This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/MvxuGFgJO1HcqJcQXHExSwR9U5A.roa File: MvxuGFgJO1HcqJcQXHExSwR9U5A.roa (raw, json) Hash identifier: gwjNOond7GjnBlbK7xaPErigbWlHmn1g1Fd3dZwf6oE= Subject key identifier: 32:FC:6E:18:58:09:3B:51:DC:A8:97:10:5C:71:31:4B:04:7D:53:90 Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Certificate serial: 019B7CEDEE8E183F6A4D5EFB41C63731BD37 Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/MvxuGFgJO1HcqJcQXHExSwR9U5A.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208630 IP address blocks: 45.84.236.0/24 maxlen: 24 45.84.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:8e:18:3f:6a:4d:5e:fb:41:c6:37:31:bd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32fc6e1858093b51dca897105c71314b047d5390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:7c:c0:73:2b:65:6a:be:6f:a4:6b:64:34: 5d:74:b2:35:3c:c9:3f:dd:cb:0e:9d:78:8c:d0:3a: c8:46:b0:08:2b:df:7c:91:12:f2:3b:11:2c:74:9f: c3:a6:d0:b4:9c:77:87:a2:36:b3:27:58:00:60:ad: ac:9b:42:0b:06:62:bd:f4:bc:0f:d0:18:a4:16:1c: 72:fe:cc:68:0e:17:8e:97:38:93:82:d3:e1:f1:ff: a0:f0:6a:6d:3a:cc:c6:c0:24:90:0d:2c:fc:10:d3: e6:9a:86:3a:6e:e7:fd:f2:d7:f0:6d:39:58:02:a6: 9f:bf:56:9b:4f:c0:81:b4:12:1b:98:fd:82:80:df: 1d:7c:dd:39:d0:d6:29:fd:38:1d:e8:26:f1:12:46: 18:50:fa:92:3f:0b:9d:a4:27:40:8c:8c:6e:73:15: 57:54:ae:74:2c:6c:99:37:18:e5:2c:2b:ff:d4:c5: 8a:03:07:06:a5:6c:77:f3:be:96:d5:8e:5c:db:f8: ac:69:43:f2:dd:6d:7b:24:03:97:6e:6b:2e:06:d8: df:30:25:1b:90:6e:68:28:51:1b:4c:ca:94:e1:ac: 66:e1:9d:d0:3d:d8:00:1f:7f:75:bd:0f:43:7f:92: 99:da:d0:a9:53:7a:74:67:ea:1b:62:87:b0:82:99: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FC:6E:18:58:09:3B:51:DC:A8:97:10:5C:71:31:4B:04:7D:53:90 X509v3 Authority Key Identifier: keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/MvxuGFgJO1HcqJcQXHExSwR9U5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.236.0/24 45.84.238.0/24 Signature Algorithm: sha256WithRSAEncryption c2:b3:50:98:fd:0b:64:6c:dd:71:f8:11:1c:d2:8d:07:3e:e5: 39:9b:b9:8f:84:7b:60:b5:ca:b9:f5:fe:9b:51:6f:83:93:a6: f2:d1:c4:27:61:61:74:42:0c:8e:90:59:27:29:bb:ed:01:a7: a2:9e:af:28:45:1e:84:5b:c7:7a:4a:60:99:fb:b8:5a:2f:6a: 3a:cd:40:ed:84:a2:b4:43:84:1a:c2:12:bb:64:76:08:44:3d: 60:44:f0:8b:cc:88:df:be:33:be:c9:4b:27:90:b8:d8:fd:2c: 52:ab:29:82:79:b0:e1:59:b8:93:70:99:fa:40:c4:d5:d1:87: 73:6e:14:74:a9:18:2d:bd:7b:2f:98:26:46:cc:35:0e:62:95: 9f:3f:92:bc:49:2a:6d:fd:1b:6f:3d:77:2a:fd:81:75:0a:2d: 11:a7:e8:a0:8e:21:3d:3a:11:07:ab:ef:f9:58:30:30:dd:d8: 1b:f9:8f:f7:01:78:25:46:5d:e6:ac:3b:51:01:bf:fd:a8:8c: f1:b3:7e:10:cc:7c:53:62:5e:d2:ee:12:c4:ff:f0:25:28:d5: 5f:d7:f9:1b:33:e6:36:d9:d1:6d:b2:d3:a3:6c:dc:ef:59:78: 69:8b:bc:25:28:7d:1e:11:84:50:09:79:11:98:b5:fe:3f:75: bf:ad:38:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87e6OGD9qTV77QcY3Mb03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2 NmJmMjgwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmZjNmUxODU4MDkzYjUxZGNhODk3MTA1YzcxMzE0YjA0N2Q1MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwZ8wHMrZWq+b6RrZDRddLI1PMk/ 3csOnXiM0DrIRrAIK998kRLyOxEsdJ/DptC0nHeHojazJ1gAYK2sm0ILBmK99LwP 0BikFhxy/sxoDheOlziTgtPh8f+g8GptOszGwCSQDSz8ENPmmoY6buf98tfwbTlY Aqafv1abT8CBtBIbmP2CgN8dfN050NYp/Tgd6CbxEkYYUPqSPwudpCdAjIxucxVX VK50LGyZNxjlLCv/1MWKAwcGpWx3876W1Y5c2/isaUPy3W17JAOXbmsuBtjfMCUb kG5oKFEbTMqU4axm4Z3QPdgAH391vQ9Df5KZ2tCpU3p0Z+obYoewgpmaKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDL8bhhYCTtR3KiXEFxxMUsEfVOQMB8GA1UdIwQY MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt MWI3ZWMzOGU5ZjQ0LzEvTXZ4dUdGZ0pPMUhjcUpjUVhIRXhTd1I5VTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0 LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVTsAwQA LVTuMA0GCSqGSIb3DQEBCwUAA4IBAQDCs1CY/QtkbN1x+BEc0o0HPuU5m7mPhHtg tcq59f6bUW+Dk6by0cQnYWF0QgyOkFknKbvtAaeinq8oRR6EW8d6SmCZ+7haL2o6 zUDthKK0Q4QawhK7ZHYIRD1gRPCLzIjfvjO+yUsnkLjY/SxSqymCebDhWbiTcJn6 QMTV0YdzbhR0qRgtvXsvmCZGzDUOYpWfP5K8SSpt/RtvPXcq/YF1Ci0Rp+igjiE9 OhEHq+/5WDAw3dgb+Y/3AXglRl3mrDtRAb/9qIzxs34QzHxTYl7S7hLE//AlKNVf 1/kbM+Y22dFtstOjbNzvWXhpi7wlKH0eEYRQCXkRmLX+P3W/rTgs -----END CERTIFICATE-----Generated at Sun Jan 11 18:49:18 2026 by rpki-client