This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa File: MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa (raw, json) Hash identifier: Qd2SVc4TBTw+56gUg4ZW2uBmux+ll/A2gumdDvDs79g= Subject key identifier: 30:6A:F9:B0:31:65:6D:05:4C:9D:10:EC:AF:4C:18:4F:65:C0:89:49 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019B7D5BCD14FF8DE3808C18E509190D6895 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa Signing time: Fri 02 Jan 2026 06:18:46 +0000 ROA not before: Fri 02 Jan 2026 06:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203936 IP address blocks: 185.237.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:cd:14:ff:8d:e3:80:8c:18:e5:09:19:0d:68:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Jan 2 06:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306af9b031656d054c9d10ecaf4c184f65c08949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:cf:9f:56:e4:07:c3:46:be:94:fd:6a:6f: c5:a5:4c:fb:31:26:cf:ff:33:36:d1:18:a8:af:a4: a6:e1:11:0d:d0:96:13:3d:f5:b0:33:56:84:14:6e: 40:97:5d:31:61:e5:7f:4e:62:a9:53:37:99:39:a5: ed:ab:9b:dc:bd:12:d4:f9:c0:58:1c:9b:4c:fc:b2: 9a:a5:ec:14:6a:91:f0:2d:df:64:25:65:98:13:89: ee:74:47:a4:3e:31:30:1b:4e:70:71:cc:5b:bd:de: d5:56:31:d6:74:96:47:2f:b8:47:a3:09:8f:40:2e: ee:69:a9:02:39:a4:cb:29:94:c5:aa:db:1e:77:37: 8d:89:c8:d9:22:ef:2a:dd:7f:2e:d3:4d:92:50:8c: 52:93:10:fe:29:3c:3e:59:66:4c:f4:42:46:78:bc: 04:de:e4:c1:ff:2e:2d:db:f7:fc:e9:38:0a:8d:41: 4c:64:ae:5f:b7:1a:8e:df:6e:37:81:7c:d7:2a:a9: 11:27:c3:4b:08:00:43:fc:54:3a:f5:81:0a:9d:4d: 5b:84:1c:ee:a9:ea:45:70:47:e0:98:3e:75:64:86: 55:62:50:0f:eb:9d:d8:dc:23:4f:22:61:57:d7:03: 7e:11:df:0a:f6:75:c5:c5:f7:c5:19:70:81:a2:dd: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:F9:B0:31:65:6D:05:4C:9D:10:EC:AF:4C:18:4F:65:C0:89:49 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.136.0/22 Signature Algorithm: sha256WithRSAEncryption b0:8e:4e:cc:14:be:a7:71:cd:3e:0b:a5:f7:89:9f:6f:e8:0c: 96:38:95:45:7b:7e:97:7f:54:90:41:d0:af:00:10:db:96:24: c6:dc:8d:d4:7b:33:18:59:7b:31:74:13:d6:c3:24:24:a2:ef: aa:5c:d8:ca:56:b9:b4:4d:27:78:9a:01:4b:fd:12:6a:46:ff: 67:26:cb:2f:eb:26:a3:af:d2:50:29:a5:62:5d:e0:46:32:e8: 56:44:f9:19:cd:01:5b:c5:02:68:95:22:e4:af:8f:c9:23:75: f4:e5:ad:38:9f:0f:ad:53:31:b1:31:bb:a3:09:46:02:11:eb: 19:d9:f4:63:0b:1d:34:09:23:70:7f:ad:65:36:c0:5e:1f:ec: 58:4d:8b:ec:4f:98:1a:7a:b8:c8:30:a9:c8:04:f0:14:40:18: 71:ca:c2:4c:ab:0a:ce:ae:1b:8e:15:41:0e:c6:8f:27:a4:ae: 8d:ad:7c:93:bc:58:c6:44:e6:e2:d0:6a:c7:6f:eb:c0:48:b7: 21:8f:9c:e0:cc:4b:22:68:0c:96:80:2a:05:e5:83:f7:a8:c9: d0:57:4a:5f:0f:e2:52:fc:b3:5f:18:26:e5:4f:92:2d:ed:5f: 3c:b5:20:a2:d4:5e:6d:a0:58:8e:63:0c:31:2a:b3:c8:b1:42: 5c:86:39:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W80U/43jgIwY5QkZDWiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjYwMTAyMDYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZhZjliMDMxNjU2ZDA1NGM5ZDEwZWNhZjRjMTg0ZjY1YzA4OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwDPn1bkB8NGvpT9am/FpUz7MSbP /zM20Rior6Sm4REN0JYTPfWwM1aEFG5Al10xYeV/TmKpUzeZOaXtq5vcvRLU+cBY HJtM/LKapewUapHwLd9kJWWYE4nudEekPjEwG05wccxbvd7VVjHWdJZHL7hHowmP QC7uaakCOaTLKZTFqtsedzeNicjZIu8q3X8u002SUIxSkxD+KTw+WWZM9EJGeLwE 3uTB/y4t2/f86TgKjUFMZK5ftxqO3243gXzXKqkRJ8NLCABD/FQ69YEKnU1bhBzu qepFcEfgmD51ZIZVYlAP653Y3CNPImFX1wN+Ed8K9nXFxffFGXCBot3ZJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBq+bAxZW0FTJ0Q7K9MGE9lwIlJMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvTUdyNXNERmxiUVZNblJEc3Iwd1lUMlhBaVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue2IMA0G CSqGSIb3DQEBCwUAA4IBAQCwjk7MFL6ncc0+C6X3iZ9v6AyWOJVFe36Xf1SQQdCv ABDbliTG3I3UezMYWXsxdBPWwyQkou+qXNjKVrm0TSd4mgFL/RJqRv9nJssv6yaj r9JQKaViXeBGMuhWRPkZzQFbxQJolSLkr4/JI3X05a04nw+tUzGxMbujCUYCEesZ 2fRjCx00CSNwf61lNsBeH+xYTYvsT5gaerjIMKnIBPAUQBhxysJMqwrOrhuOFUEO xo8npK6NrXyTvFjGRObi0GrHb+vASLchj5zgzEsiaAyWgCoF5YP3qMnQV0pfD+JS /LNfGCblT5It7V88tSCi1F5toFiOYwwxKrPIsUJchjnd -----END CERTIFICATE-----Generated at Mon Jan 26 01:21:47 2026 by rpki-client