This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa File: 5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa (raw, json) Hash identifier: Jk2exfePI/3H4jUbDZxVTlT7rkhDIkBPxTi1KyoHO34= Subject key identifier: E4:C1:B8:1F:74:4E:8B:D6:7F:1E:E8:A8:23:21:6B:F0:78:FC:7C:82 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A32D39C386C90B660E12FB04DAD9F5 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27323 IP address blocks: 45.14.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2d:39:c3:86:c9:0b:66:0e:12:fb:04:da:d9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c1b81f744e8bd67f1ee8a823216bf078fc7c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:f8:58:3c:a1:1e:41:3c:29:26:b2:01:d2: da:64:12:53:cb:d1:9a:58:d8:82:38:32:d3:95:52: d7:7d:ca:45:e2:a3:38:05:5b:22:6b:41:2e:e0:89: a6:66:a7:db:cc:f5:f8:a7:3e:a7:eb:82:4c:c8:4c: 22:d8:1c:f1:63:81:aa:14:e5:62:a4:e4:59:f4:dc: 3d:79:3d:d9:ea:f8:7b:04:1c:34:55:50:cd:ba:bc: 32:7b:fe:61:6e:ef:96:a3:be:66:a1:17:ad:1a:45: 02:19:40:e0:48:56:78:a4:3c:39:bf:47:84:2f:4e: 94:16:51:72:79:8e:ee:25:10:09:e1:73:6f:f7:53: dd:55:db:9b:e8:9f:89:37:35:ca:4b:f4:2e:1a:24: 65:d1:df:cb:09:d0:36:0a:f2:e5:e1:85:be:21:27: c8:eb:de:ca:0d:78:34:8b:a5:a1:b1:7f:7f:06:7c: d8:af:87:e1:4b:77:66:9f:19:55:df:a4:f9:e6:d0: f7:0a:79:df:bb:d7:f2:1f:38:b8:fa:99:45:21:ae: 85:10:91:92:1e:c2:73:f9:9e:ca:74:ec:b1:f7:bf: 69:2c:7d:1d:ca:7c:91:35:e2:21:9f:3a:93:3b:ff: 17:85:de:36:05:a3:a6:a9:05:39:1c:bd:39:92:11: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C1:B8:1F:74:4E:8B:D6:7F:1E:E8:A8:23:21:6B:F0:78:FC:7C:82 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.115.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d3:97:5c:ee:09:b4:26:81:a1:d7:db:2b:e7:79:14:9b:18: 53:13:7b:8b:ee:4a:c3:f9:ba:3c:d5:03:a6:05:98:ae:c8:16: 30:9c:54:b5:c5:62:a8:60:ac:7f:a9:f2:6b:6e:6a:11:f5:74: 58:68:58:c0:0e:fa:c4:0f:60:19:af:6b:73:3e:27:45:22:22: 84:b7:bc:71:a3:c1:b9:27:ef:20:bf:0c:b8:b7:54:d4:10:c5: e5:a9:80:9f:ce:ea:70:ad:8f:2b:4e:8d:29:ca:52:77:9d:ac: 41:5f:f1:5f:d6:a9:a5:72:07:f6:e3:4f:ca:bf:9f:2e:49:a6: e2:66:cb:ea:66:11:35:7f:0f:44:c7:b0:26:1f:4b:e8:74:dd: af:0c:19:24:1f:58:3e:57:59:e6:d2:6f:ef:a6:2e:6e:bc:24: 83:03:11:07:2d:fc:a3:65:bd:31:af:47:68:f3:58:c2:74:35: aa:c9:4e:f5:69:51:45:3a:43:a8:77:32:ff:9c:b6:08:40:cf: 02:17:2b:df:c8:62:b1:65:bd:9f:00:db:b5:c3:41:c2:25:28: 01:fb:6f:90:6c:5d:1e:55:7c:76:96:21:4f:01:13:46:9c:fa: b5:82:3e:26:2d:6f:aa:a9:d1:37:f7:91:bf:c6:bb:28:a6:b7: fc:06:fd:82 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4oy05w4bJC2YOEvsE2tn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGMxYjgxZjc0NGU4YmQ2N2YxZWU4YTgyMzIxNmJmMDc4ZmM3YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAH4WDyhHkE8KSayAdLaZBJTy9Ga WNiCODLTlVLXfcpF4qM4BVsia0Eu4ImmZqfbzPX4pz6n64JMyEwi2BzxY4GqFOVi pORZ9Nw9eT3Z6vh7BBw0VVDNurwye/5hbu+Wo75moRetGkUCGUDgSFZ4pDw5v0eE L06UFlFyeY7uJRAJ4XNv91PdVdub6J+JNzXKS/QuGiRl0d/LCdA2CvLl4YW+ISfI 697KDXg0i6WhsX9/BnzYr4fhS3dmnxlV36T55tD3Cnnfu9fyHzi4+plFIa6FEJGS HsJz+Z7KdOyx979pLH0dynyRNeIhnzqTO/8Xhd42BaOmqQU5HL05khGasQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOTBuB90TovWfx7oqCMha/B4/HyCMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzVNRzRIM1JPaTlaX0h1aW9JeUZyOEhqOGZJSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtDnMw DQYJKoZIhvcNAQELBQADggEBAIjTl1zuCbQmgaHX2yvneRSbGFMTe4vuSsP5ujzV A6YFmK7IFjCcVLXFYqhgrH+p8mtuahH1dFhoWMAO+sQPYBmva3M+J0UiIoS3vHGj wbkn7yC/DLi3VNQQxeWpgJ/O6nCtjytOjSnKUnedrEFf8V/WqaVyB/bjT8q/ny5J puJmy+pmETV/D0THsCYfS+h03a8MGSQfWD5XWebSb++mLm68JIMDEQct/KNlvTGv R2jzWMJ0NarJTvVpUUU6Q6h3Mv+ctghAzwIXK9/IYrFlvZ8A27XDQcIlKAH7b5Bs XR5VfHaWIU8BE0ac+rWCPiYtb6qp0Tf3kb/Guyimt/wG/YI= -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:10 2026 by rpki-client