This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa File: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (raw, json) Hash identifier: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM= Subject key identifier: 32:F2:9A:E7:A2:E1:F4:75:BD:48:BF:0D:C8:C8:E1:45:8B:6F:D2:A8 Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019B7BA4DD4F53969701E6CF003406C430F6 Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8529 IP address blocks: 82.178.32.0/24 maxlen: 24 82.178.33.0/24 maxlen: 24 82.178.158.0/23 maxlen: 23 82.178.158.0/24 maxlen: 24 82.178.159.0/24 maxlen: 24 134.0.216.0/22 maxlen: 24 134.0.220.0/22 maxlen: 24 151.248.96.0/20 maxlen: 24 185.200.124.0/24 maxlen: 24 185.200.125.0/24 maxlen: 24 185.200.126.0/24 maxlen: 24 185.201.192.0/22 maxlen: 24 213.202.0.0/21 maxlen: 24 2a02:f040::/29 maxlen: 48 2a14:1000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dd:4f:53:96:97:01:e6:cf:00:34:06:c4:30:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f29ae7a2e1f475bd48bf0dc8c8e1458b6fd2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:82:c8:c8:bf:af:26:bb:c4:c6:bb:fd:11: 76:a5:bb:ca:c8:a8:53:d7:37:16:7e:31:89:e2:a6: 2d:7a:d6:75:3b:aa:bf:0e:b6:77:82:bd:ef:aa:5a: 1b:7c:48:6f:05:77:b1:09:df:87:0e:35:a6:0c:05: 7c:21:b1:8a:b8:41:63:5c:8c:e1:4e:b9:cb:9a:eb: 46:54:7b:84:ba:2d:35:32:7b:4a:a1:dd:e7:ef:67: 0b:5b:da:b6:61:c1:15:2d:6d:bd:6b:b2:55:6e:b3: e2:9c:bb:d1:8a:3e:1a:c4:61:4f:31:22:9e:92:cc: b9:4f:f5:b7:e0:6e:0a:55:7d:7e:61:5f:89:52:d5: d4:19:54:41:91:64:c1:3b:63:52:65:2c:38:1b:13: fc:cf:1f:d7:9f:39:eb:e7:87:b3:45:cc:75:ac:6d: 29:79:2d:d7:53:10:9b:9c:4c:a5:59:35:7c:a5:48: 6b:bc:74:e3:b7:cf:a6:78:a8:e6:90:dc:57:ed:2c: 70:f7:f8:89:37:a8:66:30:1f:4b:f8:d1:5d:9e:ba: c1:c9:68:f3:cf:c0:3e:1b:65:22:d7:4b:03:a6:68: 9b:b6:4d:30:8d:e9:4b:95:a7:b9:0f:f1:b9:20:f3: 3b:65:20:9f:19:c6:33:1a:ee:19:39:20:54:56:78: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:9A:E7:A2:E1:F4:75:BD:48:BF:0D:C8:C8:E1:45:8B:6F:D2:A8 X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.178.32.0/23 82.178.158.0/23 134.0.216.0/21 151.248.96.0/20 185.200.124.0-185.200.126.255 185.201.192.0/22 213.202.0.0/21 IPv6: 2a02:f040::/29 2a14:1000::/29 Signature Algorithm: sha256WithRSAEncryption 5c:ec:06:41:2a:df:59:22:46:f2:86:43:fa:c3:cf:6b:49:f0: 50:7e:38:2c:6b:d1:dc:a1:75:70:f2:a9:05:fc:5b:dd:9e:a5: 16:5c:03:2f:ea:77:0e:93:9f:ec:15:7c:f9:c5:6d:4c:16:9c: 3a:47:2f:c6:a7:b3:9c:33:b7:20:5a:de:7c:ff:d7:ba:9b:c3: b4:bc:61:39:81:3b:dd:1d:3a:f8:f7:da:24:67:58:74:6b:b8: b5:e8:23:6b:b8:92:fc:ee:10:5e:c2:6f:42:75:99:c0:16:7d: fa:a5:ad:79:48:ab:23:d2:fd:9b:d1:af:fa:38:ff:d2:46:18: 40:e8:2a:d2:67:aa:b0:66:cc:d5:20:1e:fb:0b:8a:b5:9e:19: e9:ae:b8:2e:32:45:71:31:fd:9a:27:30:fe:b1:d3:3b:9d:6c: 37:b8:fe:5e:3e:9e:c0:da:e5:10:0a:b1:3a:b5:28:f8:f9:8b: 0f:64:55:07:b6:f6:92:4c:2a:03:37:a7:58:95:8d:c9:da:ad: f5:8f:88:88:0d:f3:79:10:18:fe:61:aa:3e:4f:3c:2e:41:84: 25:a1:57:fa:e2:f5:d9:c4:db:32:5e:b7:09:59:8d:bf:a5:91: 48:59:54:93:d0:70:c9:9b:7b:6c:17:db:92:a3:76:38:c4:f3: c2:12:a5:67 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt7pN1PU5aXAebPADQGxDD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmYyOWFlN2EyZTFmNDc1YmQ0OGJmMGRjOGM4ZTE0NThiNmZkMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWCyMi/rya7xMa7/RF2pbvKyKhT 1zcWfjGJ4qYtetZ1O6q/DrZ3gr3vqlobfEhvBXexCd+HDjWmDAV8IbGKuEFjXIzh TrnLmutGVHuEui01MntKod3n72cLW9q2YcEVLW29a7JVbrPinLvRij4axGFPMSKe ksy5T/W34G4KVX1+YV+JUtXUGVRBkWTBO2NSZSw4GxP8zx/Xnznr54ezRcx1rG0p eS3XUxCbnEylWTV8pUhrvHTjt8+meKjmkNxX7Sxw9/iJN6hmMB9L+NFdnrrByWjz z8A+G2Ui10sDpmibtk0wjelLlae5D/G5IPM7ZSCfGcYzGu4ZOSBUVng/SwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDLymuei4fR1vUi/DcjI4UWLb9KoMB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvTXZLYTU2TGg5SFc5U0w4TnlNamhSWXR2MHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDA4BAIAATAyAwQBUrIgAwQB UrKeAwQDhgDYAwQEl/hgMAwDBAK5yHwDBAC5yH4DBAK5ycADBAPVygAwFAQCAAIw DgMFAyoC8EADBQMqFBAAMA0GCSqGSIb3DQEBCwUAA4IBAQBc7AZBKt9ZIkbyhkP6 w89rSfBQfjgsa9HcoXVw8qkF/FvdnqUWXAMv6ncOk5/sFXz5xW1MFpw6Ry/Gp7Oc M7cgWt58/9e6m8O0vGE5gTvdHTr499okZ1h0a7i16CNruJL87hBewm9CdZnAFn36 pa15SKsj0v2b0a/6OP/SRhhA6CrSZ6qwZszVIB77C4q1nhnprrguMkVxMf2aJzD+ sdM7nWw3uP5ePp7A2uUQCrE6tSj4+YsPZFUHtvaSTCoDN6dYlY3J2q31j4iIDfN5 EBj+Yao+TzwuQYQloVf64vXZxNsyXrcJWY2/pZFIWVST0HDJm3tsF9uSo3Y4xPPC EqVn -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:56 2026 by rpki-client