This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/MwSiI9GchKzKf7qBJz16eEvXh-o.roa File: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (raw, json) Hash identifier: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI= Subject key identifier: 33:04:A2:23:D1:9C:84:AC:CA:7F:BA:81:27:3D:7A:78:4B:D7:87:EA Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019B7834BFE40F163F1FB8CBF13201ADF57D Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/MwSiI9GchKzKf7qBJz16eEvXh-o.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208006 IP address blocks: 45.82.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bf:e4:0f:16:3f:1f:b8:cb:f1:32:01:ad:f5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3304a223d19c84acca7fba81273d7a784bd787ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:52:22:32:8b:d8:f7:a8:6a:e5:a6:1d:fc: d9:08:b6:67:bf:7a:4c:ee:dd:1f:b2:38:0f:73:44: c1:86:8a:35:72:22:bc:ef:52:33:e6:6b:ce:04:37: 4e:77:7b:ac:bd:b0:6a:b1:1c:f6:fd:77:4b:97:11: bc:32:f9:04:5e:bb:f9:c0:e4:eb:0d:44:62:46:5d: f2:e2:e5:01:c8:eb:4f:3f:a8:5d:b8:d1:53:72:7a: 4b:6e:0e:45:4c:cd:a1:ac:f2:40:e5:38:43:bb:2d: 99:fa:d9:b3:af:db:94:9b:4d:13:02:4f:51:b4:9a: d3:a0:19:fc:92:00:29:c5:0c:00:c7:69:1e:b3:ec: bd:a8:1d:c9:20:76:fe:12:fc:59:7d:60:26:1f:49: 31:8d:ca:b9:f6:28:25:2a:6a:90:ce:84:87:87:41: 2d:59:bb:22:de:0e:13:37:4d:4b:de:12:36:76:9b: f3:33:f8:33:5d:d2:3a:aa:a8:c1:0e:ac:63:fe:d9: 34:ee:65:ca:ac:5c:5b:f9:af:f5:f4:77:fc:39:6a: 05:f5:4d:29:31:d5:19:39:a5:cb:21:65:d6:41:88: 4c:5c:17:df:78:e2:87:88:5e:64:c8:38:18:9f:02: 90:69:d9:9b:6c:b3:c2:d8:29:89:84:a4:7a:30:70: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:A2:23:D1:9C:84:AC:CA:7F:BA:81:27:3D:7A:78:4B:D7:87:EA X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/MwSiI9GchKzKf7qBJz16eEvXh-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.136.0/22 Signature Algorithm: sha256WithRSAEncryption 62:bd:54:d7:ea:48:ac:6f:96:9a:03:87:0f:4c:0e:4f:a2:cb: 8d:94:9e:f3:83:57:66:cb:1e:80:2d:59:bb:80:3f:17:99:de: fc:79:4e:46:76:c3:3b:fb:0b:64:ac:59:d3:ec:fb:93:d8:f8: 7f:79:18:be:6a:90:33:d0:ee:f2:46:ce:47:c4:ef:c1:7e:bf: d4:17:44:0d:5c:7e:36:ec:e3:7a:2d:70:19:e7:0d:9d:d0:33: 3c:3a:02:bc:ac:82:0f:da:bc:d2:f8:d8:44:6c:5d:c4:d5:af: b9:e5:af:a7:9e:e2:dd:47:4e:03:76:f4:f2:6a:c6:fb:39:3d: 48:aa:f6:93:5b:cd:6c:fe:0c:6e:7b:fc:e3:6c:a8:3b:5b:e6: 45:7f:ba:31:1e:6f:e5:11:c4:24:1c:c7:9c:dd:10:ee:ac:77: a4:90:16:d2:28:3e:2d:13:0b:79:af:e9:52:aa:85:b5:ce:38: b2:bb:a8:d5:80:42:fc:25:94:b0:2d:b4:dd:44:dc:8e:f0:6e: b9:74:e6:05:b1:bd:4a:2a:e4:b1:5e:89:d4:ed:e8:00:a3:05: 46:01:08:0c:0c:c7:1a:6a:a6:9f:38:91:55:bb:12:4c:32:00: f0:d3:8b:55:be:d8:24:51:89:29:1b:9f:72:f1:c6:b3:95:59: 15:58:43:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NL/kDxY/H7jL8TIBrfV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzA0YTIyM2QxOWM4NGFjY2E3ZmJhODEyNzNkN2E3ODRiZDc4N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRJSIjKL2PeoauWmHfzZCLZnv3pM 7t0fsjgPc0TBhoo1ciK871Iz5mvOBDdOd3usvbBqsRz2/XdLlxG8MvkEXrv5wOTr DURiRl3y4uUByOtPP6hduNFTcnpLbg5FTM2hrPJA5ThDuy2Z+tmzr9uUm00TAk9R tJrToBn8kgApxQwAx2kes+y9qB3JIHb+EvxZfWAmH0kxjcq59iglKmqQzoSHh0Et Wbsi3g4TN01L3hI2dpvzM/gzXdI6qqjBDqxj/tk07mXKrFxb+a/19Hf8OWoF9U0p MdUZOaXLIWXWQYhMXBffeOKHiF5kyDgYnwKQadmbbLPC2CmJhKR6MHAjHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMEoiPRnISsyn+6gSc9enhL14fqMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvTXdTaUk5R2NoS3pLZjdxQkp6MTZlRXZYaC1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKIMA0G CSqGSIb3DQEBCwUAA4IBAQBivVTX6kisb5aaA4cPTA5PosuNlJ7zg1dmyx6ALVm7 gD8Xmd78eU5GdsM7+wtkrFnT7PuT2Ph/eRi+apAz0O7yRs5HxO/Bfr/UF0QNXH42 7ON6LXAZ5w2d0DM8OgK8rIIP2rzS+NhEbF3E1a+55a+nnuLdR04DdvTyasb7OT1I qvaTW81s/gxue/zjbKg7W+ZFf7oxHm/lEcQkHMec3RDurHekkBbSKD4tEwt5r+lS qoW1zjiyu6jVgEL8JZSwLbTdRNyO8G65dOYFsb1KKuSxXonU7egAowVGAQgMDMca aqafOJFVuxJMMgDw04tVvtgkUYkpG59y8cazlVkVWEOI -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:19 2026 by rpki-client