This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa File: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (raw, json) Hash identifier: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8= Subject key identifier: 32:D8:18:C7:06:C1:3A:D2:DB:6B:A5:B1:F8:2E:2F:34:38:11:05:0F Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B7C11F030FDD8BD81EA5A33EAE22723B4 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60946 IP address blocks: 159.146.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f0:30:fd:d8:bd:81:ea:5a:33:ea:e2:27:23:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32d818c706c13ad2db6ba5b1f82e2f343811050f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:49:6d:ae:a6:23:26:ac:8b:e0:a3:86:ce: e6:3d:a9:64:8b:dd:01:19:c9:93:f0:c4:5b:e8:27: d2:35:ac:4f:a6:49:1e:99:c5:ee:a1:40:68:b8:76: aa:3f:0a:0e:d6:89:11:d7:a7:58:ac:56:d3:f3:cc: 94:dc:02:48:9b:4b:6b:2e:64:c2:15:61:7a:95:24: 2d:87:a7:5a:21:8f:75:32:aa:3e:d2:90:99:28:56: f0:da:23:b2:a2:aa:52:19:02:55:67:32:1d:e8:c5: 15:04:55:4f:92:b8:0c:a1:2a:8c:04:a0:1a:89:34: de:ea:d8:55:77:ae:41:36:17:dd:55:2e:b8:5a:7d: 2b:8e:34:2b:5c:d4:fb:9f:e2:c4:36:72:4b:d1:61: 8f:69:a6:73:e9:9a:c4:a2:e1:78:2f:5e:fa:d2:f4: 32:7d:b3:1c:00:7f:7d:92:05:62:89:9c:ff:77:08: 59:e3:47:83:6d:e2:2d:ae:23:f9:41:77:73:44:f6: 0b:72:26:f6:d2:4e:4b:e5:b1:75:3e:92:89:89:3d: a5:7b:05:4c:71:9b:e5:95:ce:ec:a3:de:d4:aa:91: 6b:4a:1c:1f:c1:6c:0b:94:51:3e:0f:a9:dc:cc:9f: a9:37:8d:a9:9c:a4:5a:37:dc:2e:28:4d:44:3f:b0: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:18:C7:06:C1:3A:D2:DB:6B:A5:B1:F8:2E:2F:34:38:11:05:0F X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.146.124.0/24 Signature Algorithm: sha256WithRSAEncryption 88:ee:d7:85:e3:f2:1e:63:b3:cf:9f:d7:ac:f3:1b:10:f4:be: 23:95:52:2e:3b:74:64:23:dd:ce:94:e1:01:e5:10:c4:01:92: 8e:88:03:93:46:a5:16:73:f1:ea:fb:82:91:b2:b5:8a:50:9d: b4:b2:40:31:9d:8d:53:76:e4:d0:38:96:9b:b8:ea:87:05:c8: 58:f9:1e:a7:4b:9a:b0:7f:dc:38:08:d7:df:01:3e:bc:08:b9: e0:dc:53:c5:93:89:b4:d9:b7:a0:d5:93:a7:f0:13:3f:2c:5b: 2e:18:e6:32:ea:8c:c6:22:aa:ed:8e:fb:d9:af:d7:69:8c:bd: ba:0d:f9:d7:3a:78:cd:b2:91:74:fb:f5:d9:41:ee:5c:1f:26: ca:ca:5e:df:08:dd:86:60:d6:a6:f6:c0:23:cd:91:e3:d4:90: ec:3a:41:42:47:96:fa:d8:06:70:45:a8:04:28:3d:9a:43:de: d2:cd:98:ce:93:05:fd:41:ce:5c:9a:ee:b0:d8:45:7e:c6:e4: c9:3e:99:e2:02:21:84:bf:75:f8:28:4d:d6:c4:ec:c9:82:e1: 21:26:2f:bb:0c:2e:d0:eb:25:e0:6a:d5:70:a8:5c:f3:c5:88: 44:95:9f:cb:3f:7c:93:df:1e:fc:f9:ed:f8:c5:bc:a6:61:a7: bf:ea:7c:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfAw/di9gepaM+riJyO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmQ4MThjNzA2YzEzYWQyZGI2YmE1YjFmODJlMmYzNDM4MTEwNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJJba6mIyasi+Cjhs7mPalki90B GcmT8MRb6CfSNaxPpkkemcXuoUBouHaqPwoO1okR16dYrFbT88yU3AJIm0trLmTC FWF6lSQth6daIY91Mqo+0pCZKFbw2iOyoqpSGQJVZzId6MUVBFVPkrgMoSqMBKAa iTTe6thVd65BNhfdVS64Wn0rjjQrXNT7n+LENnJL0WGPaaZz6ZrEouF4L1760vQy fbMcAH99kgViiZz/dwhZ40eDbeItriP5QXdzRPYLcib20k5L5bF1PpKJiT2lewVM cZvllc7so97UqpFrShwfwWwLlFE+D6nczJ+pN42pnKRaN9wuKE1EP7A6YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLYGMcGwTrS22ulsfguLzQ4EQUPMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvTXRnWXh3YkJPdExiYTZXeC1DNHZORGdSQlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5J8MA0G CSqGSIb3DQEBCwUAA4IBAQCI7teF4/IeY7PPn9es8xsQ9L4jlVIuO3RkI93OlOEB 5RDEAZKOiAOTRqUWc/Hq+4KRsrWKUJ20skAxnY1TduTQOJabuOqHBchY+R6nS5qw f9w4CNffAT68CLng3FPFk4m02beg1ZOn8BM/LFsuGOYy6ozGIqrtjvvZr9dpjL26 DfnXOnjNspF0+/XZQe5cHybKyl7fCN2GYNam9sAjzZHj1JDsOkFCR5b62AZwRagE KD2aQ97SzZjOkwX9Qc5cmu6w2EV+xuTJPpniAiGEv3X4KE3WxOzJguEhJi+7DC7Q 6yXgatVwqFzzxYhElZ/LP3yT3x78+e34xbymYae/6nxD -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:51 2026 by rpki-client