This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa
File: mgliWT245mKPpOJ9J-koUWKPC38.roa (raw, json)
Hash identifier: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=
Subject key identifier: 9A:09:62:59:3D:B8:E6:62:8F:A4:E2:7D:27:E9:28:51:62:8F:0B:7F
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 019B77C70C561DEF2D6A9614E98589A4FF72
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa
Signing time: Thu 01 Jan 2026 04:18:12 +0000
ROA not before: Thu 01 Jan 2026 04:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198560
IP address blocks: 91.236.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Feb 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:0c:56:1d:ef:2d:6a:96:14:e9:85:89:a4:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 1 04:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a0962593db8e6628fa4e27d27e92851628f0b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:55:21:f1:aa:d1:0a:f5:2b:0b:2b:47:a3:
11:00:d3:14:ad:d2:97:56:3e:fa:ba:5c:19:c4:2d:
07:2b:37:64:01:b8:61:64:53:58:5a:24:a2:19:50:
6b:e2:f1:a5:5c:14:a1:bd:db:d4:22:0d:78:19:83:
03:23:d3:f2:e6:a0:f1:1c:65:47:0c:ae:ae:eb:26:
e9:a5:5f:7d:82:9c:bf:fe:1c:bd:3a:39:45:7b:ae:
54:d4:66:cd:68:10:2f:e1:56:48:46:14:ec:83:8f:
ce:3a:33:64:67:79:79:5f:6a:eb:0e:29:11:fe:45:
89:5c:0b:cd:6c:83:96:f7:f7:f6:d8:79:c8:58:65:
f6:8c:05:0d:ee:5f:15:61:cb:6e:5c:9b:0f:91:84:
aa:23:dc:cd:d3:4b:ae:1f:65:34:2d:97:25:cf:be:
f5:35:c2:a8:14:23:94:a4:d9:3e:c5:d9:14:00:28:
76:1a:49:04:e5:19:68:df:28:1f:14:a2:9e:01:8a:
76:53:df:cb:77:0d:ca:8a:76:be:e8:bc:a2:3c:cf:
a3:a7:7e:b6:0d:db:79:01:4d:58:ba:f9:f1:a4:d3:
3b:08:57:47:62:aa:8a:a0:5b:74:e8:71:74:71:c1:
fd:f3:4e:4f:fb:32:79:eb:c4:5f:f0:f0:e6:1e:5e:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:62:59:3D:B8:E6:62:8F:A4:E2:7D:27:E9:28:51:62:8F:0B:7F
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
05:72:18:b9:28:3b:70:57:3e:ee:c2:f2:7b:bd:6c:c5:9d:d4:
10:dc:24:f2:68:c0:6f:ee:fe:ca:89:fc:b5:06:77:cd:61:31:
98:7b:b6:01:7b:72:15:07:c1:43:aa:b4:6b:73:14:c6:61:8d:
5d:d0:b8:d3:9e:e1:89:27:24:07:19:85:3c:3d:c7:e9:09:89:
42:2f:4e:de:f2:84:b1:68:69:1c:a4:1a:6a:34:ae:b1:aa:b8:
9d:fd:69:a9:87:e5:7e:a8:d2:fc:d5:b6:2e:2a:85:b0:0e:e3:
a5:30:29:58:0c:fe:30:7f:e0:70:e7:8d:71:d1:1c:dd:71:ea:
4c:15:c4:32:d7:cb:84:e2:1a:92:c3:c5:b4:6d:92:bf:c1:ff:
02:ae:f0:7a:2e:8f:02:f9:48:88:0d:62:15:c6:47:34:7b:80:
12:c2:fe:2a:cb:d0:be:c1:31:7b:99:7d:33:39:07:a6:06:13:
ca:fb:5e:74:8f:89:4a:04:26:34:90:f2:28:b2:b7:62:e0:63:
aa:82:bf:bd:b7:ae:d2:48:08:d5:99:33:cb:8c:3c:6a:a1:98:
74:b3:cd:2d:91:6c:3b:3b:71:3d:9d:ed:84:ef:52:71:6e:62:
8e:d2:1d:3c:bd:e7:61:85:81:49:61:41:0e:cd:d8:b3:a5:5a:
f7:95:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 04:04:29 2026 by rpki-client