This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/MfgRriYJp7m_VcqdOdfAbTb2DNo.roa File: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (raw, json) Hash identifier: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY= Subject key identifier: 31:F8:11:AE:26:09:A7:B9:BF:55:CA:9D:39:D7:C0:6D:36:F6:0C:DA Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B7BA4162EFD92056FAC40EC630551C585 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/MfgRriYJp7m_VcqdOdfAbTb2DNo.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208972 IP address blocks: 31.169.64.0/24 maxlen: 24 31.169.65.0/24 maxlen: 24 31.169.66.0/24 maxlen: 24 31.169.67.0/24 maxlen: 24 31.169.69.0/24 maxlen: 24 31.169.70.0/24 maxlen: 24 31.169.71.0/24 maxlen: 24 31.169.72.0/24 maxlen: 24 31.169.77.0/24 maxlen: 24 31.169.78.0/24 maxlen: 24 31.169.79.0/24 maxlen: 24 31.169.81.0/24 maxlen: 24 31.169.82.0/24 maxlen: 24 31.169.84.0/24 maxlen: 24 31.169.85.0/24 maxlen: 24 31.169.87.0/24 maxlen: 24 31.169.88.0/24 maxlen: 24 31.169.90.0/24 maxlen: 24 31.169.92.0/24 maxlen: 24 31.169.93.0/24 maxlen: 24 31.169.94.0/24 maxlen: 24 31.169.95.0/24 maxlen: 24 185.33.63.0/24 maxlen: 24 2a00:5740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:16:2e:fd:92:05:6f:ac:40:ec:63:05:51:c5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31f811ae2609a7b9bf55ca9d39d7c06d36f60cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:90:28:17:5e:cf:e1:52:bf:40:bb:df:d9: f8:62:85:f8:41:21:17:02:9a:35:e4:03:52:57:a1: cc:06:03:09:09:59:6d:bb:1f:c8:1f:b1:84:ff:cb: a1:2f:ea:63:fd:d4:37:01:63:99:32:51:c2:3f:16: 6c:b5:df:f7:30:fc:ee:fe:4f:e2:c6:af:12:89:17: f9:64:ee:a5:62:5b:f4:c6:ca:31:72:0b:a3:b6:4d: 9e:2e:26:79:e9:e6:f2:08:f8:bc:3e:6c:97:91:7f: b3:c6:4a:9c:0f:57:d7:42:50:e4:4d:e1:65:77:32: c0:d5:df:ef:80:19:00:c2:fc:57:df:c2:ac:b8:85: ed:89:64:6f:4d:f6:87:a3:c3:1b:1b:62:98:3f:e1: 9f:ba:88:05:28:35:3f:5f:e8:b4:34:03:d7:b4:da: 81:e4:18:d6:3e:12:0e:77:5b:1f:5e:28:4e:76:70: 69:2c:6d:6c:2e:e8:25:2b:bf:96:fa:ad:a5:9a:81: 09:8a:a4:e9:df:76:45:b4:ab:b6:98:32:10:87:5b: 4f:ab:64:d3:bd:ac:52:13:27:37:4d:89:c1:c9:83: 66:d0:13:7d:ac:c3:fa:9c:f6:24:31:49:13:b4:47: 91:76:31:fc:21:1b:2b:1f:81:6a:5e:32:0e:02:78: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F8:11:AE:26:09:A7:B9:BF:55:CA:9D:39:D7:C0:6D:36:F6:0C:DA X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/MfgRriYJp7m_VcqdOdfAbTb2DNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.64.0/22 