This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa File: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (raw, json) Hash identifier: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k= Subject key identifier: 9A:03:F9:61:9D:09:79:95:0C:C1:3A:E9:20:E9:68:D6:9D:9F:52:7C Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019B7C13328B581A76FF4C4629BBF316D86D Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216003 IP address blocks: 45.80.85.0/24 maxlen: 24 45.80.86.0/24 maxlen: 24 45.80.87.0/24 maxlen: 24 177.8.68.0/24 maxlen: 24 185.246.196.0/22 maxlen: 24 185.246.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:8b:58:1a:76:ff:4c:46:29:bb:f3:16:d8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a03f9619d0979950cc13ae920e968d69d9f527c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:2c:db:23:eb:5e:df:88:9b:6e:70:32:39: 5f:6a:55:b8:ea:08:1b:dc:86:8f:75:9b:46:e6:17: 78:85:1d:74:0c:a8:d4:5d:cd:8d:e9:f8:31:17:b4: 1b:e3:45:ea:0f:a3:18:14:97:32:f7:a9:d4:27:8c: 0d:fa:be:85:0a:f6:00:2d:0d:d3:28:d3:16:3a:17: cb:2b:b9:a9:aa:90:d6:5b:6a:82:35:57:62:71:47: 01:3c:12:7f:59:bd:49:ee:fa:24:fd:73:50:61:0a: 71:98:66:46:7b:11:19:9d:a1:39:44:bf:19:0e:b9: 0c:52:0c:db:d7:7c:ac:90:73:ad:59:25:a1:e8:84: d0:1b:44:45:39:00:95:a2:f9:d1:d8:05:ff:a1:3c: 61:f3:47:fc:e6:08:2a:b6:6a:e4:26:19:36:d9:72: aa:17:74:97:ed:d5:5e:a1:5a:e8:b3:02:1b:3c:b8: 6c:76:fa:fd:ea:a3:82:3e:31:16:5c:19:22:79:5e: 35:8f:d8:e7:51:ab:59:ac:f9:8e:87:b9:16:f0:8c: 9a:90:38:04:ee:8b:81:da:12:91:12:78:c2:d8:50: eb:e8:3f:c4:d0:4f:f4:74:56:9d:c9:b9:e1:39:b0: 2f:e3:48:b8:d4:1f:0e:79:1e:1b:06:36:a4:12:cc: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:F9:61:9D:09:79:95:0C:C1:3A:E9:20:E9:68:D6:9D:9F:52:7C X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.85.0-45.80.87.255 177.8.68.0/24 185.246.196.0/22 Signature Algorithm: sha256WithRSAEncryption 43:01:15:da:45:ae:9b:73:f0:32:45:16:16:30:b8:7a:06:9c: 12:cd:82:fa:a9:e9:a5:48:88:a0:6e:3d:ae:db:34:2b:29:cb: d9:36:89:ea:cb:f4:a8:f5:dc:44:7c:a7:e3:64:b1:41:5f:ff: 5b:c6:13:54:a3:97:98:f3:b0:40:9a:0d:e8:f4:fc:de:d0:db: c6:16:e8:1f:6b:71:0f:a3:6d:ca:36:4f:a4:ab:86:e0:54:1a: 8d:8c:6c:06:d4:81:be:6b:a9:51:d3:74:20:5e:99:c1:c8:13: 9f:1d:69:6f:c0:cd:16:7e:20:8c:18:62:e1:aa:7e:1b:d9:99: 1f:11:06:6d:42:b2:ac:cf:07:a8:8c:2f:d5:25:b6:eb:6d:a8: b2:31:f8:79:27:8b:b0:84:6e:e1:27:47:a8:58:23:d4:df:45: 97:96:43:8a:e5:6e:e5:74:a4:7c:0f:27:1a:0e:e6:e2:ca:10: 91:56:be:64:05:3e:8d:e9:83:f0:cc:61:0b:23:f5:70:e0:e8: 65:f5:6f:f5:5c:a9:8c:9b:69:80:03:67:e7:e9:73:62:1c:37: 52:61:04:b1:57:54:81:69:92:bb:a6:6d:36:8d:5c:1c:89:bb: 53:05:bd:8c:69:f6:55:b5:66:79:71:18:e2:3a:02:8c:15:c3: 80:b2:63:7b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8EzKLWBp2/0xGKbvzFthtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTAzZjk2MTlkMDk3OTk1MGNjMTNhZTkyMGU5NjhkNjlkOWY1MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSIs2yPrXt+Im25wMjlfalW46ggb 3IaPdZtG5hd4hR10DKjUXc2N6fgxF7Qb40XqD6MYFJcy96nUJ4wN+r6FCvYALQ3T KNMWOhfLK7mpqpDWW2qCNVdicUcBPBJ/Wb1J7vok/XNQYQpxmGZGexEZnaE5RL8Z DrkMUgzb13yskHOtWSWh6ITQG0RFOQCVovnR2AX/oTxh80f85ggqtmrkJhk22XKq F3SX7dVeoVroswIbPLhsdvr96qOCPjEWXBkieV41j9jnUatZrPmOh7kW8IyakDgE 7ouB2hKREnjC2FDr6D/E0E/0dFadybnhObAv40i41B8OeR4bBjakEszR9wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJoD+WGdCXmVDME66SDpaNadn1J8MB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEvbWdQNVlaMEplWlVNd1RycElPbG8xcDJmVW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtUFUD BAMtUFADBACxCEQDBAK59sQwDQYJKoZIhvcNAQELBQADggEBAEMBFdpFrptz8DJF FhYwuHoGnBLNgvqp6aVIiKBuPa7bNCspy9k2ierL9Kj13ER8p+NksUFf/1vGE1Sj l5jzsECaDej0/N7Q28YW6B9rcQ+jbco2T6SrhuBUGo2MbAbUgb5rqVHTdCBemcHI E58daW/AzRZ+IIwYYuGqfhvZmR8RBm1CsqzPB6iML9UltuttqLIx+Hkni7CEbuEn R6hYI9TfRZeWQ4rlbuV0pHwPJxoO5uLKEJFWvmQFPo3pg/DMYQsj9XDg6GX1b/Vc qYybaYADZ+fpc2IcN1JhBLFXVIFpkrumbTaNXByJu1MFvYxp9lW1ZnlxGOI6AowV w4CyY3s= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:56 2026 by rpki-client