This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa File: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (raw, json) Hash identifier: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI= Subject key identifier: 99:33:EB:6A:45:5D:A3:20:83:25:87:12:5C:7D:C3:CE:4B:C4:F4:6B Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC98245385C29FE1CE1F3ADE01D9B6D Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa Signing time: Fri 02 Jan 2026 08:18:36 +0000 ROA not before: Fri 02 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 158.46.178.0/24 maxlen: 24 158.46.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:82:45:38:5c:29:fe:1c:e1:f3:ad:e0:1d:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9933eb6a455da320832587125c7dc3ce4bc4f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:62:78:e2:8f:70:19:cd:28:31:db:3c:04: 9f:ce:b1:cf:37:66:9c:25:b7:d1:a4:95:b4:2c:80: 14:9f:42:77:8d:59:4b:7b:55:a3:e1:77:80:fb:8e: f6:16:e7:8d:32:27:64:78:1d:08:63:d1:de:cf:40: 41:75:ab:8d:92:12:bb:d0:d9:76:1b:4b:12:b1:24: 64:74:d6:8b:ea:35:69:22:b5:45:d8:47:6b:2b:2a: d3:b2:8e:09:52:7b:f9:fe:4d:af:56:3f:fe:1b:bb: 5c:6d:51:b6:08:8a:00:22:b3:75:54:7c:89:b5:d4: 55:fa:88:af:1e:1d:a1:93:da:d9:7b:ae:1f:b1:d4: 05:41:1f:17:8e:c2:40:71:b3:26:20:84:56:18:c3: b7:a9:bd:b2:aa:82:e3:ae:ca:f5:38:59:58:50:9c: 78:ea:2d:6f:e5:45:1d:1f:76:55:90:6a:52:a0:97: 69:29:9e:55:0f:9d:d8:ed:be:44:8e:e6:6c:89:f8: 08:1d:49:6c:d9:c7:53:c2:97:b4:b1:0e:e1:0e:ae: ed:a9:a1:9e:e0:bb:37:c7:0d:12:b0:73:90:67:29: 83:99:c5:31:e0:82:5b:eb:9d:3d:be:91:43:e2:9f: 96:bf:17:80:75:da:de:c6:00:71:42:54:35:6a:86: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:33:EB:6A:45:5D:A3:20:83:25:87:12:5C:7D:C3:CE:4B:C4:F4:6B X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.46.178.0/23 Signature Algorithm: sha256WithRSAEncryption a1:57:cf:ec:30:e7:09:2b:e6:5f:0d:cf:3a:2e:e6:93:6e:14: 1f:e5:2c:c6:0d:e6:c7:84:ba:50:57:ee:74:7d:01:b0:38:e1: e1:d8:18:9d:10:84:20:ce:59:09:3b:e6:7a:f7:a3:b7:88:04: 38:a5:8a:02:00:95:f7:a9:97:df:d9:0e:87:a5:a6:88:b6:3b: 83:c2:b0:69:7c:e7:9e:69:2a:c3:4f:e1:7f:33:91:0c:8c:de: c7:e5:c9:7a:c3:d2:68:21:fd:85:d5:ae:7b:31:e5:fc:07:5f: cc:22:f2:4e:34:70:5d:3d:da:2b:6e:c0:ff:b0:61:7b:d2:d1: bf:57:11:cc:e7:0f:5f:d6:4f:22:30:4e:ed:19:54:a0:61:86: 8b:a2:e5:7f:1c:a1:d4:50:11:c1:cf:c5:5b:ff:27:3d:87:26: 20:cc:9d:11:12:50:49:7b:28:3f:7f:31:cd:e0:3b:5a:58:7d: 12:cb:4d:3c:f3:42:c7:bf:27:2d:ee:58:b3:f6:45:7d:0f:80: d0:b1:5d:3a:64:69:dc:c1:c4:5c:8f:ea:8f:0f:e1:27:66:7a: 17:73:3f:cd:e4:1b:ae:d3:68:d9:2d:e6:09:81:d4:76:3a:83: 2f:a5:57:a5:a8:57:da:c0:51:4b:07:ab:fb:86:e6:bd:cc:69: 6e:e3:f2:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yYJFOFwp/hzh863gHZttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTMzZWI2YTQ1NWRhMzIwODMyNTg3MTI1YzdkYzNjZTRiYzRmNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutieOKPcBnNKDHbPASfzrHPN2ac JbfRpJW0LIAUn0J3jVlLe1Wj4XeA+472FueNMidkeB0IY9Hez0BBdauNkhK70Nl2 G0sSsSRkdNaL6jVpIrVF2EdrKyrTso4JUnv5/k2vVj/+G7tcbVG2CIoAIrN1VHyJ tdRV+oivHh2hk9rZe64fsdQFQR8XjsJAcbMmIIRWGMO3qb2yqoLjrsr1OFlYUJx4 6i1v5UUdH3ZVkGpSoJdpKZ5VD53Y7b5EjuZsifgIHUls2cdTwpe0sQ7hDq7tqaGe 4Ls3xw0SsHOQZymDmcUx4IJb6509vpFD4p+WvxeAddrexgBxQlQ1aoarrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkz62pFXaMggyWHElx9w85LxPRrMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvbVRQcmFrVmRveUNESlljU1hIM0R6a3ZFOUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBni6yMA0G CSqGSIb3DQEBCwUAA4IBAQChV8/sMOcJK+ZfDc86LuaTbhQf5SzGDebHhLpQV+50 fQGwOOHh2BidEIQgzlkJO+Z696O3iAQ4pYoCAJX3qZff2Q6HpaaItjuDwrBpfOee aSrDT+F/M5EMjN7H5cl6w9JoIf2F1a57MeX8B1/MIvJONHBdPdorbsD/sGF70tG/ VxHM5w9f1k8iME7tGVSgYYaLouV/HKHUUBHBz8Vb/yc9hyYgzJ0RElBJeyg/fzHN 4DtaWH0Sy00880LHvyct7liz9kV9D4DQsV06ZGncwcRcj+qPD+EnZnoXcz/N5Buu 02jZLeYJgdR2OoMvpVelqFfawFFLB6v7hua9zGlu4/Ln -----END CERTIFICATE-----Generated at Tue Jan 20 03:34:43 2026 by rpki-client