This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa File: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (raw, json) Hash identifier: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8= Subject key identifier: 32:1C:7A:A3:57:E4:04:86:87:A6:97:B8:5A:BF:8A:31:A0:EF:11:04 Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Certificate serial: 019B797F481E7A3C14E95EF9CE7D738432DF Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34893 IP address blocks: 185.112.52.0/24 maxlen: 24 185.112.53.0/24 maxlen: 24 185.112.54.0/24 maxlen: 24 194.30.181.0/24 maxlen: 24 2a06:6540:1000::/48 maxlen: 48 2a06:6540:1003::/48 maxlen: 48 2a06:6541:1000::/48 maxlen: 48 2a06:6541:1002::/48 maxlen: 48 2a06:6541:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:48:1e:7a:3c:14:e9:5e:f9:ce:7d:73:84:32:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=321c7aa357e4048687a697b85abf8a31a0ef1104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:79:bd:ca:5c:ab:be:4b:7b:87:55:a1:dc: 39:b3:73:f7:91:1a:e1:37:67:90:4d:02:54:2e:a8: 9b:21:4a:1d:09:fd:0d:49:d1:9b:bc:91:a8:32:34: cf:7f:47:83:1d:c3:38:be:9a:aa:92:96:bb:fe:f2: 6a:2c:68:5c:ef:61:66:69:3f:9e:ab:5f:50:24:bb: ee:2b:8f:53:58:c0:67:99:62:66:15:62:b4:6b:54: 74:88:89:b3:80:8b:d3:0e:ab:64:fb:a0:76:bf:03: a5:4e:0f:8d:9a:4e:16:9f:7a:02:ea:d8:0a:26:b9: 44:92:e9:3b:2f:44:13:0e:93:f6:ae:4b:60:00:19: 5c:36:21:5f:20:0c:8a:57:c4:d8:94:24:57:99:46: 42:0f:6a:e1:9d:2e:c7:c8:d7:a3:a6:0e:7b:f2:0c: c6:12:2d:30:8f:7a:af:9d:b2:22:20:19:63:86:c7: b8:d2:38:74:4a:ee:a0:fa:1c:c3:65:e6:b7:4e:49: 32:ea:c2:f5:85:f3:ec:e3:bb:aa:7b:d1:6b:7c:b6: a6:4a:93:24:9f:79:88:7a:95:19:13:4d:a1:68:20: ba:05:b1:93:72:31:80:ec:9d:8c:06:74:7f:57:d7: 26:a6:d5:9e:23:23:56:df:38:d1:cc:9d:16:b2:cf: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:7A:A3:57:E4:04:86:87:A6:97:B8:5A:BF:8A:31:A0:EF:11:04 X509v3 Authority Key Identifier: keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.52.0-185.112.54.255 194.30.181.0/24 IPv6: 2a06:6540:1000::/48 2a06:6540:1003::/48 2a06:6541:1000::/48 2a06:6541:1002::/47 Signature Algorithm: sha256WithRSAEncryption b3:6e:a9:88:17:fa:88:2f:73:37:eb:10:3a:67:2e:54:72:f6: 7c:70:4f:07:f0:2d:61:e5:b7:95:60:6d:70:34:be:d8:ec:10: a8:09:ed:6f:bb:26:f8:99:69:00:66:34:2b:d3:e3:c8:16:f5: 17:cf:84:45:b5:9b:68:01:99:9b:b4:79:a6:98:01:3d:2e:fa: be:e4:78:f4:83:7f:4c:44:62:86:0f:5e:db:7d:26:9a:bf:67: 5a:c1:f3:c9:a3:3c:e6:06:85:4d:10:e0:b4:64:1d:be:9c:91: f2:65:1b:7e:4b:71:96:70:36:a1:73:46:a6:5e:00:cd:ff:02: e3:2f:43:de:10:31:24:b1:19:4f:5f:af:cb:28:e5:eb:de:5b: 64:b9:27:fb:a6:29:b8:ee:cd:de:ed:53:95:cb:c8:e9:e4:e0: f7:4c:93:9d:a5:39:4a:78:d1:9a:32:ec:25:07:06:46:21:f7: 7c:99:de:1d:7d:ad:e1:e2:e7:dc:e0:16:4a:24:82:c0:f9:64: 66:df:a9:4a:1a:bc:cf:c7:af:e6:b7:08:1e:11:85:0f:28:20: d7:d6:04:29:de:8e:ad:87:2c:fe:fc:32:1c:22:60:66:42:d6: d5:40:fa:be:e0:e0:02:eb:29:a8:27:76:38:3b:c6:2c:17:51: 73:cb:10:9c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt5f0geejwU6V75zn1zhDLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi MjI1NDcwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjFjN2FhMzU3ZTQwNDg2ODdhNjk3Yjg1YWJmOGEzMWEwZWYxMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pB5vcpcq75Le4dVodw5s3P3kRrh N2eQTQJULqibIUodCf0NSdGbvJGoMjTPf0eDHcM4vpqqkpa7/vJqLGhc72FmaT+e q19QJLvuK49TWMBnmWJmFWK0a1R0iImzgIvTDqtk+6B2vwOlTg+Nmk4Wn3oC6tgK JrlEkuk7L0QTDpP2rktgABlcNiFfIAyKV8TYlCRXmUZCD2rhnS7HyNejpg578gzG Ei0wj3qvnbIiIBljhse40jh0Su6g+hzDZea3Tkky6sL1hfPs47uqe9FrfLamSpMk n3mIepUZE02haCC6BbGTcjGA7J2MBnR/V9cmptWeIyNW3zjRzJ0Wss/54QIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFDIceqNX5ASGh6aXuFq/ijGg7xEEMB8GA1UdIwQY MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt OWFiZDFhYTY0YmUxLzEvTWh4Nm8xZmtCSWFIcHBlNFdyLUtNYUR2RVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAaBAIAATAUMAwDBAK5cDQD BAC5cDYDBADCHrUwKgQCAAIwJAMHACoGZUAQAAMHACoGZUAQAwMHACoGZUEQAAMH ASoGZUEQAjANBgkqhkiG9w0BAQsFAAOCAQEAs26piBf6iC9zN+sQOmcuVHL2fHBP B/AtYeW3lWBtcDS+2OwQqAntb7sm+JlpAGY0K9PjyBb1F8+ERbWbaAGZm7R5ppgB PS76vuR49IN/TERihg9e230mmr9nWsHzyaM85gaFTRDgtGQdvpyR8mUbfktxlnA2 oXNGpl4Azf8C4y9D3hAxJLEZT1+vyyjl695bZLkn+6YpuO7N3u1TlcvI6eTg90yT naU5SnjRmjLsJQcGRiH3fJneHX2t4eLn3OAWSiSCwPlkZt+pShq8z8ev5rcIHhGF Dygg19YEKd6OrYcs/vwyHCJgZkLW1UD6vuDgAuspqCd2ODvGLBdRc8sQnA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:54 2026 by rpki-client