This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa File: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (raw, json) Hash identifier: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w= Subject key identifier: 9A:63:01:2E:47:1F:6B:33:BE:D2:B9:37:47:16:F2:83:D7:E4:22:82 Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477 Certificate serial: 019B7DCAE24912D04BAC4AC3FF0135CB9096 Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47388 IP address blocks: 46.174.144.0/21 maxlen: 24 91.206.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e2:49:12:d0:4b:ac:4a:c3:ff:01:35:cb:90:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a63012e471f6b33bed2b9374716f283d7e42282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:68:5a:6e:f6:f7:fc:5a:ca:74:81:16:36: eb:18:d0:8e:74:04:9f:42:5c:66:40:ae:41:96:eb: 9a:72:38:52:02:1f:78:0b:9e:83:a1:5a:97:d0:37: d7:d8:f8:c1:7e:32:28:9b:ad:4c:56:bd:5a:a4:9e: b1:d0:be:83:84:c6:30:6d:89:17:30:a4:26:1b:98: af:10:73:94:f0:01:46:86:8a:fd:ad:f4:33:62:e1: af:ab:f6:99:46:15:4c:17:fa:c6:a0:2a:37:51:46: f7:cb:61:c6:d0:56:3c:2d:f7:00:ac:64:53:79:00: d5:74:fc:40:70:cc:75:4e:12:0f:d9:5c:96:ca:44: 67:33:36:b3:33:cb:5a:69:d2:39:9e:32:40:df:cf: 21:60:f4:0f:32:96:21:e5:ca:b6:f9:4a:16:ea:07: 7e:e8:f1:83:00:62:e2:ee:06:62:00:03:e0:64:ba: a0:32:8a:c7:47:cc:ee:37:06:41:8b:0c:26:55:0d: 20:4a:13:8a:53:e8:32:70:8c:0b:9f:45:6e:4c:77: 78:f0:34:be:37:6a:ec:38:77:d7:f5:01:56:4e:34: 9a:82:7a:37:6c:81:f4:8f:8c:06:4d:44:c5:13:dc: dc:d3:cc:66:04:2a:ee:ac:e5:3e:f5:1b:f2:7e:fe: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:01:2E:47:1F:6B:33:BE:D2:B9:37:47:16:F2:83:D7:E4:22:82 X509v3 Authority Key Identifier: keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.144.0/21 91.206.36.0/23 Signature Algorithm: sha256WithRSAEncryption a8:1a:b3:4e:bf:2c:72:c5:e2:f4:b4:bf:4d:c8:f5:50:d1:bb: c1:5f:d9:61:8c:24:5f:2a:cb:6f:79:d8:ab:8a:4b:b3:90:09: 76:4b:82:fd:fa:d5:e2:3b:da:f1:e1:64:77:1a:6b:c7:be:49: 28:ec:62:11:3b:59:21:db:58:5d:ba:4f:09:ea:71:8f:40:7a: 08:33:ca:f4:14:c6:9f:7e:ed:a8:df:81:55:b7:ce:a7:60:87: fd:44:6d:1b:0e:9c:a4:71:f8:23:e4:10:bc:ad:b4:fd:99:ed: e3:b8:d5:ea:14:e7:07:ee:33:cf:4a:c7:ca:dd:b6:89:a1:ed: b9:56:50:b8:4a:10:e6:f2:98:bf:db:c9:b5:7a:54:d7:c6:8a: 58:d8:6c:f0:16:7c:b1:52:e1:27:ed:5e:fc:d3:34:d5:c7:74: 9f:64:a5:3f:f5:71:db:cb:dc:96:0f:92:b7:47:55:63:32:8d: a0:d6:10:94:da:07:fc:a8:c6:76:a7:80:93:a9:b5:b5:cd:3d: d2:7a:6e:22:5b:bb:85:d9:27:af:72:2b:f8:a8:05:7c:1f:9d: e9:07:1b:bc:e2:19:df:68:c0:f2:94:41:a8:f0:68:98:02:07: 69:53:78:3f:8b:75:d2:24:57:87:df:14:d1:ae:bc:91:97:4b: 63:03:99:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yuJJEtBLrErD/wE1y5CWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0 Njk0NzcwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTYzMDEyZTQ3MWY2YjMzYmVkMmI5Mzc0NzE2ZjI4M2Q3ZTQyMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu1oWm729/xaynSBFjbrGNCOdASf QlxmQK5BluuacjhSAh94C56DoVqX0DfX2PjBfjIom61MVr1apJ6x0L6DhMYwbYkX MKQmG5ivEHOU8AFGhor9rfQzYuGvq/aZRhVMF/rGoCo3UUb3y2HG0FY8LfcArGRT eQDVdPxAcMx1ThIP2VyWykRnMzazM8taadI5njJA388hYPQPMpYh5cq2+UoW6gd+ 6PGDAGLi7gZiAAPgZLqgMorHR8zuNwZBiwwmVQ0gShOKU+gycIwLn0VuTHd48DS+ N2rsOHfX9QFWTjSagno3bIH0j4wGTUTFE9zc08xmBCrurOU+9Rvyfv6FHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJpjAS5HH2szvtK5N0cW8oPX5CKCMB8GA1UdIwQY MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt ZjZmZDZiZDg1N2I4LzEvbW1NQkxrY2Zhek8tMHJrM1J4YnlnOWZrSW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4 LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq6QAwQB W84kMA0GCSqGSIb3DQEBCwUAA4IBAQCoGrNOvyxyxeL0tL9NyPVQ0bvBX9lhjCRf KstvedirikuzkAl2S4L9+tXiO9rx4WR3GmvHvkko7GIRO1kh21hduk8J6nGPQHoI M8r0FMaffu2o34FVt86nYIf9RG0bDpykcfgj5BC8rbT9me3juNXqFOcH7jPPSsfK 3baJoe25VlC4ShDm8pi/28m1elTXxopY2GzwFnyxUuEn7V780zTVx3SfZKU/9XHb y9yWD5K3R1VjMo2g1hCU2gf8qMZ2p4CTqbW1zT3Sem4iW7uF2Sevciv4qAV8H53p Bxu84hnfaMDylEGo8GiYAgdpU3g/i3XSJFeH3xTRrryRl0tjA5mz -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:42 2026 by rpki-client