This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa File: MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa (raw, json) Hash identifier: 3o1b+cqzLxMPAxiZfWRR+nsYECaSogtgZoDIe2bwcaI= Subject key identifier: 30:FE:5F:C0:9D:A4:81:A6:51:A6:F3:3B:DB:79:17:5B:54:C6:CA:E4 Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345 Certificate serial: 019B7AC930CFF9F25D795F0A076FE8FA6F38 Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209760 IP address blocks: 192.145.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:30:cf:f9:f2:5d:79:5f:0a:07:6f:e8:fa:6f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30fe5fc09da481a651a6f33bdb79175b54c6cae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:f6:33:cf:0e:f5:33:37:ec:17:9a:8c:1a: 54:0d:94:7e:0b:be:40:77:34:52:d6:f8:71:00:08: dc:ad:91:56:7a:56:a8:0e:37:11:60:3c:4a:5d:2d: 5e:43:b6:6e:d8:ee:0e:e2:16:d0:0a:e9:9b:be:e9: ea:eb:c4:e8:0c:8b:1d:f4:a0:bd:ae:e4:27:5a:e0: c3:a4:c9:30:96:53:f9:a0:7f:f3:88:9e:43:20:41: 4e:cb:2d:4b:8a:78:50:61:b3:24:17:04:9f:96:57: 65:05:b9:ce:17:22:51:20:89:47:59:85:85:12:de: 46:94:59:b6:15:fc:6e:8b:4e:eb:68:3e:ec:55:92: 91:9b:66:5a:97:a3:b1:a5:67:f8:1a:0b:f4:5d:1c: 09:cf:bb:50:b3:f8:cd:69:cb:dd:df:5f:99:cf:90: 6a:bd:64:b9:55:a3:5e:0e:45:40:3b:b8:ba:a0:9e: 44:c7:01:ba:da:69:63:e6:ae:4e:b0:ae:9a:38:38: 29:f1:50:c3:e8:cb:0a:db:fb:cb:1b:2d:68:a3:10: ea:96:5d:18:e1:21:fa:6a:e5:db:4d:a8:02:5f:e1: 75:b6:c8:ec:8d:b6:24:9a:a1:bc:89:55:1b:13:ad: 7c:2d:fd:ec:4e:b6:d3:7a:c1:5d:3d:33:27:8d:21: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FE:5F:C0:9D:A4:81:A6:51:A6:F3:3B:DB:79:17:5B:54:C6:CA:E4 X509v3 Authority Key Identifier: keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.32.0/22 Signature Algorithm: sha256WithRSAEncryption 36:f6:a1:82:fa:24:cf:93:a3:c1:27:9b:ee:67:62:76:21:18: 13:4d:31:0f:f6:c0:a9:af:96:9a:d7:a9:d2:3f:bd:16:44:07: f9:d8:bd:92:9f:af:75:7b:95:8d:5e:fb:9a:6d:0a:af:ed:5f: 78:d6:8b:11:d0:0c:98:3c:a7:ce:ca:95:9c:00:99:1e:ba:f8: 48:2c:cc:be:ba:9a:14:ae:83:43:b8:57:c3:53:4e:b1:e1:02: 2b:87:4b:e2:d2:b5:a8:76:e0:98:e0:01:4e:02:49:94:a8:9f: 40:5d:7b:f4:6f:d0:6b:e6:06:58:a3:0b:81:c1:f8:d9:55:ff: 88:8a:aa:9a:78:4f:27:79:69:d7:db:8c:cd:7c:30:45:f0:7d: af:ec:ec:51:4b:9f:d7:13:d0:b0:9e:d2:f0:a3:4a:14:0f:3d: e3:de:cb:35:35:7c:66:0a:8e:f5:0b:4e:86:9e:f1:67:5c:45: af:26:5b:7f:62:9b:66:80:94:8b:14:8b:61:52:25:64:6e:d7: 78:44:28:e7:f5:3f:b4:8a:16:c9:f3:24:a8:21:94:04:27:d8: e5:af:81:22:e8:e4:39:3a:f1:54:4e:53:3a:88:56:c1:a0:a0: 6e:18:5e:9e:6b:85:18:1c:fd:1d:14:3a:d5:8d:f6:72:e3:e2: 6c:61:9e:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTDP+fJdeV8KB2/o+m84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3 Y2MzNDUwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGZlNWZjMDlkYTQ4MWE2NTFhNmYzM2JkYjc5MTc1YjU0YzZjYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOH2M88O9TM37BeajBpUDZR+C75A dzRS1vhxAAjcrZFWelaoDjcRYDxKXS1eQ7Zu2O4O4hbQCumbvunq68ToDIsd9KC9 ruQnWuDDpMkwllP5oH/ziJ5DIEFOyy1LinhQYbMkFwSflldlBbnOFyJRIIlHWYWF Et5GlFm2Ffxui07raD7sVZKRm2Zal6OxpWf4Ggv0XRwJz7tQs/jNacvd31+Zz5Bq vWS5VaNeDkVAO7i6oJ5ExwG62mlj5q5OsK6aODgp8VDD6MsK2/vLGy1ooxDqll0Y 4SH6auXbTagCX+F1tsjsjbYkmqG8iVUbE618Lf3sTrbTesFdPTMnjSEFwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDD+X8CdpIGmUabzO9t5F1tUxsrkMB8GA1UdIwQY MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt MzY4MGFlYjYzMmRhLzEvTVA1ZndKMmtnYVpScHZNNzIza1hXMVRHeXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJEgMA0G CSqGSIb3DQEBCwUAA4IBAQA29qGC+iTPk6PBJ5vuZ2J2IRgTTTEP9sCpr5aa16nS P70WRAf52L2Sn691e5WNXvuabQqv7V941osR0AyYPKfOypWcAJkeuvhILMy+upoU roNDuFfDU06x4QIrh0vi0rWoduCY4AFOAkmUqJ9AXXv0b9Br5gZYowuBwfjZVf+I iqqaeE8neWnX24zNfDBF8H2v7OxRS5/XE9CwntLwo0oUDz3j3ss1NXxmCo71C06G nvFnXEWvJlt/YptmgJSLFIthUiVkbtd4RCjn9T+0ihbJ8ySoIZQEJ9jlr4Ei6OQ5 OvFUTlM6iFbBoKBuGF6ea4UYHP0dFDrVjfZy4+JsYZ4x -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:41 2026 by rpki-client