This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa File: MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa (raw, json) Hash identifier: 3l8Y3glur9khayrgDEUAxZoVQurQKRMAgC985VKxnJA= Subject key identifier: 32:92:52:9F:D4:D6:47:08:52:E7:34:DD:F0:A3:9D:FD:D5:23:DD:7F Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4 Certificate serial: 019B79ED481ECDD37A793FDB13B3743A6CAA Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204558 IP address blocks: 79.170.72.0/21 maxlen: 21 85.118.168.0/21 maxlen: 21 185.29.0.0/22 maxlen: 22 188.95.200.0/21 maxlen: 21 2a00:91c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:1e:cd:d3:7a:79:3f:db:13:b3:74:3a:6c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3292529fd4d6470852e734ddf0a39dfdd523dd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:47:e5:f5:1b:fb:6e:c4:a4:bc:f1:e6:60: 07:3e:ce:bd:1b:0c:5c:fd:59:a9:d4:d8:5f:61:86: e6:64:6d:7c:f0:3e:7d:2e:87:05:f4:d7:31:ea:46: 4b:25:e2:a6:fe:f2:6f:f3:b7:36:f8:c2:1a:98:eb: 1a:a6:b2:47:4a:e3:86:c7:b7:2e:a1:0f:22:57:eb: 55:d5:dc:1f:fc:bc:70:69:5b:ef:14:d5:12:64:56: 4f:6a:d8:91:9b:79:c9:94:32:b4:3d:93:28:b9:4c: 49:3f:73:5e:fa:d8:87:87:17:b0:bb:21:e4:4a:2d: 2c:d2:57:8c:2a:9f:9b:7d:a0:3b:27:7f:84:18:f7: 32:a1:d1:9f:3b:f5:b7:97:2e:08:ca:b5:5a:28:62: ee:b5:b2:96:e3:37:25:f7:1b:80:37:d7:f1:a1:5d: 1a:f9:de:fd:7e:69:ae:13:56:14:ea:75:4b:ca:99: 4d:9e:db:70:72:07:f6:1f:68:ce:e2:65:6d:50:f6: 16:ed:1f:69:65:21:9b:b3:94:51:d0:ed:cc:8a:81: 9b:51:26:03:b0:2f:c7:cb:06:09:d7:f1:d0:47:5f: 06:f6:44:bd:ca:97:3a:c2:6f:a2:46:da:b0:75:01: d0:ba:07:f2:c6:f7:c9:ce:80:05:ac:68:98:ae:11: ea:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:92:52:9F:D4:D6:47:08:52:E7:34:DD:F0:A3:9D:FD:D5:23:DD:7F X509v3 Authority Key Identifier: keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.72.0/21 85.118.168.0/21 185.29.0.0/22 188.95.200.0/21 IPv6: 2a00:91c0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:13:a3:66:8d:22:79:3d:a5:28:1a:98:92:a5:10:09:87:f1: 5c:2a:25:d8:8e:f4:db:5f:d6:fc:c7:90:02:28:16:9d:78:be: e5:e2:0c:29:7f:ba:3d:df:d8:3a:ee:d1:a4:88:bc:47:df:9d: ba:20:d7:69:44:6f:fc:43:1b:2a:a9:ae:c1:cc:c8:37:5b:85: 6a:19:11:84:e9:0b:57:d3:fd:c7:93:ce:49:b0:0f:70:3b:8a: 49:97:92:9f:a5:0c:55:49:79:7e:a2:46:95:38:3a:e6:68:f5: a0:0a:14:a3:11:f9:46:29:ab:95:37:29:76:ab:e3:4d:a6:46: 16:4f:6f:bb:33:f0:cb:a7:5a:a0:a6:34:0a:a7:3a:7c:a2:4f: 04:8a:f3:83:41:d7:25:31:c6:08:ea:33:0e:8c:4a:75:67:59: c7:6d:4f:11:85:4d:78:eb:b2:7a:d9:23:5f:dd:ea:76:82:ce: 46:39:21:ce:d8:3f:57:ec:7d:50:08:21:7e:d1:4e:be:c4:04: ff:4e:d8:b4:d3:68:3e:73:d1:02:f6:8d:54:24:41:32:1f:27: 6f:08:cf:b6:aa:a2:ed:38:79:26:22:81:e5:34:f7:4c:6c:e2: 45:e7:6e:94:42:17:80:8c:7a:11:2c:dd:ec:bf:43:6e:93:28: 84:37:02:9e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57UgezdN6eT/bE7N0OmyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWUwMzMyOWUzYzBmNzNlYTgzZmI2MzdjYTIwYWVjZTE2 YThlYjQwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjkyNTI5ZmQ0ZDY0NzA4NTJlNzM0ZGRmMGEzOWRmZGQ1MjNkZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd9H5fUb+27EpLzx5mAHPs69Gwxc /Vmp1NhfYYbmZG188D59LocF9Ncx6kZLJeKm/vJv87c2+MIamOsaprJHSuOGx7cu oQ8iV+tV1dwf/LxwaVvvFNUSZFZPatiRm3nJlDK0PZMouUxJP3Ne+tiHhxewuyHk Si0s0leMKp+bfaA7J3+EGPcyodGfO/W3ly4IyrVaKGLutbKW4zcl9xuAN9fxoV0a +d79fmmuE1YU6nVLyplNnttwcgf2H2jO4mVtUPYW7R9pZSGbs5RR0O3MioGbUSYD sC/HywYJ1/HQR18G9kS9ypc6wm+iRtqwdQHQugfyxvfJzoAFrGiYrhHq7wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDKSUp/U1kcIUuc03fCjnf3VI91/MB8GA1UdIwQY MBaAFOeuAzKePA9z6oP7Y3yiCuzhao60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAt YTE3ZGFiNzAxYzQxLzEvTXBKU245VFdSd2hTNXpUZDhLT2RfZFVqM1g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAtYTE3ZGFiNzAxYzQx LzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDT6pIAwQD VXaoAwQCuR0AAwQDvF/IMA0EAgACMAcDBQAqAJHAMA0GCSqGSIb3DQEBCwUAA4IB AQCaE6NmjSJ5PaUoGpiSpRAJh/FcKiXYjvTbX9b8x5ACKBadeL7l4gwpf7o939g6 7tGkiLxH3526INdpRG/8Qxsqqa7BzMg3W4VqGRGE6QtX0/3Hk85JsA9wO4pJl5Kf pQxVSXl+okaVODrmaPWgChSjEflGKauVNyl2q+NNpkYWT2+7M/DLp1qgpjQKpzp8 ok8EivODQdclMcYI6jMOjEp1Z1nHbU8RhU1467J62SNf3ep2gs5GOSHO2D9X7H1Q CCF+0U6+xAT/Tti002g+c9EC9o1UJEEyHydvCM+2qqLtOHkmIoHlNPdMbOJF526U QheAjHoRLN3sv0NukyiENwKe -----END CERTIFICATE-----Generated at Thu Jan 8 11:02:00 2026 by rpki-client