This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MGfxuKO_1scjCxHv2av8DqZ6eps.roa File: MGfxuKO_1scjCxHv2av8DqZ6eps.roa (raw, json) Hash identifier: vpQUhfSOEemMmIX5tSvcnIiizCqF5JSXsIOI4Jp2LJg= Subject key identifier: 30:67:F1:B8:A3:BF:D6:C7:23:0B:11:EF:D9:AB:FC:0E:A6:7A:7A:9B Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68B2A9DB477AF6D11632DEC1E44FC Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MGfxuKO_1scjCxHv2av8DqZ6eps.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396545 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8b:2a:9d:b4:77:af:6d:11:63:2d:ec:1e:44:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3067f1b8a3bfd6c7230b11efd9abfc0ea67a7a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:95:c5:8f:b9:1f:b1:db:1a:0c:3c:de:38: da:c5:a2:19:e6:8b:fb:2e:1a:8e:d9:74:44:a1:f8: 12:82:af:f2:19:e3:ab:46:c8:12:56:85:95:4b:77: c0:41:2a:67:56:d2:1e:a9:6a:8d:c9:a9:65:eb:b0: 44:ee:67:76:b1:f3:58:d7:ff:c2:1f:14:7c:85:5a: 15:72:cf:a4:19:4a:4e:44:d0:5c:1e:1d:48:d0:59: fd:c3:ef:fc:73:22:18:7e:f1:22:df:c8:bc:5c:ae: 9a:28:0b:08:46:47:13:70:1d:67:c4:d5:bf:38:95: ac:7e:d0:0a:9c:a3:3f:ac:96:9b:38:97:a1:17:d2: c2:29:0a:29:ea:ea:22:d1:3f:dd:bd:60:20:40:7f: 16:e6:fe:9b:52:48:4b:16:0e:79:a4:12:84:ff:fa: 78:ff:82:45:89:bf:53:6c:43:66:b4:35:54:66:19: bf:6b:0b:e8:8b:46:a9:ca:d0:10:88:01:ee:8a:33: ea:cb:db:0e:16:4c:0b:bc:65:b4:2f:cd:3c:0f:4c: f1:da:0d:38:48:3c:30:d9:f0:7b:05:3c:02:2d:dc: 86:52:44:b2:55:71:63:44:87:79:17:cd:6a:b1:74: 7e:47:c2:c4:0e:5b:68:24:9a:6f:d6:77:ec:76:d0: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:F1:B8:A3:BF:D6:C7:23:0B:11:EF:D9:AB:FC:0E:A6:7A:7A:9B X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MGfxuKO_1scjCxHv2av8DqZ6eps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption ad:c2:8d:35:e7:be:c5:2e:6d:52:1f:3b:a2:67:44:01:1b:20: 90:13:56:4b:bf:d5:7f:61:69:87:34:1a:6a:dc:f1:92:10:eb: 7c:7b:7e:56:94:1f:c6:d1:89:06:69:0e:57:14:ab:39:e2:d9: f7:5a:d1:16:1f:9d:02:b2:7b:b5:98:c4:97:22:9c:03:22:5d: b4:9d:42:d7:9f:d3:fc:07:d4:02:ff:da:04:30:23:5d:73:e6: dc:bd:65:20:7f:28:f7:5e:4c:a3:50:51:78:55:4b:6a:9d:ee: 23:3a:be:5e:55:65:a3:6b:e7:dc:52:9d:c3:49:8b:eb:c2:65: 6d:c2:1d:c8:a5:e6:b6:88:bc:51:25:e5:8d:f1:5e:92:9c:3e: f4:9f:9a:88:5a:df:28:6b:d1:d9:b4:db:ae:d1:98:11:53:24: 43:94:cb:af:82:a0:98:29:b5:6e:17:23:eb:06:a9:39:c1:a6: 8a:b6:82:ee:1a:a5:5f:a4:dc:21:db:48:f4:f1:6e:41:a6:a2: 41:6a:b3:87:33:3c:16:78:01:38:63:e1:e3:d4:7e:ac:3b:23: a2:fc:c9:b2:75:2c:dc:f9:8a:80:8a:86:db:d4:eb:9d:74:25: 6d:c9:58:1c:d0:34:72:5a:1b:d2:de:81:0f:5c:3c:09:d6:7b: 2d:0c:d9:20 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xosqnbR3r20RYy3sHkT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDY3ZjFiOGEzYmZkNmM3MjMwYjExZWZkOWFiZmMwZWE2N2E3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20KVxY+5H7HbGgw83jjaxaIZ5ov7 LhqO2XREofgSgq/yGeOrRsgSVoWVS3fAQSpnVtIeqWqNyall67BE7md2sfNY1//C HxR8hVoVcs+kGUpORNBcHh1I0Fn9w+/8cyIYfvEi38i8XK6aKAsIRkcTcB1nxNW/ OJWsftAKnKM/rJabOJehF9LCKQop6uoi0T/dvWAgQH8W5v6bUkhLFg55pBKE//p4 /4JFib9TbENmtDVUZhm/awvoi0apytAQiAHuijPqy9sOFkwLvGW0L808D0zx2g04 SDww2fB7BTwCLdyGUkSyVXFjRId5F81qsXR+R8LEDltoJJpv1nfsdtDCmQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDBn8bijv9bHIwsR79mr/A6menqbMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTUdmeHVLT18xc2NqQ3hIdjJhdjhEcVo2ZXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAK3CjTXnvsUubVIfO6JnRAEbIJATVku/ 1X9haYc0Gmrc8ZIQ63x7flaUH8bRiQZpDlcUqzni2fda0RYfnQKye7WYxJcinAMi XbSdQtef0/wH1AL/2gQwI11z5ty9ZSB/KPdeTKNQUXhVS2qd7iM6vl5VZaNr59xS ncNJi+vCZW3CHcil5raIvFEl5Y3xXpKcPvSfmoha3yhr0dm0267RmBFTJEOUy6+C oJgptW4XI+sGqTnBpoq2gu4apV+k3CHbSPTxbkGmokFqs4czPBZ4AThj4ePUfqw7 I6L8ybJ1LNz5ioCKhtvU6510JW3JWBzQNHJaG9LegQ9cPAnWey0M2SA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:46 2026 by rpki-client