This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mx3Y97UKzReWa2refDdx6s76_V8.roa File: mx3Y97UKzReWa2refDdx6s76_V8.roa (raw, json) Hash identifier: iAIQmwVPfsG75148Pk6RxiYUp7ydaonILqUfYmzqHUU= Subject key identifier: 9B:1D:D8:F7:B5:0A:CD:17:96:6B:6A:DE:7C:37:71:EA:CE:FA:FD:5F Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783450C8FF9E7D5D1A1BECD7BB341A88 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mx3Y97UKzReWa2refDdx6s76_V8.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56382 IP address blocks: 45.14.69.0/24 maxlen: 24 185.255.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:c8:ff:9e:7d:5d:1a:1b:ec:d7:bb:34:1a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b1dd8f7b50acd17966b6ade7c3771eacefafd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:9a:60:95:fa:69:b9:38:a5:2a:e0:b8:7d: 26:f5:05:5d:6d:ee:12:7e:64:ea:52:e0:21:93:3e: 37:72:bc:96:bd:8d:1c:9e:c3:2e:98:c6:fe:b1:ca: ad:d6:71:04:82:c6:d1:41:65:c0:05:e5:ae:4c:3e: 43:06:1b:20:36:e2:ab:7d:95:e6:68:37:25:35:5d: 76:b8:28:7f:2f:9e:87:10:c3:33:a1:fe:3c:69:40: bf:7d:5e:93:db:41:24:ec:98:24:34:a3:dc:98:05: b5:cb:4d:1c:50:9b:f0:ba:87:a5:bc:e9:32:1f:dd: dd:19:9a:cd:95:4b:b9:ee:eb:28:c4:3b:d3:55:7d: 71:28:5c:5a:16:5f:95:21:e4:d1:2e:b0:c8:2d:02: dd:a3:f9:8d:73:8f:8e:b8:d2:4a:d2:29:fd:77:8a: 7f:0c:4a:e4:c9:2a:b6:36:d8:a4:c6:51:ec:c6:fd: b6:07:0c:71:98:cd:86:47:ce:b9:98:4b:d8:d5:07: 91:89:34:a0:44:c3:60:29:3d:2c:50:21:c1:17:49: 03:44:3c:fe:5c:c3:eb:13:3b:78:9d:7f:3d:f2:d8: a7:9d:97:b9:36:bd:e6:71:0a:df:70:b9:57:4f:43: 6d:f6:f9:05:6b:ad:b3:50:6c:45:1f:ec:8c:46:87: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:D8:F7:B5:0A:CD:17:96:6B:6A:DE:7C:37:71:EA:CE:FA:FD:5F X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mx3Y97UKzReWa2refDdx6s76_V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.69.0/24 185.255.52.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e1:d2:c4:05:49:71:38:b9:35:69:92:81:84:78:fd:bb:10: e6:78:c4:42:dc:9f:29:47:d2:c7:54:b6:81:17:1f:9f:af:15: 34:8e:b6:0b:8a:a0:96:99:49:e1:6c:fc:99:ec:a6:67:f1:4b: b6:9a:11:7f:5f:6c:77:0c:44:80:f3:b8:cf:da:3f:9e:f7:b3: 40:ad:c2:29:a1:51:85:be:3c:7b:f2:0f:f0:e9:52:c3:08:2a: 2c:d4:51:ff:09:a1:f0:08:c8:ae:5f:0b:6c:e0:8c:13:b9:9c: 59:3f:c2:43:36:fd:c9:c9:8a:84:2c:1a:f0:53:f8:41:37:09: 1c:d3:da:df:ae:8a:0b:9e:5f:b2:77:cb:8f:1d:73:d8:87:d1: 29:61:a1:4b:a0:15:02:e0:ce:c5:5a:dd:13:89:d2:32:17:e5: 9a:f1:e6:be:90:99:c1:d8:12:84:8f:d8:0c:e1:b9:50:0c:85: ae:28:c2:24:9a:49:b8:67:69:a8:e4:6a:25:4f:5b:aa:09:78: 5b:4b:63:1b:de:8e:9d:a2:b5:44:f4:69:78:ac:e6:3d:59:2d: 94:72:fb:f8:f6:95:62:ed:f7:c4:12:3e:da:7b:5c:90:58:ba: bd:78:ea:cc:3c:8e:85:75:95:c2:d0:d6:f7:f5:a6:7b:33:fc: 80:01:1c:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NFDI/559XRob7Ne7NBqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjFkZDhmN2I1MGFjZDE3OTY2YjZhZGU3YzM3NzFlYWNlZmFmZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImaYJX6abk4pSrguH0m9QVdbe4S fmTqUuAhkz43cryWvY0cnsMumMb+scqt1nEEgsbRQWXABeWuTD5DBhsgNuKrfZXm aDclNV12uCh/L56HEMMzof48aUC/fV6T20Ek7JgkNKPcmAW1y00cUJvwuoelvOky H93dGZrNlUu57usoxDvTVX1xKFxaFl+VIeTRLrDILQLdo/mNc4+OuNJK0in9d4p/ DErkySq2NtikxlHsxv22BwxxmM2GR865mEvY1QeRiTSgRMNgKT0sUCHBF0kDRDz+ XMPrEzt4nX898tinnZe5Nr3mcQrfcLlXT0Nt9vkFa62zUGxFH+yMRoeRrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJsd2Pe1Cs0Xlmtq3nw3cerO+v1fMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvbXgzWTk3VUt6UmVXYTJyZWZEZHg2czc2X1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ5FAwQA uf80MA0GCSqGSIb3DQEBCwUAA4IBAQAk4dLEBUlxOLk1aZKBhHj9uxDmeMRC3J8p R9LHVLaBFx+frxU0jrYLiqCWmUnhbPyZ7KZn8Uu2mhF/X2x3DESA87jP2j+e97NA rcIpoVGFvjx78g/w6VLDCCos1FH/CaHwCMiuXwts4IwTuZxZP8JDNv3JyYqELBrw U/hBNwkc09rfrooLnl+yd8uPHXPYh9EpYaFLoBUC4M7FWt0TidIyF+Wa8ea+kJnB 2BKEj9gM4blQDIWuKMIkmkm4Z2mo5GolT1uqCXhbS2Mb3o6dorVE9Gl4rOY9WS2U cvv49pVi7ffEEj7ae1yQWLq9eOrMPI6FdZXC0Nb39aZ7M/yAARwW -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:06 2026 by rpki-client