This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MG6wwUQIZtdfBmA-LkhZfHYB9y4.roa File: MG6wwUQIZtdfBmA-LkhZfHYB9y4.roa (raw, json) Hash identifier: ZOUkyf2IVXUObbDqV4591XEctFssK0I77MIM4eNgWVw= Subject key identifier: 30:6E:B0:C1:44:08:66:D7:5F:06:60:3E:2E:48:59:7C:76:01:F7:2E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A358FAD44E4A589A0F57FD95521376 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MG6wwUQIZtdfBmA-LkhZfHYB9y4.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216312 IP address blocks: 45.66.230.0/24 maxlen: 24 94.156.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:fa:d4:4e:4a:58:9a:0f:57:fd:95:52:13:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306eb0c1440866d75f06603e2e48597c7601f72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:30:67:08:ed:63:66:1f:57:36:5c:14:1b: 02:f7:9c:bf:0e:b1:7d:34:d1:90:40:d2:19:86:b3: 8d:50:90:d9:5f:2b:e2:37:87:ee:ff:c9:74:c8:37: 25:82:93:e2:9f:8c:d3:77:a9:0d:95:22:b7:32:87: 69:86:82:ff:b5:8b:c0:9a:87:74:04:90:87:cf:95: 9b:2a:ce:11:29:13:79:2a:87:16:1b:35:3b:38:f2: 53:f3:c4:a7:4a:f9:1a:a9:78:52:6c:79:35:fa:05: 67:e3:61:3b:69:14:1c:2a:a3:a9:61:c8:d4:4a:a5: 47:f4:2c:02:53:7c:a7:d5:66:27:d1:5c:c7:4a:86: f3:d1:11:eb:4f:bc:35:ea:5e:de:26:78:29:9f:68: 73:fc:11:8b:e6:fa:3f:1b:19:20:bb:e3:1f:27:22: 11:2d:a0:b9:64:06:9c:06:9d:0a:d6:78:9d:f4:7c: f0:6c:e1:87:cc:39:9c:70:b6:b2:d0:98:5d:8a:9b: e8:90:ed:03:06:f0:13:b1:35:12:dd:2e:6f:47:b9: 32:52:f1:3b:bf:64:eb:e9:93:6a:0c:2d:1f:17:24: 55:d4:1c:52:67:c8:41:b2:81:6f:f0:a3:9c:f1:08: 6e:5a:5d:59:e3:ca:8e:57:65:53:a5:8b:b9:c4:36: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:B0:C1:44:08:66:D7:5F:06:60:3E:2E:48:59:7C:76:01:F7:2E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MG6wwUQIZtdfBmA-LkhZfHYB9y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.230.0/24 94.156.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:62:43:fb:9f:eb:ae:86:45:77:a5:ba:4b:4c:97:27:78:b8: c1:3a:6b:87:ad:ea:4d:77:93:f2:65:80:05:0c:79:b5:fb:05: 0f:91:43:99:bd:1b:ef:30:23:8e:5f:4a:ef:3f:d6:43:a0:13: 30:11:62:57:8f:c2:67:7d:0d:b5:a8:47:58:86:de:e2:1d:20: 00:e5:eb:29:57:a1:9c:90:91:74:c9:c0:7e:02:8e:f7:d0:59: 26:fe:4e:6b:96:9c:9f:31:9d:99:63:b3:1a:f9:48:83:a5:0c: 28:a0:9c:9c:bb:b7:9c:29:62:b2:36:6f:e1:73:91:21:9f:6b: 32:5f:7f:13:23:8f:2b:6c:b6:ea:21:49:6e:7e:0c:c0:bd:04: b4:96:da:62:8b:8f:1b:a0:3f:97:88:c8:90:df:8e:3f:db:b3: 50:46:47:8f:3b:3d:11:2f:61:72:42:14:38:d5:65:68:0b:4f: 51:95:4f:d2:1d:29:e3:cb:a5:97:ca:3f:35:bf:a7:f5:5e:cb: 69:8f:f4:34:4f:8b:6d:b1:d0:b9:81:a0:f7:ef:39:fd:ef:71: 50:e3:c2:8d:6a:25:de:e6:f9:af:55:07:34:89:40:49:f3:47: 19:bc:21:e8:03:34:b9:f6:76:73:94:54:af:b7:53:2e:1d:e8: 58:f3:6c:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o1j61E5KWJoPV/2VUhN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZlYjBjMTQ0MDg2NmQ3NWYwNjYwM2UyZTQ4NTk3Yzc2MDFmNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZowZwjtY2YfVzZcFBsC95y/DrF9 NNGQQNIZhrONUJDZXyviN4fu/8l0yDclgpPin4zTd6kNlSK3ModphoL/tYvAmod0 BJCHz5WbKs4RKRN5KocWGzU7OPJT88SnSvkaqXhSbHk1+gVn42E7aRQcKqOpYcjU SqVH9CwCU3yn1WYn0VzHSobz0RHrT7w16l7eJngpn2hz/BGL5vo/Gxkgu+MfJyIR LaC5ZAacBp0K1nid9HzwbOGHzDmccLay0JhdipvokO0DBvATsTUS3S5vR7kyUvE7 v2Tr6ZNqDC0fFyRV1BxSZ8hBsoFv8KOc8QhuWl1Z48qOV2VTpYu5xDakmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDBusMFECGbXXwZgPi5IWXx2AfcuMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTUc2d3dVUUladGRmQm1BLUxraFpmSFlCOXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALULmAwQA XpymMA0GCSqGSIb3DQEBCwUAA4IBAQBNYkP7n+uuhkV3pbpLTJcneLjBOmuHrepN d5PyZYAFDHm1+wUPkUOZvRvvMCOOX0rvP9ZDoBMwEWJXj8JnfQ21qEdYht7iHSAA 5espV6GckJF0ycB+Ao730Fkm/k5rlpyfMZ2ZY7Ma+UiDpQwooJycu7ecKWKyNm/h c5Ehn2syX38TI48rbLbqIUlufgzAvQS0ltpii48boD+XiMiQ344/27NQRkePOz0R L2FyQhQ41WVoC09RlU/SHSnjy6WXyj81v6f1Xstpj/Q0T4ttsdC5gaD37zn973FQ 48KNaiXe5vmvVQc0iUBJ80cZvCHoAzS59nZzlFSvt1MuHehY82wZ -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client