This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/MDkPOpYz1CFhy53GuyXV7mJS25Y.roa File: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (raw, json) Hash identifier: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0= Subject key identifier: 30:39:0F:3A:96:33:D4:21:61:CB:9D:C6:BB:25:D5:EE:62:52:DB:96 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019B7A5A726056678346842B84D70D1504E8 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/MDkPOpYz1CFhy53GuyXV7mJS25Y.roa Signing time: Thu 01 Jan 2026 16:18:26 +0000 ROA not before: Thu 01 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.10.120.0/22 maxlen: 24 2a0e:3d80:beaf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:72:60:56:67:83:46:84:2b:84:d7:0d:15:04:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30390f3a9633d42161cb9dc6bb25d5ee6252db96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:d5:1c:9c:62:dc:17:74:44:65:eb:a7:b3: d2:f1:50:94:61:0d:21:5d:d5:a2:d6:3f:dd:1e:4c: 6d:02:e2:3e:80:9e:c8:fb:f6:23:4e:bf:80:d7:13: de:01:00:bc:ba:bb:89:78:64:8d:1c:62:dc:84:ed: 04:64:21:5c:1f:40:80:99:d0:91:58:bc:95:d8:8e: 92:f1:52:2f:c4:f8:af:97:85:f6:4e:a7:19:88:46: 20:28:56:f3:95:30:8d:cb:9f:02:fa:42:52:76:14: f3:ac:d1:39:be:d5:59:14:19:1e:8c:b6:55:03:30: fa:1f:3e:92:b6:37:aa:81:92:be:22:f5:10:af:33: dd:ca:0c:d4:02:2f:48:8a:69:05:c2:1f:0a:67:39: 8c:e1:8d:d6:80:fa:98:22:b6:ec:66:27:0a:da:69: e9:8d:a8:20:30:37:87:d1:09:73:d2:cb:36:9f:05: ed:cf:25:1e:c0:fc:98:d7:fb:66:ad:7e:ea:77:64: cb:4e:7b:05:bf:37:b5:4d:d6:97:03:3f:bf:cf:10: bb:ad:b8:4d:f0:d6:50:27:8b:8e:ae:b5:f2:75:14: f6:72:b0:a4:d0:0d:4b:a0:75:d1:30:da:cb:5a:e8: dd:cc:e1:17:31:30:8d:11:ca:ce:50:94:e8:41:fb: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:39:0F:3A:96:33:D4:21:61:CB:9D:C6:BB:25:D5:EE:62:52:DB:96 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/MDkPOpYz1CFhy53GuyXV7mJS25Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.120.0/22 IPv6: 2a0e:3d80:beaf::/48 Signature Algorithm: sha256WithRSAEncryption ad:2f:1a:16:06:48:7f:dd:fe:83:99:f9:75:09:7c:9a:fc:b9: e8:bd:d8:a2:4d:d5:55:2e:b0:d1:63:ce:69:cd:8f:36:d9:45: b1:05:6d:f7:e7:e8:07:f4:d9:61:e5:df:cd:99:46:4e:87:48: f2:37:df:d0:8f:68:90:ab:77:43:f8:3c:4d:b3:a1:69:f2:de: 64:49:ea:25:95:f7:e2:13:07:66:da:23:1e:d8:77:84:b8:84: 55:c5:df:b7:a0:fc:90:30:e5:06:52:35:e8:19:0e:03:44:6d: fe:4f:cb:f3:e9:f9:61:51:3f:87:68:61:bd:11:ce:b1:f0:2c: f3:21:5d:8c:cd:c9:f8:de:41:30:ed:b3:c6:78:59:39:98:55: 23:9f:82:04:e9:3e:2e:57:e6:96:93:da:b3:10:45:1d:38:85: cb:0e:74:e1:5a:48:b8:7b:a9:e1:18:b8:83:15:07:15:b4:b3: 85:f7:b6:ae:1b:20:86:f0:44:19:49:dc:a3:d5:9a:83:db:1e: 55:02:78:47:30:17:e2:0b:40:28:22:71:af:d6:05:ce:3b:21: 95:8e:7f:f0:b0:ec:e4:c2:67:a1:64:7a:dc:4d:5d:aa:14:9a: 6d:83:39:24:1f:62:b0:ed:95:fc:6c:c6:b6:98:4e:68:3f:7e: 2e:85:b3:b1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WnJgVmeDRoQrhNcNFQToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDM5MGYzYTk2MzNkNDIxNjFjYjlkYzZiYjI1ZDVlZTYyNTJkYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPjVHJxi3Bd0RGXrp7PS8VCUYQ0h XdWi1j/dHkxtAuI+gJ7I+/YjTr+A1xPeAQC8uruJeGSNHGLchO0EZCFcH0CAmdCR WLyV2I6S8VIvxPivl4X2TqcZiEYgKFbzlTCNy58C+kJSdhTzrNE5vtVZFBkejLZV AzD6Hz6StjeqgZK+IvUQrzPdygzUAi9IimkFwh8KZzmM4Y3WgPqYIrbsZicK2mnp jaggMDeH0Qlz0ss2nwXtzyUewPyY1/tmrX7qd2TLTnsFvze1TdaXAz+/zxC7rbhN 8NZQJ4uOrrXydRT2crCk0A1LoHXRMNrLWujdzOEXMTCNEcrOUJToQfsDMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDA5DzqWM9QhYcudxrsl1e5iUtuWMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvTURrUE9wWXoxQ0ZoeTUzR3V5WFY3bUpTMjVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQp4MA8E AgACMAkDBwAqDj2Avq8wDQYJKoZIhvcNAQELBQADggEBAK0vGhYGSH/d/oOZ+XUJ fJr8uei92KJN1VUusNFjzmnNjzbZRbEFbffn6Af02WHl382ZRk6HSPI339CPaJCr d0P4PE2zoWny3mRJ6iWV9+ITB2baIx7Yd4S4hFXF37eg/JAw5QZSNegZDgNEbf5P y/Pp+WFRP4doYb0RzrHwLPMhXYzNyfjeQTDts8Z4WTmYVSOfggTpPi5X5paT2rMQ RR04hcsOdOFaSLh7qeEYuIMVBxW0s4X3tq4bIIbwRBlJ3KPVmoPbHlUCeEcwF+IL QCgica/WBc47IZWOf/Cw7OTCZ6FketxNXaoUmm2DOSQfYrDtlfxsxraYTmg/fi6F s7E= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:15 2026 by rpki-client