This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/MmvzW6oxGSVIW3oecKpW8gfoTmE.roa File: MmvzW6oxGSVIW3oecKpW8gfoTmE.roa (raw, json) Hash identifier: pt5q0zgHHQb+0hiRJSBEzT45QUGMgSBn3A0rkdu3tk0= Subject key identifier: 32:6B:F3:5B:AA:31:19:25:48:5B:7A:1E:70:AA:56:F2:07:E8:4E:61 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D516B6A4FCC14F3225FCCA4B19D82 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/MmvzW6oxGSVIW3oecKpW8gfoTmE.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 45.80.158.0/24 maxlen: 24 185.241.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:51:6b:6a:4f:cc:14:f3:22:5f:cc:a4:b1:9d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=326bf35baa311925485b7a1e70aa56f207e84e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:59:45:47:43:03:ea:2e:f0:d5:13:cd:44: b6:a2:94:a8:9d:43:8c:82:8e:27:18:b4:6a:8e:29: 84:11:8f:24:0a:9d:45:58:3b:e2:90:e8:a5:2a:5d: 66:f6:c7:0d:27:f1:a0:f0:39:14:8e:1b:fe:e5:11: 0f:b3:25:82:f0:6a:79:2b:47:e5:91:92:39:a0:06: e8:23:85:0c:1b:d5:b7:53:d0:fa:b1:dc:27:36:f3: da:83:9a:bc:d7:9d:dd:46:d8:36:4b:2c:fc:98:9f: 6c:d1:62:4a:d2:34:9b:11:f0:9d:ea:85:10:6e:97: eb:38:50:7f:49:bd:da:b0:73:a2:45:a5:97:1a:11: 7c:b0:99:33:ca:d3:84:00:3f:86:c9:3b:64:58:67: 9b:e5:3d:e7:f6:7f:39:dc:ea:03:4c:36:8d:83:50: 10:f6:52:85:98:17:ba:12:e1:5a:6b:c6:22:75:0b: 6c:5e:66:63:1e:75:df:c5:a3:aa:b5:4c:3b:bb:aa: 64:70:1d:47:d4:f8:96:b7:5c:fd:10:bd:bd:2b:0f: 56:21:3c:af:c6:41:33:86:b0:cd:5c:65:80:fe:34: 42:85:be:b2:38:fe:c8:d1:b0:b4:bd:c9:7f:87:61: 78:3e:5f:d6:67:4e:94:9e:e5:ed:65:24:6c:4f:8a: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6B:F3:5B:AA:31:19:25:48:5B:7A:1E:70:AA:56:F2:07:E8:4E:61 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/MmvzW6oxGSVIW3oecKpW8gfoTmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.158.0/24 185.241.208.0/24 Signature Algorithm: sha256WithRSAEncryption 76:0f:33:3d:5f:fa:52:84:3a:71:9a:82:91:61:64:34:0f:0d: 1c:5d:20:3d:b2:1e:78:c0:a9:11:ce:54:dc:28:87:94:b2:df: 61:bf:e8:61:4d:bb:3b:44:05:bf:55:1c:7c:e3:b9:96:5b:62: 2f:44:99:89:89:c0:ce:26:6a:df:9e:de:54:5f:fc:06:ec:75: 41:af:d8:ec:8a:b9:c8:a4:a9:af:85:d4:49:97:2f:62:15:ed: 3e:2e:e1:19:e3:f9:c2:e4:65:48:ba:81:df:96:a0:06:10:ce: 1a:0b:3c:9b:b6:54:f6:23:48:16:7b:6a:ad:c6:69:96:a1:3f: d5:33:ce:93:32:0f:bc:cd:c2:92:32:68:d6:e7:56:9a:b9:c8: ac:aa:1e:00:48:b4:ae:b4:5f:71:58:78:e5:66:77:30:6a:54: 5e:3f:da:bb:98:08:bf:48:14:65:0b:bf:6a:3d:d7:42:87:4d: 99:29:ff:98:ae:10:5d:48:2d:8a:30:5f:0e:ca:d2:0f:03:f3: 6d:3b:1a:13:fe:83:11:6f:b9:9e:8b:50:b6:93:06:4e:b5:39: bd:5e:80:b0:b3:70:3e:ff:5f:67:12:4d:2b:44:6b:6b:2b:b9: 93:6f:95:db:a7:e1:96:c6:23:ea:ca:84:29:58:80:46:ad:d6: 87:5e:7b:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XVFrak/MFPMiX8yksZ2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjZiZjM1YmFhMzExOTI1NDg1YjdhMWU3MGFhNTZmMjA3ZTg0ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgpZRUdDA+ou8NUTzUS2opSonUOM go4nGLRqjimEEY8kCp1FWDvikOilKl1m9scNJ/Gg8DkUjhv+5REPsyWC8Gp5K0fl kZI5oAboI4UMG9W3U9D6sdwnNvPag5q8153dRtg2Syz8mJ9s0WJK0jSbEfCd6oUQ bpfrOFB/Sb3asHOiRaWXGhF8sJkzytOEAD+GyTtkWGeb5T3n9n853OoDTDaNg1AQ 9lKFmBe6EuFaa8YidQtsXmZjHnXfxaOqtUw7u6pkcB1H1PiWt1z9EL29Kw9WITyv xkEzhrDNXGWA/jRChb6yOP7I0bC0vcl/h2F4Pl/WZ06UnuXtZSRsT4qzDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDJr81uqMRklSFt6HnCqVvIH6E5hMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvTW12elc2b3hHU1ZJVzNvZWNLcFc4Z2ZvVG1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVCeAwQA ufHQMA0GCSqGSIb3DQEBCwUAA4IBAQB2DzM9X/pShDpxmoKRYWQ0Dw0cXSA9sh54 wKkRzlTcKIeUst9hv+hhTbs7RAW/VRx847mWW2IvRJmJicDOJmrfnt5UX/wG7HVB r9jsirnIpKmvhdRJly9iFe0+LuEZ4/nC5GVIuoHflqAGEM4aCzybtlT2I0gWe2qt xmmWoT/VM86TMg+8zcKSMmjW51aaucisqh4ASLSutF9xWHjlZncwalReP9q7mAi/ SBRlC79qPddCh02ZKf+YrhBdSC2KMF8OytIPA/NtOxoT/oMRb7mei1C2kwZOtTm9 XoCws3A+/19nEk0rRGtrK7mTb5Xbp+GWxiPqyoQpWIBGrdaHXntU -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:19 2026 by rpki-client