This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/5MZBnWU5gNxUVds2GS_ctx40VqM.roa File: 5MZBnWU5gNxUVds2GS_ctx40VqM.roa (raw, json) Hash identifier: QG6wEupT4WWEY6cienEgpE1K7AnWp3lnUif0PehHGFE= Subject key identifier: E4:C6:41:9D:65:39:80:DC:54:55:DB:36:19:2F:DC:B7:1E:34:56:A3 Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Certificate serial: 019B7F847CAAE8D9E644C4529A2793F195D4 Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/5MZBnWU5gNxUVds2GS_ctx40VqM.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39074 IP address blocks: 45.15.200.0/24 maxlen: 24 45.15.201.0/24 maxlen: 24 45.15.202.0/24 maxlen: 24 45.15.203.0/24 maxlen: 24 2a0e:3180::/64 maxlen: 64 2a0e:3180:0:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7c:aa:e8:d9:e6:44:c4:52:9a:27:93:f1:95:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c6419d653980dc5455db36192fdcb71e3456a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:cd:c9:c9:52:05:f1:e2:26:2c:c4:85:75: 8b:1c:69:19:07:ed:41:e8:27:ce:0a:81:e8:ba:9f: bb:56:78:40:9e:a3:59:6e:d1:60:c6:22:4b:28:ac: 81:e4:86:63:7d:80:23:0f:50:2e:7e:55:5f:c8:87: c4:35:41:c0:e1:9a:45:dd:9c:b0:37:7f:54:84:bd: 36:6b:10:86:48:b4:f3:eb:eb:97:c6:bf:b7:c4:cf: 6b:66:53:5b:03:47:02:4a:a4:3e:b0:a9:7b:a1:ad: 9e:fb:b6:d4:d5:53:80:b4:4d:3b:4b:5d:21:36:49: 79:72:d3:3b:62:80:df:da:55:dd:d0:34:30:ff:9e: 0c:c2:38:c3:c4:88:70:db:52:9b:47:38:2b:4b:51: c9:b4:a0:10:ad:ce:08:3f:14:22:44:1b:19:8c:89: 58:d0:cf:a3:ea:dc:80:a5:07:08:91:94:0e:d5:1d: 0f:41:38:b7:18:25:b9:1e:c4:48:64:a2:29:ad:1a: 5d:f0:dc:5e:75:cf:ed:4d:df:25:c0:3e:13:75:2e: 29:fb:6b:84:4d:1a:a7:04:bc:72:ef:62:be:e7:19: 74:42:74:78:97:c4:07:a6:d0:7f:98:c0:13:2f:1e: 1b:0f:b0:94:15:81:b9:f2:ba:0e:c4:b8:a8:e0:8c: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:41:9D:65:39:80:DC:54:55:DB:36:19:2F:DC:B7:1E:34:56:A3 X509v3 Authority Key Identifier: keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/5MZBnWU5gNxUVds2GS_ctx40VqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.200.0/22 IPv6: 2a0e:3180::/63 Signature Algorithm: sha256WithRSAEncryption 14:18:c0:7a:96:7e:1c:64:30:02:f2:a0:a5:e3:78:5d:78:a7: a6:36:a2:f2:de:9c:dc:3b:e2:0a:5a:be:17:4d:98:7a:cd:ae: 65:5c:8d:46:3c:24:75:5e:00:02:b0:60:90:ba:4c:9e:2d:ad: eb:60:7b:e1:ab:ca:99:02:d1:c2:b4:e2:7d:1d:35:b7:7e:0d: e6:90:de:5c:61:eb:39:ea:4d:dc:50:37:11:85:2b:41:a7:78: f7:9c:a5:82:a4:d0:09:b0:98:ae:d0:63:02:1d:75:b6:e7:43: 82:2a:5d:90:8f:5a:0e:77:83:dd:07:af:a7:30:66:67:59:87: 69:39:c7:de:50:87:17:a4:36:fd:e5:8a:22:b9:23:02:1a:3a: 5a:49:df:fe:41:bb:be:3e:a0:30:22:39:9d:52:0d:51:3f:a8: 48:fa:1e:6a:eb:81:31:46:ed:26:a3:8a:5c:85:f8:f3:fd:ab: c3:d7:58:94:fc:3d:9e:1d:72:db:24:ad:e1:39:23:25:e1:f6: 88:ef:cc:ad:31:2e:8f:ca:33:b9:6a:ae:5a:7e:2f:61:a3:6c: 10:b9:6b:b9:49:70:b0:9d:1d:41:22:a3:36:ed:38:1f:20:5a: 10:6c:00:4e:56:e9:79:81:6c:4c:58:7f:cc:64:ab:98:7f:fb: 42:2a:5a:bf -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/hHyq6NnmRMRSmieT8ZXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi Yzk5OTEwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM2NDE5ZDY1Mzk4MGRjNTQ1NWRiMzYxOTJmZGNiNzFlMzQ1NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3DNyclSBfHiJizEhXWLHGkZB+1B 6CfOCoHoup+7VnhAnqNZbtFgxiJLKKyB5IZjfYAjD1AuflVfyIfENUHA4ZpF3Zyw N39UhL02axCGSLTz6+uXxr+3xM9rZlNbA0cCSqQ+sKl7oa2e+7bU1VOAtE07S10h Nkl5ctM7YoDf2lXd0DQw/54MwjjDxIhw21KbRzgrS1HJtKAQrc4IPxQiRBsZjIlY 0M+j6tyApQcIkZQO1R0PQTi3GCW5HsRIZKIprRpd8Nxedc/tTd8lwD4TdS4p+2uE TRqnBLxy72K+5xl0QnR4l8QHptB/mMATLx4bD7CUFYG58roOxLio4IzoOwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFOTGQZ1lOYDcVFXbNhkv3LceNFajMB8GA1UdIwQY MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt ZTNhYjkwODdkNDAzLzEvNU1aQm5XVTVnTnhVVmRzMkdTX2N0eDQwVnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQCLQ/IMBEE AgACMAsDCQEqDjGAAAAAADANBgkqhkiG9w0BAQsFAAOCAQEAFBjAepZ+HGQwAvKg peN4XXinpjai8t6c3DviClq+F02Yes2uZVyNRjwkdV4AArBgkLpMni2t62B74avK mQLRwrTifR01t34N5pDeXGHrOepN3FA3EYUrQad495ylgqTQCbCYrtBjAh11tudD gipdkI9aDneD3QevpzBmZ1mHaTnH3lCHF6Q2/eWKIrkjAho6Wknf/kG7vj6gMCI5 nVINUT+oSPoeauuBMUbtJqOKXIX48/2rw9dYlPw9nh1y2ySt4TkjJeH2iO/MrTEu j8ozuWquWn4vYaNsELlruUlwsJ0dQSKjNu04HyBaEGwATlbpeYFsTFh/zGSrmH/7 Qipavw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:50 2026 by rpki-client