This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa File: MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa (raw, json) Hash identifier: BixX2lk4Zd4GgNurHhSn7REJ4Le+26ZBWj1SCXORrcE= Subject key identifier: 30:13:1B:2E:BB:19:58:4B:01:35:8A:18:BB:22:D2:94:03:C5:D9:61 Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2 Certificate serial: 019B7C1357980B5545D39E0EE47D609D9BCC Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28726 IP address blocks: 93.190.198.0/23 maxlen: 23 213.153.96.0/19 maxlen: 19 2a01:6d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:98:0b:55:45:d3:9e:0e:e4:7d:60:9d:9b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30131b2ebb19584b01358a18bb22d29403c5d961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:49:c1:c1:2a:49:da:1d:3c:25:fb:a6:08: 25:28:1e:e5:9e:b1:ea:bf:26:82:9c:73:e5:0c:bb: ef:f9:69:91:1f:32:a5:5a:02:cf:8e:6c:22:5c:0e: cc:c6:6f:0d:7c:b5:af:f1:b8:b0:cc:36:a5:12:54: a5:f1:44:96:83:e4:5b:ba:44:cd:38:c5:3f:59:b1: 41:e7:18:b6:f6:6f:59:5a:92:f8:bc:5f:be:fc:8c: b6:1d:c6:29:89:25:50:8f:6e:6e:86:4b:3f:82:7e: d6:a1:bc:8b:01:17:ee:00:f4:e6:dc:ee:ef:1e:3b: 90:65:02:d5:5a:b9:0a:88:fc:11:18:12:48:99:7d: a0:53:0b:29:e6:fc:39:8a:5f:09:cb:58:13:2e:14: f6:bc:e3:02:89:51:22:3a:57:3f:ef:55:b5:cc:4b: f0:d7:3f:2c:57:06:87:f0:a2:5f:3f:85:d5:8e:cb: 33:63:47:0b:b5:15:38:ef:21:60:34:cb:37:3d:71: dc:95:85:53:de:58:d3:53:c9:45:02:60:65:d4:b9: 5b:71:13:ba:51:7c:02:ae:55:1d:e3:87:08:b6:4a: b9:87:a5:5d:fd:20:d7:7a:f3:68:ef:9f:82:4e:2c: e9:53:4f:db:a6:86:e4:06:b4:c5:36:80:7f:04:72: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:13:1B:2E:BB:19:58:4B:01:35:8A:18:BB:22:D2:94:03:C5:D9:61 X509v3 Authority Key Identifier: keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.198.0/23 213.153.96.0/19 IPv6: 2a01:6d00::/32 Signature Algorithm: sha256WithRSAEncryption 69:c0:6f:7a:8d:e9:d1:cf:35:ae:96:58:bf:36:71:9f:12:dd: 36:67:73:fe:ea:e1:4f:b9:38:1f:16:d2:a1:fd:ab:93:90:7b: 1c:fa:dd:4a:95:f9:92:9d:cd:2d:7e:c1:01:9f:ae:3b:a6:87: 01:79:d9:9b:22:fb:3b:8f:5a:d3:3f:e0:a5:99:0f:39:ac:af: 77:a4:f3:2a:ad:99:9e:78:c4:55:63:46:bd:0d:25:e5:6d:ac: b7:6b:9f:46:84:88:dc:cf:9d:85:6f:51:eb:b7:3a:9a:50:bd: 7b:77:d0:89:ee:d0:18:e4:38:6f:7b:89:a6:18:40:de:ff:78: 0e:6f:51:7e:25:28:c2:77:25:91:e9:49:e2:0e:34:50:ce:cf: 7e:1f:ca:d4:82:81:28:c8:27:b7:e7:73:3d:36:1c:ad:8d:69: a8:f0:36:0c:d7:67:bb:f6:84:b9:42:4c:60:08:57:b0:ad:f8: 89:a9:c0:81:87:84:1b:ef:50:da:92:0e:5a:00:d4:1d:60:22: f5:a3:3c:a0:ec:f9:36:15:8e:02:cc:57:88:ab:39:d7:d1:84: 39:26:78:4d:8b:72:27:1b:08:ff:79:98:35:1f:d3:d6:0c:76: 60:de:f9:28:96:cb:b1:f8:dd:17:52:fd:43:31:c1:a7:64:80: d1:64:49:7b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8E1eYC1VF054O5H1gnZvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw YzE1YjIwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDEzMWIyZWJiMTk1ODRiMDEzNThhMThiYjIyZDI5NDAzYzVkOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gFJwcEqSdodPCX7pgglKB7lnrHq vyaCnHPlDLvv+WmRHzKlWgLPjmwiXA7Mxm8NfLWv8biwzDalElSl8USWg+RbukTN OMU/WbFB5xi29m9ZWpL4vF++/Iy2HcYpiSVQj25uhks/gn7WobyLARfuAPTm3O7v HjuQZQLVWrkKiPwRGBJImX2gUwsp5vw5il8Jy1gTLhT2vOMCiVEiOlc/71W1zEvw 1z8sVwaH8KJfP4XVjsszY0cLtRU47yFgNMs3PXHclYVT3ljTU8lFAmBl1LlbcRO6 UXwCrlUd44cItkq5h6Vd/SDXevNo75+CTizpU0/bpobkBrTFNoB/BHK0jwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDATGy67GVhLATWKGLsi0pQDxdlhMB8GA1UdIwQY MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt MTMxZGMyYmEyZWM4LzEvTUJNYkxyc1pXRXNCTllvWXV5TFNsQVBGMldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4 LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBXb7GAwQF 1ZlgMA0EAgACMAcDBQAqAW0AMA0GCSqGSIb3DQEBCwUAA4IBAQBpwG96jenRzzWu lli/NnGfEt02Z3P+6uFPuTgfFtKh/auTkHsc+t1KlfmSnc0tfsEBn647pocBedmb Ivs7j1rTP+ClmQ85rK93pPMqrZmeeMRVY0a9DSXlbay3a59GhIjcz52Fb1Hrtzqa UL17d9CJ7tAY5Dhve4mmGEDe/3gOb1F+JSjCdyWR6UniDjRQzs9+H8rUgoEoyCe3 53M9NhytjWmo8DYM12e79oS5QkxgCFewrfiJqcCBh4Qb71Dakg5aANQdYCL1ozyg 7Pk2FY4CzFeIqznX0YQ5JnhNi3InGwj/eZg1H9PWDHZg3vkolsux+N0XUv1DMcGn ZIDRZEl7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:26 2026 by rpki-client