This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa File: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (raw, json) Hash identifier: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI= Subject key identifier: 9A:0C:FD:10:50:5F:E8:2B:BA:D8:41:87:83:DC:BB:38:3A:D7:84:16 Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Certificate serial: 019B7835174996F2CF2ECB0919295E305BB5 Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213196 IP address blocks: 145.250.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:17:49:96:f2:cf:2e:cb:09:19:29:5e:30:5b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a0cfd10505fe82bbad8418783dcbb383ad78416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:13:12:f2:92:10:75:cd:4d:56:da:be:7f: 92:a7:f0:aa:61:e8:26:a4:92:45:3e:0a:b6:b8:46: 52:8c:36:14:29:29:e8:41:94:91:35:bb:dd:08:ef: 77:bc:ab:7c:94:44:a4:03:ae:f7:46:ae:96:4b:6d: 9a:c2:b9:6e:b1:40:66:ce:6c:3b:91:69:2d:e5:55: 72:99:b7:a9:c7:9a:5b:bd:eb:93:0d:f6:a5:14:65: 8e:eb:70:ad:55:b4:d4:17:11:94:a1:d8:4e:14:b2: cf:18:4b:47:af:d2:e4:20:ef:17:83:90:db:e2:e8: e3:ed:46:05:2d:d6:a3:4c:e1:05:fe:dc:e0:4b:23: f8:c7:4a:0b:99:cf:3b:fd:6b:3d:cc:49:d7:02:10: 81:53:c3:26:f6:0d:14:7f:46:b3:e5:86:3e:e9:ba: 58:99:f8:e9:23:dd:95:ab:8a:15:55:9f:df:10:bc: cc:26:ff:8d:05:d4:11:d8:e8:e1:67:7f:f3:39:c1: 03:78:fe:73:bf:56:92:2e:b3:0d:4a:42:de:8a:ec: bf:da:4a:39:97:04:c9:16:00:91:6e:82:5b:51:ed: 69:43:72:e7:60:fe:9e:ea:e7:03:91:10:dc:cf:7d: c7:1b:37:28:e3:31:79:c7:1a:0d:b1:8f:8c:d8:f4: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:FD:10:50:5F:E8:2B:BA:D8:41:87:83:DC:BB:38:3A:D7:84:16 X509v3 Authority Key Identifier: keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.250.128.0/17 Signature Algorithm: sha256WithRSAEncryption 06:ad:2b:06:d9:f1:48:b9:4b:05:7e:e5:d1:d9:6e:3d:a1:55: 8f:cd:3d:ed:6f:c2:ee:a7:99:b5:1b:1c:35:a0:5e:f6:ab:c6: ab:4a:d8:15:0e:ae:52:38:18:8a:71:44:c4:ba:05:21:25:c9: 54:3f:be:b3:8f:10:21:fa:4d:47:f2:83:02:36:76:ff:99:ac: d1:d3:e6:63:ef:55:60:f1:9c:d8:a1:44:fb:7c:f1:e4:56:e8: 44:38:1c:c7:f8:1c:b3:f7:f1:84:89:54:df:9c:38:2b:e8:17: 41:63:56:c8:0c:78:28:7b:3e:fd:a9:da:ac:8f:90:9b:d4:df: 97:5f:81:9f:06:2f:c0:b9:29:5a:f1:33:af:78:a7:db:b9:72: 94:4f:aa:d3:d6:05:ce:32:cc:1e:49:a9:2e:11:e1:1f:4e:c9: cd:8c:c3:1c:00:f8:00:b0:0c:d4:70:71:96:b7:29:a4:86:42: 10:59:c7:55:67:df:c7:d9:e8:4b:92:93:d9:f5:08:10:0d:ea: 8a:2b:0c:70:2a:59:ea:14:23:c5:f2:34:6f:c6:d4:e6:4b:36: 70:c8:f2:7c:83:3c:00:09:51:41:00:7b:78:b5:29:77:39:13: 42:dc:60:13:45:8a:62:c9:ae:4c:87:0e:f8:52:7b:cb:af:5e: 72:ae:09:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRdJlvLPLssJGSleMFu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTZkMmVkNDZmOWQ4OWIxZGQ2MjE3NzViZDlmYjU1MzZi ZjQ0Y2QwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTBjZmQxMDUwNWZlODJiYmFkODQxODc4M2RjYmIzODNhZDc4NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ATEvKSEHXNTVbavn+Sp/CqYegm pJJFPgq2uEZSjDYUKSnoQZSRNbvdCO93vKt8lESkA673Rq6WS22awrlusUBmzmw7 kWkt5VVymbepx5pbveuTDfalFGWO63CtVbTUFxGUodhOFLLPGEtHr9LkIO8Xg5Db 4ujj7UYFLdajTOEF/tzgSyP4x0oLmc87/Ws9zEnXAhCBU8Mm9g0Uf0az5YY+6bpY mfjpI92Vq4oVVZ/fELzMJv+NBdQR2OjhZ3/zOcEDeP5zv1aSLrMNSkLeiuy/2ko5 lwTJFgCRboJbUe1pQ3LnYP6e6ucDkRDcz33HGzco4zF5xxoNsY+M2PQKuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJoM/RBQX+gruthBh4Pcuzg614QWMB8GA1UdIwQY MBaAFGim0u1G+dibHdYhd1vZ+1U2v0TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEt MDhhMjJkZTc3ZTViLzEvbWd6OUVGQmY2Q3U2MkVHSGc5eTdPRHJYaEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEtMDhhMjJkZTc3ZTVi LzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkfqAMA0G CSqGSIb3DQEBCwUAA4IBAQAGrSsG2fFIuUsFfuXR2W49oVWPzT3tb8Lup5m1Gxw1 oF72q8arStgVDq5SOBiKcUTEugUhJclUP76zjxAh+k1H8oMCNnb/mazR0+Zj71Vg 8ZzYoUT7fPHkVuhEOBzH+Byz9/GEiVTfnDgr6BdBY1bIDHgoez79qdqsj5Cb1N+X X4GfBi/AuSla8TOveKfbuXKUT6rT1gXOMsweSakuEeEfTsnNjMMcAPgAsAzUcHGW tymkhkIQWcdVZ9/H2ehLkpPZ9QgQDeqKKwxwKlnqFCPF8jRvxtTmSzZwyPJ8gzwA CVFBAHt4tSl3ORNC3GATRYpiya5Mhw74UnvLr15yrgm1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:54 2026 by rpki-client