This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/MfN2Gu5BN4G7488wno6PGWe0FDY.roa File: MfN2Gu5BN4G7488wno6PGWe0FDY.roa (raw, json) Hash identifier: kLhLY55A0NkLXCFXmojQ0uiumYsyv2wuegRkrcVkjbs= Subject key identifier: 31:F3:76:1A:EE:41:37:81:BB:E3:CF:30:9E:8E:8F:19:67:B4:14:36 Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef Certificate serial: 019B78A280621E0B8544162CAE1C0D485630 Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/MfN2Gu5BN4G7488wno6PGWe0FDY.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 5.172.160.0/20 maxlen: 24 5.172.170.0/24 maxlen: 24 81.2.64.0/18 maxlen: 24 81.187.0.0/16 maxlen: 24 81.187.161.0/24 maxlen: 24 90.155.0.0/18 maxlen: 24 90.155.64.0/19 maxlen: 24 90.155.96.0/20 maxlen: 20 178.238.144.0/20 maxlen: 24 194.4.172.0/22 maxlen: 24 217.169.0.0/19 maxlen: 24 2001:8b0::/32 maxlen: 63 2001:8b0:a::666/128 maxlen: 128 2001:8b6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:80:62:1e:0b:85:44:16:2c:ae:1c:0d:48:56:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31f3761aee413781bbe3cf309e8e8f1967b41436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:57:c1:09:57:c0:9c:60:cc:4d:2d:49:72: 03:f8:a8:fb:92:ad:30:68:99:4a:b5:ee:7e:ef:30: dc:85:c7:d7:04:a7:0d:ea:4e:2f:38:aa:27:fa:6d: 71:c2:68:b7:07:f5:72:ae:dd:4c:89:75:42:53:47: 3f:46:bb:dc:0a:17:43:fc:b6:eb:fa:2d:d9:52:b0: 5f:b0:23:6b:56:76:5e:5e:db:4a:bd:da:7d:f5:91: bf:c8:af:52:1a:1e:95:71:1d:ef:9a:07:1c:5d:3c: b7:a4:eb:4b:3d:30:7b:b9:61:f3:a9:f2:04:70:06: 0e:e2:15:ec:75:22:32:27:ed:20:30:2c:4d:31:82: 71:1a:9d:2c:10:d7:af:17:01:63:82:95:6c:06:cd: a3:0f:7c:ba:2b:68:8e:15:57:df:39:bd:f4:73:da: 0f:9e:fb:74:a9:6c:50:15:a9:eb:5f:ee:b5:bf:d8: 58:b7:fb:2e:7d:40:ee:6d:a1:a8:b6:15:76:4a:dc: 52:85:80:07:bb:fc:1e:78:f6:e3:ab:40:b4:b2:89: 39:5a:b7:91:89:99:5c:ca:31:35:06:08:ab:43:68: 6e:72:a0:1c:61:6d:bb:6a:46:3b:0b:ac:7c:d5:33: c2:60:8a:9e:76:20:82:0b:c0:0b:60:af:61:39:6a: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:76:1A:EE:41:37:81:BB:E3:CF:30:9E:8E:8F:19:67:B4:14:36 X509v3 Authority Key Identifier: keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/MfN2Gu5BN4G7488wno6PGWe0FDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.160.0/20 81.2.64.0/18 81.187.0.0/16 90.155.0.0-90.155.111.255 178.238.144.0/20 194.4.172.0/22 217.169.0.0/19 IPv6: 2001:8b0::/32 2001:8b6::/32 Signature Algorithm: sha256WithRSAEncryption 61:0d:03:ed:6d:43:34:3a:a0:1c:06:16:e8:c8:58:b6:cc:a7: 21:ab:f0:0f:00:d9:94:dc:e7:1a:77:0d:6c:9d:37:45:10:cf: e3:a7:d2:57:d3:9f:dc:da:a9:f4:6f:20:71:7a:5d:62:b8:c8: 8a:87:52:e1:6e:a4:fe:f4:a4:f6:ec:99:d1:45:c5:59:ac:48: 3c:70:dd:90:ad:97:22:1e:76:61:bf:c5:78:d6:14:4b:81:93: 61:c9:75:7b:98:3c:6b:55:41:3a:c6:ec:40:98:5b:34:90:25: 28:71:5d:db:c4:08:f6:3b:b2:2d:1b:a2:55:f8:02:c9:c4:70: 33:3e:ff:4e:76:54:c9:10:0f:f3:5e:4b:78:a7:3d:3d:f3:9f: e1:83:7f:9e:9c:d5:f6:a8:47:12:7a:ef:f0:c8:fe:f2:4d:50: 40:c0:ed:dc:c9:5e:b7:58:ec:e9:c3:c3:5b:23:3c:3f:43:ae: 04:9c:3b:5a:10:2d:e2:96:fd:87:37:02:2b:d3:cb:b2:30:30: 9d:fe:5d:25:c2:0e:88:4c:7a:24:74:0d:83:a7:d2:c9:15:ad: fc:a7:82:7f:6c:79:86:e2:16:75:90:ee:ef:ce:56:91:44:2b: b9:42:93:c1:0e:be:4d:3a:6e:3e:42:d1:47:66:16:ef:17:d0: 49:77:70:2a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt4ooBiHguFRBYsrhwNSFYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh YWNmZWYwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWYzNzYxYWVlNDEzNzgxYmJlM2NmMzA5ZThlOGYxOTY3YjQxNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9xXwQlXwJxgzE0tSXID+Kj7kq0w aJlKte5+7zDchcfXBKcN6k4vOKon+m1xwmi3B/Vyrt1MiXVCU0c/RrvcChdD/Lbr +i3ZUrBfsCNrVnZeXttKvdp99ZG/yK9SGh6VcR3vmgccXTy3pOtLPTB7uWHzqfIE cAYO4hXsdSIyJ+0gMCxNMYJxGp0sENevFwFjgpVsBs2jD3y6K2iOFVffOb30c9oP nvt0qWxQFanrX+61v9hYt/sufUDubaGothV2StxShYAHu/weePbjq0C0sok5WreR iZlcyjE1BgirQ2hucqAcYW27akY7C6x81TPCYIqediCCC8ALYK9hOWpMcQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDHzdhruQTeBu+PPMJ6OjxlntBQ2MB8GA1UdIwQY MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt NzNmZjQwOTU5MzQ4LzEvTWZOMkd1NUJONEc3NDg4d25vNlBHV2UwRkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4 LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQEBaygAwQG UQJAAwMAUbswCwMDAFqbAwQEWptgAwQEsu6QAwQCwgSsAwQF2akAMBQEAgACMA4D BQAgAQiwAwUAIAEItjANBgkqhkiG9w0BAQsFAAOCAQEAYQ0D7W1DNDqgHAYW6MhY tsynIavwDwDZlNznGncNbJ03RRDP46fSV9Of3Nqp9G8gcXpdYrjIiodS4W6k/vSk 9uyZ0UXFWaxIPHDdkK2XIh52Yb/FeNYUS4GTYcl1e5g8a1VBOsbsQJhbNJAlKHFd 28QI9juyLRuiVfgCycRwMz7/TnZUyRAP815LeKc9PfOf4YN/npzV9qhHEnrv8Mj+ 8k1QQMDt3Mlet1js6cPDWyM8P0OuBJw7WhAt4pb9hzcCK9PLsjAwnf5dJcIOiEx6 JHQNg6fSyRWt/KeCf2x5huIWdZDu785WkUQruUKTwQ6+TTpuPkLRR2YW7xfQSXdw Kg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:14 2026 by rpki-client