This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/MPu6fCIQbDestuwTup6NlHm47os.roa File: MPu6fCIQbDestuwTup6NlHm47os.roa (raw, json) Hash identifier: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc= Subject key identifier: 30:FB:BA:7C:22:10:6C:37:AC:B6:EC:13:BA:9E:8D:94:79:B8:EE:8B Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Certificate serial: 019B78348D2B1006D461E2B09F6840545974 Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/MPu6fCIQbDestuwTup6NlHm47os.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208976 IP address blocks: 45.130.46.0/24 maxlen: 24 2a12:66c0::/32 maxlen: 32 2a12:66c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8d:2b:10:06:d4:61:e2:b0:9f:68:40:54:59:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30fbba7c22106c37acb6ec13ba9e8d9479b8ee8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:9e:03:f4:e4:e1:f2:0e:6a:df:a4:b0:88: c8:9b:45:b9:5c:1a:ea:7b:67:2d:e5:d2:ac:eb:c6: 74:97:41:fb:bf:62:29:1d:cd:05:1a:05:0d:c6:f1: b2:d7:85:57:0f:ba:78:d7:f7:4c:c1:29:9b:05:af: 8e:fa:57:c4:e9:13:45:81:85:5a:d4:96:81:c4:86: fa:a6:e2:a3:e3:fb:32:03:9c:94:49:65:1f:52:74: ba:29:f0:b3:9e:83:ff:9c:8c:69:36:6d:19:0b:15: 52:00:fc:83:84:d0:8b:e1:68:27:8e:a7:3c:00:cb: 2e:32:f0:39:3b:5e:fe:73:69:64:75:a7:56:e9:92: f8:a0:bc:c9:ea:37:ff:9f:3b:41:a0:b6:2f:b8:d0: 21:19:63:f8:b9:c3:27:6d:8e:8b:04:6e:42:90:f4: be:41:8e:bc:f8:d6:6c:93:e8:18:f3:6b:25:f5:d6: b2:47:ad:ef:4e:9c:0f:19:be:5a:f2:fa:09:c1:27: c4:6e:72:ee:55:57:41:27:0f:51:2d:26:0b:54:b9: ac:08:2f:5e:ef:a2:bc:24:ae:ae:72:9a:4b:cf:ff: 20:1a:8a:97:04:fa:f6:e2:8f:9a:b7:42:98:a1:06: a8:9a:f9:70:a1:08:5f:08:a0:e6:a1:41:e1:c6:12: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:BA:7C:22:10:6C:37:AC:B6:EC:13:BA:9E:8D:94:79:B8:EE:8B X509v3 Authority Key Identifier: keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/MPu6fCIQbDestuwTup6NlHm47os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.46.0/24 IPv6: 2a12:66c0::/32 2a12:66c7::/48 Signature Algorithm: sha256WithRSAEncryption 48:5a:eb:6a:e9:0d:a6:4a:7c:32:2a:06:18:39:9e:17:a4:dc: 1b:51:52:90:9d:14:cb:33:aa:77:99:a4:bc:a1:c9:d4:b7:97: c0:2b:55:91:a8:22:00:eb:9f:4b:d0:3b:e3:a4:f3:4b:6d:51: 05:cb:27:91:b4:ba:44:df:9c:82:61:91:6a:73:43:d7:2c:e8: cd:14:2d:09:a3:bf:3c:01:09:b2:f5:ba:0a:7f:df:84:08:24: 15:e5:e4:72:a2:df:9f:29:ed:c6:5b:1f:c4:f3:c8:ef:f3:63: 7f:dd:40:45:74:db:40:75:aa:37:45:b7:c9:41:b9:e4:32:b3: 81:25:7f:ab:98:0b:75:42:6f:b7:b6:75:6a:6c:5e:a8:62:d9: 6e:f3:a5:b6:c9:52:9e:1c:10:48:43:8e:c6:a1:73:3f:7e:3c: 8b:c2:e8:90:a6:50:cf:f0:f1:15:56:e0:c5:1a:68:3d:54:07: 2c:af:23:0e:5b:6c:f5:b8:15:a5:0b:61:fe:50:6c:81:7a:f5: be:11:5d:b1:f4:2d:64:e7:bc:a9:a3:29:59:5f:6c:46:69:23: d6:ec:65:6c:42:2e:7c:18:58:c5:da:7f:3a:68:33:83:9a:d9: 6b:d1:12:78:b4:22:41:9b:04:1e:1a:04:32:45:57:9e:b7:1a: 9e:fe:c1:b0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4NI0rEAbUYeKwn2hAVFl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1 M2VlMmIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGZiYmE3YzIyMTA2YzM3YWNiNmVjMTNiYTllOGQ5NDc5YjhlZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTqeA/Tk4fIOat+ksIjIm0W5XBrq e2ct5dKs68Z0l0H7v2IpHc0FGgUNxvGy14VXD7p41/dMwSmbBa+O+lfE6RNFgYVa 1JaBxIb6puKj4/syA5yUSWUfUnS6KfCznoP/nIxpNm0ZCxVSAPyDhNCL4Wgnjqc8 AMsuMvA5O17+c2lkdadW6ZL4oLzJ6jf/nztBoLYvuNAhGWP4ucMnbY6LBG5CkPS+ QY68+NZsk+gY82sl9dayR63vTpwPGb5a8voJwSfEbnLuVVdBJw9RLSYLVLmsCC9e 76K8JK6ucppLz/8gGoqXBPr24o+at0KYoQaomvlwoQhfCKDmoUHhxhKwmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDD7unwiEGw3rLbsE7qejZR5uO6LMB8GA1UdIwQY MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt ZGM3ZTEyNmNhMjM0LzEvTVB1NmZDSVFiRGVzdHV3VHVwNk5sSG00N29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0 LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQALYIuMBYE AgACMBADBQAqEmbAAwcAKhJmxwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBIWutq6Q2m SnwyKgYYOZ4XpNwbUVKQnRTLM6p3maS8ocnUt5fAK1WRqCIA659L0DvjpPNLbVEF yyeRtLpE35yCYZFqc0PXLOjNFC0Jo788AQmy9boKf9+ECCQV5eRyot+fKe3GWx/E 88jv82N/3UBFdNtAdao3RbfJQbnkMrOBJX+rmAt1Qm+3tnVqbF6oYtlu86W2yVKe HBBIQ47GoXM/fjyLwuiQplDP8PEVVuDFGmg9VAcsryMOW2z1uBWlC2H+UGyBevW+ EV2x9C1k57ypoylZX2xGaSPW7GVsQi58GFjF2n86aDODmtlr0RJ4tCJBmwQeGgQy RVeetxqe/sGw -----END CERTIFICATE-----Generated at Wed Jan 21 21:29:55 2026 by rpki-client