This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MJqAjdP4d3mSYTI3SxOJXJwgdl0.roa File: MJqAjdP4d3mSYTI3SxOJXJwgdl0.roa (raw, json) Hash identifier: 8Be50xot4Iknr65OOXbUu05rl3lwZwZX2u6h3t5rEWk= Subject key identifier: 30:9A:80:8D:D3:F8:77:79:92:61:32:37:4B:13:89:5C:9C:20:76:5D Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E25B11D0C1F2D5859A6E050A79BDC Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MJqAjdP4d3mSYTI3SxOJXJwgdl0.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 45.138.210.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:25:b1:1d:0c:1f:2d:58:59:a6:e0:50:a7:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=309a808dd3f87779926132374b13895c9c20765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:e9:03:3c:5e:e5:a2:65:6a:f4:69:7e:c4: 6f:83:fa:cf:05:8f:89:d2:aa:0d:54:52:f7:a9:1a: cc:b4:0d:66:43:09:46:df:0e:de:f5:7a:97:e8:f1: b0:93:4f:9e:05:49:ef:ee:ab:00:50:bb:00:7a:cf: 7a:fe:84:e1:13:26:2b:5c:e8:33:51:00:ce:ec:a6: d7:a0:55:eb:d6:20:1b:cf:85:7a:91:76:38:06:cd: 0c:53:42:be:5b:98:f5:8f:87:82:f8:95:1a:d8:bf: 3e:48:87:fd:b0:f2:6b:12:74:e8:6a:71:70:92:b2: f6:8c:38:50:c2:a8:9e:0f:0f:b9:f8:60:e5:a2:d1: 53:40:3c:6e:70:86:a0:7e:ff:5a:2a:9f:d0:eb:60: c0:23:02:f4:df:15:5c:91:49:93:5e:c0:af:96:26: 9c:b1:70:75:d1:59:fc:7e:3b:01:de:83:56:29:18: e5:56:e8:c8:88:d1:b9:3a:76:ed:16:94:b5:b7:6e: c7:91:57:32:c7:68:b0:52:45:3b:6d:4c:b5:6f:03: ac:5f:81:82:73:72:c2:fa:84:0b:15:3c:ee:ed:8c: c6:37:70:d4:ea:f5:c7:52:c8:07:79:8b:1d:3b:d6: 03:6a:21:c0:b9:40:0e:f3:ba:e3:d2:c2:c2:f3:81: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:80:8D:D3:F8:77:79:92:61:32:37:4B:13:89:5C:9C:20:76:5D X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MJqAjdP4d3mSYTI3SxOJXJwgdl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b8:54:a3:37:9a:2a:42:e4:32:d0:69:d1:b2:56:23:83:f3: 04:bc:fe:b2:ef:72:bd:5e:c3:57:c4:76:65:ba:d0:9b:f0:85: 45:b3:49:e9:9b:25:a1:e7:85:52:c0:59:3a:4c:10:45:9d:01: 52:80:bc:3b:cf:2e:ce:d4:17:11:ca:be:23:27:de:24:72:79: 3e:81:6c:48:9e:ea:b5:3b:2f:f5:15:f0:83:88:02:73:f3:04: 09:d2:84:53:65:d7:a1:e1:77:6a:f4:33:d1:4c:86:9b:66:dc: 7c:4e:8b:c3:d6:cc:b1:0e:dd:15:df:cf:71:6f:24:a8:b6:a4: 6b:88:eb:6f:aa:9c:8a:6d:58:e5:d3:54:7a:cc:98:80:5a:49: fa:1a:32:5c:7b:ab:f8:6d:38:01:33:b4:a3:d7:c9:70:4d:18: 98:02:85:6d:0b:10:e0:e2:b9:be:e7:37:3f:cd:2b:77:b2:32: 9b:8e:0b:a6:59:30:c7:be:1d:b3:13:06:a3:d7:47:0f:c1:2b: 6a:4b:c8:33:be:5d:35:10:cc:60:18:9c:99:ef:63:a4:a8:bc: e8:ea:39:5b:cd:7c:40:ed:2d:a3:33:9f:00:31:8b:ac:9b:73: 9c:78:f9:29:4b:38:74:74:5e:2b:5c:39:52:c8:3c:21:65:3d: a5:29:cb:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiWxHQwfLVhZpuBQp5vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDlhODA4ZGQzZjg3Nzc5OTI2MTMyMzc0YjEzODk1YzljMjA3NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/pAzxe5aJlavRpfsRvg/rPBY+J 0qoNVFL3qRrMtA1mQwlG3w7e9XqX6PGwk0+eBUnv7qsAULsAes96/oThEyYrXOgz UQDO7KbXoFXr1iAbz4V6kXY4Bs0MU0K+W5j1j4eC+JUa2L8+SIf9sPJrEnToanFw krL2jDhQwqieDw+5+GDlotFTQDxucIagfv9aKp/Q62DAIwL03xVckUmTXsCvliac sXB10Vn8fjsB3oNWKRjlVujIiNG5OnbtFpS1t27HkVcyx2iwUkU7bUy1bwOsX4GC c3LC+oQLFTzu7YzGN3DU6vXHUsgHeYsdO9YDaiHAuUAO87rj0sLC84GgoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCagI3T+Hd5kmEyN0sTiVycIHZdMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvTUpxQWpkUDRkM21TWVRJM1N4T0pYSndnZGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYrSMA0G CSqGSIb3DQEBCwUAA4IBAQA7uFSjN5oqQuQy0GnRslYjg/MEvP6y73K9XsNXxHZl utCb8IVFs0npmyWh54VSwFk6TBBFnQFSgLw7zy7O1BcRyr4jJ94kcnk+gWxInuq1 Oy/1FfCDiAJz8wQJ0oRTZdeh4Xdq9DPRTIabZtx8TovD1syxDt0V389xbySotqRr iOtvqpyKbVjl01R6zJiAWkn6GjJce6v4bTgBM7Sj18lwTRiYAoVtCxDg4rm+5zc/ zSt3sjKbjgumWTDHvh2zEwaj10cPwStqS8gzvl01EMxgGJyZ72OkqLzo6jlbzXxA 7S2jM58AMYusm3OcePkpSzh0dF4rXDlSyDwhZT2lKcv7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:48 2026 by rpki-client