This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa File: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (raw, json) Hash identifier: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE= Subject key identifier: 32:A7:F0:D1:1F:87:F2:F0:B2:D0:5D:24:7F:71:0D:8A:2F:6B:BF:97 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA714E8B0682BBD910429A62EF35F2B Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39083 IP address blocks: 5.252.232.0/22 maxlen: 24 80.78.132.0/22 maxlen: 24 194.120.126.0/24 maxlen: 24 2a07:6f40::/29 maxlen: 48 2a0d:2140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:14:e8:b0:68:2b:bd:91:04:29:a6:2e:f3:5f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32a7f0d11f87f2f0b2d05d247f710d8a2f6bbf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:4e:25:6f:14:bd:cf:a6:86:ca:ad:48:85: 4f:96:38:8e:4e:cd:f2:c0:46:31:0b:8b:9e:97:b1: 90:15:0c:e6:1c:58:d0:15:32:ca:5d:48:e7:64:aa: 8b:ab:fb:9b:dd:4f:14:dd:39:04:90:80:d7:73:09: ff:4d:7a:e6:e6:95:e5:8a:84:d1:b8:48:b7:ed:4e: 4a:a8:e6:7f:e4:3d:55:a7:4c:ea:fc:e7:1f:10:92: 21:21:4e:43:42:35:b5:21:a0:60:41:f7:80:92:07: 02:5e:a3:60:c0:f6:f1:0e:bb:ce:d0:80:64:ee:24: 54:35:dc:b4:45:d3:18:df:42:12:11:de:24:ee:0a: 93:f0:ed:99:c8:b5:97:53:c0:0d:52:f6:62:5d:d4: 44:8d:ce:14:5e:9e:a9:9d:41:c7:2e:1a:98:f1:f5: 43:e1:06:76:ff:c6:96:6f:02:3f:b9:d7:1e:83:01: ec:60:59:b7:fa:b2:c4:f1:f2:d4:5a:2f:a8:16:e1: d6:f3:9b:53:f0:f9:fd:64:9c:2b:09:91:17:58:04: 26:a9:c2:6b:3a:7f:2b:63:3f:8b:c2:2f:a2:dd:54: 8b:d3:8d:2c:fb:6f:40:63:c3:73:3b:78:b2:42:d3: 11:90:5f:bd:49:2f:8d:84:b7:f5:78:70:80:f3:90: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A7:F0:D1:1F:87:F2:F0:B2:D0:5D:24:7F:71:0D:8A:2F:6B:BF:97 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.232.0/22 80.78.132.0/22 194.120.126.0/24 IPv6: 2a07:6f40::/29 2a0d:2140::/29 Signature Algorithm: sha256WithRSAEncryption 07:c3:b0:b5:6c:52:7e:b6:cc:8e:93:46:77:e1:f7:55:dd:64: 09:c0:63:0c:80:91:fd:85:26:31:70:bf:24:c6:58:d7:9a:d6: dc:f8:52:39:34:a9:01:88:47:8b:67:2d:84:8e:2e:62:79:28: f9:47:51:45:01:2b:ea:aa:f7:57:2e:35:03:dc:05:42:c3:8c: 43:65:fc:aa:e0:c0:69:ce:5c:fb:77:05:fc:2a:c0:85:7e:14: 79:72:7a:50:ab:4e:1d:93:98:d3:77:90:5f:04:99:e7:70:55: fe:dd:7e:80:06:ff:bd:b9:c7:16:84:cb:29:14:f3:f9:91:76: 5a:c3:82:14:b6:f2:6b:32:6a:2c:d5:dc:b9:cf:3f:2c:4b:55: aa:32:32:20:8d:fa:f0:fa:4c:1c:4d:41:9a:5a:4e:05:a5:92: 01:10:69:d4:3c:6c:a0:ee:86:63:54:86:2d:f9:17:f7:02:e0: e6:29:c4:42:24:1e:0e:26:a9:af:16:fe:eb:0d:be:44:97:87: df:d5:96:d2:9f:07:74:2c:d0:9e:58:36:cb:c4:32:8e:1a:be: 72:12:5a:7e:26:32:3d:91:8a:25:3e:00:60:a4:72:2a:12:7e: db:a0:50:ff:fb:42:1f:80:cd:67:c9:a4:4f:f6:9c:1a:12:d5: 9e:83:7a:2f -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+pxTosGgrvZEEKaYu818rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmE3ZjBkMTFmODdmMmYwYjJkMDVkMjQ3ZjcxMGQ4YTJmNmJiZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EtOJW8Uvc+mhsqtSIVPljiOTs3y wEYxC4uel7GQFQzmHFjQFTLKXUjnZKqLq/ub3U8U3TkEkIDXcwn/TXrm5pXlioTR uEi37U5KqOZ/5D1Vp0zq/OcfEJIhIU5DQjW1IaBgQfeAkgcCXqNgwPbxDrvO0IBk 7iRUNdy0RdMY30ISEd4k7gqT8O2ZyLWXU8ANUvZiXdREjc4UXp6pnUHHLhqY8fVD 4QZ2/8aWbwI/udcegwHsYFm3+rLE8fLUWi+oFuHW85tT8Pn9ZJwrCZEXWAQmqcJr On8rYz+Lwi+i3VSL040s+29AY8NzO3iyQtMRkF+9SS+NhLf1eHCA85AidwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDKn8NEfh/LwstBdJH9xDYova7+XMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvTXFmdzBSLUg4dkN5MEYwa2YzRU5paTlydjVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCBfzoAwQC UE6EAwQAwnh+MBQEAgACMA4DBQMqB29AAwUDKg0hQDANBgkqhkiG9w0BAQsFAAOC AQEAB8OwtWxSfrbMjpNGd+H3Vd1kCcBjDICR/YUmMXC/JMZY15rW3PhSOTSpAYhH i2cthI4uYnko+UdRRQEr6qr3Vy41A9wFQsOMQ2X8quDAac5c+3cF/CrAhX4UeXJ6 UKtOHZOY03eQXwSZ53BV/t1+gAb/vbnHFoTLKRTz+ZF2WsOCFLbyazJqLNXcuc8/ LEtVqjIyII368PpMHE1BmlpOBaWSARBp1DxsoO6GY1SGLfkX9wLg5inEQiQeDiap rxb+6w2+RJeH39WW0p8HdCzQnlg2y8Qyjhq+chJafiYyPZGKJT4AYKRyKhJ+26BQ //tCH4DNZ8mkT/acGhLVnoN6Lw== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:00 2026 by rpki-client