This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MUcKvc8Ifi37B9zjgvpWkbItqUU.roa
File: MUcKvc8Ifi37B9zjgvpWkbItqUU.roa (raw, json)
Hash identifier: 1T14XmeftRXUBy2wNxA5TAbrnVvU2IenbCwryQKH5OI=
Subject key identifier: 31:47:0A:BD:CF:08:7E:2D:FB:07:DC:E3:82:FA:56:91:B2:2D:A9:45
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C75E434B08EB96503E8B7415A53D25
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MUcKvc8Ifi37B9zjgvpWkbItqUU.roa
Signing time: Thu 01 Jan 2026 04:18:32 +0000
ROA not before: Thu 01 Jan 2026 04:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8441
IP address blocks: 80.253.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:5e:43:4b:08:eb:96:50:3e:8b:74:15:a5:3d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31470abdcf087e2dfb07dce382fa5691b22da945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:42:ef:e3:c7:3d:8b:6f:a7:36:97:0e:a0:
ee:f8:d7:21:7e:fc:14:98:92:33:9b:64:df:61:27:
4b:d2:75:02:81:f1:2c:43:3f:dd:14:08:28:d0:d9:
66:3d:bc:88:ea:7a:7d:fa:b8:7e:34:5f:a5:7b:3c:
af:19:9b:a7:22:3b:0f:e6:a8:92:3b:82:18:21:01:
97:f4:c5:a1:ff:d3:fc:84:c8:8d:63:a5:92:fe:4b:
0b:99:8b:2c:c7:93:8a:45:e0:ad:7d:d5:f2:fc:8b:
4e:31:6d:e6:51:91:0e:19:df:75:c5:48:06:eb:6e:
41:f0:df:59:c4:9a:02:b6:a0:c5:b2:fd:a6:b7:5d:
da:95:3a:a8:90:e7:91:f6:69:61:ad:b9:ad:3c:35:
9a:8f:1d:2f:c9:9a:74:82:78:fe:14:72:00:25:83:
ab:2a:1c:b8:15:8a:46:12:fd:80:c1:4a:f0:49:00:
94:47:d7:ff:a4:1e:54:b1:0e:f4:a4:cd:89:47:55:
e0:68:98:cf:12:c8:28:e7:1f:00:e4:9b:d3:3f:2d:
28:cd:26:7e:3a:58:69:88:01:c2:20:b2:34:b3:59:
4e:1e:29:65:1c:8c:20:61:f8:19:9c:74:e2:cb:40:
ef:d8:7e:ee:34:cb:b8:36:55:c1:fd:7c:12:80:68:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:0A:BD:CF:08:7E:2D:FB:07:DC:E3:82:FA:56:91:B2:2D:A9:45
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MUcKvc8Ifi37B9zjgvpWkbItqUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ac:ad:82:25:c1:98:cb:bc:2c:79:04:3c:5c:84:57:fd:24:
f2:cd:22:65:56:34:44:01:ba:22:8b:61:ca:b1:8d:3f:38:e5:
ff:fa:d0:99:38:f8:cf:87:79:0b:d4:1c:ee:9f:14:77:04:d2:
74:cd:db:fe:d6:63:ed:e9:8f:7d:00:4d:97:47:92:e6:3b:ec:
9f:1b:5a:8b:49:1c:70:76:c2:69:cd:3b:ce:46:45:d1:2f:b3:
4e:87:a2:1a:f3:37:dd:10:6e:f4:0e:12:7d:70:9c:bb:94:68:
20:ce:33:e1:f7:e5:c0:9b:97:5d:60:62:54:06:ec:10:97:7c:
c0:d5:ab:3b:c9:0f:a4:16:d9:04:66:47:7c:50:19:68:1a:3f:
a1:9d:0a:a2:df:62:c1:2b:d1:18:d4:04:9c:29:58:42:9e:04:
89:ab:36:28:f1:ea:15:fc:cb:db:8f:94:25:d2:ea:47:04:f7:
48:3c:e6:31:f0:e0:2b:f1:12:5d:f6:72:a8:9b:6a:0c:03:f8:
33:16:fa:7e:1d:b5:a7:3a:c7:cd:dd:0a:a1:b5:8b:a5:68:eb:
0f:26:4c:47:77:3e:64:19:af:7c:de:77:a7:d6:36:a0:6b:6f:
31:21:3c:86:f9:27:45:6f:ff:dc:67:50:c9:1e:0c:cb:6e:fe:
bd:46:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:49 2026 by rpki-client