This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1-MgSf8s32BvOegxC89sSSrZDiVY.roa File: 1-MgSf8s32BvOegxC89sSSrZDiVY.roa (raw, json) Hash identifier: HK+3BwzCEPo64so/XTaGAItaVpJABzYRQHaD3V+1H0Y= Subject key identifier: F8:C8:12:7F:CB:37:D8:1B:CE:7A:0C:42:F3:DB:12:4A:B6:43:89:56 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80C9B700A25E09FD77E1A65AF13A2 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1-MgSf8s32BvOegxC89sSSrZDiVY.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 45.80.228.0/22 maxlen: 24 45.88.100.0/24 maxlen: 24 45.93.62.0/23 maxlen: 23 45.95.128.0/24 maxlen: 24 45.95.129.0/24 maxlen: 24 45.95.130.0/23 maxlen: 24 78.41.84.0/22 maxlen: 24 178.159.94.0/24 maxlen: 24 185.221.196.0/23 maxlen: 24 185.232.18.0/23 maxlen: 24 185.238.88.0/22 maxlen: 24 185.246.216.0/24 maxlen: 24 185.246.217.0/24 maxlen: 24 185.246.218.0/23 maxlen: 24 185.253.24.0/24 maxlen: 24 185.253.25.0/24 maxlen: 24 185.253.26.0/23 maxlen: 24 194.113.238.0/24 maxlen: 24 194.113.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0c:9b:70:0a:25:e0:9f:d7:7e:1a:65:af:13:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c8127fcb37d81bce7a0c42f3db124ab6438956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:1d:2b:31:dc:81:de:58:8f:7d:a1:f9:c5: e0:58:4c:51:4f:81:c2:00:82:2a:26:b7:68:de:50: 0e:74:b1:22:ae:b6:bb:6c:cb:f4:86:8d:97:e6:c4: 58:ab:e0:13:63:42:d2:d7:b3:78:4c:ed:2c:ac:2c: 7c:df:18:d6:87:44:44:8c:8f:00:03:d6:27:5e:f2: 61:4a:7f:33:7c:ae:c4:ab:1c:83:bb:8a:c6:cf:a8: dc:e9:f8:46:3a:22:56:33:d3:3c:8a:11:94:70:50: f7:9b:19:ba:03:e4:9f:30:b3:b4:df:a4:f1:31:0d: 1d:94:c9:e3:a5:bc:05:1b:0c:c6:ef:39:2e:80:50: 55:98:f5:5f:f4:ba:9f:cb:2e:52:fb:16:c2:a1:f9: 0f:5b:5c:13:e7:26:59:0c:f6:89:56:b4:ba:f8:2f: d4:46:1e:b2:ae:e1:32:68:58:3d:63:4a:74:8a:63: 95:8b:90:47:11:32:83:de:83:1f:09:ea:d6:61:bd: d1:0c:87:c6:77:b2:6a:b7:ea:4b:25:81:4a:22:53: 62:89:44:dd:c2:e5:48:80:f3:55:0b:ea:22:7a:04: d7:d4:94:1b:e5:d1:bc:d6:77:e0:2e:b6:8d:90:98: 16:43:66:72:2a:85:ee:7c:80:7a:23:45:1b:d3:98: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C8:12:7F:CB:37:D8:1B:CE:7A:0C:42:F3:DB:12:4A:B6:43:89:56 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1-MgSf8s32BvOegxC89sSSrZDiVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.228.0/22 45.88.100.0/24 45.93.62.0/23 45.95.128.0/22 78.41.84.0/22 178.159.94.0/24 185.221.196.0/23 185.232.18.0/23 185.238.88.0/22 185.246.216.0/22 185.253.24.0/22 194.113.238.