This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/MGpHtWVdW5Y-8RK5w9fcR92UfAM.roa File: MGpHtWVdW5Y-8RK5w9fcR92UfAM.roa (raw, json) Hash identifier: 4BcRsyKmJhYcEjJZ21p241hnTRNkRNMWSpWu1LX5P3s= Subject key identifier: 30:6A:47:B5:65:5D:5B:96:3E:F1:12:B9:C3:D7:DC:47:DD:94:7C:03 Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019ABA312AF428371899C408E612547406F1 Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/MGpHtWVdW5Y-8RK5w9fcR92UfAM.roa Signing time: Tue 25 Nov 2025 08:46:15 +0000 ROA not before: Tue 25 Nov 2025 08:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205899 IP address blocks: 194.88.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:31:2a:f4:28:37:18:99:c4:08:e6:12:54:74:06:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Nov 25 08:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=306a47b5655d5b963ef112b9c3d7dc47dd947c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:92:f2:b3:0e:79:32:79:2b:e3:4f:0b:2d: ce:b9:56:5f:f1:db:0a:6c:17:c7:02:94:4e:e1:ff: 95:e0:8b:59:e5:39:8b:75:89:a9:20:86:f0:e4:85: eb:df:8d:f1:ed:1f:b2:c3:1a:80:4d:cb:d0:7d:f3: fa:ef:99:9d:28:e3:86:7c:2e:42:bf:a9:2d:56:0f: f2:05:f9:17:b5:9d:9d:41:a7:1d:f4:91:21:e1:f8: ab:6e:0a:ad:58:ec:d5:73:1c:01:85:de:a4:2d:a6: 58:b0:00:4a:ec:4c:93:42:ef:54:e6:92:6f:74:6e: 1a:e0:82:15:7f:3a:c0:65:10:71:3d:a5:5c:b3:ab: 92:c5:f2:77:5e:5d:15:87:96:ff:3e:a8:68:d6:8c: 69:b0:46:b2:f3:f9:1a:27:d2:0f:50:c6:a6:ab:ba: 3e:95:16:e2:b9:26:70:bd:f1:cf:17:79:73:09:b0: 8c:94:7f:a4:0d:6c:a6:17:fb:f4:21:68:8c:ad:ad: eb:62:9a:4c:5f:e1:4b:65:ad:41:db:9c:21:c1:38: b8:70:e3:9c:27:23:d7:1b:43:7c:a7:0a:02:fd:97: 5d:ad:44:1f:b0:6b:0e:12:9b:94:5e:c7:09:64:00: 97:23:77:5a:9f:04:cc:f8:7a:f5:95:7e:0c:aa:4c: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:47:B5:65:5D:5B:96:3E:F1:12:B9:C3:D7:DC:47:DD:94:7C:03 X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/MGpHtWVdW5Y-8RK5w9fcR92UfAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.232.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:27:a2:a2:20:d3:58:63:d4:4c:b3:59:aa:66:e2:89:f8:a7: 02:1e:5e:92:c9:df:81:fb:ad:f5:c8:7a:8a:93:4e:0c:ba:a3: 75:ab:f6:14:ec:74:8e:2c:7f:8a:dc:78:25:e7:75:94:5c:a5: 46:b6:bb:69:5c:4e:d3:91:4b:91:39:97:d7:a3:91:7b:39:f7: 64:c9:c5:37:86:e9:8a:db:63:3e:7e:6a:e2:dc:9c:77:68:ea: 30:f5:40:fe:7b:91:1b:89:f2:63:23:d1:0d:bc:3c:d1:14:df: 55:45:57:6d:db:32:97:34:7e:c4:68:f8:7a:62:e8:25:d2:f6: 32:df:4a:8b:2e:d1:c8:1f:06:5b:b4:d1:9b:42:dd:e8:2a:e3: 66:cd:a6:b2:33:83:17:4e:17:89:4b:3c:85:0b:89:4c:05:e2: 96:bf:95:51:97:91:a1:4a:bd:5b:a8:28:0e:8f:d4:df:d0:5a: d6:fe:58:34:61:82:47:2e:fa:1f:56:b2:f1:0b:83:ae:ca:64: 85:ef:61:2e:ed:a8:43:53:01:c2:92:1f:4a:d7:d1:d0:7f:c8: cf:9a:5c:ad:c0:11:d4:ce:7f:ab:eb:b2:0d:b3:04:a4:94:d9: 0d:26:a6:1d:a7:a8:7f:62:16:47:c6:ce:8d:0a:cd:73:de:54: 0c:43:c5:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6MSr0KDcYmcQI5hJUdAbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjUxMTI1MDg0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZhNDdiNTY1NWQ1Yjk2M2VmMTEyYjljM2Q3ZGM0N2RkOTQ3YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzceS8rMOeTJ5K+NPCy3OuVZf8dsK bBfHApRO4f+V4ItZ5TmLdYmpIIbw5IXr343x7R+ywxqATcvQffP675mdKOOGfC5C v6ktVg/yBfkXtZ2dQacd9JEh4firbgqtWOzVcxwBhd6kLaZYsABK7EyTQu9U5pJv dG4a4IIVfzrAZRBxPaVcs6uSxfJ3Xl0Vh5b/Pqho1oxpsEay8/kaJ9IPUMamq7o+ lRbiuSZwvfHPF3lzCbCMlH+kDWymF/v0IWiMra3rYppMX+FLZa1B25whwTi4cOOc JyPXG0N8pwoC/ZddrUQfsGsOEpuUXscJZACXI3danwTM+Hr1lX4MqkzVpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBqR7VlXVuWPvESucPX3EfdlHwDMB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvTUdwSHRXVmRXNVktOFJLNXc5ZmNSOTJVZkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G CSqGSIb3DQEBCwUAA4IBAQAsJ6KiINNYY9RMs1mqZuKJ+KcCHl6Syd+B+631yHqK k04MuqN1q/YU7HSOLH+K3Hgl53WUXKVGtrtpXE7TkUuROZfXo5F7OfdkycU3humK 22M+fmri3Jx3aOow9UD+e5EbifJjI9ENvDzRFN9VRVdt2zKXNH7EaPh6Yugl0vYy 30qLLtHIHwZbtNGbQt3oKuNmzaayM4MXTheJSzyFC4lMBeKWv5VRl5GhSr1bqCgO j9Tf0FrW/lg0YYJHLvofVrLxC4OuymSF72Eu7ahDUwHCkh9K19HQf8jPmlytwBHU zn+r67INswSklNkNJqYdp6h/YhZHxs6NCs1z3lQMQ8We -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:08 2025 by rpki-client