This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Md2WcqCk6VsfCUYYeHMH7VaI_Hc.roa File: Md2WcqCk6VsfCUYYeHMH7VaI_Hc.roa (raw, json) Hash identifier: nuSr+p8JRyeNMILuJh+J61Mg2hMQK5CKPvv+/k7TP+Y= Subject key identifier: 31:DD:96:72:A0:A4:E9:5B:1F:09:46:18:78:73:07:ED:56:88:FC:77 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA419C98169CC684ED071A6FB6FE204 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Md2WcqCk6VsfCUYYeHMH7VaI_Hc.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 45.142.122.0/24 maxlen: 24 91.103.252.0/23 maxlen: 23 185.174.136.0/24 maxlen: 24 185.174.137.0/24 maxlen: 24 194.67.201.0/24 maxlen: 24 2a0e:d606::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:19:c9:81:69:cc:68:4e:d0:71:a6:fb:6f:e2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31dd9672a0a4e95b1f094618787307ed5688fc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:22:cc:7e:0f:1d:83:93:e4:fa:55:89:e1: 22:43:70:4b:35:d3:28:1f:6f:ea:a6:5e:bc:fa:63: 31:0f:96:2f:bb:72:b1:01:22:da:a4:a7:a4:d0:73: 28:1b:0f:dc:07:d9:e5:1a:25:f0:3f:bc:99:48:15: 64:55:9a:49:ac:e4:b2:b9:3b:d7:2c:e2:c2:9c:5f: b0:9c:45:57:c2:a2:d2:40:92:7c:74:76:7a:0a:f7: 5d:fe:3c:73:31:b4:4e:ca:4b:15:58:0d:ff:2a:4d: b0:85:a0:9d:4f:f2:2c:0c:a0:bc:56:63:d5:6a:77: 9e:ef:41:a8:35:1d:a5:0f:05:8b:94:93:72:55:47: 9a:dd:c8:be:ad:4c:40:f5:ee:a0:58:8d:ef:80:b2: ea:9e:51:18:b6:26:e8:86:95:ec:33:55:3c:44:17: 90:c1:7a:3b:3f:c5:88:ae:cf:06:3a:4d:11:cd:32: 52:71:c6:2e:6b:f6:bb:b1:14:44:d9:26:12:4f:b6: e6:14:98:85:cc:47:f8:68:77:f6:1c:2b:28:3d:19: 33:a5:7b:fa:cd:c8:62:4f:f1:33:3c:f5:8c:f9:fd: 4d:c3:56:6b:f8:e8:63:4b:b4:53:78:d3:1e:52:85: bc:4c:f8:29:7a:6c:7d:c7:6b:30:8e:bf:92:48:76: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DD:96:72:A0:A4:E9:5B:1F:09:46:18:78:73:07:ED:56:88:FC:77 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Md2WcqCk6VsfCUYYeHMH7VaI_Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.122.0/24 91.103.252.0/23 185.174.136.0/23 194.67.201.0/24 IPv6: 2a0e:d606::/48 Signature Algorithm: sha256WithRSAEncryption 9d:75:01:e9:e1:e8:6f:83:8f:b8:1a:5b:ad:43:49:a6:b6:dd: 88:ef:45:53:24:2f:ce:c6:41:59:30:b0:34:59:91:14:ae:24: b9:fd:cd:9d:f1:d6:7d:55:ac:d2:38:53:d0:82:c4:e4:d1:0c: ee:97:97:8a:dc:8e:d7:8c:16:76:14:ba:96:44:50:a7:1e:a0: 64:b8:26:7f:d2:8a:60:e4:fd:88:14:de:7e:80:44:35:06:29: 18:8c:db:90:7a:7a:53:2c:a0:93:75:66:89:75:8a:5a:18:7c: 27:9a:c2:c1:ad:dc:3c:37:78:27:2d:b2:e7:eb:04:31:79:51: a3:a7:65:83:40:03:fb:7b:38:27:77:1f:7d:64:19:e3:61:77: 2c:70:de:62:81:88:25:29:89:d3:e6:14:4e:fd:1c:61:f2:a1: 12:ca:c2:eb:e7:a6:a3:d3:a7:cb:64:73:be:8c:39:e7:82:c7: 92:cc:3e:d2:ec:e2:fd:fd:1b:92:4d:87:59:f1:a5:c6:62:7a: 15:06:19:b7:57:e4:52:ac:db:1b:d9:a3:2a:a4:b7:d1:97:09: 89:25:ac:12:8f:af:ee:b6:0c:e8:ae:6c:f9:9a:e2:07:bc:d4: 9a:6e:f9:eb:26:e2:8e:aa:60:fe:9e:d6:b0:28:2f:a3:f3:ef: f5:7f:48:97 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7pBnJgWnMaE7Qcab7b+IEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRkOTY3MmEwYTRlOTViMWYwOTQ2MTg3ODczMDdlZDU2ODhmYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iIizH4PHYOT5PpVieEiQ3BLNdMo H2/qpl68+mMxD5Yvu3KxASLapKek0HMoGw/cB9nlGiXwP7yZSBVkVZpJrOSyuTvX LOLCnF+wnEVXwqLSQJJ8dHZ6Cvdd/jxzMbROyksVWA3/Kk2whaCdT/IsDKC8VmPV anee70GoNR2lDwWLlJNyVUea3ci+rUxA9e6gWI3vgLLqnlEYtibohpXsM1U8RBeQ wXo7P8WIrs8GOk0RzTJSccYua/a7sRRE2SYST7bmFJiFzEf4aHf2HCsoPRkzpXv6 zchiT/EzPPWM+f1Nw1Zr+OhjS7RTeNMeUoW8TPgpemx9x2swjr+SSHbNtwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDHdlnKgpOlbHwlGGHhzB+1WiPx3MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvTWQyV2NxQ2s2VnNmQ1VZWWVITUg3VmFJX0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALY56AwQB W2f8AwQBua6IAwQAwkPJMA8EAgACMAkDBwAqDtYGAAAwDQYJKoZIhvcNAQELBQAD ggEBAJ11Aenh6G+Dj7gaW61DSaa23YjvRVMkL87GQVkwsDRZkRSuJLn9zZ3x1n1V rNI4U9CCxOTRDO6Xl4rcjteMFnYUupZEUKceoGS4Jn/SimDk/YgU3n6ARDUGKRiM 25B6elMsoJN1Zol1iloYfCeawsGt3Dw3eCctsufrBDF5UaOnZYNAA/t7OCd3H31k GeNhdyxw3mKBiCUpidPmFE79HGHyoRLKwuvnpqPTp8tkc76MOeeCx5LMPtLs4v39 G5JNh1nxpcZiehUGGbdX5FKs2xvZoyqkt9GXCYklrBKPr+62DOiubPma4ge81Jpu +esm4o6qYP6e1rAoL6Pz7/V/SJc= -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:56 2026 by rpki-client