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:f9:07:4c:4e:b8:a4:98:61:cb:5e:38:42:65:de:ae:a5:0d: db:36:1d:14:66:50:91:45:67:ea:d2:4e:54:50:9a:a9:fa:aa: 16:d9:e3:79:c3:e2:bc:2a:94:99:04:5d:32:e7:19:ff:60:ba: f3:86:a1:da:6c:a7:05:da:8e:be:4b:91:47:a3:18:02:60:09: bf:a9:99:d7:ae:d1:59:62:38:67:2c:06:cd:3c:bb:d4:33:f5: 26:49:99:f3:3d:29:28:db:d4:72:33:26:05:d5:10:24:a9:e5: 37:46:0a:3c:4d:7d:d5:f6:2d:90:d1:2e:c7:92:c7:c4:39:36: 22:52:54:cc:d2:d2:07:ff:19:2f:98:5d:f6:cd:8f:aa:7c:68: 01:17:79:2d:41:5e:1a:a3:5d:f4:e2:9d:bd:e2:4d:57:10:42: 17:35:92:5c:b0:27:ef:5d:d2:d0:0a:2f:23:cf:8c:c9:8b:97: 49:7a:3c:3d:b2:f8:e0:0c:61:f0:3f:09:da:5e:9d:f5:e4:e4: 01:4b:55:8f:bf:e2:5e:a0:ee:cd:a2:73:48:cb:b5:79:cd:43: cb:60:24:77:63:19:0e:7a:c1:cc:0e:a4:23:34:bf:b1:ab:a4: d1:77:21:7c:74:e5:ac:46:c1:2e:fb:41:bc:f8:c6:d9:d0:39: ae:f7:4f:38 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt6yAybcAol4J/XfhplrxOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGM4MTI3ZmNiMzdkODFiY2U3YTBjNDJmM2RiMTI0YWI2NDM4OTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZMdKzHcgd5Yj32h+cXgWExRT4HC AIIqJrdo3lAOdLEirra7bMv0ho2X5sRYq+ATY0LS17N4TO0srCx83xjWh0REjI8A A9YnXvJhSn8zfK7EqxyDu4rGz6jc6fhGOiJWM9M8ihGUcFD3mxm6A+SfMLO036Tx MQ0dlMnjpbwFGwzG7zkugFBVmPVf9Lqfyy5S+xbCofkPW1wT5yZZDPaJVrS6+C/U Rh6yruEyaFg9Y0p0imOVi5BHETKD3oMfCerWYb3RDIfGd7Jqt+pLJYFKIlNiiUTd wuVIgPNVC+oiegTX1JQb5dG81nfgLraNkJgWQ2ZyKoXufIB6I0Ub05jNNwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFPjIEn/LN9gbznoMQvPbEkq2Q4lWMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvMS1NZ1NmOHMzMkJ2T2VneEM4OXNTU3JaRGlWWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTkvNDBmZGQxLTEwOTItNGY2OS1iNjQ4LTY5MWZmNWI0NGIw MS8xL0hwX2NmN09ldTc3VTdsVDNBOU9zWVZQZDdtay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBhBggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEAi1Q5AME AC1YZAMEAS1dPgMEAi1fgAMEAk4pVAMEALKfXgMEAbndxAMEAbnoEgMEArnuWAME Arn22AMEArn9GAMEAcJx7jANBgkqhkiG9w0BAQsFAAOCAQEALvkHTE64pJhhy144 QmXerqUN2zYdFGZQkUVn6tJOVFCaqfqqFtnjecPivCqUmQRdMucZ/2C684ah2myn BdqOvkuRR6MYAmAJv6mZ167RWWI4ZywGzTy71DP1JkmZ8z0pKNvUcjMmBdUQJKnl N0YKPE191fYtkNEux5LHxDk2IlJUzNLSB/8ZL5hd9s2PqnxoARd5LUFeGqNd9OKd veJNVxBCFzWSXLAn713S0AovI8+MyYuXSXo8PbL44Axh8D8J2l6d9eTkAUtVj7/i XqDuzaJzSMu1ec1Dy2Akd2MZDnrBzA6kIzS/sauk0XchfHTlrEbBLvtBvPjG2dA5 rvdPOA== -----END CERTIFICATE-----Generated at Tue Jan 20 20:07:32 2026 by rpki-client