This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa File: MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa (raw, json) Hash identifier: 3dPNmqEImz9izlskaSl23VXdEgJ+dMdOOKT1JBG1FlA= Subject key identifier: 32:03:4F:AA:67:DD:2F:0D:DD:14:54:2F:CC:C0:2C:1F:A1:9C:A3:F7 Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455 Certificate serial: 019B78344F0F825FF343003DB843692B47F1 Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211421 IP address blocks: 185.81.97.0/24 maxlen: 24 194.59.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4f:0f:82:5f:f3:43:00:3d:b8:43:69:2b:47:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32034faa67dd2f0ddd14542fccc02c1fa19ca3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:74:f3:58:bd:b8:04:09:d4:98:27:e6:dc: b3:ee:ee:7d:e0:f1:bb:2d:13:9b:6e:c6:1b:ce:ff: 78:89:99:ad:43:82:80:3d:3f:37:91:ca:d7:e5:9c: ba:ce:7a:d6:58:4b:6c:a8:7e:b2:e8:10:c3:d1:36: d5:ce:8f:78:9b:c0:b8:17:3b:b7:ed:77:53:01:e4: d3:bc:0f:44:69:bb:d8:fc:50:52:1e:db:0d:ec:e5: 2e:7e:9f:b0:23:c9:12:e6:15:db:5d:aa:c6:bf:65: c7:d4:f6:36:d5:29:d8:a3:51:a9:b5:bf:10:5e:5e: ba:c1:6d:f0:9d:f1:6f:22:a8:4f:b7:cf:63:aa:e4: 2f:5c:e4:d7:1a:4b:de:e6:19:a8:dc:a6:cd:52:6d: b6:3b:6c:ff:a4:61:92:c8:14:c9:e1:f8:5a:80:38: dd:2c:b4:ab:d4:44:d5:7a:88:8c:64:98:5d:04:98: 05:03:eb:9b:60:a0:ef:d8:01:e6:35:07:7e:3a:86: ca:c2:b6:49:9d:ce:21:40:b8:b4:64:39:f1:37:ce: af:8d:ba:09:3d:e8:d1:83:96:63:2d:36:62:c7:25: ed:c6:cd:01:61:74:96:45:a7:13:d0:70:a3:4f:f7: 9e:8c:12:58:bc:8d:12:d1:7e:ac:14:3e:ee:ed:bf: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:03:4F:AA:67:DD:2F:0D:DD:14:54:2F:CC:C0:2C:1F:A1:9C:A3:F7 X509v3 Authority Key Identifier: keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.97.0/24 194.59.170.0/24 Signature Algorithm: sha256WithRSAEncryption 10:07:10:ed:5c:3b:bf:f4:98:7c:9e:de:0a:c1:ec:61:fb:de: 20:a4:b2:90:32:cb:51:9b:ac:2d:f1:78:d5:f1:84:dc:0c:2e: 60:32:b6:66:97:7a:a1:a4:fa:eb:63:ac:11:da:b8:b9:c6:f2: df:ef:9a:86:80:6c:98:4c:cb:e3:d3:79:b0:4f:be:7a:04:25: 75:49:15:4c:7b:75:d8:db:f5:e5:6b:ed:ad:76:4f:17:2f:a5: 68:7c:eb:6b:4f:f7:f0:60:1f:7b:f3:fd:f8:6f:0f:06:01:74: 56:15:0f:e0:c3:92:53:93:9a:15:10:ba:ff:b3:3f:37:42:fb: 83:da:06:f1:23:03:bf:2f:6e:4e:10:09:ea:ea:0b:3f:ad:65: a5:18:04:35:15:7d:62:5c:1a:17:a5:2d:b6:b5:0d:44:38:1f: 2f:1e:b3:f7:e1:1e:da:91:55:22:72:82:9e:b7:be:ee:ea:67: 5b:5c:24:95:28:e7:7d:c3:d8:e9:e3:0c:3b:4a:66:b2:e3:ac: df:d5:14:5d:ea:15:11:ee:ff:dc:bf:1c:bc:ac:c4:bc:e7:3c: 75:6b:54:41:b8:38:ba:9e:76:18:f9:3f:ef:a1:1e:5d:db:06: fa:28:c3:e0:c9:23:37:8f:11:9c:a6:36:4a:c4:f5:99:2e:eb: ec:9b:ce:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NE8Pgl/zQwA9uENpK0fxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw MjQ0NTUwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjAzNGZhYTY3ZGQyZjBkZGQxNDU0MmZjY2MwMmMxZmExOWNhM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8op081i9uAQJ1Jgn5tyz7u594PG7 LRObbsYbzv94iZmtQ4KAPT83kcrX5Zy6znrWWEtsqH6y6BDD0TbVzo94m8C4Fzu3 7XdTAeTTvA9EabvY/FBSHtsN7OUufp+wI8kS5hXbXarGv2XH1PY21SnYo1Gptb8Q Xl66wW3wnfFvIqhPt89jquQvXOTXGkve5hmo3KbNUm22O2z/pGGSyBTJ4fhagDjd LLSr1ETVeoiMZJhdBJgFA+ubYKDv2AHmNQd+OobKwrZJnc4hQLi0ZDnxN86vjboJ PejRg5ZjLTZixyXtxs0BYXSWRacT0HCjT/eejBJYvI0S0X6sFD7u7b8IRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDIDT6pn3S8N3RRUL8zALB+hnKP3MB8GA1UdIwQY MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt NDcyYjBkMDcyZTgzLzEvTWdOUHFtZmRMdzNkRkZRdnpNQXNINkdjb19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVFhAwQA wjuqMA0GCSqGSIb3DQEBCwUAA4IBAQAQBxDtXDu/9Jh8nt4Kwexh+94gpLKQMstR m6wt8XjV8YTcDC5gMrZml3qhpPrrY6wR2ri5xvLf75qGgGyYTMvj03mwT756BCV1 SRVMe3XY2/Xla+2tdk8XL6VofOtrT/fwYB978/34bw8GAXRWFQ/gw5JTk5oVELr/ sz83QvuD2gbxIwO/L25OEAnq6gs/rWWlGAQ1FX1iXBoXpS22tQ1EOB8vHrP34R7a kVUicoKet77u6mdbXCSVKOd9w9jp4ww7Smay46zf1RRd6hUR7v/cvxy8rMS85zx1 a1RBuDi6nnYY+T/voR5d2wb6KMPgySM3jxGcpjZKxPWZLuvsm84H -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:08 2026 by rpki-client