This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/MXOis4gKQU6T3fl9u9emfKn1I0g.roa File: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (raw, json) Hash identifier: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA= Subject key identifier: 31:73:A2:B3:88:0A:41:4E:93:DD:F9:7D:BB:D7:A6:7C:A9:F5:23:48 Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D287E036B009EDE08CC34E4FE1739 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/MXOis4gKQU6T3fl9u9emfKn1I0g.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.132.224.0/24 maxlen: 24 45.132.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:7e:03:6b:00:9e:de:08:cc:34:e4:fe:17:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3173a2b3880a414e93ddf97dbbd7a67ca9f52348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:eb:7f:f9:2c:45:a0:ef:a3:a4:9b:1a:26: 2a:29:9f:5a:86:79:d7:b8:c8:f8:ba:42:74:47:20: ba:41:49:7a:b4:2c:0f:5b:a4:b6:5c:f1:81:4f:0c: ba:b2:89:0f:9b:c7:27:e7:37:67:c1:36:b6:b6:c2: 29:e3:c3:98:6d:f0:b1:97:42:1c:97:c1:a1:60:8b: 61:a0:d0:44:ce:87:a8:a4:f9:d7:6f:42:ed:2d:98: a6:03:8f:12:71:18:34:49:ee:d0:36:14:38:7b:f9: 32:25:5f:62:6d:fa:1c:d6:95:66:a6:2b:f2:cc:6d: fd:b2:a5:5f:55:db:eb:19:5e:26:60:2a:db:1a:9c: 05:98:c0:00:20:e1:17:00:7b:d9:66:f9:a7:95:df: 63:0f:66:83:d3:85:65:d9:93:72:df:1c:1e:3c:66: 02:4b:51:01:23:8e:c1:51:da:e5:fc:26:8e:b7:15: a8:c8:37:9f:2c:16:61:ca:b5:6d:d4:54:e7:27:79: ed:94:62:8d:e3:4a:36:36:dc:c2:56:af:38:a3:4e: 17:93:3b:03:d0:c3:e1:81:ce:1d:ac:d1:e5:ef:f0: ce:49:e5:58:9a:31:00:48:96:0e:87:ad:f8:a2:87: 77:53:6a:38:6c:fa:7a:93:b2:db:38:3b:15:e1:36: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:73:A2:B3:88:0A:41:4E:93:DD:F9:7D:BB:D7:A6:7C:A9:F5:23:48 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/MXOis4gKQU6T3fl9u9emfKn1I0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.224.0/23 Signature Algorithm: sha256WithRSAEncryption 59:cb:3b:a4:e0:3a:ac:4c:4a:bd:80:0e:bd:47:1b:51:a6:58: f6:a1:b8:f9:20:44:67:6d:6f:ec:74:d3:f7:fc:c2:d6:2f:34: bf:26:00:52:d6:21:bf:54:22:21:d7:01:87:b3:9b:d8:d4:3f: 57:12:c0:4a:50:12:43:b0:f7:d5:1e:18:2b:84:ed:91:45:6d: c1:7c:53:e5:80:bf:6d:ef:42:42:ed:bd:ad:3e:01:39:84:2f: e4:b9:b5:74:80:9e:99:e6:44:c4:3c:89:56:1f:93:a8:8a:37: 16:d5:57:1d:ad:b0:55:90:52:36:b4:c1:ea:5e:f4:8a:c5:b4: c4:36:53:60:e4:6a:98:0e:98:3e:99:d2:d3:5c:3e:dc:1b:31: b3:cf:d8:1f:49:0c:91:24:49:38:5b:0f:04:3d:c0:ee:89:b7: 25:b3:2c:1e:7f:73:3c:44:e8:4a:5b:39:c2:5b:5d:3b:77:43: 9e:a2:ce:5f:eb:ce:ac:61:8b:d3:c3:3f:2c:30:16:a3:7a:75: c2:27:da:b7:32:0a:75:5a:6d:2a:55:f2:0d:8f:b0:e3:d9:b5: d4:ac:c3:bd:dc:07:e6:1a:2d:a2:28:88:0b:2e:c6:23:e1:be: 47:4b:6c:08:47:36:ee:99:c1:e5:27:44:df:5d:56:65:69:81: 5c:30:2d:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSh+A2sAnt4IzDTk/hc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTczYTJiMzg4MGE0MTRlOTNkZGY5N2RiYmQ3YTY3Y2E5ZjUyMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHrf/ksRaDvo6SbGiYqKZ9ahnnX uMj4ukJ0RyC6QUl6tCwPW6S2XPGBTwy6sokPm8cn5zdnwTa2tsIp48OYbfCxl0Ic l8GhYIthoNBEzoeopPnXb0LtLZimA48ScRg0Se7QNhQ4e/kyJV9ibfoc1pVmpivy zG39sqVfVdvrGV4mYCrbGpwFmMAAIOEXAHvZZvmnld9jD2aD04Vl2ZNy3xwePGYC S1EBI47BUdrl/CaOtxWoyDefLBZhyrVt1FTnJ3ntlGKN40o2NtzCVq84o04XkzsD 0MPhgc4drNHl7/DOSeVYmjEASJYOh634ood3U2o4bPp6k7LbODsV4TZYqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFzorOICkFOk935fbvXpnyp9SNIMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvTVhPaXM0Z0tRVTZUM2ZsOXU5ZW1mS24xSTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYTgMA0G CSqGSIb3DQEBCwUAA4IBAQBZyzuk4DqsTEq9gA69RxtRplj2obj5IERnbW/sdNP3 /MLWLzS/JgBS1iG/VCIh1wGHs5vY1D9XEsBKUBJDsPfVHhgrhO2RRW3BfFPlgL9t 70JC7b2tPgE5hC/kubV0gJ6Z5kTEPIlWH5OoijcW1VcdrbBVkFI2tMHqXvSKxbTE NlNg5GqYDpg+mdLTXD7cGzGzz9gfSQyRJEk4Ww8EPcDuibclsywef3M8ROhKWznC W107d0Oeos5f686sYYvTwz8sMBajenXCJ9q3Mgp1Wm0qVfINj7Dj2bXUrMO93Afm Gi2iKIgLLsYj4b5HS2wIRzbumcHlJ0TfXVZlaYFcMC1c -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:07 2026 by rpki-client