This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/MDbmuyuCNpEGg70tUNib047bzYM.roa File: MDbmuyuCNpEGg70tUNib047bzYM.roa (raw, json) Hash identifier: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI= Subject key identifier: 30:36:E6:BB:2B:82:36:91:06:83:BD:2D:50:D8:9B:D3:8E:DB:CD:83 Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019B7F8122BD11CD34BB68E896F6E0241F87 Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/MDbmuyuCNpEGg70tUNib047bzYM.roa Signing time: Fri 02 Jan 2026 16:18:48 +0000 ROA not before: Fri 02 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35712 IP address blocks: 91.132.180.0/22 maxlen: 22 91.132.180.0/24 maxlen: 24 91.132.181.0/24 maxlen: 24 91.132.182.0/24 maxlen: 24 91.132.183.0/24 maxlen: 24 2a09:cc80::/29 maxlen: 29 2a09:cc80::/31 maxlen: 31 2a09:cc82::/31 maxlen: 31 2a09:cc84::/31 maxlen: 31 2a09:cc86::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:22:bd:11:cd:34:bb:68:e8:96:f6:e0:24:1f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Jan 2 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3036e6bb2b8236910683bd2d50d89bd38edbcd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:c9:80:80:f9:89:6c:e1:f8:ab:28:a1:6e: 4c:9c:52:16:a5:7a:30:4d:25:51:59:5b:30:82:26: b2:c5:4a:4e:42:5c:33:ac:98:bd:ef:90:26:38:f5: 12:cd:e8:8a:7f:c0:dd:73:65:1b:af:b7:37:5c:23: d1:7d:f5:e3:47:0b:bc:33:ae:e1:c3:ef:59:a8:b7: 7d:6f:50:ab:6e:8a:f0:29:75:6f:8d:42:66:fa:50: c2:12:c3:42:d7:67:25:82:cf:37:a6:96:7f:c3:16: 6e:87:93:4c:88:0a:62:d3:f6:94:3a:bb:c7:b9:92: f2:03:f8:79:1a:1c:0a:c2:c7:7f:2e:c4:73:b1:60: 68:ff:83:1c:fe:d4:90:d7:09:8b:1c:25:aa:74:6d: 98:ab:ab:d4:eb:08:09:03:b6:ff:ee:c7:47:d0:70: 4f:e6:54:9b:c8:34:aa:97:f7:f6:7e:ac:ec:d3:67: 75:90:c4:46:7e:05:0a:35:6f:00:2b:6e:37:32:7e: 2c:e0:a0:43:4c:48:d7:bd:e4:83:7f:b6:f5:d1:5c: 7a:a6:65:22:a6:93:fe:f4:9c:7e:c1:e8:3a:b8:25: 2a:cf:f3:16:bc:f1:f1:26:73:36:c2:d0:dc:46:f8: 9c:32:0d:d7:c9:47:c8:be:87:4c:99:1f:93:d2:73: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:E6:BB:2B:82:36:91:06:83:BD:2D:50:D8:9B:D3:8E:DB:CD:83 X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/MDbmuyuCNpEGg70tUNib047bzYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.180.0/22 IPv6: 2a09:cc80::/29 Signature Algorithm: sha256WithRSAEncryption 70:bd:78:a8:6a:1e:af:21:37:a7:1c:38:60:30:ed:bd:d1:7f: 1b:00:92:79:87:7d:06:b9:25:c0:af:c7:bf:cd:cc:b0:31:48: b1:ab:d0:d4:56:58:94:d7:b9:0d:d0:a2:cb:6a:82:c2:dd:59: 62:96:63:58:ca:a6:84:ec:2f:ac:56:9b:2d:a1:33:d7:ff:bc: fa:46:60:ce:7e:86:43:d9:70:99:ee:1a:a6:28:00:14:3c:d4: e0:5a:41:91:ec:72:34:10:58:5c:8b:3c:d4:68:aa:da:78:f0: 61:21:c3:9e:dd:2e:cf:b1:ab:50:dd:f9:bc:a8:d6:97:6f:67: 7e:63:85:aa:db:5f:c7:26:8f:65:07:9a:e5:6f:ef:27:90:31: 9b:1f:f5:6c:20:69:8b:6a:b1:2d:24:a2:d4:85:fa:17:aa:2e: 43:a5:48:71:8c:3d:9f:1e:7b:1d:5b:34:32:f0:7f:15:9c:2d: 8d:1c:04:f2:74:03:d4:8b:89:02:fa:78:60:c0:8c:39:f5:39: c4:62:a8:ca:79:07:13:d6:c4:09:bc:a9:3a:ee:fb:84:7e:c3: 13:30:be:64:65:13:3d:9a:5c:6b:96:8c:dd:7c:af:be:be:fd: 5f:ad:e6:1e:df:7b:29:48:5e:98:84:54:ae:72:69:a5:b1:ac: 0f:bb:22:fa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gSK9Ec00u2jolvbgJB+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjYwMTAyMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDM2ZTZiYjJiODIzNjkxMDY4M2JkMmQ1MGQ4OWJkMzhlZGJjZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzPJgID5iWzh+KsooW5MnFIWpXow TSVRWVswgiayxUpOQlwzrJi975AmOPUSzeiKf8Ddc2Ubr7c3XCPRffXjRwu8M67h w+9ZqLd9b1CrborwKXVvjUJm+lDCEsNC12clgs83ppZ/wxZuh5NMiApi0/aUOrvH uZLyA/h5GhwKwsd/LsRzsWBo/4Mc/tSQ1wmLHCWqdG2Yq6vU6wgJA7b/7sdH0HBP 5lSbyDSql/f2fqzs02d1kMRGfgUKNW8AK243Mn4s4KBDTEjXveSDf7b10Vx6pmUi ppP+9Jx+weg6uCUqz/MWvPHxJnM2wtDcRvicMg3XyUfIvodMmR+T0nPcawIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDA25rsrgjaRBoO9LVDYm9OO282DMB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTURibXV5dUNOcEVHZzcwdFVOaWIwNDdiellNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW4S0MA0E AgACMAcDBQMqCcyAMA0GCSqGSIb3DQEBCwUAA4IBAQBwvXioah6vITenHDhgMO29 0X8bAJJ5h30GuSXAr8e/zcywMUixq9DUVliU17kN0KLLaoLC3VlilmNYyqaE7C+s VpstoTPX/7z6RmDOfoZD2XCZ7hqmKAAUPNTgWkGR7HI0EFhcizzUaKraePBhIcOe 3S7PsatQ3fm8qNaXb2d+Y4Wq21/HJo9lB5rlb+8nkDGbH/VsIGmLarEtJKLUhfoX qi5DpUhxjD2fHnsdWzQy8H8VnC2NHATydAPUi4kC+nhgwIw59TnEYqjKeQcT1sQJ vKk67vuEfsMTML5kZRM9mlxrlozdfK++vv1freYe33spSF6YhFSucmmlsawPuyL6 -----END CERTIFICATE-----Generated at Tue Jan 13 00:06:05 2026 by rpki-client