This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MGmIwu7V4odMaUfjXiw6o09eyjM.roa File: MGmIwu7V4odMaUfjXiw6o09eyjM.roa (raw, json) Hash identifier: 7SyHW/lxV5SP+7G+3de7mE/FJfCLXUcmJOnNkJis2SA= Subject key identifier: 30:69:88:C2:EE:D5:E2:87:4C:69:47:E3:5E:2C:3A:A3:4F:5E:CA:33 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C41F83BD80D154D1C5B5DD8B66A6F2593 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MGmIwu7V4odMaUfjXiw6o09eyjM.roa Signing time: Mon 09 Feb 2026 10:35:13 +0000 ROA not before: Mon 09 Feb 2026 10:35:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47690 IP address blocks: 45.43.158.0/24 maxlen: 24 104.222.189.0/24 maxlen: 24 104.233.59.0/24 maxlen: 24 104.238.12.0/24 maxlen: 24 104.238.13.0/24 maxlen: 24 104.239.55.0/24 maxlen: 24 104.239.56.0/24 maxlen: 24 104.249.9.0/24 maxlen: 24 104.249.17.0/24 maxlen: 24 104.249.23.0/24 maxlen: 24 104.249.46.0/24 maxlen: 24 104.249.47.0/24 maxlen: 24 104.249.48.0/24 maxlen: 24 104.249.49.0/24 maxlen: 24 104.249.50.0/24 maxlen: 24 104.249.51.0/24 maxlen: 24 104.249.52.0/24 maxlen: 24 104.249.53.0/24 maxlen: 24 104.249.54.0/24 maxlen: 24 216.173.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:f8:3b:d8:0d:15:4d:1c:5b:5d:d8:b6:6a:6f:25:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Feb 9 10:35:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306988c2eed5e2874c6947e35e2c3aa34f5eca33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:d7:e8:b8:8d:43:06:6b:1f:a7:73:d2:bc: bc:5b:5f:d7:d2:c4:8e:4a:b0:17:5b:99:d7:80:73: 54:17:25:35:ad:37:41:8a:40:3b:a3:4c:64:06:fa: 2f:4e:84:88:a0:d3:54:70:97:ea:26:9a:03:38:73: 34:6c:a6:c9:85:00:01:6e:5f:f3:12:43:1a:2e:94: 0b:bb:9d:df:a4:30:cc:56:e4:28:21:6b:ea:98:2d: 32:cf:9a:e0:55:34:8a:69:f0:e1:9f:b8:fd:2a:a7: 4a:5c:ee:81:5b:70:1c:7d:5b:45:fa:b2:5a:7e:1a: a8:3f:7b:b8:5c:26:0e:c3:4e:12:9e:e3:0e:d2:c4: 42:f8:39:01:ab:b5:65:3b:f3:a1:fb:de:e1:a6:0b: 0e:e3:ca:2a:24:a0:83:9b:6b:21:03:b2:ba:1a:51: b4:c9:15:b1:16:88:90:72:55:d3:8e:34:5a:aa:87: 6b:40:73:f8:0c:68:c2:f8:e1:c0:a7:2f:9c:c1:1b: 67:23:fd:76:4a:96:37:49:c2:bc:d4:27:f8:f2:4d: bd:88:b6:84:f6:de:76:52:a7:a2:f7:20:c8:3e:30: 54:08:c1:7d:ca:90:fd:e7:1a:07:db:69:54:9e:36: 15:64:31:ba:c3:96:ab:65:13:b1:23:68:5b:eb:29: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:88:C2:EE:D5:E2:87:4C:69:47:E3:5E:2C:3A:A3:4F:5E:CA:33 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MGmIwu7V4odMaUfjXiw6o09eyjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.158.0/24 