This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/MBxhOTRLAR2_oX9sHcQKcJCop9c.roa File: MBxhOTRLAR2_oX9sHcQKcJCop9c.roa (raw, json) Hash identifier: iGE+hNxDM+p4HtdFvxoO78JvNckHZ8B3Xo+Oyy6qzEM= Subject key identifier: 30:1C:61:39:34:4B:01:1D:BF:A1:7F:6C:1D:C4:0A:70:90:A8:A7:D7 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019B79113FCDC06CA3B0EF515E6F6CD5AD2F Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/MBxhOTRLAR2_oX9sHcQKcJCop9c.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41666 IP address blocks: 91.216.79.0/24 maxlen: 32 2001:67c:8e4::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3f:cd:c0:6c:a3:b0:ef:51:5e:6f:6c:d5:ad:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301c6139344b011dbfa17f6c1dc40a7090a8a7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:2f:d3:c5:94:3f:8f:fd:ea:fe:28:f0:09: 44:c5:e5:33:26:b5:c4:4f:07:05:8d:ec:ad:c2:db: b9:50:52:b5:e3:c9:c9:73:d7:5c:fb:94:a7:a5:a5: 09:8b:b8:11:09:79:71:fc:16:cb:88:e9:5d:6c:be: 53:c6:86:d6:02:fa:e4:ed:96:a7:85:37:12:49:e9: 06:20:76:ef:3f:b1:c6:23:b9:3e:59:a0:79:cf:9b: 82:12:e4:4f:b6:91:25:7c:ea:6f:39:e6:ee:ac:c9: e6:5b:78:6e:83:47:1f:cb:1a:b3:8d:d3:c3:77:87: 24:20:b4:61:de:0a:9f:a4:af:5b:8e:a2:5a:01:1a: e9:ee:85:af:bb:16:4e:38:4b:4b:cf:11:de:cf:5f: 84:df:3c:ee:bc:e9:58:3e:ce:c0:25:52:a5:d0:93: 78:61:34:19:98:90:83:c2:f5:19:0e:7d:af:9d:26: 5b:b4:e3:c2:26:4a:71:21:e5:5e:5a:d3:8d:10:84: 42:30:1f:79:ac:d6:ed:ea:91:c1:d1:7e:ea:b3:14: b5:65:1a:e5:52:fe:26:3c:60:bd:39:2c:dc:a6:9f: 90:43:46:bf:ae:e3:58:a7:6a:54:c6:c6:8a:8d:ca: 94:eb:83:df:eb:3e:c2:73:96:93:06:43:d5:16:08: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1C:61:39:34:4B:01:1D:BF:A1:7F:6C:1D:C4:0A:70:90:A8:A7:D7 X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/MBxhOTRLAR2_oX9sHcQKcJCop9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.79.0/24 IPv6: 2001:67c:8e4::/48 Signature Algorithm: sha256WithRSAEncryption 75:47:a0:c9:a3:8a:03:64:d3:eb:91:53:44:74:9a:70:02:fe: ae:52:17:c2:e7:eb:98:84:87:a0:36:a3:7e:c7:3d:11:9e:c2: 85:61:d3:60:0b:c1:b8:f3:ac:57:9a:1f:cf:a6:ef:6f:cb:d1: 0e:72:21:de:86:77:bf:e4:12:f2:b4:fc:bc:79:90:88:75:7c: 29:09:d8:e4:b1:a0:54:2b:b2:09:1d:ce:72:55:bf:97:fb:fe: c2:a7:f8:45:40:17:c7:c1:b7:9d:9b:f8:b2:b6:33:bd:a3:cb: 9e:0c:c1:8c:45:8f:14:0d:f2:d5:28:a0:24:10:04:17:3a:76: 38:52:86:6f:e1:c2:16:db:c3:e2:b5:9d:95:fc:d6:1c:f6:35: 75:f8:88:13:d7:98:d4:4a:f0:90:0c:5b:65:d7:1f:86:94:d5: a7:f9:e9:cd:08:39:ad:61:43:16:77:2e:de:b7:5c:14:73:e6: aa:da:26:d3:dd:ef:9e:f4:77:06:c3:d3:5f:72:06:92:8c:2c: ff:01:b7:73:0e:d6:dc:39:bc:b2:16:b8:d3:64:05:c7:53:a7: 1c:18:80:f9:4e:15:e2:2b:70:97:74:1d:be:4c:d6:fa:8e:7b: ca:9b:4c:42:7c:2a:73:c9:9c:db:33:b1:fc:25:91:92:3b:cc: bd:03:54:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ET/NwGyjsO9RXm9s1a0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFjNjEzOTM0NGIwMTFkYmZhMTdmNmMxZGM0MGE3MDkwYThhN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0v08WUP4/96v4o8AlExeUzJrXE TwcFjeytwtu5UFK148nJc9dc+5SnpaUJi7gRCXlx/BbLiOldbL5TxobWAvrk7Zan hTcSSekGIHbvP7HGI7k+WaB5z5uCEuRPtpElfOpvOeburMnmW3hug0cfyxqzjdPD d4ckILRh3gqfpK9bjqJaARrp7oWvuxZOOEtLzxHez1+E3zzuvOlYPs7AJVKl0JN4 YTQZmJCDwvUZDn2vnSZbtOPCJkpxIeVeWtONEIRCMB95rNbt6pHB0X7qsxS1ZRrl Uv4mPGC9OSzcpp+QQ0a/ruNYp2pUxsaKjcqU64Pf6z7Cc5aTBkPVFgiewwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDAcYTk0SwEdv6F/bB3ECnCQqKfXMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvTUJ4aE9UUkxBUjJfb1g5c0hjUUtjSkNvcDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9hPMA8E AgACMAkDBwAgAQZ8COQwDQYJKoZIhvcNAQELBQADggEBAHVHoMmjigNk0+uRU0R0 mnAC/q5SF8Ln65iEh6A2o37HPRGewoVh02ALwbjzrFeaH8+m72/L0Q5yId6Gd7/k EvK0/Lx5kIh1fCkJ2OSxoFQrsgkdznJVv5f7/sKn+EVAF8fBt52b+LK2M72jy54M wYxFjxQN8tUooCQQBBc6djhShm/hwhbbw+K1nZX81hz2NXX4iBPXmNRK8JAMW2XX H4aU1af56c0IOa1hQxZ3Lt63XBRz5qraJtPd7570dwbD019yBpKMLP8Bt3MO1tw5 vLIWuNNkBcdTpxwYgPlOFeIrcJd0Hb5M1vqOe8qbTEJ8KnPJnNszsfwlkZI7zL0D VHE= -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:16 2026 by rpki-client