31.169.69.0-31.169.72.255 31.169.77.0-31.169.79.255 31.169.81.0-31.169.82.255 31.169.84.0/23 31.169.87.0-31.169.88.255 31.169.90.0/24 31.169.92.0/22 185.33.63.0/24 IPv6: 2a00:5740::/29 Signature Algorithm: sha256WithRSAEncryption a9:08:c7:98:b9:28:f3:68:53:67:4a:81:97:2c:b8:a6:7a:48: 29:59:16:20:d5:fd:de:03:82:af:9f:64:bb:bf:17:e1:c4:01: 0b:f7:84:4d:98:cf:29:0c:d5:76:1d:30:b6:55:b4:74:30:8b: ac:11:c1:0f:b2:96:cc:74:8f:70:74:fa:9f:46:38:08:ae:04: b7:27:0a:9c:42:31:a4:0f:0c:0a:51:4d:5b:ad:c9:8b:40:c9: 3a:ea:ad:ab:ea:2d:38:27:39:fe:b6:aa:ba:fa:2b:8a:9f:75: 75:2d:82:07:22:16:6a:40:f7:ac:84:1c:79:49:2f:62:8a:da: d0:48:9d:52:99:7e:87:d9:e9:ec:4b:e7:07:32:3f:93:6c:bf: ac:9e:19:67:8c:e3:eb:2d:24:74:34:6c:a0:d2:6d:4e:cc:19: 26:55:fa:68:06:78:3e:04:0b:33:17:3c:41:37:88:89:11:f6: a2:88:60:7a:62:69:44:8d:8b:e3:e1:8a:c8:fe:3f:4c:5d:c6: a3:75:dc:d1:e6:9e:cc:21:9f:51:28:72:f6:07:0a:0f:f0:ee: f0:af:16:6f:13:b7:ac:bc:c7:90:c3:36:70:51:19:e9:c4:f1: 54:40:90:3b:06:4e:41:49:bd:ff:59:74:57:df:93:8f:10:3d: 5c:f6:cc:d6 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt7pBYu/ZIFb6xA7GMFUcWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWY4MTFhZTI2MDlhN2I5YmY1NWNhOWQzOWQ3YzA2ZDM2ZjYwY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8yQKBdez+FSv0C739n4YoX4QSEX Apo15ANSV6HMBgMJCVltux/IH7GE/8uhL+pj/dQ3AWOZMlHCPxZstd/3MPzu/k/i xq8SiRf5ZO6lYlv0xsoxcgujtk2eLiZ56ebyCPi8PmyXkX+zxkqcD1fXQlDkTeFl dzLA1d/vgBkAwvxX38KsuIXtiWRvTfaHo8MbG2KYP+GfuogFKDU/X+i0NAPXtNqB 5BjWPhIOd1sfXihOdnBpLG1sLuglK7+W+q2lmoEJiqTp33ZFtKu2mDIQh1tPq2TT vaxSEyc3TYnByYNm0BN9rMP6nPYkMUkTtEeRdjH8IRsrH4FqXjIOAniTUQIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFDH4Ea4mCae5v1XKnTnXwG029gzaMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvTWZnUnJpWUpwN21fVmNxZE9kZkFiVGIyRE5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwQCH6lAMAwD BAAfqUUDBAAfqUgwDAMEAB+pTQMEBB+pQDAMAwQAH6lRAwQAH6lSAwQBH6lUMAwD BAAfqVcDBAAfqVgDBAAfqVoDBAIfqVwDBAC5IT8wDQQCAAIwBwMFAyoAV0AwDQYJ KoZIhvcNAQELBQADggEBAKkIx5i5KPNoU2dKgZcsuKZ6SClZFiDV/d4Dgq+fZLu/ F+HEAQv3hE2YzykM1XYdMLZVtHQwi6wRwQ+ylsx0j3B0+p9GOAiuBLcnCpxCMaQP DApRTVutyYtAyTrqravqLTgnOf62qrr6K4qfdXUtggciFmpA96yEHHlJL2KK2tBI nVKZfofZ6exL5wcyP5Nsv6yeGWeM4+stJHQ0bKDSbU7MGSZV+mgGeD4ECzMXPEE3 iIkR9qKIYHpiaUSNi+Phisj+P0xdxqN13NHmnswhn1EocvYHCg/w7vCvFm8Tt6y8 x5DDNnBRGenE8VRAkDsGTkFJvf9ZdFffk48QPVz2zNY= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:18 2026 by rpki-client