This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/Mpb5tIfxbf_t0TleDipa0dPzQfg.roa File: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (raw, json) Hash identifier: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI= Subject key identifier: 32:96:F9:B4:87:F1:6D:FF:ED:D1:39:5E:0E:2A:5A:D1:D3:F3:41:F8 Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345E55F6DCE9EFC7C80553F1B49FA2 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/Mpb5tIfxbf_t0TleDipa0dPzQfg.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206487 IP address blocks: 77.241.49.0/24 maxlen: 24 77.241.62.0/24 maxlen: 24 89.39.33.0/24 maxlen: 24 89.39.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5e:55:f6:dc:e9:ef:c7:c8:05:53:f1:b4:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3296f9b487f16dffedd1395e0e2a5ad1d3f341f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:8d:ae:48:a5:51:57:38:60:35:08:b0:84: 9d:6c:53:88:8d:5c:ab:c7:db:49:0b:6f:b7:47:b7: d1:46:72:56:86:a0:a5:0d:c6:a9:bc:3b:98:d7:95: fa:e0:00:7f:22:2b:88:6b:d2:ce:f0:86:f6:fe:b7: 15:90:69:5a:43:ca:04:e1:1e:b8:75:9d:fe:eb:fb: 08:d3:ba:21:f4:57:6e:0f:6d:dd:83:37:99:1f:24: d2:91:11:93:38:4d:ea:b3:a9:da:37:53:28:a1:d4: 33:ae:f8:cc:7e:61:e6:e4:ff:6e:d2:6e:d1:36:98: da:f4:36:ee:7d:2e:d7:13:eb:07:68:bb:5a:64:58: 96:7e:15:a1:54:34:c8:80:84:04:bc:51:4c:d4:e9: 5b:f1:e7:8c:c8:06:e8:df:44:d7:46:44:91:71:13: 29:98:0f:de:28:8a:94:02:22:ac:d6:e2:11:f6:52: a4:37:88:52:13:7c:c4:23:de:e2:1a:da:87:58:06: fe:c1:b2:cc:b5:68:84:5a:e5:ac:78:ee:41:4e:c3: ec:cc:98:fd:94:17:a7:65:53:66:0d:2e:ae:e5:99: 24:49:40:21:7c:a5:2a:25:9d:79:5e:56:69:80:a1: 19:5c:8f:ce:88:bb:5d:5b:40:8c:70:f0:cf:93:5d: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:F9:B4:87:F1:6D:FF:ED:D1:39:5E:0E:2A:5A:D1:D3:F3:41:F8 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/Mpb5tIfxbf_t0TleDipa0dPzQfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.241.49.0/24 77.241.62.0/24 89.39.33.0-89.39.34.255 Signature Algorithm: sha256WithRSAEncryption 6c:0b:a1:16:95:71:fd:7e:ea:9e:c6:83:f2:99:07:91:b5:b6: 88:5b:c4:1d:0d:83:e0:6b:96:09:65:42:a6:b2:c4:8b:47:bd: 84:1b:1e:df:27:2f:f2:cc:d9:8f:2a:0b:4f:fd:0b:b2:99:59: 9b:3f:59:6e:63:82:eb:5d:67:c7:91:61:51:75:f6:c7:4d:d6: 69:35:60:b7:c1:fa:f8:23:26:55:1f:c0:61:36:8e:41:d1:64: 07:d5:d8:30:7f:a5:f6:42:8d:96:fb:36:47:31:e8:23:83:fe: 4e:c2:92:73:ec:c6:1d:f3:73:65:4f:ed:0f:b9:db:68:16:3f: 96:f0:ba:74:34:ad:20:d2:7b:69:15:fc:f9:e2:d4:0d:96:34: 71:2d:e6:e4:d7:48:73:3d:1e:33:40:01:a3:3e:84:76:f3:a8: fd:93:82:b6:6a:1d:b8:9d:0f:45:98:7a:e3:41:2e:0e:67:03: be:18:28:30:7b:c1:97:39:71:6d:42:5f:72:c4:dc:d7:5b:49: 17:a0:d7:47:24:b1:ad:0a:1f:74:0a:51:45:77:cd:6a:0e:cf: d6:aa:17:22:d4:46:52:d8:aa:f0:a3:8c:f8:44:bf:2b:a9:25: 02:20:2e:e1:5a:3f:3d:22:e9:32:1f:06:7a:68:85:a4:22:e4: e1:16:a5:8c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NF5V9tzp78fIBVPxtJ+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjk2ZjliNDg3ZjE2ZGZmZWRkMTM5NWUwZTJhNWFkMWQzZjM0MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kWNrkilUVc4YDUIsISdbFOIjVyr x9tJC2+3R7fRRnJWhqClDcapvDuY15X64AB/IiuIa9LO8Ib2/rcVkGlaQ8oE4R64 dZ3+6/sI07oh9FduD23dgzeZHyTSkRGTOE3qs6naN1MoodQzrvjMfmHm5P9u0m7R Npja9DbufS7XE+sHaLtaZFiWfhWhVDTIgIQEvFFM1Olb8eeMyAbo30TXRkSRcRMp mA/eKIqUAiKs1uIR9lKkN4hSE3zEI97iGtqHWAb+wbLMtWiEWuWseO5BTsPszJj9 lBenZVNmDS6u5ZkkSUAhfKUqJZ15XlZpgKEZXI/OiLtdW0CMcPDPk13Y6wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDKW+bSH8W3/7dE5Xg4qWtHT80H4MB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvTXBiNXRJZnhiZl90MFRsZURpcGEwZFB6UWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQATfExAwQA TfE+MAwDBABZJyEDBABZJyIwDQYJKoZIhvcNAQELBQADggEBAGwLoRaVcf1+6p7G g/KZB5G1tohbxB0Ng+BrlgllQqayxItHvYQbHt8nL/LM2Y8qC0/9C7KZWZs/WW5j gutdZ8eRYVF19sdN1mk1YLfB+vgjJlUfwGE2jkHRZAfV2DB/pfZCjZb7Nkcx6COD /k7CknPsxh3zc2VP7Q+522gWP5bwunQ0rSDSe2kV/Pni1A2WNHEt5uTXSHM9HjNA AaM+hHbzqP2TgrZqHbidD0WYeuNBLg5nA74YKDB7wZc5cW1CX3LE3NdbSReg10ck sa0KH3QKUUV3zWoOz9aqFyLURlLYqvCjjPhEvyupJQIgLuFaPz0i6TIfBnpohaQi 5OEWpYw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:26 2026 by rpki-client