This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pMGOE-eX1qbtlbZ6O4u-lVY5ws4.roa File: pMGOE-eX1qbtlbZ6O4u-lVY5ws4.roa (raw, json) Hash identifier: KFgluGpny4GL1odr0wvyyN/s4KByfkgCctoScVSISkI= Subject key identifier: A4:C1:8E:13:E7:97:D6:A6:ED:95:B6:7A:3B:8B:BE:95:56:39:C2:CE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84AEB8EC2FAFB1F487C254696E2FF7 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pMGOE-eX1qbtlbZ6O4u-lVY5ws4.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47349 IP address blocks: 93.171.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ae:b8:ec:2f:af:b1:f4:87:c2:54:69:6e:2f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c18e13e797d6a6ed95b67a3b8bbe955639c2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:55:3e:f1:17:bf:7f:1f:19:7f:bd:1c:d8: e1:54:d5:f3:3e:da:82:8b:de:50:99:63:d4:22:d3: cc:1f:77:05:a4:e9:aa:f4:17:9d:4f:9d:93:51:92: 50:a1:c9:7c:53:e0:99:a3:a2:a6:18:c0:34:3a:d2: b8:9d:8b:cc:1a:6d:3c:95:6f:84:ed:a5:38:79:af: f1:13:e2:7b:b0:6d:46:44:82:2c:5c:44:40:1e:5f: 0a:7e:9e:93:58:54:9b:21:14:49:8e:22:61:94:a2: 6e:b3:e1:dc:c6:4d:c3:f8:df:f5:a2:9b:78:3c:fe: 72:bb:a8:2a:35:17:7f:1c:f1:77:4c:03:b0:6d:3e: 17:40:a7:0e:e3:35:c4:4a:a6:58:3f:71:82:44:63: 81:f4:45:c5:19:a3:46:dc:bf:b0:63:9a:0f:f8:6f: 0a:49:dc:13:90:d6:20:a1:02:dc:f3:42:a6:ab:7d: ae:3c:8b:7b:c6:27:49:ef:b3:eb:0e:06:57:d0:a5: f4:61:2f:00:75:1a:c0:f0:f1:6c:39:75:64:42:ff: e2:ff:21:b2:2b:dc:c6:ba:25:74:b4:aa:74:7f:97: 22:22:f4:96:d2:70:3c:ce:16:23:9c:cf:8b:c1:e0: 8b:dd:76:bf:4b:d4:f4:e8:46:43:6b:ab:ab:0f:16: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:8E:13:E7:97:D6:A6:ED:95:B6:7A:3B:8B:BE:95:56:39:C2:CE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pMGOE-eX1qbtlbZ6O4u-lVY5ws4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.155.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5a:61:70:14:07:fe:9f:fb:d2:bc:95:02:35:a2:11:19:20: 36:1b:47:18:86:19:9a:7a:38:cb:19:bb:02:cf:83:e8:1d:1c: dd:8a:9e:39:06:8f:8b:25:3d:74:2c:e5:8a:24:36:41:01:86: 01:90:12:c0:ea:30:40:b6:fd:da:63:c2:b9:8e:d9:d1:cc:19: 33:9b:bd:62:db:16:e3:98:d2:9e:9f:85:a2:8e:c0:74:2d:7d: da:11:90:0f:a7:33:6b:dc:1c:c2:3d:e7:a5:33:89:de:3c:22: 95:52:fd:15:a0:6f:12:8f:e7:af:e7:20:d8:ad:18:24:94:13: 62:fd:32:00:39:76:c1:b2:70:d9:3a:62:88:d0:ab:8c:20:0a: eb:6f:a4:51:2f:08:7a:c1:c2:32:5d:b9:01:e1:15:3e:d1:8a: 6b:c2:b2:e6:7f:6e:70:bb:f0:01:ea:10:89:21:eb:a5:a2:a2: f1:ae:85:7d:fd:8c:3c:81:fa:5d:5f:33:05:4d:a8:44:1d:d0: 23:39:0a:60:b8:3d:83:ae:a8:4d:e5:0d:d7:75:c8:3a:13:c1: 82:85:07:21:69:e6:3b:3c:62:4d:4a:12:a2:7f:8d:93:06:8b: 93:a0:51:87:8e:6f:66:7e:4e:fa:02:aa:38:2b:df:3f:1d:b2: 96:bf:24:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hK647C+vsfSHwlRpbi/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGMxOGUxM2U3OTdkNmE2ZWQ5NWI2N2EzYjhiYmU5NTU2MzljMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFlVPvEXv38fGX+9HNjhVNXzPtqC i95QmWPUItPMH3cFpOmq9BedT52TUZJQocl8U+CZo6KmGMA0OtK4nYvMGm08lW+E 7aU4ea/xE+J7sG1GRIIsXERAHl8Kfp6TWFSbIRRJjiJhlKJus+Hcxk3D+N/1opt4 PP5yu6gqNRd/HPF3TAOwbT4XQKcO4zXESqZYP3GCRGOB9EXFGaNG3L+wY5oP+G8K SdwTkNYgoQLc80Kmq32uPIt7xidJ77PrDgZX0KX0YS8AdRrA8PFsOXVkQv/i/yGy K9zGuiV0tKp0f5ciIvSW0nA8zhYjnM+LweCL3Xa/S9T06EZDa6urDxa8SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTBjhPnl9am7ZW2ejuLvpVWOcLOMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcE1HT0UtZVgxcWJ0bGJaNk80dS1sVlk1d3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaubMA0G CSqGSIb3DQEBCwUAA4IBAQCJWmFwFAf+n/vSvJUCNaIRGSA2G0cYhhmaejjLGbsC z4PoHRzdip45Bo+LJT10LOWKJDZBAYYBkBLA6jBAtv3aY8K5jtnRzBkzm71i2xbj mNKen4WijsB0LX3aEZAPpzNr3BzCPeelM4nePCKVUv0VoG8Sj+ev5yDYrRgklBNi /TIAOXbBsnDZOmKI0KuMIArrb6RRLwh6wcIyXbkB4RU+0YprwrLmf25wu/AB6hCJ IeuloqLxroV9/Yw8gfpdXzMFTahEHdAjOQpguD2DrqhN5Q3Xdcg6E8GChQchaeY7 PGJNShKif42TBouToFGHjm9mfk76Aqo4K98/HbKWvyTV -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:41 2026 by rpki-client