This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa File: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (raw, json) Hash identifier: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc= Subject key identifier: 9A:48:2F:F4:25:D0:10:FF:22:B3:86:4F:86:14:51:31:99:18:1F:24 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B79ECF239D5153E7549FA7672E5F4DF96 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21196 IP address blocks: 80.65.172.0/24 maxlen: 24 80.65.173.0/24 maxlen: 24 80.65.174.0/24 maxlen: 24 80.65.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:39:d5:15:3e:75:49:fa:76:72:e5:f4:df:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a482ff425d010ff22b3864f8614513199181f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:c8:8c:1e:6d:eb:d5:60:e6:1a:06:e5:cd: 91:b9:51:38:86:ed:05:37:e5:e1:e1:d6:8d:81:20: e6:a8:c3:ad:e4:9d:05:4a:97:06:a6:2f:c6:a8:7b: 84:68:fb:02:67:2f:2e:29:d2:3b:23:b2:da:7f:8e: 5c:c8:e6:4f:a7:81:b0:26:52:92:04:0c:55:5a:d5: 54:fc:8b:a2:59:0a:2e:50:b4:03:80:5c:ee:58:cc: a0:51:02:d0:92:f4:36:55:17:12:83:27:3d:1c:d7: f4:25:41:4f:ac:b0:31:be:0a:a6:77:a7:ae:2c:6d: 36:f5:fc:14:e4:f6:18:02:ff:e8:37:93:34:fc:ec: 26:9b:b7:a8:f7:72:9c:99:e7:88:7b:6e:9d:f2:39: ab:be:97:5e:7f:5d:60:d8:fd:db:d0:77:e6:11:86: d4:e1:ca:c4:66:90:ba:1a:f3:10:88:14:52:95:fa: 65:47:82:08:2c:6f:ca:25:aa:5e:a0:f6:47:a1:a3: be:bb:ff:31:c8:cc:63:62:1a:ed:2d:b0:3f:05:1a: 02:8c:53:32:61:bd:25:dd:fe:56:92:e5:53:ce:40: e8:e8:23:db:3b:e3:8a:b7:84:0f:9b:12:b4:07:93: 2d:bd:c8:62:c4:64:69:bf:9e:a8:19:f2:76:c6:e8: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:48:2F:F4:25:D0:10:FF:22:B3:86:4F:86:14:51:31:99:18:1F:24 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.172.0/22 Signature Algorithm: sha256WithRSAEncryption 99:4c:01:77:9b:b2:f3:c6:36:6e:c8:f4:82:11:e8:dc:0b:bd: 55:53:b5:3e:bc:31:94:94:e1:c3:c2:ae:b3:e7:43:16:f2:ad: a6:bb:fe:12:6c:61:e1:eb:40:9e:7b:06:33:88:26:a4:81:8a: b8:2b:51:12:8a:98:62:39:51:07:d1:99:17:cb:7e:87:b2:74: 01:7d:e6:29:cd:64:71:49:03:20:af:a0:88:28:53:38:9f:27: 5b:5b:1c:01:ab:69:bd:68:4a:f4:6b:16:02:13:96:b3:65:da: be:2f:12:a6:03:30:f5:fc:44:74:8b:b7:e3:4e:5a:31:7d:a3: 92:20:bb:0a:5f:09:61:4b:9b:78:22:15:02:4f:5e:3c:fa:11: ed:c0:60:c0:d4:fd:ba:f9:6d:9f:e0:d3:e4:06:0e:90:5d:67: ee:12:fe:4a:41:85:ce:dd:83:1a:0f:f6:e6:0a:94:00:42:0d: 9f:e5:f8:c3:39:78:77:e2:c5:e7:f2:f5:b1:34:83:e7:90:a6: fb:5c:ea:85:10:0c:a9:32:c7:a9:1e:1f:11:76:7d:74:64:a8: 59:a3:86:f6:22:94:a4:52:7e:89:ee:8e:28:39:88:a0:ef:cc: 86:6f:8e:9d:66:cc:15:07:97:a0:0b:4d:e9:ab:90:20:0b:30: 13:f2:6f:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PI51RU+dUn6dnLl9N+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQ4MmZmNDI1ZDAxMGZmMjJiMzg2NGY4NjE0NTEzMTk5MTgxZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3IjB5t69Vg5hoG5c2RuVE4hu0F N+Xh4daNgSDmqMOt5J0FSpcGpi/GqHuEaPsCZy8uKdI7I7Laf45cyOZPp4GwJlKS BAxVWtVU/IuiWQouULQDgFzuWMygUQLQkvQ2VRcSgyc9HNf0JUFPrLAxvgqmd6eu LG029fwU5PYYAv/oN5M0/Owmm7eo93KcmeeIe26d8jmrvpdef11g2P3b0HfmEYbU 4crEZpC6GvMQiBRSlfplR4IILG/KJapeoPZHoaO+u/8xyMxjYhrtLbA/BRoCjFMy Yb0l3f5WkuVTzkDo6CPbO+OKt4QPmxK0B5MtvchixGRpv56oGfJ2xujdaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpIL/Ql0BD/IrOGT4YUUTGZGB8kMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvbWtndjlDWFFFUDhpczRaUGhoUlJNWmtZSHlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUEGsMA0G CSqGSIb3DQEBCwUAA4IBAQCZTAF3m7LzxjZuyPSCEejcC71VU7U+vDGUlOHDwq6z 50MW8q2mu/4SbGHh60CeewYziCakgYq4K1ESiphiOVEH0ZkXy36HsnQBfeYpzWRx SQMgr6CIKFM4nydbWxwBq2m9aEr0axYCE5azZdq+LxKmAzD1/ER0i7fjTloxfaOS ILsKXwlhS5t4IhUCT148+hHtwGDA1P26+W2f4NPkBg6QXWfuEv5KQYXO3YMaD/bm CpQAQg2f5fjDOXh34sXn8vWxNIPnkKb7XOqFEAypMsepHh8Rdn10ZKhZo4b2IpSk Un6J7o4oOYig78yGb46dZswVB5egC03pq5AgCzAT8m8I -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:19 2026 by rpki-client