This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MTWX4d0MVKh2zxIVAL3pE9QqMS4.roa File: MTWX4d0MVKh2zxIVAL3pE9QqMS4.roa (raw, json) Hash identifier: YGACAkgv9EwWqvo9xQynUgKR/okWoDzGSYafTs3k41w= Subject key identifier: 31:35:97:E1:DD:0C:54:A8:76:CF:12:15:00:BD:E9:13:D4:2A:31:2E Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348F43A33F9E319697B1336779BF8B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MTWX4d0MVKh2zxIVAL3pE9QqMS4.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209578 IP address blocks: 193.180.64.0/21 maxlen: 32 193.182.96.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:43:a3:3f:9e:31:96:97:b1:33:67:79:bf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=313597e1dd0c54a876cf121500bde913d42a312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:32:23:86:ca:96:95:25:54:ae:4a:7f:ee: 84:3a:68:c1:52:82:31:9e:85:e5:1a:70:8c:5f:fa: 7e:88:ff:f8:d4:64:90:a4:6e:7f:6c:77:1d:83:a2: 19:5d:18:13:2d:42:2a:29:36:eb:11:c5:d9:a7:1d: 03:f8:bc:7b:d6:52:c3:05:d0:5f:3f:d5:2c:a9:d5: 57:db:f0:2a:2c:76:ef:93:50:29:b2:94:d8:7e:b0: 74:83:8d:8d:2b:e0:d8:df:30:3f:da:3e:aa:b0:13: 52:71:49:e8:46:19:d8:a4:ab:c1:a9:2a:91:1f:08: ca:e9:bc:0a:1f:dc:d9:e5:7d:ba:ab:89:af:e4:af: e5:67:90:eb:bd:be:cc:09:1d:3b:07:71:20:1e:e7: 9e:26:85:04:b2:14:9d:b5:10:26:7a:1e:74:29:49: 45:7d:05:a6:ef:0f:43:c4:5b:4d:1d:b8:b1:dd:0a: 5a:b1:aa:ca:f8:3b:a5:e6:13:74:41:46:47:8c:9b: 08:77:94:57:d2:4d:c4:6e:f9:bd:53:d2:cc:b6:36: 8b:6f:f6:e0:54:a5:7c:45:f8:a3:eb:60:1b:a6:45: 48:2a:f8:f8:a0:2a:17:4d:c2:2e:dd:44:89:a0:52: f4:0b:49:1f:10:76:94:3a:cc:b0:06:c4:17:e4:41: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:97:E1:DD:0C:54:A8:76:CF:12:15:00:BD:E9:13:D4:2A:31:2E X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MTWX4d0MVKh2zxIVAL3pE9QqMS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.64.0/21 193.182.96.0/21 Signature Algorithm: sha256WithRSAEncryption 40:1b:7e:40:09:9c:2b:2a:e0:26:ad:ea:9d:90:18:99:be:86: 59:4c:a8:ff:d7:99:5c:10:db:dd:86:90:4c:df:c1:de:0e:1f: 80:7a:0d:30:ad:7b:1b:fa:74:56:07:69:cf:0c:7a:3e:e5:82: 10:73:2a:77:19:5d:3b:32:b8:48:22:5d:06:56:e3:38:f1:a5: 4f:90:43:f4:19:5e:d8:c2:ed:ac:81:8f:87:32:40:8d:9f:46: 95:4b:67:2d:40:e7:67:d6:49:aa:3e:cf:02:72:cc:89:a8:99: cd:ac:fd:8b:e9:a8:1c:64:d8:d9:6d:1a:1c:44:1b:ad:8a:a5: 73:82:f4:5b:53:e7:8d:91:0a:2c:31:e9:91:37:ac:32:83:76: 0a:32:5b:93:5f:9f:c5:27:b3:f4:47:cb:fa:77:1c:b0:e4:25: 36:29:d6:fc:f4:da:c3:2b:cb:cb:47:60:48:fc:c7:0a:b4:1c: ab:cb:5e:ee:f0:38:c3:c1:f9:38:9e:66:93:3c:0c:db:7f:b7: 41:d4:0a:fc:50:e9:23:c1:c8:97:95:5c:99:c6:50:e7:eb:49: 7a:a7:9e:67:b5:b9:86:f4:de:3e:83:d3:01:8b:19:09:ae:e3: 0d:b4:90:aa:3a:96:fa:86:5b:0c:4f:53:3e:e9:22:cb:e2:cc: dc:9e:8c:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NI9Doz+eMZaXsTNneb+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTM1OTdlMWRkMGM1NGE4NzZjZjEyMTUwMGJkZTkxM2Q0MmEzMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtYyI4bKlpUlVK5Kf+6EOmjBUoIx noXlGnCMX/p+iP/41GSQpG5/bHcdg6IZXRgTLUIqKTbrEcXZpx0D+Lx71lLDBdBf P9UsqdVX2/AqLHbvk1ApspTYfrB0g42NK+DY3zA/2j6qsBNScUnoRhnYpKvBqSqR HwjK6bwKH9zZ5X26q4mv5K/lZ5Drvb7MCR07B3EgHueeJoUEshSdtRAmeh50KUlF fQWm7w9DxFtNHbix3QpasarK+Dul5hN0QUZHjJsId5RX0k3Ebvm9U9LMtjaLb/bg VKV8Rfij62AbpkVIKvj4oCoXTcIu3USJoFL0C0kfEHaUOsywBsQX5EFnwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDE1l+HdDFSods8SFQC96RPUKjEuMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvTVRXWDRkME1WS2gyenhJVkFMM3BFOVFxTVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwbRAAwQD wbZgMA0GCSqGSIb3DQEBCwUAA4IBAQBAG35ACZwrKuAmreqdkBiZvoZZTKj/15lc ENvdhpBM38HeDh+Aeg0wrXsb+nRWB2nPDHo+5YIQcyp3GV07MrhIIl0GVuM48aVP kEP0GV7Ywu2sgY+HMkCNn0aVS2ctQOdn1kmqPs8CcsyJqJnNrP2L6agcZNjZbRoc RButiqVzgvRbU+eNkQosMemRN6wyg3YKMluTX5/FJ7P0R8v6dxyw5CU2Kdb89NrD K8vLR2BI/McKtByry17u8DjDwfk4nmaTPAzbf7dB1Ar8UOkjwciXlVyZxlDn60l6 p55ntbmG9N4+g9MBixkJruMNtJCqOpb6hlsMT1M+6SLL4szcnoxv -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:00 2026 by rpki-client