This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MqnAknKVyLxfTzFFIjythHg_aCE.roa File: MqnAknKVyLxfTzFFIjythHg_aCE.roa (raw, json) Hash identifier: M/277WNWefPQdibWBVy90y6NFwdBQ/sXRo6kuf4IlTE= Subject key identifier: 32:A9:C0:92:72:95:C8:BC:5F:4F:31:45:22:3C:AD:84:78:3F:68:21 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B3657000905DBE40ECF55001DD2843148 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MqnAknKVyLxfTzFFIjythHg_aCE.roa Signing time: Fri 19 Dec 2025 11:20:29 +0000 ROA not before: Fri 19 Dec 2025 11:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213755 IP address blocks: 176.98.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:57:00:09:05:db:e4:0e:cf:55:00:1d:d2:84:31:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 19 11:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32a9c0927295c8bc5f4f3145223cad84783f6821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:fd:f5:42:e8:53:fa:32:18:ce:27:56:f7: 48:16:a9:04:46:94:2c:76:a7:0b:a9:44:70:33:52: 59:8b:20:07:fb:ba:98:96:5c:06:e2:5b:b0:26:38: 42:34:a2:ab:f2:a3:1d:f0:0a:65:65:b8:d8:53:54: c7:cd:7a:95:34:94:2a:1b:df:a9:70:e2:31:b4:2d: 24:f7:45:fe:93:7b:a0:90:7e:99:b3:88:b5:57:a9: 19:ce:1b:98:d4:fc:76:ef:a9:15:ca:e9:ab:ae:cd: ba:85:4c:75:62:bd:30:92:8d:ef:16:81:5e:5c:a3: fe:83:41:38:73:54:c9:22:f0:27:03:14:28:43:02: 4d:44:1f:b1:6a:a5:70:3b:bc:5c:40:74:6e:64:d5: 8f:d8:e6:5a:11:0d:0e:e3:69:12:66:8f:ab:30:8a: 51:29:5c:ce:12:7f:37:42:c4:30:c0:77:f9:1a:df: 14:09:3f:7f:d9:f9:d3:78:df:4a:c4:c0:b2:22:3a: c8:54:7b:b1:fb:e3:77:4d:ad:a4:c4:29:c7:2e:45: d3:a0:32:a1:d8:d7:25:75:ba:25:78:8c:cd:1f:1b: 55:b1:76:a0:6b:f8:27:af:86:33:7e:e1:c0:69:fb: 84:c5:7a:20:91:d2:0d:36:a5:ce:d3:aa:dd:8e:3d: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:C0:92:72:95:C8:BC:5F:4F:31:45:22:3C:AD:84:78:3F:68:21 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MqnAknKVyLxfTzFFIjythHg_aCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.98.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:89:d4:e8:4f:dd:59:af:57:ac:dd:f6:98:2f:e5:ce:da:83: 96:67:05:84:7f:57:b2:ab:b2:b8:e9:34:0b:d4:51:32:c4:71: 96:a4:88:6a:30:73:52:96:3c:14:8b:22:fa:2e:da:a8:f0:85: a4:21:a4:68:0e:4c:05:81:b4:14:f4:60:f7:77:26:f7:78:7d: c0:a4:98:d5:b8:30:9b:98:fc:97:b5:0d:47:ab:c7:9e:d9:4b: 93:11:b4:ba:35:40:67:16:2b:29:1e:32:29:b3:a8:d1:48:fb: a6:1b:4c:1e:55:e2:97:27:ba:4f:a4:62:2e:5b:00:c0:e5:9a: 4f:06:3c:19:75:4f:b4:49:d0:b6:73:57:cb:d6:43:39:46:ee: e7:5f:8a:f4:92:8a:15:8e:89:7c:ff:f4:d6:dd:cc:3b:82:ac: 16:d2:ec:91:61:90:41:b6:88:9f:02:93:79:e7:e8:3b:96:ac: 49:b1:75:fc:2a:4c:1b:b9:8b:75:80:4d:e0:5a:6c:43:b2:b1: c9:33:10:d4:83:4d:63:5d:3a:63:06:70:60:bd:cb:85:b1:9a: a2:8f:1f:29:2f:11:a1:cf:3d:65:7b:05:68:c6:e7:98:ff:e4: 2c:b5:82:60:86:76:d7:29:f1:da:9f:33:e5:b9:88:19:f7:f4: ca:e1:85:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2VwAJBdvkDs9VAB3ShDFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjE5MTEyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmE5YzA5MjcyOTVjOGJjNWY0ZjMxNDUyMjNjYWQ4NDc4M2Y2ODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGr99ULoU/oyGM4nVvdIFqkERpQs dqcLqURwM1JZiyAH+7qYllwG4luwJjhCNKKr8qMd8AplZbjYU1THzXqVNJQqG9+p cOIxtC0k90X+k3ugkH6Zs4i1V6kZzhuY1Px276kVyumrrs26hUx1Yr0wko3vFoFe XKP+g0E4c1TJIvAnAxQoQwJNRB+xaqVwO7xcQHRuZNWP2OZaEQ0O42kSZo+rMIpR KVzOEn83QsQwwHf5Gt8UCT9/2fnTeN9KxMCyIjrIVHux++N3Ta2kxCnHLkXToDKh 2NcldboleIzNHxtVsXaga/gnr4YzfuHAafuExXogkdINNqXO06rdjj21+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKpwJJylci8X08xRSI8rYR4P2ghMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvTXFuQWtuS1Z5THhmVHpGRklqeXRoSGdfYUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGK6MA0G CSqGSIb3DQEBCwUAA4IBAQBaidToT91Zr1es3faYL+XO2oOWZwWEf1eyq7K46TQL 1FEyxHGWpIhqMHNSljwUiyL6Ltqo8IWkIaRoDkwFgbQU9GD3dyb3eH3ApJjVuDCb mPyXtQ1Hq8ee2UuTEbS6NUBnFispHjIps6jRSPumG0weVeKXJ7pPpGIuWwDA5ZpP BjwZdU+0SdC2c1fL1kM5Ru7nX4r0kooVjol8//TW3cw7gqwW0uyRYZBBtoifApN5 5+g7lqxJsXX8KkwbuYt1gE3gWmxDsrHJMxDUg01jXTpjBnBgvcuFsZqijx8pLxGh zz1lewVoxueY/+QstYJghnbXKfHanzPluYgZ9/TK4YXw -----END CERTIFICATE-----Generated at Mon Dec 29 02:54:40 2025 by rpki-client