This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa File: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (raw, json) Hash identifier: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM= Subject key identifier: 30:6E:72:65:98:07:D7:3A:F8:BD:7C:E6:A4:87:DD:D0:82:44:41:57 Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Certificate serial: 019B7EA55521DFB9AFDCA7B67EECB442FC39 Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa Signing time: Fri 02 Jan 2026 12:18:43 +0000 ROA not before: Fri 02 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.210.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:55:21:df:b9:af:dc:a7:b6:7e:ec:b4:42:fc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306e72659807d73af8bd7ce6a487ddd082444157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:72:1f:91:f0:1d:fb:de:cf:0d:be:59:38: 38:eb:1a:cd:59:c2:bc:57:ff:bc:08:a2:fe:1c:1c: dd:5a:79:43:8c:90:15:b9:b4:74:65:1f:70:74:ee: 47:66:6a:7f:03:8a:0c:99:58:64:35:f9:c1:43:47: eb:f6:24:e9:d0:89:8f:75:2b:44:96:89:ee:f5:95: be:da:ae:46:a5:cd:bc:8a:de:e1:64:82:e0:75:43: db:42:61:d5:ea:53:15:e3:f3:4e:07:73:c2:71:b9: 1a:7e:a0:f8:59:4e:f7:29:69:a5:ed:1d:b4:8b:45: 3c:32:3b:78:32:31:01:7a:39:ab:d8:1c:5a:98:a5: 74:27:4c:cc:2c:9c:9c:43:89:ad:c3:f5:fb:2b:f1: 24:16:2c:81:26:51:93:f3:34:50:90:74:c9:60:ce: 2c:a4:04:d2:8f:96:6f:3b:ad:0c:38:c1:86:46:7a: 5b:03:28:2c:53:c0:12:bb:9a:38:4e:6c:75:97:15: 87:81:17:3f:40:9c:81:37:0f:aa:74:7f:bc:ba:af: ed:6e:d7:2b:e2:de:28:54:f1:67:ba:a1:79:8e:06: 9b:8b:08:d5:65:22:0a:f2:6e:0c:aa:b8:32:62:d7: fc:bc:2e:df:73:04:45:36:09:30:26:23:b5:94:bb: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:72:65:98:07:D7:3A:F8:BD:7C:E6:A4:87:DD:D0:82:44:41:57 X509v3 Authority Key Identifier: keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.156.0/24 Signature Algorithm: sha256WithRSAEncryption 39:35:66:b0:0a:61:30:0c:5f:a7:74:ef:31:5a:49:68:3f:f9: 18:fd:61:ae:5d:dc:8a:92:5a:53:c4:42:a2:51:4e:30:69:2a: a1:64:38:85:eb:0a:bc:a4:e2:4f:6c:ff:15:82:d6:75:b3:60: eb:bf:a9:40:81:12:6f:c0:9a:79:10:36:09:bc:95:ce:70:00: d0:6a:83:5c:61:78:7b:c4:3e:c4:1f:ed:92:65:a6:17:41:97: 9a:5e:78:64:db:99:58:4e:9d:5b:01:8a:d7:4a:af:9a:03:b5: e8:d3:a5:d7:42:d7:1e:42:65:05:eb:56:6d:98:fa:be:3e:6a: d4:1a:b2:40:b5:fa:d1:a5:61:bc:37:65:8c:ba:99:5f:01:4f: a8:0c:84:c4:a3:e2:36:6a:24:57:e3:b1:27:c6:3b:e5:ed:e1: 74:8d:cd:88:be:a5:14:c9:a3:c3:cb:18:00:2b:73:8b:7a:e1: b7:98:84:2d:1c:3e:bc:32:fe:84:cf:cb:d9:6f:06:5d:57:6e: e5:54:80:48:f2:12:ff:33:2d:b9:fe:f9:e6:46:72:8a:34:73: fa:ab:b8:37:da:31:7e:85:59:9f:2f:e7:26:1f:4b:e7:6d:36: 7c:be:7c:61:85:d4:10:13:b2:45:2b:a4:05:da:fa:ad:2e:ab: 14:8e:6c:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pVUh37mv3Ke2fuy0Qvw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl NzVhMGIwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZlNzI2NTk4MDdkNzNhZjhiZDdjZTZhNDg3ZGRkMDgyNDQ0MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlyH5HwHfvezw2+WTg46xrNWcK8 V/+8CKL+HBzdWnlDjJAVubR0ZR9wdO5HZmp/A4oMmVhkNfnBQ0fr9iTp0ImPdStE lonu9ZW+2q5Gpc28it7hZILgdUPbQmHV6lMV4/NOB3PCcbkafqD4WU73KWml7R20 i0U8Mjt4MjEBejmr2BxamKV0J0zMLJycQ4mtw/X7K/EkFiyBJlGT8zRQkHTJYM4s pATSj5ZvO60MOMGGRnpbAygsU8ASu5o4Tmx1lxWHgRc/QJyBNw+qdH+8uq/tbtcr 4t4oVPFnuqF5jgabiwjVZSIK8m4MqrgyYtf8vC7fcwRFNgkwJiO1lLvISwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBucmWYB9c6+L185qSH3dCCREFXMB8GA1UdIwQY MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt YmM2MzdhODUxMmIxLzEvTUc1eVpaZ0gxenI0dlh6bXBJZmQwSUpFUVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudKcMA0G CSqGSIb3DQEBCwUAA4IBAQA5NWawCmEwDF+ndO8xWkloP/kY/WGuXdyKklpTxEKi UU4waSqhZDiF6wq8pOJPbP8VgtZ1s2Drv6lAgRJvwJp5EDYJvJXOcADQaoNcYXh7 xD7EH+2SZaYXQZeaXnhk25lYTp1bAYrXSq+aA7Xo06XXQtceQmUF61ZtmPq+PmrU GrJAtfrRpWG8N2WMuplfAU+oDITEo+I2aiRX47Enxjvl7eF0jc2IvqUUyaPDyxgA K3OLeuG3mIQtHD68Mv6Ez8vZbwZdV27lVIBI8hL/My25/vnmRnKKNHP6q7g32jF+ hVmfL+cmH0vnbTZ8vnxhhdQQE7JFK6QF2vqtLqsUjmyu -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client