This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa
File: MhyBq57hYj80ALVPQS7VvOkzFFM.roa (raw, json)
Hash identifier: edXNCDLO24cZPASVND6ugKW44O0kHPxfFrClhBpe2X0=
Subject key identifier: 32:1C:81:AB:9E:E1:62:3F:34:00:B5:4F:41:2E:D5:BC:E9:33:14:53
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019B8EC64CC48730A9FFBB2CD41EACCBB296
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa
Signing time: Mon 05 Jan 2026 15:28:39 +0000
ROA not before: Mon 05 Jan 2026 15:28:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 212.135.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8e:c6:4c:c4:87:30:a9:ff:bb:2c:d4:1e:ac:cb:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 5 15:28:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=321c81ab9ee1623f3400b54f412ed5bce9331453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:0f:9b:da:90:fc:8f:04:4a:11:4c:0e:9d:
60:30:3e:b3:49:0c:e0:6d:1e:41:fe:ce:dc:26:42:
d0:3f:b7:7f:41:59:94:73:74:ad:bb:d9:94:e8:bd:
17:47:c6:27:bf:91:a0:4c:21:74:9e:2d:3d:c4:24:
13:a3:5c:df:52:16:14:f1:20:2f:30:f3:ed:81:04:
3f:bb:d0:a7:78:16:22:15:20:cc:b1:16:76:98:e4:
f6:13:4d:b3:af:c0:dc:4a:ec:28:b9:71:f2:1e:df:
b2:e6:4c:c6:23:99:88:63:b2:46:1a:b5:f8:b5:00:
6b:4e:22:cd:9c:23:8a:44:f5:74:1c:df:86:d9:81:
8d:ad:7f:71:d3:71:1f:31:3b:a7:9a:77:7e:74:6a:
91:b8:94:05:47:08:19:82:47:2e:d4:76:fd:c1:02:
0c:7d:48:cf:27:1f:07:b2:08:87:85:87:c5:61:63:
55:6e:07:4d:37:e8:a9:6a:ae:3e:50:89:92:db:21:
c0:28:16:a1:a3:fe:01:e3:92:1c:dc:66:34:37:70:
9a:ec:e6:25:5d:32:f0:00:fa:b0:62:6e:7f:98:74:
64:05:65:8d:da:6f:6e:db:06:30:38:26:c0:d7:e5:
05:f4:86:e3:1c:76:1a:9f:2f:e0:37:e6:0e:d8:a3:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:81:AB:9E:E1:62:3F:34:00:B5:4F:41:2E:D5:BC:E9:33:14:53
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.244.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:06:05:f0:ec:94:d6:3f:3c:6a:54:c2:8e:bf:4b:cc:a8:23:
30:f9:10:53:e6:73:7b:7f:65:48:8c:0d:ea:b0:a9:f7:8a:ea:
32:6e:e2:ef:d8:d0:88:ac:c9:02:a8:cb:40:60:7b:0c:fb:9d:
5b:7f:80:f9:05:6e:30:4f:79:77:dd:71:1e:05:c5:c8:0d:dd:
bf:b9:79:6a:2d:f7:31:82:8a:53:64:3a:fc:3b:43:64:19:7f:
ef:0f:92:95:26:d7:87:ea:7e:fc:9c:67:9e:e2:76:e5:cc:6c:
d1:52:28:11:c9:c6:b6:3f:01:51:b1:bf:53:20:87:0a:b9:5e:
56:53:6f:70:d1:d8:14:7d:c8:17:3f:60:e3:68:fc:2a:72:ad:
b4:7d:dc:9a:90:a0:ce:09:7b:84:f9:c7:d4:0f:f2:8f:6e:71:
8c:4f:a7:31:c8:5d:ee:54:8f:3f:3c:57:93:d1:e7:c4:8d:46:
6e:d4:29:fd:fc:af:03:e9:de:33:3f:a1:0e:96:72:d3:d3:47:
c3:4b:ac:2c:83:c3:69:31:f9:5f:dc:88:c6:9b:9f:53:65:bc:
92:7f:7f:fe:03:88:74:75:73:1d:b6:78:0a:52:01:a8:06:5a:
21:1e:dc:13:6d:8e:1e:99:16:94:47:2c:05:ce:2e:68:3c:1e:
c0:c7:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:16:38 2026 by rpki-client