This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mMHGGRaKKOKo_hH1iuiaT6Utb6A.roa File: mMHGGRaKKOKo_hH1iuiaT6Utb6A.roa (raw, json) Hash identifier: G8bsaUgHflQOKVtv2W/LWtG8MraG7GCJv81/4ssnHxQ= Subject key identifier: 98:C1:C6:19:16:8A:28:E2:A8:FE:11:F5:8A:E8:9A:4F:A5:2D:6F:A0 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A9AE567543CD8D081C22BFF053DC Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mMHGGRaKKOKo_hH1iuiaT6Utb6A.roa Signing time: Thu 01 Jan 2026 22:19:07 +0000 ROA not before: Thu 01 Jan 2026 22:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215882 IP address blocks: 81.16.142.0/23 maxlen: 23 81.16.142.0/24 maxlen: 24 81.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a9:ae:56:75:43:cd:8d:08:1c:22:bf:f0:53:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c1c619168a28e2a8fe11f58ae89a4fa52d6fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:d4:b8:6d:ff:50:41:10:3a:9d:ed:bf:9b: 17:c0:1c:e3:4d:72:b6:01:9c:3a:df:ef:9f:3f:87: a4:68:72:9b:d2:7a:a0:8e:04:39:32:f7:8a:a6:82: b1:d7:29:4c:cb:ae:22:4a:be:e4:ad:82:17:f5:55: c3:6c:04:bd:b9:36:3c:5a:9d:8b:2a:7a:c9:ab:17: 29:0f:2b:51:c7:01:2c:f5:79:b0:39:be:d3:db:93: 51:ef:1c:77:15:87:9e:9d:e9:6b:f4:0c:86:26:7e: 20:3b:93:92:e3:34:ef:f6:2f:12:b3:a0:dc:00:20: 60:89:c0:9a:28:9a:39:67:d0:10:e1:07:ab:5b:48: d4:a8:3a:9b:40:6f:ad:85:eb:49:5e:76:37:01:e4: ce:36:e0:5f:96:7a:2c:bb:b0:71:97:8f:6e:df:2c: 10:bb:a7:00:f8:ca:e1:69:86:df:ef:c1:9f:a4:03: 6a:c2:2d:11:83:51:93:31:ee:1f:81:65:68:3a:03: 33:5f:e8:25:e1:66:a1:55:3d:e7:8d:a4:d8:32:f4: cf:2e:66:31:99:a9:b0:01:70:83:6d:34:9f:ea:83: 48:d2:5f:b9:de:e1:45:93:1c:9b:5a:1e:d0:76:b2: 85:8e:93:2f:2c:d6:26:3d:a7:85:d5:e0:2a:be:45: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:C6:19:16:8A:28:E2:A8:FE:11:F5:8A:E8:9A:4F:A5:2D:6F:A0 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mMHGGRaKKOKo_hH1iuiaT6Utb6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.16.142.0/23 Signature Algorithm: sha256WithRSAEncryption 67:c3:74:0f:cd:3b:0a:35:e6:6d:68:13:13:31:65:c2:4f:86: 7a:38:f2:b5:54:47:b1:40:b3:12:39:ef:11:07:e4:d4:ca:bb: d4:27:64:52:70:d2:ba:2a:c1:6d:ec:40:2f:e2:53:74:4d:95: d0:ce:d5:2b:ed:f0:97:6f:c7:06:d3:19:43:b3:9e:dd:bc:5e: f0:08:8a:a9:dd:82:80:af:44:45:56:75:47:75:23:72:28:51: 11:90:c1:bd:33:fb:4c:31:d9:5a:1c:71:02:1b:50:e0:84:0e: 67:f4:de:aa:8d:e0:97:74:ad:10:c6:6e:24:34:aa:09:5f:ae: 9d:51:5d:1f:84:9e:88:99:e4:21:5d:ea:02:c9:3a:ad:0d:45: 21:3b:ae:6d:74:58:81:d0:23:b5:c0:04:2a:20:80:db:96:52: f1:53:ec:5f:ea:bd:a3:c2:a5:3f:a3:fd:87:89:87:50:76:b4: 34:84:cc:a9:4b:36:fa:f9:e7:63:c5:f3:ca:01:0d:87:6a:15: 8f:2c:05:0a:8d:a3:a1:da:8a:67:78:67:7e:b0:68:71:b6:ba: 2a:9a:d4:3b:98:92:00:aa:42:23:21:b4:cd:b5:89:b7:7d:46: 83:25:35:c1:54:3e:d5:1f:15:e3:5e:ed:f5:7e:b8:e0:d6:a0: d0:22:b4:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKmuVnVDzY0IHCK/8FPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGMxYzYxOTE2OGEyOGUyYThmZTExZjU4YWU4OWE0ZmE1MmQ2ZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N7UuG3/UEEQOp3tv5sXwBzjTXK2 AZw63++fP4ekaHKb0nqgjgQ5MveKpoKx1ylMy64iSr7krYIX9VXDbAS9uTY8Wp2L KnrJqxcpDytRxwEs9XmwOb7T25NR7xx3FYeenelr9AyGJn4gO5OS4zTv9i8Ss6Dc ACBgicCaKJo5Z9AQ4QerW0jUqDqbQG+thetJXnY3AeTONuBflnosu7Bxl49u3ywQ u6cA+MrhaYbf78GfpANqwi0Rg1GTMe4fgWVoOgMzX+gl4WahVT3njaTYMvTPLmYx mamwAXCDbTSf6oNI0l+53uFFkxybWh7QdrKFjpMvLNYmPaeF1eAqvkWjAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjBxhkWiijiqP4R9Yromk+lLW+gMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvbU1IR0dSYUtLT0tvX2hIMWl1aWFUNlV0YjZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBURCOMA0G CSqGSIb3DQEBCwUAA4IBAQBnw3QPzTsKNeZtaBMTMWXCT4Z6OPK1VEexQLMSOe8R B+TUyrvUJ2RScNK6KsFt7EAv4lN0TZXQztUr7fCXb8cG0xlDs57dvF7wCIqp3YKA r0RFVnVHdSNyKFERkMG9M/tMMdlaHHECG1DghA5n9N6qjeCXdK0Qxm4kNKoJX66d UV0fhJ6ImeQhXeoCyTqtDUUhO65tdFiB0CO1wAQqIIDbllLxU+xf6r2jwqU/o/2H iYdQdrQ0hMypSzb6+edjxfPKAQ2HahWPLAUKjaOh2opneGd+sGhxtroqmtQ7mJIA qkIjIbTNtYm3fUaDJTXBVD7VHxXjXu31frjg1qDQIrRp -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:52 2026 by rpki-client