This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MQV-icI-UMcJrDdIVP4RrvPZ3tA.roa File: MQV-icI-UMcJrDdIVP4RrvPZ3tA.roa (raw, json) Hash identifier: pPRG7UDYOfKdLU6yAdqCDFhizNvOP94f7OKONf4ojZU= Subject key identifier: 31:05:7E:89:C2:3E:50:C7:09:AC:37:48:54:FE:11:AE:F3:D9:DE:D0 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C80894E77E1D85AD548439F2C6DB71D Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MQV-icI-UMcJrDdIVP4RrvPZ3tA.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211522 IP address blocks: 45.134.12.0/24 maxlen: 24 45.134.13.0/24 maxlen: 24 45.134.14.0/24 maxlen: 24 45.134.15.0/24 maxlen: 24 185.128.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:89:4e:77:e1:d8:5a:d5:48:43:9f:2c:6d:b7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31057e89c23e50c709ac374854fe11aef3d9ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:d9:14:b8:07:0a:e3:d7:f4:71:bc:84:3e: 74:cc:e0:26:8f:30:ee:e8:6c:ec:78:d6:b5:87:cd: cc:06:7b:ec:d8:8e:68:67:3e:e5:1e:08:6d:fb:de: 50:49:7d:8b:40:75:fc:c9:17:c0:a0:33:62:ac:60: 97:1b:fa:22:c8:2a:fa:50:7d:26:4a:05:e1:67:7e: c8:2a:ac:38:e1:50:2e:00:41:cc:84:57:a4:ff:00: 79:94:e8:aa:c9:fb:d1:2e:9a:c2:b1:37:9b:9e:b1: 1a:0c:56:f5:27:46:f6:b1:83:b4:81:df:e6:91:8e: f8:e4:54:80:0c:25:b7:1a:21:68:60:48:55:67:c3: 7f:fb:5a:a6:e9:a7:51:79:f7:10:30:76:56:1b:56: f2:3d:48:3b:0a:22:20:7e:7b:cf:9d:b2:f3:9e:69: 09:ec:06:41:b1:ec:e6:e1:0b:03:06:4d:fa:2b:9f: cd:3a:cb:bf:00:7e:78:a9:a3:1b:20:d3:c1:68:7e: 1a:67:3d:0d:39:d6:ff:34:7b:40:ba:3e:3b:bb:2d: 31:a1:48:b5:09:38:89:18:d9:a4:91:fb:98:76:ee: 19:87:d9:72:33:03:e4:54:6e:a8:73:aa:22:7d:56: 32:d1:b7:30:b6:bc:b2:3d:20:1e:be:a6:fe:d9:7d: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:7E:89:C2:3E:50:C7:09:AC:37:48:54:FE:11:AE:F3:D9:DE:D0 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MQV-icI-UMcJrDdIVP4RrvPZ3tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.12.0/22 185.128.104.0/24 Signature Algorithm: sha256WithRSAEncryption 15:16:59:06:8d:56:95:25:82:a8:61:3c:9c:77:9a:70:09:be: f1:b2:ca:c7:88:1a:24:12:42:11:f5:47:73:de:90:ad:85:11: 6e:d3:06:9c:85:ea:32:a8:6f:89:d4:c7:f2:0f:84:88:70:94: 5a:00:d4:9e:52:6a:8d:e2:28:89:a1:24:45:14:8c:64:56:80: 11:0c:61:2d:57:c3:39:41:b6:83:8d:37:38:9a:f3:65:ec:0b: bc:cf:eb:d1:59:ef:e2:11:46:04:40:e6:18:d7:12:6d:3c:d1: 2f:9f:1d:39:ec:42:c2:d7:37:bf:c0:dd:ba:e5:20:6f:57:c4: e4:86:de:d3:af:d4:e6:22:d2:ff:a0:17:4d:09:93:fb:3b:56: b1:15:36:75:37:94:fa:8b:fd:79:7f:04:e3:11:1a:88:6d:b2: d5:b5:67:80:86:c7:4f:de:57:50:ce:69:7b:ad:26:b7:7b:3f: 8a:08:8f:16:b5:d3:94:08:ad:64:8b:76:bf:b3:42:76:ef:98: b1:e4:18:5d:62:93:67:fb:0a:de:8c:12:d2:fd:3d:ea:57:6c: 26:eb:3a:eb:b0:87:69:ae:9c:3b:9a:a4:b0:cd:e1:0a:b1:70: 99:ae:4e:74:01:a8:c1:1a:b4:3a:29:d3:be:ac:8e:9c:23:72: 43:02:7d:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gIlOd+HYWtVIQ58sbbcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTA1N2U4OWMyM2U1MGM3MDlhYzM3NDg1NGZlMTFhZWYzZDlkZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29vZFLgHCuPX9HG8hD50zOAmjzDu 6GzseNa1h83MBnvs2I5oZz7lHght+95QSX2LQHX8yRfAoDNirGCXG/oiyCr6UH0m SgXhZ37IKqw44VAuAEHMhFek/wB5lOiqyfvRLprCsTebnrEaDFb1J0b2sYO0gd/m kY745FSADCW3GiFoYEhVZ8N/+1qm6adRefcQMHZWG1byPUg7CiIgfnvPnbLznmkJ 7AZBsezm4QsDBk36K5/NOsu/AH54qaMbINPBaH4aZz0NOdb/NHtAuj47uy0xoUi1 CTiJGNmkkfuYdu4Zh9lyMwPkVG6oc6oifVYy0bcwtryyPSAevqb+2X2dcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDEFfonCPlDHCaw3SFT+Ea7z2d7QMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvTVFWLWljSS1VTWNKckRkSVZQNFJydlBaM3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYYMAwQA uYBoMA0GCSqGSIb3DQEBCwUAA4IBAQAVFlkGjVaVJYKoYTycd5pwCb7xssrHiBok EkIR9Udz3pCthRFu0wacheoyqG+J1MfyD4SIcJRaANSeUmqN4iiJoSRFFIxkVoAR DGEtV8M5QbaDjTc4mvNl7Au8z+vRWe/iEUYEQOYY1xJtPNEvnx057ELC1ze/wN26 5SBvV8Tkht7Tr9TmItL/oBdNCZP7O1axFTZ1N5T6i/15fwTjERqIbbLVtWeAhsdP 3ldQzml7rSa3ez+KCI8WtdOUCK1ki3a/s0J275ix5BhdYpNn+wrejBLS/T3qV2wm 6zrrsIdprpw7mqSwzeEKsXCZrk50AajBGrQ6KdO+rI6cI3JDAn1F -----END CERTIFICATE-----Generated at Wed Jan 21 08:05:14 2026 by rpki-client