104.222.189.0/24 104.233.59.0/24 104.238.12.0/23 104.239.55.0-104.239.56.255 104.249.9.0/24 104.249.17.0/24 104.249.23.0/24 104.249.46.0-104.249.54.255 216.173.91.0/24 Signature Algorithm: sha256WithRSAEncryption 67:31:a4:71:19:9e:7f:cf:66:02:ef:77:47:68:1e:d7:b5:31: 0e:2d:5c:9a:53:a2:10:d6:87:d8:30:73:a8:fb:2a:2a:44:1c: ce:9e:4f:36:44:57:b8:2f:f1:30:03:c5:42:06:b1:42:8b:7e: e4:e5:a0:31:ec:7a:69:7a:37:5e:ff:b1:e8:e5:13:f7:c3:aa: 7c:79:37:f8:b4:e7:54:bf:04:9e:bc:0c:da:d6:b2:93:a1:8f: 4e:22:70:4c:4b:f2:31:d9:3f:e3:4a:40:c6:fe:57:03:d6:3e: 8c:b9:74:8f:3f:9e:64:bf:02:02:ba:e1:7b:d8:0c:86:e5:cc: 31:03:68:66:43:38:ee:c0:ee:46:b1:d2:1b:aa:af:db:ed:76: 33:ab:c3:cb:ba:fe:cc:ca:9c:69:5b:1e:1f:00:da:60:30:0a: a7:c1:0d:0a:65:ec:9d:ef:ec:4d:f6:26:e2:73:28:3d:5c:25: fc:11:ad:d1:85:ae:94:5a:d9:82:1f:87:89:da:99:83:9f:07: 83:d6:67:81:44:ee:46:61:67:ce:54:65:2a:93:6a:c3:70:9e: 10:d8:9d:21:02:00:d0:00:47:5c:0f:24:a4:6d:a8:6b:35:6f: b6:eb:8c:d9:d9:fc:e2:06:94:64:41:42:dc:a0:0c:89:f4:42: a6:a7:10:bb -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZxB+DvYDRVNHFtd2LZqbyWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMjA5MTAzNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDY5ODhjMmVlZDVlMjg3NGM2OTQ3ZTM1ZTJjM2FhMzRmNWVjYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNDX6LiNQwZrH6dz0ry8W1/X0sSO SrAXW5nXgHNUFyU1rTdBikA7o0xkBvovToSIoNNUcJfqJpoDOHM0bKbJhQABbl/z EkMaLpQLu53fpDDMVuQoIWvqmC0yz5rgVTSKafDhn7j9KqdKXO6BW3AcfVtF+rJa fhqoP3u4XCYOw04SnuMO0sRC+DkBq7VlO/Oh+97hpgsO48oqJKCDm2shA7K6GlG0 yRWxFoiQclXTjjRaqodrQHP4DGjC+OHApy+cwRtnI/12SpY3ScK81Cf48k29iLaE 9t52Uqei9yDIPjBUCMF9ypD95xoH22lUnjYVZDG6w5arZROxI2hb6ymGKwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFDBpiMLu1eKHTGlH414sOqNPXsozMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvTUdtSXd1N1Y0b2RNYVVmalhpdzZvMDlleWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALSueAwQA aN69AwQAaOk7AwQBaO4MMAwDBABo7zcDBABo7zgDBABo+QkDBABo+REDBABo+Rcw DAMEAWj5LgMEAGj5NgMEANitWzANBgkqhkiG9w0BAQsFAAOCAQEAZzGkcRmef89m Au93R2ge17UxDi1cmlOiENaH2DBzqPsqKkQczp5PNkRXuC/xMAPFQgaxQot+5OWg Mex6aXo3Xv+x6OUT98OqfHk3+LTnVL8EnrwM2tayk6GPTiJwTEvyMdk/40pAxv5X A9Y+jLl0jz+eZL8CArrhe9gMhuXMMQNoZkM47sDuRrHSG6qv2+12M6vDy7r+zMqc aVseHwDaYDAKp8ENCmXsne/sTfYm4nMoPVwl/BGt0YWulFrZgh+HidqZg58Hg9Zn gUTuRmFnzlRlKpNqw3CeENidIQIA0ABHXA8kpG2oazVvtuuM2dn84gaUZEFC3KAM ifRCpqcQuw== -----END CERTIFICATE-----Generated at Thu Feb 12 16:49:11 2026 by rpki-client