This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa File: MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa (raw, json) Hash identifier: JNpBzF/bGBycltANPUKMe/k4nJGYJgbUSLWLk2GhApA= Subject key identifier: 31:C8:60:1A:0F:C9:B9:9F:D7:C5:53:FC:12:3B:59:CA:A4:99:09:27 Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af Certificate serial: 019ABB84D2814C92D52E5B1A556361DAB816 Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa Signing time: Tue 25 Nov 2025 14:57:15 +0000 ROA not before: Tue 25 Nov 2025 14:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202128 IP address blocks: 185.78.208.0/22 maxlen: 22 185.122.196.0/24 maxlen: 24 185.122.197.0/24 maxlen: 24 185.122.198.0/24 maxlen: 24 185.122.199.0/24 maxlen: 24 185.148.16.0/22 maxlen: 22 185.148.16.0/23 maxlen: 24 2a05:6d40::/29 maxlen: 29 2a07:5b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:84:d2:81:4c:92:d5:2e:5b:1a:55:63:61:da:b8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb190d102ac9603b405b36374d429868604937af Validity Not Before: Nov 25 14:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31c8601a0fc9b99fd7c553fc123b59caa4990927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:92:87:5a:60:f5:1f:f8:fa:0f:46:f2:c5: 22:53:99:f7:bc:0c:8e:32:f3:51:ae:f9:42:ad:7f: c3:d2:c5:f1:06:2e:89:b2:7c:38:41:63:95:5d:7a: eb:17:ed:92:d6:29:e5:13:c7:39:b8:d7:31:50:b0: 6e:e1:e0:5f:e1:b1:b6:f7:1c:01:cd:8e:f3:93:3d: a8:c7:df:ad:a1:f6:be:18:80:cd:ea:48:a7:86:a6: c3:2d:e0:1c:eb:20:f6:8d:d8:13:30:e6:6d:56:b5: 5c:11:e8:d6:c0:f9:31:d4:32:78:59:d4:44:e0:c0: d6:c3:d8:6f:d0:4f:1c:fa:02:74:d9:e0:b9:f4:1b: f6:2c:6d:d6:a2:7f:18:51:24:49:39:7c:e5:9d:fa: f6:04:2a:95:a4:34:a2:5d:bd:0c:05:f0:b9:79:81: dc:a0:2f:56:c9:79:af:aa:d3:ad:11:fd:cd:2e:11: 07:73:43:d3:58:3f:b4:2e:82:1e:26:ea:e4:f7:42: 35:e3:a3:a2:8d:7b:10:6c:50:da:e0:5f:41:74:46: 7b:4c:79:b4:b2:ab:08:a9:0c:39:69:6e:25:97:d0: a7:2c:8b:5f:b6:e3:33:99:d6:16:ed:ca:30:54:3b: ca:ef:16:40:ae:45:76:5c:3c:3d:83:4d:95:18:1c: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:60:1A:0F:C9:B9:9F:D7:C5:53:FC:12:3B:59:CA:A4:99:09:27 X509v3 Authority Key Identifier: keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.208.0/22 185.122.196.0/22 185.148.16.0/22 IPv6: 2a05:6d40::/29 2a07:5b80::/29 Signature Algorithm: sha256WithRSAEncryption 61:b3:1f:5c:53:15:f5:78:da:a1:cb:17:5e:1a:cd:2e:33:ad: 51:19:3c:80:e9:68:47:b6:19:de:22:ae:68:27:97:b5:ec:16: 32:35:cb:41:6d:89:f9:b9:29:49:1f:45:ac:49:66:31:cb:d3: 11:30:e6:e5:76:c5:d7:55:15:cd:f4:46:5f:a3:04:bd:b1:3c: 18:d3:21:a8:7c:0d:d3:67:23:86:0d:35:2a:a3:47:49:8f:58: dd:35:33:3a:f5:40:37:6e:b0:b8:5c:63:73:20:4c:c3:6a:c0: 9c:3f:bd:3b:e5:52:96:bc:ad:55:b3:ea:e2:ec:ca:9b:3c:8d: 17:5a:e9:ab:46:cd:98:9f:df:4d:18:ab:e7:5c:98:86:04:b4: 28:ca:1e:92:e8:34:4c:8e:58:7b:5e:1f:64:35:4b:72:e5:3c: 89:95:f0:da:bd:44:ae:3f:a7:4a:45:3b:a1:4a:cc:ae:5c:00: f0:f4:01:9d:ff:c5:60:1c:13:67:14:c1:03:38:e3:82:c1:41: df:12:d1:72:a1:8f:8c:0d:6f:61:9d:68:3a:cf:72:22:cb:63: 65:b3:d7:f1:6a:be:e2:3a:2f:d2:eb:5c:81:a0:56:75:26:34: d8:85:fe:4e:68:8c:05:16:16:cb:e4:ca:8f:97:9e:68:6c:59: 70:b6:7d:c7 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZq7hNKBTJLVLlsaVWNh2rgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0 OTM3YWYwHhcNMjUxMTI1MTQ1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWM4NjAxYTBmYzliOTlmZDdjNTUzZmMxMjNiNTljYWE0OTkwOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xWSh1pg9R/4+g9G8sUiU5n3vAyO MvNRrvlCrX/D0sXxBi6Jsnw4QWOVXXrrF+2S1inlE8c5uNcxULBu4eBf4bG29xwB zY7zkz2ox9+tofa+GIDN6kinhqbDLeAc6yD2jdgTMOZtVrVcEejWwPkx1DJ4WdRE 4MDWw9hv0E8c+gJ02eC59Bv2LG3Won8YUSRJOXzlnfr2BCqVpDSiXb0MBfC5eYHc oC9WyXmvqtOtEf3NLhEHc0PTWD+0LoIeJurk90I146OijXsQbFDa4F9BdEZ7THm0 sqsIqQw5aW4ll9CnLItftuMzmdYW7cowVDvK7xZArkV2XDw9g02VGBx3aQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDHIYBoPybmf18VT/BI7WcqkmQknMB8GA1UdIwQY MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt ZTkzZTJlYmE2OWI5LzEvTWNoZ0dnX0p1Wl9YeFZQOEVqdFp5cVNaQ1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5 LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuU7QAwQC uXrEAwQCuZQQMBQEAgACMA4DBQMqBW1AAwUDKgdbgDANBgkqhkiG9w0BAQsFAAOC AQEAYbMfXFMV9XjaocsXXhrNLjOtURk8gOloR7YZ3iKuaCeXtewWMjXLQW2J+bkp SR9FrElmMcvTETDm5XbF11UVzfRGX6MEvbE8GNMhqHwN02cjhg01KqNHSY9Y3TUz OvVAN26wuFxjcyBMw2rAnD+9O+VSlrytVbPq4uzKmzyNF1rpq0bNmJ/fTRir51yY hgS0KMoekug0TI5Ye14fZDVLcuU8iZXw2r1Erj+nSkU7oUrMrlwA8PQBnf/FYBwT ZxTBAzjjgsFB3xLRcqGPjA1vYZ1oOs9yIstjZbPX8Wq+4jov0utcgaBWdSY02IX+ TmiMBRYWy+TKj5eeaGxZcLZ9xw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:37 2025 by rpki-client