This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa File: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (raw, json) Hash identifier: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g= Subject key identifier: 9A:01:29:78:8D:76:30:47:35:23:D6:25:E0:21:93:06:60:64:D9:B1 Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Certificate serial: 019B7CEE4EF975AAF4369F6D042E16E43ADF Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13039 IP address blocks: 192.54.45.0/24 maxlen: 24 192.109.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4e:f9:75:aa:f4:36:9f:6d:04:2e:16:e4:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a0129788d7630473523d625e02193066064d9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:79:ef:47:92:fe:0e:96:9f:74:c4:10:b8:25: 4b:08:69:1b:07:37:ea:bf:06:44:fe:ff:d7:74:50: 90:ff:a4:6f:fd:f9:06:81:75:14:1f:fd:07:f3:3a: 69:c6:aa:6d:7e:2d:bd:cb:d0:d6:00:d2:32:78:90: df:93:d8:a2:ec:e0:b7:8a:ab:01:1a:67:c0:87:71: a2:11:8f:b7:83:f2:d2:d8:14:59:24:5b:65:c9:d0: 17:10:cb:ec:83:9e:12:2d:67:6c:d6:1a:a3:e4:e7: f4:45:56:05:56:88:c1:5f:63:5c:13:00:3e:5a:07: 4d:c5:1b:6d:de:e6:0e:2a:61:f6:2c:8c:83:1e:71: a2:19:55:a1:03:4c:77:df:ff:86:79:6a:95:5c:27: 79:ab:52:49:9f:cf:63:08:95:62:c5:47:25:93:29: a5:f1:08:30:c4:19:ef:53:a2:76:2c:c2:0c:e8:da: f7:40:97:f2:ad:0c:98:c9:80:33:6d:14:20:30:65: af:42:82:82:53:37:43:97:63:c9:bf:8c:e1:65:2a: c8:f3:b1:03:7b:4c:75:3e:95:c9:50:45:ac:72:b5: 79:ab:fc:50:0a:a3:c9:dd:c6:eb:97:f7:64:dc:05: f6:da:d1:61:cf:29:54:e1:6e:f6:b6:89:89:d1:8b: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:01:29:78:8D:76:30:47:35:23:D6:25:E0:21:93:06:60:64:D9:B1 X509v3 Authority Key Identifier: keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.54.45.0/24 192.109.252.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8a:80:f1:e7:3b:75:27:cb:f7:cc:c1:51:98:5a:dd:38:b0: 82:19:66:82:c2:16:72:ad:c7:cd:66:0a:28:53:09:af:00:de: 2a:e4:a0:87:a2:99:14:33:0a:cb:dd:d8:0c:9b:75:06:83:ba: 89:e0:99:cf:1c:c4:49:e9:d1:88:7e:69:39:2c:ee:14:5c:51: cb:7a:ac:c8:85:f7:f1:d2:ca:a9:67:26:9c:0d:5a:6f:9d:a8: ef:63:d4:fa:a2:9c:ae:36:bc:8f:b6:2d:01:92:91:68:74:31: 34:26:e6:fa:ce:9f:bc:97:4c:62:76:29:97:6f:6e:de:8e:27: 98:8a:c6:b3:02:e3:f0:75:48:78:b6:db:4d:47:d6:a8:3f:97: e9:94:58:a7:03:e6:7b:fe:4a:30:27:9d:95:f8:c7:e3:90:e2: 70:ad:4b:c0:7c:f7:51:b8:9f:5b:44:fb:a7:5e:7b:54:36:2b: 62:ca:b6:1f:06:61:3e:2c:5a:d0:cb:20:ad:18:f4:1b:d9:fb: e6:9e:fc:89:56:c1:41:ca:d0:3b:41:f4:d2:11:55:e5:05:df: 75:30:72:cb:47:12:e5:24:9a:18:fd:19:98:98:38:6c:c4:98: 60:64:1e:c2:bb:bb:5c:67:bb:e5:cc:3a:e5:76:cd:c2:f3:f1: 5e:9d:01:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87k75dar0Np9tBC4W5DrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh M2Q3NGQwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTAxMjk3ODhkNzYzMDQ3MzUyM2Q2MjVlMDIxOTMwNjYwNjRkOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XnvR5L+DpafdMQQuCVLCGkbBzfq vwZE/v/XdFCQ/6Rv/fkGgXUUH/0H8zppxqptfi29y9DWANIyeJDfk9ii7OC3iqsB GmfAh3GiEY+3g/LS2BRZJFtlydAXEMvsg54SLWds1hqj5Of0RVYFVojBX2NcEwA+ WgdNxRtt3uYOKmH2LIyDHnGiGVWhA0x33/+GeWqVXCd5q1JJn89jCJVixUclkyml 8QgwxBnvU6J2LMIM6Nr3QJfyrQyYyYAzbRQgMGWvQoKCUzdDl2PJv4zhZSrI87ED e0x1PpXJUEWscrV5q/xQCqPJ3cbrl/dk3AX22tFhzylU4W72tomJ0YtKAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJoBKXiNdjBHNSPWJeAhkwZgZNmxMB8GA1UdIwQY MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct NTc3ODY5NTFiNzhmLzEvbWdFcGVJMTJNRWMxSTlZbDRDR1RCbUJrMmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwDYtAwQA wG38MA0GCSqGSIb3DQEBCwUAA4IBAQBfioDx5zt1J8v3zMFRmFrdOLCCGWaCwhZy rcfNZgooUwmvAN4q5KCHopkUMwrL3dgMm3UGg7qJ4JnPHMRJ6dGIfmk5LO4UXFHL eqzIhffx0sqpZyacDVpvnajvY9T6opyuNryPti0BkpFodDE0Jub6zp+8l0xidimX b27ejieYisazAuPwdUh4tttNR9aoP5fplFinA+Z7/kowJ52V+MfjkOJwrUvAfPdR uJ9bRPunXntUNitiyrYfBmE+LFrQyyCtGPQb2fvmnvyJVsFBytA7QfTSEVXlBd91 MHLLRxLlJJoY/RmYmDhsxJhgZB7Cu7tcZ7vlzDrlds3C8/FenQEN -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:52 2026 by rpki-client