This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa File: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (raw, json) Hash identifier: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as= Subject key identifier: 98:74:39:94:6B:01:2D:8E:7C:66:AB:28:23:82:B2:12:81:80:68:26 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B318BCAC88232C8F5AF414162281E Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.131.195.0/24 maxlen: 24 92.119.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:31:8b:ca:c8:82:32:c8:f5:af:41:41:62:28:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987439946b012d8e7c66ab282382b21281806826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:49:91:2d:29:eb:fd:c7:62:2b:6e:e9:12: 74:3d:61:34:75:b3:ff:0c:8a:fa:77:91:43:b4:75: cb:a0:52:92:96:3f:d2:f8:31:52:62:4a:63:f2:05: 4a:b0:e8:4c:87:76:8c:63:97:17:2d:00:ed:37:ad: 24:b9:bf:2d:0f:ef:46:af:dc:63:85:22:81:10:62: 12:98:6f:0f:cf:06:92:36:17:53:48:02:7e:ca:29: 59:20:22:d0:6e:45:a5:62:f3:b5:91:7b:3f:1a:e6: 6a:05:e0:8d:8d:8e:39:61:01:6d:6d:83:0f:d8:2f: 5f:6f:b6:1e:8a:84:3b:a8:75:f6:70:d4:ab:29:3b: 38:c1:25:fc:9f:ba:37:a4:23:89:ed:b5:b0:c0:c4: 1c:b6:f5:9c:36:3d:06:e0:12:41:e9:1b:21:ad:98: 87:6d:8e:a7:8e:ef:14:22:5b:20:72:5b:c6:6d:c9: ba:65:d3:38:cc:26:96:7a:30:6f:7f:dc:af:cd:59: 21:e5:eb:0b:9f:f2:fc:3f:db:df:dd:a3:a8:63:d9: f7:7b:0e:86:90:09:99:8d:1e:29:b0:30:b5:73:6c: 4b:33:13:26:50:25:bf:35:1c:7b:15:0a:90:55:72: dc:5e:03:83:7d:34:1f:08:ba:05:26:cf:d2:e5:99: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:39:94:6B:01:2D:8E:7C:66:AB:28:23:82:B2:12:81:80:68:26 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.195.0/24 92.119.36.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:fa:18:c8:23:57:6d:1e:12:57:de:54:db:45:c6:ae:8e:11: 60:c7:24:31:d2:26:30:05:7b:e3:53:3c:7c:80:a2:a5:4d:53: e1:0f:e9:b2:8f:dc:d5:a1:d3:24:5e:45:df:20:3e:42:3f:5a: 1d:eb:cb:e8:f0:05:b4:b6:5f:96:b6:81:f8:71:47:11:00:0e: 6d:41:31:c6:cc:47:d6:d7:91:ce:de:02:f1:26:61:40:8f:6f: 55:85:8e:a5:1e:72:b2:9e:ea:d5:84:5f:40:a1:14:d3:88:64: c2:40:5d:6a:16:ff:aa:c1:c0:1b:9d:4c:91:13:5a:3a:7d:1b: bb:7b:00:1b:a1:2a:34:8e:06:60:d9:3f:5b:76:2e:20:70:f9: 2b:a2:88:be:55:26:db:38:a1:3b:5f:7e:e4:54:b6:8a:cc:6b: 0a:71:ab:c6:65:62:b6:43:ab:f7:b8:4f:04:bc:fd:47:f8:0e: f8:a7:ab:63:7d:49:71:f3:f4:a5:74:5f:60:05:7d:e8:da:05: da:2e:ff:27:9d:2a:79:f8:2d:b0:53:29:2a:63:ae:4c:ae:99: 0d:6b:ce:a0:b3:9d:ee:e2:c1:20:19:09:65:50:fa:7f:d8:f1: 23:9b:12:90:74:0d:33:06:ba:e4:39:84:ba:56:8f:68:b8:20: 29:53:ab:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WzGLysiCMsj1r0FBYigeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODc0Mzk5NDZiMDEyZDhlN2M2NmFiMjgyMzgyYjIxMjgxODA2ODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E5JkS0p6/3HYitu6RJ0PWE0dbP/ DIr6d5FDtHXLoFKSlj/S+DFSYkpj8gVKsOhMh3aMY5cXLQDtN60kub8tD+9Gr9xj hSKBEGISmG8PzwaSNhdTSAJ+yilZICLQbkWlYvO1kXs/GuZqBeCNjY45YQFtbYMP 2C9fb7YeioQ7qHX2cNSrKTs4wSX8n7o3pCOJ7bWwwMQctvWcNj0G4BJB6RshrZiH bY6nju8UIlsgclvGbcm6ZdM4zCaWejBvf9yvzVkh5esLn/L8P9vf3aOoY9n3ew6G kAmZjR4psDC1c2xLMxMmUCW/NRx7FQqQVXLcXgODfTQfCLoFJs/S5ZlvRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJh0OZRrAS2OfGarKCOCshKBgGgmMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvbUhRNWxHc0JMWTU4WnFzb0k0S3lFb0dBYUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYPDAwQA XHckMA0GCSqGSIb3DQEBCwUAA4IBAQBf+hjII1dtHhJX3lTbRcaujhFgxyQx0iYw BXvjUzx8gKKlTVPhD+myj9zVodMkXkXfID5CP1od68vo8AW0tl+WtoH4cUcRAA5t QTHGzEfW15HO3gLxJmFAj29VhY6lHnKynurVhF9AoRTTiGTCQF1qFv+qwcAbnUyR E1o6fRu7ewAboSo0jgZg2T9bdi4gcPkrooi+VSbbOKE7X37kVLaKzGsKcavGZWK2 Q6v3uE8EvP1H+A74p6tjfUlx8/SldF9gBX3o2gXaLv8nnSp5+C2wUykqY65MrpkN a86gs53u4sEgGQllUPp/2PEjmxKQdA0zBrrkOYS6Vo9ouCApU6sY -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:54 2026 by rpki-client