This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MpgwPmCd8Im_fdg8sA2O1fys0R4.roa File: MpgwPmCd8Im_fdg8sA2O1fys0R4.roa (raw, json) Hash identifier: oZngCvR7ulBDcUd3lPKpo6IUY0yWHIJmThTyC7ri3Jc= Subject key identifier: 32:98:30:3E:60:9D:F0:89:BF:7D:D8:3C:B0:0D:8E:D5:FC:AC:D1:1E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B19F174DF2021470C9242B463A09 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MpgwPmCd8Im_fdg8sA2O1fys0R4.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45014 IP address blocks: 84.233.136.0/24 maxlen: 24 84.233.141.0/24 maxlen: 24 84.233.142.0/24 maxlen: 24 84.233.146.0/24 maxlen: 24 84.233.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b1:9f:17:4d:f2:02:14:70:c9:24:2b:46:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3298303e609df089bf7dd83cb00d8ed5fcacd11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:8e:ed:60:d3:61:1d:0d:c8:7b:8e:4b:79: ae:8c:c4:1f:8f:dd:04:07:68:c9:07:19:38:b8:05: 91:41:99:25:ad:10:ac:b3:5b:a1:c7:24:d4:7e:f0: eb:55:eb:86:2e:00:98:f9:19:fb:aa:73:5f:cb:d7: 89:39:b9:0c:f0:51:a6:f1:ef:e2:94:cf:95:59:af: df:52:58:a3:6f:7c:58:5c:53:4a:97:2f:56:67:12: 54:66:62:b1:a3:90:4c:3e:16:be:9b:1e:ae:e1:93: 3c:a1:66:c4:a6:32:64:18:88:09:08:af:93:0d:30: eb:74:ef:70:a5:4d:ee:15:a5:53:61:06:d4:d0:6d: 07:9a:dd:1b:f6:4f:3a:ce:83:c3:3f:28:ca:89:e1: e9:a7:ab:c6:14:29:04:dd:4b:a2:0a:1d:b2:f9:70: 1a:84:59:e3:86:c1:82:d8:6b:db:45:49:c0:88:4a: 2d:a7:80:d8:6f:89:03:fc:61:f4:9d:84:35:bd:c3: ad:2c:34:b8:ec:a1:85:00:78:5d:8f:5a:6c:28:3e: 34:2d:a2:58:3e:01:a8:4f:0b:9b:fc:ba:c2:60:d9: 67:63:5e:08:74:f0:35:49:b0:bb:e2:a4:c5:19:97: 34:79:05:63:30:8e:d8:9b:64:ab:a5:2c:ba:38:87: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:30:3E:60:9D:F0:89:BF:7D:D8:3C:B0:0D:8E:D5:FC:AC:D1:1E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MpgwPmCd8Im_fdg8sA2O1fys0R4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.233.136.0/24 84.233.141.0-84.233.142.255 84.233.146.0/24 84.233.156.0/24 Signature Algorithm: sha256WithRSAEncryption 01:84:f8:de:76:b7:65:d6:18:e4:59:8f:3d:69:9e:0c:d3:ef: 57:74:cf:39:ce:1c:ce:91:3c:cf:0a:d0:56:68:16:b9:35:b8: 39:65:3d:45:c4:70:c3:a9:b1:ba:3c:2b:aa:e9:87:64:95:b2: 77:47:85:75:ff:dc:e5:80:f9:c0:67:fc:f0:d3:dd:a7:eb:fd: 36:fc:e5:00:83:7a:a3:fb:2c:32:28:ed:dd:ad:ea:43:9d:75: c2:71:20:cf:b8:57:8f:c3:7e:42:b2:87:8c:5a:3b:75:22:1a: f7:9b:19:58:73:e3:84:ff:8c:d4:ba:fd:83:de:55:06:e6:62: cd:77:af:ca:15:6d:e6:41:81:97:92:0f:ca:e4:7f:41:c2:8f: 15:6d:94:16:14:bd:2c:d7:d4:b0:26:54:0c:de:d4:f0:61:cc: 20:38:49:8b:f0:be:d2:7d:ec:c6:48:32:07:d3:bf:ea:97:14: 2f:bf:90:88:1b:1c:14:be:3c:7c:96:f5:72:02:de:76:ea:3e: 54:4d:83:06:a5:82:90:4d:ab:ae:b0:df:71:f9:7b:ab:67:b8: 78:a9:ae:41:26:0a:e0:b1:a5:45:a3:95:33:22:a2:06:c5:a8: 78:fe:42:37:97:2e:84:be:37:ae:22:3f:1f:59:24:bf:2d:f2: 04:c4:ae:4a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FLGfF03yAhRwySQrRjoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjk4MzAzZTYwOWRmMDg5YmY3ZGQ4M2NiMDBkOGVkNWZjYWNkMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfOO7WDTYR0NyHuOS3mujMQfj90E B2jJBxk4uAWRQZklrRCss1uhxyTUfvDrVeuGLgCY+Rn7qnNfy9eJObkM8FGm8e/i lM+VWa/fUlijb3xYXFNKly9WZxJUZmKxo5BMPha+mx6u4ZM8oWbEpjJkGIgJCK+T DTDrdO9wpU3uFaVTYQbU0G0Hmt0b9k86zoPDPyjKieHpp6vGFCkE3UuiCh2y+XAa hFnjhsGC2GvbRUnAiEotp4DYb4kD/GH0nYQ1vcOtLDS47KGFAHhdj1psKD40LaJY PgGoTwub/LrCYNlnY14IdPA1SbC74qTFGZc0eQVjMI7Ym2SrpSy6OIcjGQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDKYMD5gnfCJv33YPLANjtX8rNEeMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvTXBnd1BtQ2Q4SW1fZmRnOHNBMk8xZnlzMFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAVOmIMAwD BABU6Y0DBABU6Y4DBABU6ZIDBABU6ZwwDQYJKoZIhvcNAQELBQADggEBAAGE+N52 t2XWGORZjz1pngzT71d0zznOHM6RPM8K0FZoFrk1uDllPUXEcMOpsbo8K6rph2SV sndHhXX/3OWA+cBn/PDT3afr/Tb85QCDeqP7LDIo7d2t6kOddcJxIM+4V4/DfkKy h4xaO3UiGvebGVhz44T/jNS6/YPeVQbmYs13r8oVbeZBgZeSD8rkf0HCjxVtlBYU vSzX1LAmVAze1PBhzCA4SYvwvtJ97MZIMgfTv+qXFC+/kIgbHBS+PHyW9XIC3nbq PlRNgwalgpBNq66w33H5e6tnuHiprkEmCuCxpUWjlTMiogbFqHj+QjeXLoS+N64i Px9ZJL8t8gTErko= -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:31 2026 by rpki-client