This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/MGecWndx1rC8r0_cF__XvWTIdhY.roa File: MGecWndx1rC8r0_cF__XvWTIdhY.roa (raw, json) Hash identifier: xMJtrWi1rZ3GmoFWTN/zEzHLjFTmPRigqDi25vDVZzk= Subject key identifier: 30:67:9C:5A:77:71:D6:B0:BC:AF:4F:DC:17:FF:D7:BD:64:C8:76:16 Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Certificate serial: 019B7834D373FF8B134954911E47B292CD8B Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/MGecWndx1rC8r0_cF__XvWTIdhY.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50405 IP address blocks: 193.8.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d3:73:ff:8b:13:49:54:91:1e:47:b2:92:cd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30679c5a7771d6b0bcaf4fdc17ffd7bd64c87616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:48:32:74:a2:47:0c:ea:0b:61:e1:33:61: 6e:e7:b2:9a:a0:d9:b1:13:bd:14:c7:9f:e5:f2:35: 40:6e:ea:17:8c:57:c7:9d:87:62:4b:d2:82:f7:73: 72:61:93:38:33:df:dd:3b:af:e9:f0:bf:7f:41:7e: 77:05:72:13:85:ad:8d:c4:02:03:f6:5b:e7:82:6a: 4d:37:3c:5d:6c:dd:a5:cb:63:5f:5f:a6:ed:ba:e8: 76:a8:fc:31:ab:ac:ec:a0:07:2b:d9:68:f1:71:13: db:4a:db:22:6f:66:15:3a:c8:1b:34:91:30:d4:a0: 0a:3f:4b:67:ed:76:de:fa:9c:21:74:82:42:ae:00: 33:b9:8c:ce:a7:bf:e3:f1:86:c1:94:59:ee:de:f4: 6a:3b:17:60:ad:83:ba:62:a0:02:1c:72:be:53:14: ca:7c:41:f6:d2:18:1e:b2:63:49:b5:8b:aa:ea:60: c0:17:b6:54:7c:3d:00:01:3f:c4:98:dc:d2:72:89: 0c:cd:4b:09:1d:71:0a:6a:21:f4:f9:a3:26:d5:86: fb:2d:ae:7b:9e:30:fe:30:d1:6c:33:f1:e8:71:9b: 60:1b:be:e2:94:ff:d6:0c:bc:cc:a1:36:49:de:fd: 96:d1:76:3c:8a:78:48:cb:1b:65:26:6a:ee:53:35: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:9C:5A:77:71:D6:B0:BC:AF:4F:DC:17:FF:D7:BD:64:C8:76:16 X509v3 Authority Key Identifier: keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/MGecWndx1rC8r0_cF__XvWTIdhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.252.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6f:3d:22:99:f4:45:ee:96:38:a0:7e:1a:22:3d:40:97:21: b7:65:3f:1f:b7:b5:ee:74:2d:1a:08:33:2e:45:39:12:fc:3c: a3:3a:9b:e3:90:3f:15:f4:2c:bf:bd:54:4b:20:e1:f8:b7:3d: 6f:e4:5f:f8:9a:1c:84:97:27:ab:cd:ae:ac:fd:88:1c:d3:bf: 19:53:19:16:3f:ad:98:34:af:8b:73:74:22:9f:4c:f8:a3:84: 99:64:2e:f4:6a:29:9f:7f:8e:3c:fb:86:4d:1d:73:74:76:a6: b3:4b:a2:35:b0:d8:e4:9b:f5:09:77:42:16:3e:8e:97:e5:a1: 34:34:90:c6:82:8d:40:c8:bf:ce:8f:9b:82:79:ce:88:b1:1e: fc:d4:7f:31:a3:88:ae:85:f8:68:97:21:6b:d6:e9:91:d8:56: dd:58:50:1e:c4:c1:7c:7a:7c:23:92:52:b3:37:f5:bc:21:ad: 0e:a9:8c:93:c9:92:3d:40:e8:d8:40:3e:42:04:bc:60:96:82: aa:75:4a:fe:5d:58:b5:12:5b:fd:33:77:51:9e:b6:60:e4:84: 7f:4c:c3:00:c4:39:82:f8:5e:51:6f:8d:c9:34:07:9a:d0:22: e7:3d:4c:ab:dc:c9:dd:83:1e:31:74:bd:da:a1:0d:02:4f:bb: 86:fb:0a:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNNz/4sTSVSRHkeyks2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWQ0NWEyYWJiOTYwZDJiY2U3NThlY2U3MzNiMTI2ZGNh N2U3MWIwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDY3OWM1YTc3NzFkNmIwYmNhZjRmZGMxN2ZmZDdiZDY0Yzg3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaJIMnSiRwzqC2HhM2Fu57KaoNmx E70Ux5/l8jVAbuoXjFfHnYdiS9KC93NyYZM4M9/dO6/p8L9/QX53BXITha2NxAID 9lvngmpNNzxdbN2ly2NfX6btuuh2qPwxq6zsoAcr2WjxcRPbStsib2YVOsgbNJEw 1KAKP0tn7Xbe+pwhdIJCrgAzuYzOp7/j8YbBlFnu3vRqOxdgrYO6YqACHHK+UxTK fEH20hgesmNJtYuq6mDAF7ZUfD0AAT/EmNzScokMzUsJHXEKaiH0+aMm1Yb7La57 njD+MNFsM/HocZtgG77ilP/WDLzMoTZJ3v2W0XY8inhIyxtlJmruUzWmYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBnnFp3cdawvK9P3Bf/171kyHYWMB8GA1UdIwQY MBaAFEtdRaKruWDSvOdY7OczsSbcp+cbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgt ODEwYjlmNWNjNDE1LzEvTUdlY1duZHgxckM4cjBfY0ZfX1h2V1RJZGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgtODEwYjlmNWNjNDE1 LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQj8MA0G CSqGSIb3DQEBCwUAA4IBAQAObz0imfRF7pY4oH4aIj1AlyG3ZT8ft7XudC0aCDMu RTkS/DyjOpvjkD8V9Cy/vVRLIOH4tz1v5F/4mhyElyerza6s/Ygc078ZUxkWP62Y NK+Lc3Qin0z4o4SZZC70aimff448+4ZNHXN0dqazS6I1sNjkm/UJd0IWPo6X5aE0 NJDGgo1AyL/Oj5uCec6IsR781H8xo4iuhfholyFr1umR2FbdWFAexMF8enwjklKz N/W8Ia0OqYyTyZI9QOjYQD5CBLxgloKqdUr+XVi1Elv9M3dRnrZg5IR/TMMAxDmC +F5Rb43JNAea0CLnPUyr3Mndgx4xdL3aoQ0CT7uG+wpj -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:30 2026 by rpki-client