This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mg4uMSyQFteh8OHZpDbLBOEF9SY.roa File: Mg4uMSyQFteh8OHZpDbLBOEF9SY.roa (raw, json) Hash identifier: jirirg8tODh6DdM25+/5Z8xE4x1hMGKJjchKMCzJdJQ= Subject key identifier: 32:0E:2E:31:2C:90:16:D7:A1:F0:E1:D9:A4:36:CB:04:E1:05:F5:26 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC5FC7D2D51B0C86FDF8C0589159C5 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mg4uMSyQFteh8OHZpDbLBOEF9SY.roa Signing time: Thu 01 Jan 2026 14:18:12 +0000 ROA not before: Thu 01 Jan 2026 14:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 37.46.20.0/23 maxlen: 24 37.46.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5f:c7:d2:d5:1b:0c:86:fd:f8:c0:58:91:59:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=320e2e312c9016d7a1f0e1d9a436cb04e105f526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:96:e2:e1:e3:0a:13:78:2a:11:ae:85:5d: 96:24:12:f2:4b:76:e5:6c:98:de:ff:08:cd:10:d9: 29:80:91:2e:8e:77:c9:ec:c9:64:e5:b8:84:62:5d: ce:87:be:a1:88:8a:f9:76:3f:8c:2d:3f:1d:42:11: c0:64:bb:f2:ee:dd:9c:91:ce:d2:4e:63:3c:36:c7: 7c:b5:04:10:2b:72:37:a2:7c:34:1c:8b:d4:37:49: fe:a7:79:28:f4:50:84:e2:c0:c9:5b:3a:d9:3b:97: 96:b1:77:ba:ee:8d:3a:f5:3d:0d:3f:1c:9a:8f:42: e5:ef:c1:60:3a:e7:8e:4b:00:2a:f1:58:9d:d6:b7: 13:61:d6:51:f7:5c:cd:59:00:87:c4:35:15:46:77: df:b8:98:9c:d0:d3:f3:73:a2:f5:19:84:60:0b:b7: b1:82:bb:3c:74:f6:a3:b8:10:39:c1:cd:ba:81:22: 6c:f9:f2:f3:ef:66:ae:62:fb:48:76:80:86:fd:d1: 91:cd:b0:10:63:e6:43:47:b0:86:f3:6e:ec:f4:42: f0:67:d2:f8:5b:99:9a:df:9e:98:5f:a5:49:40:9c: 69:d0:f7:0a:f8:54:c8:63:e0:d5:0b:e4:ef:09:99: b4:e9:84:af:ab:34:3d:1f:16:fd:26:ae:1e:84:36: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0E:2E:31:2C:90:16:D7:A1:F0:E1:D9:A4:36:CB:04:E1:05:F5:26 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mg4uMSyQFteh8OHZpDbLBOEF9SY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:6a:30:cd:da:ca:25:cf:15:e7:8a:be:19:de:1e:19:07:d9: c5:8f:32:48:a0:19:2c:cc:d9:52:c4:a1:4f:20:9f:fd:fc:4a: 1c:07:6b:0b:b6:a7:a5:4b:77:22:9c:60:7a:40:93:ea:62:fc: 10:73:e7:7b:11:88:31:d3:c7:b9:67:80:be:9a:56:25:4c:d6: 15:3c:00:de:b9:50:a3:6e:47:4b:b6:70:05:ce:9b:87:80:f3: de:eb:5a:73:b7:6c:4b:16:6c:ba:9b:36:1e:77:b0:6c:cb:b2: 26:b1:6e:7d:41:94:9a:84:bd:ee:03:24:d8:d3:47:a0:52:57: ce:c9:a3:49:8c:62:d0:03:fa:0c:d1:94:e0:ea:16:69:61:1f: ab:3b:ae:be:9a:fe:b7:bc:ea:7b:f4:d2:18:55:79:d8:6e:00: 82:6d:55:6d:26:48:45:cc:5a:e1:cb:22:45:4d:3e:8f:3e:e7: 5d:57:5f:66:20:7e:60:53:0d:47:01:6e:8d:86:01:de:f7:c3: e2:6a:dc:37:60:ec:63:05:b6:ca:09:0e:87:6a:2a:f8:d6:33: 2a:45:d4:64:95:7e:af:41:4d:5d:03:60:dd:89:b9:ce:60:3a: 0a:43:39:35:46:20:6e:2b:a3:00:ae:4a:b5:14:44:ec:ae:51: 58:47:86:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57F/H0tUbDIb9+MBYkVnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjBlMmUzMTJjOTAxNmQ3YTFmMGUxZDlhNDM2Y2IwNGUxMDVmNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5iW4uHjChN4KhGuhV2WJBLyS3bl bJje/wjNENkpgJEujnfJ7Mlk5biEYl3Oh76hiIr5dj+MLT8dQhHAZLvy7t2ckc7S TmM8Nsd8tQQQK3I3onw0HIvUN0n+p3ko9FCE4sDJWzrZO5eWsXe67o069T0NPxya j0Ll78FgOueOSwAq8Vid1rcTYdZR91zNWQCHxDUVRnffuJic0NPzc6L1GYRgC7ex grs8dPajuBA5wc26gSJs+fLz72auYvtIdoCG/dGRzbAQY+ZDR7CG827s9ELwZ9L4 W5ma356YX6VJQJxp0PcK+FTIY+DVC+TvCZm06YSvqzQ9Hxb9Jq4ehDbUPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDIOLjEskBbXofDh2aQ2ywThBfUmMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTWc0dU1TeVFGdGVoOE9IWnBEYkxCT0VGOVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJS4UMA0G CSqGSIb3DQEBCwUAA4IBAQA6ajDN2solzxXnir4Z3h4ZB9nFjzJIoBkszNlSxKFP IJ/9/EocB2sLtqelS3cinGB6QJPqYvwQc+d7EYgx08e5Z4C+mlYlTNYVPADeuVCj bkdLtnAFzpuHgPPe61pzt2xLFmy6mzYed7Bsy7ImsW59QZSahL3uAyTY00egUlfO yaNJjGLQA/oM0ZTg6hZpYR+rO66+mv63vOp79NIYVXnYbgCCbVVtJkhFzFrhyyJF TT6PPuddV19mIH5gUw1HAW6NhgHe98Piatw3YOxjBbbKCQ6Hair41jMqRdRklX6v QU1dA2DdibnOYDoKQzk1RiBuK6MArkq1FETsrlFYR4Y3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:06 2026 by rpki-client