This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/MHWk_6gkCFNzcpzPNNt2w891inE.roa File: MHWk_6gkCFNzcpzPNNt2w891inE.roa (raw, json) Hash identifier: uLAuY62U3N5zmg9Od7m47MwNBzxs39ToP7TJu3Dno1Y= Subject key identifier: 30:75:A4:FF:A8:24:08:53:73:72:9C:CF:34:DB:76:C3:CF:75:8A:71 Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647 Certificate serial: 019B7E3832289144B33D399F993AC5B8CAD9 Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/MHWk_6gkCFNzcpzPNNt2w891inE.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49052 IP address blocks: 185.128.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:32:28:91:44:b3:3d:39:9f:99:3a:c5:b8:ca:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3075a4ffa824085373729ccf34db76c3cf758a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:5e:92:0a:5f:ff:f0:91:e3:16:6b:d0:78: ba:04:fa:08:28:ac:3b:c4:a1:d0:30:1b:c1:6d:2c: f3:87:42:ee:ad:e0:95:36:6d:04:a9:fb:d0:aa:53: dc:75:87:de:2e:b7:b7:a7:6c:77:8e:62:ac:01:fb: bd:90:8e:45:2b:25:e3:3a:8d:3c:b8:98:62:3b:bd: 2f:0f:42:2d:d3:fe:3f:a6:32:44:15:2c:90:b3:d6: 14:26:26:67:f1:b3:00:65:5d:28:1f:90:07:5f:fa: 9f:cd:3e:cb:b6:2a:2d:cb:b6:e6:b4:19:52:a9:8f: 17:cd:02:ce:7e:0d:e1:7c:3e:df:ea:1f:1e:64:04: b8:da:25:a9:54:c7:61:63:38:3d:53:c6:22:21:25: 89:3f:0d:33:fa:ab:07:ea:38:a5:33:9a:88:77:2f: 83:cd:65:a6:5b:7b:6c:28:dc:03:5a:b7:99:39:ca: 89:54:3b:00:86:bb:17:b8:6c:d6:07:5a:cb:16:58: 05:71:49:1a:79:9a:cd:23:5a:10:d8:00:48:1b:a7: b2:6c:16:b5:ed:c6:52:3c:69:38:43:10:47:aa:ba: e4:75:c9:f4:c0:67:32:48:52:85:de:26:ae:2d:eb: 07:dc:fe:e9:fc:74:0c:a1:ae:7d:0c:84:e8:33:e9: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:A4:FF:A8:24:08:53:73:72:9C:CF:34:DB:76:C3:CF:75:8A:71 X509v3 Authority Key Identifier: keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/MHWk_6gkCFNzcpzPNNt2w891inE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.240.0/22 Signature Algorithm: sha256WithRSAEncryption 17:56:a9:d4:81:d6:94:4f:66:23:49:9f:d1:ae:d2:dc:d7:0b: 0c:c9:ed:75:60:99:f7:78:2f:39:d6:36:1e:68:6a:e2:4d:7f: fb:ef:ad:0c:92:16:71:8b:8f:1b:98:e1:3c:7a:f7:a2:41:94: 9b:e9:63:d6:a6:ba:35:08:73:f6:27:d6:4a:69:90:5e:9a:70: f6:47:2c:ff:56:ae:bc:9f:64:4e:57:7c:66:0e:de:d4:f5:50: 0d:ae:6d:fb:e7:a2:0d:49:96:66:27:70:7f:6b:14:d8:bb:63: f2:ae:3e:83:25:27:55:fe:ed:bb:ff:73:fc:75:78:14:83:20: 3a:04:7f:95:26:fd:4f:9f:03:80:55:5b:1e:38:52:ee:c0:56: 2e:0e:ac:87:53:7e:e1:cc:80:ad:5f:b0:79:76:5e:5c:0e:7b: 00:75:c1:c2:74:7f:fb:94:3e:47:be:30:29:53:37:7b:33:a1: 3f:32:ef:53:1c:ba:08:18:46:52:7d:e6:34:d7:50:4f:cc:8c: f4:26:a3:85:21:db:92:48:56:c0:57:f5:30:82:71:f6:f7:f8: 4c:df:cc:5a:44:52:61:47:5b:bd:cc:e1:36:0d:16:58:36:89: e0:62:f5:78:94:70:6b:75:0f:f4:35:10:22:60:76:72:9a:42: 5f:a4:6e:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODIokUSzPTmfmTrFuMrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzhiNTQwODMxYzljZDVkZjQ4MDg1MWE3MjgwNjY3ZWQ3 Y2Q2NDcwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDc1YTRmZmE4MjQwODUzNzM3MjljY2YzNGRiNzZjM2NmNzU4YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFekgpf//CR4xZr0Hi6BPoIKKw7 xKHQMBvBbSzzh0LureCVNm0EqfvQqlPcdYfeLre3p2x3jmKsAfu9kI5FKyXjOo08 uJhiO70vD0It0/4/pjJEFSyQs9YUJiZn8bMAZV0oH5AHX/qfzT7Ltioty7bmtBlS qY8XzQLOfg3hfD7f6h8eZAS42iWpVMdhYzg9U8YiISWJPw0z+qsH6jilM5qIdy+D zWWmW3tsKNwDWreZOcqJVDsAhrsXuGzWB1rLFlgFcUkaeZrNI1oQ2ABIG6eybBa1 7cZSPGk4QxBHqrrkdcn0wGcySFKF3iauLesH3P7p/HQMoa59DIToM+lkUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDB1pP+oJAhTc3KczzTbdsPPdYpxMB8GA1UdIwQY MBaAFG04tUCDHJzV30gIUacoBmftfNZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAt MzYzMDU0M2I1MjFiLzEvTUhXa182Z2tDRk56Y3B6UE5OdDJ3ODkxaW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAtMzYzMDU0M2I1MjFi LzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYDwMA0G CSqGSIb3DQEBCwUAA4IBAQAXVqnUgdaUT2YjSZ/RrtLc1wsMye11YJn3eC851jYe aGriTX/7760MkhZxi48bmOE8eveiQZSb6WPWpro1CHP2J9ZKaZBemnD2Ryz/Vq68 n2ROV3xmDt7U9VANrm3756INSZZmJ3B/axTYu2Pyrj6DJSdV/u27/3P8dXgUgyA6 BH+VJv1PnwOAVVseOFLuwFYuDqyHU37hzICtX7B5dl5cDnsAdcHCdH/7lD5HvjAp Uzd7M6E/Mu9THLoIGEZSfeY011BPzIz0JqOFIduSSFbAV/UwgnH29/hM38xaRFJh R1u9zOE2DRZYNongYvV4lHBrdQ/0NRAiYHZymkJfpG6Z -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:53 2026 by rpki-client