This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MFsq3qu335pSX697onMxFayK-c0.roa File: MFsq3qu335pSX697onMxFayK-c0.roa (raw, json) Hash identifier: FynggKDh+hLRtiOMsix0QLO/WqfvLoGMaCpUNRkrcIs= Subject key identifier: 30:5B:2A:DE:AB:B7:DF:9A:52:5F:AF:7B:A2:73:31:15:AC:8A:F9:CD Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783456515EE2AC7D6FD8AACACFB78125 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MFsq3qu335pSX697onMxFayK-c0.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202602 IP address blocks: 5.253.18.0/24 maxlen: 32 5.253.19.0/24 maxlen: 32 45.92.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:56:51:5e:e2:ac:7d:6f:d8:aa:ca:cf:b7:81:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305b2adeabb7df9a525faf7ba2733115ac8af9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:7e:bc:ec:21:11:e1:96:f6:39:14:dd:a3: e5:fb:c3:59:12:f8:60:83:1c:29:85:44:99:77:da: 88:52:84:18:63:2a:12:d1:4d:d6:69:4a:0f:86:0c: bd:58:a1:69:0f:3c:6e:ea:36:3c:26:1f:58:f3:4a: 23:73:9a:e7:ef:0c:0d:cc:dc:01:e4:83:f0:dc:91: ec:d7:48:24:21:59:3c:b1:4d:a4:b3:6b:c6:1f:bc: ad:1a:d5:56:e5:52:fe:91:00:06:50:c3:a4:b0:4d: bd:c8:1b:17:28:ba:95:7e:92:86:3a:82:5f:9a:05: c0:d5:37:c1:19:49:04:27:f6:20:aa:6b:56:00:f8: 64:d0:be:4a:73:dd:e4:cc:98:25:04:88:2a:36:22: c9:66:04:9c:b4:09:ed:d1:5e:f2:d9:77:5f:7b:65: 05:8c:de:b4:67:74:54:c7:39:57:47:72:df:fe:d7: d7:0d:a1:c7:04:0f:cf:1a:ec:e5:c1:c0:d0:83:49: 2b:25:62:8d:fc:8d:cd:a8:ae:f0:6d:98:5b:d4:3e: 4a:87:b9:dd:23:3f:4a:23:10:87:f4:3d:53:0a:ac: 0e:a9:eb:11:7f:86:18:3d:c5:7d:44:a2:04:77:17: 5c:46:a3:5e:f5:2d:91:7e:7a:7e:38:dc:f4:1e:90: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:2A:DE:AB:B7:DF:9A:52:5F:AF:7B:A2:73:31:15:AC:8A:F9:CD X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MFsq3qu335pSX697onMxFayK-c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.18.0/23 45.92.156.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b5:e4:41:50:e2:de:7e:fe:7a:76:d4:ff:3c:f5:9d:10:d2: 59:a6:aa:ec:b2:a1:fe:ff:5a:f0:16:ea:d7:34:a5:72:77:75: 93:3c:ad:0c:4d:6b:94:a4:30:33:0a:d1:65:04:17:c5:9c:a7: 1e:d2:04:46:15:00:0f:84:17:a5:03:8a:b7:aa:1b:83:f2:b1: 15:08:70:a3:f8:09:82:13:af:de:70:5d:7e:11:c1:88:65:06: 11:2b:30:33:e6:1f:86:ba:b0:5f:0f:a8:20:96:66:13:a8:26: c7:00:57:14:a7:06:d6:a5:3d:1a:88:1f:a7:4c:2f:e3:08:db: de:e6:0a:88:e8:dd:0a:c6:62:e1:cb:cf:31:46:be:46:1a:8a: e1:8e:b7:80:65:b0:a7:e3:2a:9c:13:4e:20:d4:92:38:6c:e3: 35:2f:f1:49:2b:c3:f5:e4:41:3a:fb:fd:7f:5f:31:5a:77:b9: a1:9d:11:71:a4:21:b2:66:5e:62:37:ef:17:4b:0b:44:93:f8: c2:a0:69:90:cc:e7:c0:46:ca:8b:3b:fd:04:b4:8f:3f:14:a9: 21:5d:49:e8:5e:84:88:07:5b:c4:10:9d:2c:00:f7:38:f9:55: 48:a7:1e:d5:86:c0:ee:8e:4d:a2:76:e1:6a:82:82:84:fc:c3: b9:a1:74:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NFZRXuKsfW/YqsrPt4ElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDViMmFkZWFiYjdkZjlhNTI1ZmFmN2JhMjczMzExNWFjOGFmOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HB+vOwhEeGW9jkU3aPl+8NZEvhg gxwphUSZd9qIUoQYYyoS0U3WaUoPhgy9WKFpDzxu6jY8Jh9Y80ojc5rn7wwNzNwB 5IPw3JHs10gkIVk8sU2ks2vGH7ytGtVW5VL+kQAGUMOksE29yBsXKLqVfpKGOoJf mgXA1TfBGUkEJ/YgqmtWAPhk0L5Kc93kzJglBIgqNiLJZgSctAnt0V7y2Xdfe2UF jN60Z3RUxzlXR3Lf/tfXDaHHBA/PGuzlwcDQg0krJWKN/I3NqK7wbZhb1D5Kh7nd Iz9KIxCH9D1TCqwOqesRf4YYPcV9RKIEdxdcRqNe9S2Rfnp+ONz0HpAESwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDBbKt6rt9+aUl+ve6JzMRWsivnNMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvTUZzcTNxdTMzNXBTWDY5N29uTXhGYXlLLWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBf0SAwQA LVycMA0GCSqGSIb3DQEBCwUAA4IBAQBSteRBUOLefv56dtT/PPWdENJZpqrssqH+ /1rwFurXNKVyd3WTPK0MTWuUpDAzCtFlBBfFnKce0gRGFQAPhBelA4q3qhuD8rEV CHCj+AmCE6/ecF1+EcGIZQYRKzAz5h+GurBfD6gglmYTqCbHAFcUpwbWpT0aiB+n TC/jCNve5gqI6N0KxmLhy88xRr5GGorhjreAZbCn4yqcE04g1JI4bOM1L/FJK8P1 5EE6+/1/XzFad7mhnRFxpCGyZl5iN+8XSwtEk/jCoGmQzOfARsqLO/0EtI8/FKkh XUnoXoSIB1vEEJ0sAPc4+VVIpx7VhsDujk2iduFqgoKE/MO5oXSq -----END CERTIFICATE-----Generated at Sun Jan 18 10:01:48 2026 by rpki-client