb:b9:7c:f8:f9:80:30:91:77:b5:58:45:b7: 0f:2f:d8:56:ba:c7:11:6d:f5:8a:3f:73:71:62:b5: dd:aa:62:23:e5:b3:f5:6a:0b:8e:8b:3b:ac:2a:bf: c5:7a:5f:8f:bd:85:69:e0:01:5e:23:f2:bc:a6:7d: 56:bf:56:4f:a4:3b:b8:03:71:07:aa:a8:af:b4:cc: ba:c7:74:02:0a:5d:c3:b0:a6:d8:60:62:28:cd:82: 1d:e4:73:7a:38:1d:da:9b:3f:cc:49:a0:ca:74:80: 3e:e1:9d:b5:14:cc:f2:c0:a5:54:1e:b8:79:19:39: 58:8a:04:ab:10:11:5c:93:0a:5a:86:2e:1b:3a:2c: e1:34:03:cb:2a:7b:e4:f9:dc:4e:88:d1:2e:db:e4: dd:26:6b:4a:40:b7:f6:ff:13:db:e9:dc:bb:fe:ae: 5d:d5:1d:2e:46:1b:33:e0:77:f9:09:ef:46:a2:d7: 30:65:36:b3:99:50:36:ea:05:3f:b6:c1:01:d3:83: 6c:89:9d:07:1a:a4:56:e2:dc:1b:f5:d7:d8:74:5a: e2:0d:e6:05:da:44:cc:f9:32:bd:37:67:81:a0:96: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1B:1D:C6:1F:8B:5D:B3:57:CA:42:96:B6:8D:7B:E4:5B:F2:79:44 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/MBsdxh-LXbNXykKWto175FvyeUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.88.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:0b:cb:ea:34:6f:ad:5b:cf:89:44:15:7b:29:cc:c6:db:97: b7:df:74:11:3a:51:4f:e5:b9:3b:cd:34:fb:16:43:29:e6:bb: 3c:87:95:ca:11:31:c0:ae:73:62:0c:8e:04:11:dd:c6:58:80: e3:e3:b8:a5:59:50:5d:d1:de:81:d2:8a:00:33:2b:1d:6b:16: d7:94:3e:9e:af:95:d7:13:3e:ff:d6:98:16:c4:30:c9:16:f2: b9:e1:b2:5d:d6:9f:73:0b:af:31:7d:0c:49:7f:5f:1f:c5:7a: b5:83:9a:dd:2d:14:12:2a:e9:eb:b4:aa:28:6c:a9:53:4f:59: 7f:8c:78:96:0e:e2:7d:3e:c8:a1:24:e1:92:c0:6e:11:b1:b6: 92:6f:ef:a8:25:07:ba:05:42:d0:bf:40:8d:9a:e5:9a:9a:b8: 32:55:48:14:8f:ec:9e:51:7b:e7:96:3e:9f:3d:70:d4:8b:89: 75:73:d0:7e:74:d1:6f:9c:f2:97:15:47:d1:21:7e:db:8d:72: ae:52:d8:b2:a2:f4:42:8a:fd:ab:eb:ce:6a:73:34:ae:63:df: 05:e8:dd:06:f7:90:c3:90:61:4e:40:f5:1d:ac:d4:f5:5c:ee: 01:10:25:29:db:71:99:f4:29:70:89:75:24:3c:31:1f:d0:31: 94:ab:4a:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhCAla6W9CtalCF4cBnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFiMWRjNjFmOGI1ZGIzNTdjYTQyOTZiNjhkN2JlNDViZjI3OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKBAjgk/up+kErjDwhhQZTl78VqT RRbMymrnfMfn0cu5fPj5gDCRd7VYRbcPL9hWuscRbfWKP3NxYrXdqmIj5bP1aguO izusKr/Fel+PvYVp4AFeI/K8pn1Wv1ZPpDu4A3EHqqivtMy6x3QCCl3DsKbYYGIo zYId5HN6OB3amz/MSaDKdIA+4Z21FMzywKVUHrh5GTlYigSrEBFckwpahi4bOizh NAPLKnvk+dxOiNEu2+TdJmtKQLf2/xPb6dy7/q5d1R0uRhsz4Hf5Ce9GotcwZTaz mVA26gU/tsEB04NsiZ0HGqRW4twb9dfYdFriDeYF2kTM+TK9N2eBoJa0GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDAbHcYfi12zV8pClraNe+Rb8nlEMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvTUJzZHhoLUxYYk5YeWtLV3RvMTc1RnZ5ZVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSxYMA0G CSqGSIb3DQEBCwUAA4IBAQCLC8vqNG+tW8+JRBV7KczG25e333QROlFP5bk7zTT7 FkMp5rs8h5XKETHArnNiDI4EEd3GWIDj47ilWVBd0d6B0ooAMysdaxbXlD6er5XX Ez7/1pgWxDDJFvK54bJd1p9zC68xfQxJf18fxXq1g5rdLRQSKunrtKoobKlTT1l/ jHiWDuJ9PsihJOGSwG4RsbaSb++oJQe6BULQv0CNmuWamrgyVUgUj+yeUXvnlj6f PXDUi4l1c9B+dNFvnPKXFUfRIX7bjXKuUtiyovRCiv2r685qczSuY98F6N0G95DD kGFOQPUdrNT1XO4BECUp23GZ9ClwiXUkPDEf0DGUq0qO -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:35 2026 by rpki-client