This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa File: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (raw, json) Hash identifier: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk= Subject key identifier: 32:09:B6:14:CB:C4:59:0B:C0:28:34:72:1D:03:5D:5D:2B:3C:1A:4F Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Certificate serial: 019B7C11B8968238342EBEDF2A6B1618795F Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa Signing time: Fri 02 Jan 2026 00:18:14 +0000 ROA not before: Fri 02 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 195.177.230.0/24 maxlen: 24 195.177.231.0/24 maxlen: 24 195.178.104.0/24 maxlen: 24 195.178.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b8:96:82:38:34:2e:be:df:2a:6b:16:18:79:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Validity Not Before: Jan 2 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3209b614cbc4590bc02834721d035d5d2b3c1a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:61:34:4d:d6:77:c1:27:8e:14:43:df:db: f2:fb:dc:a3:5b:01:ab:dd:94:74:34:32:2b:2f:6e: f7:5d:e2:77:a0:ba:ff:73:8a:3c:9c:05:a2:c9:fd: 2c:40:19:39:ac:12:9f:27:78:9a:3c:7f:41:4a:69: 9c:50:a8:7e:93:10:b9:bc:26:c8:09:83:cd:30:ce: 97:eb:c0:b5:3c:53:f1:54:59:20:ac:d4:ff:8f:72: 63:4d:df:8e:86:e8:19:5d:2e:aa:c3:09:89:18:75: 16:ca:2e:28:5d:d2:6c:db:60:a7:8e:01:fe:d1:ae: c9:b6:d3:64:34:0d:49:99:49:84:96:9a:9a:d1:36: 80:09:2d:d2:e8:ec:8d:fe:66:d3:8a:6d:a1:f8:32: 77:51:06:02:69:a0:08:7a:f7:29:2f:8f:93:1b:32: 5a:b3:d0:2e:e8:c3:12:3c:66:d8:95:50:94:7c:98: c7:89:54:b9:78:22:75:41:53:7a:f1:40:63:57:a8: 78:b4:fa:35:d2:29:59:ba:83:21:5d:8c:f6:1b:5e: 13:a5:f2:bf:26:ba:bb:e3:f6:ca:ff:4e:69:cf:07: ee:e1:a4:6c:cd:93:3e:07:c4:0b:7c:9b:54:cd:2c: 45:c4:1c:4c:51:f5:bc:4f:2f:d6:b8:5e:ae:ed:0d: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:B6:14:CB:C4:59:0B:C0:28:34:72:1D:03:5D:5D:2B:3C:1A:4F X509v3 Authority Key Identifier: keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.230.0/23 195.178.104.0/23 Signature Algorithm: sha256WithRSAEncryption 19:45:e9:5c:54:b8:94:b5:62:bc:47:c0:c2:f1:ff:88:db:fe: b7:c9:c4:42:5e:d7:8b:85:a9:22:9e:54:92:5f:f2:8c:7e:e3: 5a:94:fe:d8:49:02:cb:88:63:10:cc:24:04:2c:38:d9:90:a7: 97:fe:65:07:83:dd:5f:42:cc:70:08:cb:ce:1b:e5:8c:26:85: c5:ad:f1:01:f5:fa:b7:c7:0c:2e:b0:84:24:d0:b1:4a:bb:0a: 1b:aa:f2:2b:c1:38:c5:0f:df:33:76:13:15:71:a8:58:88:fe: e0:c1:13:a8:aa:81:7f:dd:0a:4b:7e:d0:1d:ac:d3:de:6c:4f: a0:9a:0a:74:47:4c:cf:c8:26:85:5b:f7:3f:b8:3f:61:39:df: b6:b3:3a:c5:39:04:64:b8:04:3f:25:22:f1:36:b1:70:04:f4: 49:ab:c0:45:72:57:d5:3f:06:e8:46:eb:29:32:91:c6:35:09: 55:3c:fc:51:9e:95:7b:71:9a:2d:db:e5:70:2b:68:b0:e3:d4: 97:62:7e:73:54:23:45:4f:92:bf:81:f9:31:67:0c:5d:97:49: bc:22:f7:e7:a6:50:35:9c:29:cc:49:29:f9:e5:ad:3e:64:5e: 1d:c1:d3:f7:a7:f6:3f:5f:99:57:9e:b5:c2:6c:f6:5b:58:94: fd:04:d1:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EbiWgjg0Lr7fKmsWGHlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy NDNmNGUwHhcNMjYwMTAyMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjA5YjYxNGNiYzQ1OTBiYzAyODM0NzIxZDAzNWQ1ZDJiM2MxYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qNhNE3Wd8EnjhRD39vy+9yjWwGr 3ZR0NDIrL273XeJ3oLr/c4o8nAWiyf0sQBk5rBKfJ3iaPH9BSmmcUKh+kxC5vCbI CYPNMM6X68C1PFPxVFkgrNT/j3JjTd+OhugZXS6qwwmJGHUWyi4oXdJs22CnjgH+ 0a7JttNkNA1JmUmElpqa0TaACS3S6OyN/mbTim2h+DJ3UQYCaaAIevcpL4+TGzJa s9Au6MMSPGbYlVCUfJjHiVS5eCJ1QVN68UBjV6h4tPo10ilZuoMhXYz2G14TpfK/ Jrq74/bK/05pzwfu4aRszZM+B8QLfJtUzSxFxBxMUfW8Ty/WuF6u7Q2uCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDIJthTLxFkLwCg0ch0DXV0rPBpPMB8GA1UdIwQY MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt YWNjNTY5NzdiNmY0LzEvTWdtMkZNdkVXUXZBS0RSeUhRTmRYU3M4R2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0 LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw7HmAwQB w7JoMA0GCSqGSIb3DQEBCwUAA4IBAQAZRelcVLiUtWK8R8DC8f+I2/63ycRCXteL hakinlSSX/KMfuNalP7YSQLLiGMQzCQELDjZkKeX/mUHg91fQsxwCMvOG+WMJoXF rfEB9fq3xwwusIQk0LFKuwobqvIrwTjFD98zdhMVcahYiP7gwROoqoF/3QpLftAd rNPebE+gmgp0R0zPyCaFW/c/uD9hOd+2szrFOQRkuAQ/JSLxNrFwBPRJq8BFclfV PwboRuspMpHGNQlVPPxRnpV7cZot2+VwK2iw49SXYn5zVCNFT5K/gfkxZwxdl0m8 IvfnplA1nCnMSSn55a0+ZF4dwdP3p/Y/X5lXnrXCbPZbWJT9BNGe -----END CERTIFICATE-----Generated at Mon Feb 2 15:42:05 2026 by rpki-client