This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/MHca-Spbwu4KckiWw0Dq8WRDlXI.roa File: MHca-Spbwu4KckiWw0Dq8WRDlXI.roa (raw, json) Hash identifier: 1Fh8PbvTtxhEEhmRRroTAZu9epm44Y5y/MNbSvWf+o8= Subject key identifier: 30:77:1A:F9:2A:5B:C2:EE:0A:72:48:96:C3:40:EA:F1:64:43:95:72 Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930 Certificate serial: 019B98433036DDCE3F2708FF89F7F41D44C8 Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/MHca-Spbwu4KckiWw0Dq8WRDlXI.roa Signing time: Wed 07 Jan 2026 11:41:38 +0000 ROA not before: Wed 07 Jan 2026 11:41:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216058 IP address blocks: 2.56.204.0/22 maxlen: 22 2.56.204.0/24 maxlen: 24 2.56.205.0/24 maxlen: 24 2.56.206.0/24 maxlen: 24 2.56.207.0/24 maxlen: 24 91.195.254.0/24 maxlen: 24 91.198.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:43:30:36:dd:ce:3f:27:08:ff:89:f7:f4:1d:44:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930 Validity Not Before: Jan 7 11:41:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30771af92a5bc2ee0a724896c340eaf164439572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:59:0e:d9:c4:78:92:af:04:ef:2a:b7:f5: 09:2b:88:a3:ff:4d:c4:c8:3e:6b:42:1b:ed:da:d4: 7d:d6:5c:cd:46:53:cd:da:46:43:fb:fe:c9:9b:68: 56:4b:5b:f6:59:83:21:28:33:d1:60:35:b0:dc:22: 47:69:5a:2e:25:e7:61:a8:58:ef:09:b1:6d:03:ad: 18:4e:cf:7d:df:68:b2:bd:ad:2e:1d:1e:3b:00:78: 61:3d:be:5e:aa:0c:4f:90:31:62:1a:cf:d3:fc:5b: 0e:44:0c:bd:a9:1d:89:60:8b:62:b6:2e:f9:ea:de: 66:1d:7f:36:aa:e5:77:28:0e:df:b4:2c:b0:d4:c9: c7:9f:8e:bf:b7:b8:38:7b:8c:44:bd:e1:d3:7a:a5: 76:1e:9a:91:7e:05:25:92:7a:66:cb:f9:ae:f8:cc: 0a:01:26:cd:18:64:31:aa:d9:df:16:91:b8:f7:1b: aa:af:af:48:01:8a:f1:a9:7b:37:8c:a9:23:5e:bc: 91:61:b1:4c:44:6a:7c:c3:82:db:7e:4d:c7:10:ca: 1d:5f:ff:02:cd:2d:26:63:8d:86:67:28:4d:75:97: 08:61:04:f2:20:20:6e:60:f5:33:a3:ab:8c:b4:a4: 23:94:0d:7d:ff:b5:24:2e:aa:63:b5:92:5a:cf:2f: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:1A:F9:2A:5B:C2:EE:0A:72:48:96:C3:40:EA:F1:64:43:95:72 X509v3 Authority Key Identifier: keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/MHca-Spbwu4KckiWw0Dq8WRDlXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.204.0/22 91.195.254.0/24 91.198.108.0/23 Signature Algorithm: sha256WithRSAEncryption 04:a9:03:6a:1f:8e:08:20:77:2d:81:db:04:60:d0:f1:19:8f: 2e:c4:11:a3:78:ef:be:d3:b4:98:42:bd:2c:6b:48:e1:51:1e: f3:2f:c7:86:b0:7d:d0:ba:92:fb:de:ba:d7:65:e6:de:d6:de: 28:1e:7f:68:e1:41:ef:08:96:5b:92:a7:ae:cb:b2:fc:c1:c6: 92:7c:ae:2b:fd:29:fd:9b:9e:ff:4f:56:ea:47:d3:f4:9b:ed: bb:7b:c7:05:a2:b9:22:29:65:65:06:43:19:de:5a:5d:a7:f5: 3b:41:b7:d1:08:b3:3d:c0:5e:f1:cd:cb:26:b8:0b:77:36:ae: 5c:a8:02:fb:bf:58:11:5b:a0:d3:a9:f2:07:48:51:37:fc:f7: f5:a7:ec:08:31:ef:51:98:06:af:55:1a:b7:29:b9:9d:55:5f: 08:c8:3d:31:9f:13:bc:99:54:70:0a:d2:d9:8b:e1:36:4f:be: f4:e8:aa:dc:1d:22:f6:30:31:40:df:81:86:ee:cf:51:3f:4f: 3b:ff:c7:78:5d:f7:20:78:e6:56:29:ad:dc:a1:fa:11:ae:35: 55:ff:45:0d:2e:f8:a3:48:d1:5b:d1:05:d6:f2:0c:3d:09:10: 43:fe:6f:bd:33:ce:3d:3e:88:af:55:0d:eb:0f:d3:9e:37:97: 2d:03:d0:8a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuYQzA23c4/Jwj/iff0HUTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODY5NjU1MDlhNjQ5YzUwOGFiOGFiNzJmNzI1N2JlZjM1 Zjc5MzAwHhcNMjYwMTA3MTE0MTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDc3MWFmOTJhNWJjMmVlMGE3MjQ4OTZjMzQwZWFmMTY0NDM5NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4pZDtnEeJKvBO8qt/UJK4ij/03E yD5rQhvt2tR91lzNRlPN2kZD+/7Jm2hWS1v2WYMhKDPRYDWw3CJHaVouJedhqFjv CbFtA60YTs9932iyva0uHR47AHhhPb5eqgxPkDFiGs/T/FsORAy9qR2JYItiti75 6t5mHX82quV3KA7ftCyw1MnHn46/t7g4e4xEveHTeqV2HpqRfgUlknpmy/mu+MwK ASbNGGQxqtnfFpG49xuqr69IAYrxqXs3jKkjXryRYbFMRGp8w4Lbfk3HEModX/8C zS0mY42GZyhNdZcIYQTyICBuYPUzo6uMtKQjlA19/7UkLqpjtZJazy9duQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDB3GvkqW8LuCnJIlsNA6vFkQ5VyMB8GA1UdIwQY MBaAFOaGllUJpknFCKuKty9yV77zX3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYt ZWQxNGFmNmRiODg4LzEvTUhjYS1TcGJ3dTRLY2tpV3cwRHE4V1JEbFhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYtZWQxNGFmNmRiODg4 LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjjMAwQA W8P+AwQBW8ZsMA0GCSqGSIb3DQEBCwUAA4IBAQAEqQNqH44IIHctgdsEYNDxGY8u xBGjeO++07SYQr0sa0jhUR7zL8eGsH3QupL73rrXZebe1t4oHn9o4UHvCJZbkqeu y7L8wcaSfK4r/Sn9m57/T1bqR9P0m+27e8cForkiKWVlBkMZ3lpdp/U7QbfRCLM9 wF7xzcsmuAt3Nq5cqAL7v1gRW6DTqfIHSFE3/Pf1p+wIMe9RmAavVRq3KbmdVV8I yD0xnxO8mVRwCtLZi+E2T7706KrcHSL2MDFA34GG7s9RP087/8d4XfcgeOZWKa3c ofoRrjVV/0UNLvijSNFb0QXW8gw9CRBD/m+9M849PoivVQ3rD9OeN5ctA9CK -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:57 2026 by rpki-client