This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Mh0GCA4fU985YGcY_Sl-hoqqYak.roa File: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (raw, json) Hash identifier: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc= Subject key identifier: 32:1D:06:08:0E:1F:53:DF:39:60:67:18:FD:29:7E:86:8A:AA:61:A9 Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Certificate serial: 019B7C80ADDFDAF3608C307EFA029CD733FB Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Mh0GCA4fU985YGcY_Sl-hoqqYak.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51862 IP address blocks: 46.16.72.0/21 maxlen: 24 78.137.96.0/21 maxlen: 24 2a02:2478::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ad:df:da:f3:60:8c:30:7e:fa:02:9c:d7:33:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=321d06080e1f53df39606718fd297e868aaa61a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:c2:8f:85:a3:83:48:66:91:5a:7c:36:68: f3:8a:ab:e1:7e:63:2f:72:ef:78:bb:8d:1e:03:22: 10:2a:07:d2:4b:bd:7b:94:cc:a5:4d:c9:92:e0:6c: 55:c0:5f:28:aa:e0:82:94:15:ba:20:5e:9b:c8:a0: 95:db:9b:2d:80:7f:ed:a4:e7:be:5a:1c:6f:05:f0: e6:fb:18:73:5c:f9:7e:10:e7:34:05:88:0b:d6:8a: 55:bc:54:30:42:4c:f9:c9:c9:90:ea:2d:6d:91:e8: f5:82:24:fe:bc:0e:e4:5f:37:95:fe:99:a0:79:96: 99:6e:e5:3f:f3:99:eb:29:e2:3a:91:f6:9f:36:86: 21:11:30:56:0c:dc:14:3c:d9:7c:fc:9f:8e:83:e2: 29:60:e7:d4:4a:70:8c:39:86:6f:bc:34:f2:f0:18: c7:bf:9e:c8:7a:b7:76:5b:4c:75:b4:7f:58:90:a5: ba:60:e6:e4:c6:77:b0:36:cf:c1:82:e6:3e:81:b9: ab:01:ba:c9:1d:54:5c:01:99:7d:d2:51:a3:b7:cd: e1:a3:36:b7:42:38:a5:b2:9d:fe:0c:49:45:79:20: 0e:d7:6d:36:c0:28:23:bd:dc:32:28:a0:d6:77:c6: a1:5f:0e:d8:9a:97:87:95:14:db:3e:35:73:13:05: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1D:06:08:0E:1F:53:DF:39:60:67:18:FD:29:7E:86:8A:AA:61:A9 X509v3 Authority Key Identifier: keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Mh0GCA4fU985YGcY_Sl-hoqqYak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.72.0/21 78.137.96.0/21 IPv6: 2a02:2478::/32 Signature Algorithm: sha256WithRSAEncryption 4a:d4:06:aa:c2:47:b4:3f:8d:d2:63:66:07:a2:c4:f9:32:f5: 83:be:34:b3:5c:3e:40:bf:2b:a1:52:44:d2:78:4a:24:78:7b: 4b:6f:62:b9:f4:62:ac:27:33:b3:45:7b:5d:53:cf:e6:99:7b: 9e:4d:11:1d:1b:49:26:09:df:44:9b:5f:1a:02:bc:1c:e0:f5: 39:82:95:fd:98:be:7b:71:5b:6f:2a:38:30:01:3b:37:a3:eb: 89:35:1e:88:8a:b8:95:6d:3d:5d:ab:b9:ce:b1:ce:ea:e2:c6: 14:40:fa:9f:80:7f:00:b1:63:e3:50:d6:02:c5:f7:c8:67:5d: ef:24:84:11:3f:1b:1e:e7:98:79:cc:35:35:95:a7:e1:e3:57: 56:95:0b:b0:8b:3a:36:bb:49:57:50:0b:d6:e8:bf:66:78:84: db:5a:c4:ae:02:3a:60:2b:3e:f0:c4:87:ae:ff:d5:f9:e8:c9: db:08:74:6b:73:5e:00:04:75:25:ce:9e:d6:87:a7:6a:e2:18: 49:c5:5d:51:74:a6:71:70:56:f8:33:29:97:dc:06:03:c8:c7: 4a:22:85:62:cd:da:6c:37:2a:81:84:c2:4b:b4:85:cb:d3:e9: 97:f5:6c:a4:68:4a:a0:42:4e:17:0d:57:64:97:3a:e4:44:bf: 3f:3a:dc:f2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gK3f2vNgjDB++gKc1zP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh Y2FlNzAwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjFkMDYwODBlMWY1M2RmMzk2MDY3MThmZDI5N2U4NjhhYWE2MWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArifCj4Wjg0hmkVp8NmjziqvhfmMv cu94u40eAyIQKgfSS717lMylTcmS4GxVwF8oquCClBW6IF6byKCV25stgH/tpOe+ WhxvBfDm+xhzXPl+EOc0BYgL1opVvFQwQkz5ycmQ6i1tkej1giT+vA7kXzeV/pmg eZaZbuU/85nrKeI6kfafNoYhETBWDNwUPNl8/J+Og+IpYOfUSnCMOYZvvDTy8BjH v57Ierd2W0x1tH9YkKW6YObkxnewNs/BguY+gbmrAbrJHVRcAZl90lGjt83hoza3 Qjilsp3+DElFeSAO1202wCgjvdwyKKDWd8ahXw7YmpeHlRTbPjVzEwWxewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDIdBggOH1PfOWBnGP0pfoaKqmGpMB8GA1UdIwQY MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt OWViNDBjYzVmNjhiLzEvTWgwR0NBNGZVOTg1WUdjWV9TbC1ob3FxWWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLhBIAwQD TolgMA0EAgACMAcDBQAqAiR4MA0GCSqGSIb3DQEBCwUAA4IBAQBK1Aaqwke0P43S Y2YHosT5MvWDvjSzXD5AvyuhUkTSeEokeHtLb2K59GKsJzOzRXtdU8/mmXueTREd G0kmCd9Em18aArwc4PU5gpX9mL57cVtvKjgwATs3o+uJNR6IiriVbT1dq7nOsc7q 4sYUQPqfgH8AsWPjUNYCxffIZ13vJIQRPxse55h5zDU1lafh41dWlQuwizo2u0lX UAvW6L9meITbWsSuAjpgKz7wxIeu/9X56MnbCHRrc14ABHUlzp7Wh6dq4hhJxV1R dKZxcFb4MymX3AYDyMdKIoVizdpsNyqBhMJLtIXL0+mX9WykaEqgQk4XDVdklzrk RL8/Otzy -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:42 2026 by rpki-client