This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MnKjN6Q-CXhGGt0QPBgoVj255lQ.roa File: MnKjN6Q-CXhGGt0QPBgoVj255lQ.roa (raw, json) Hash identifier: 67+7d3I26tILRuSrMuPOh46tUR+tYhaWeqhIiOaEX/I= Subject key identifier: 32:72:A3:37:A4:3E:09:78:46:1A:DD:10:3C:18:28:56:3D:B9:E6:54 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B17021013603299934B74B2BFBDC32A57 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MnKjN6Q-CXhGGt0QPBgoVj255lQ.roa Signing time: Sat 13 Dec 2025 09:19:29 +0000 ROA not before: Sat 13 Dec 2025 09:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210636 IP address blocks: 45.88.246.0/24 maxlen: 24 45.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:02:10:13:60:32:99:93:4b:74:b2:bf:bd:c3:2a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Dec 13 09:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3272a337a43e0978461add103c1828563db9e654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:d5:80:56:d3:5c:a1:91:f1:b9:f0:39:d0: 40:fb:21:9d:1a:e1:b5:1d:f5:2a:a0:11:1c:95:26: 2b:f5:35:bc:e3:a0:45:88:d9:63:54:5d:7d:f8:1a: db:c5:e3:59:63:8d:0f:29:f5:44:17:ba:08:25:5b: 4d:84:61:fe:26:e5:35:03:0f:fa:e5:22:cc:4a:81: 49:eb:fa:d1:7d:8f:3d:c8:71:4d:3b:79:cc:aa:c2: 01:4b:17:44:96:ed:a9:52:2a:97:2b:4f:03:e9:5d: 82:46:85:d0:71:1e:22:28:35:14:d2:9d:62:9b:c4: 0d:b2:df:73:95:57:9b:00:d8:5e:20:4b:3f:94:63: de:7c:77:ed:1a:39:46:37:65:fd:e7:9d:7a:d3:3b: 71:79:fb:62:07:73:dd:28:b2:d8:d8:3d:9a:a5:fe: 0a:78:3b:f5:79:11:0e:45:37:2d:84:61:98:22:dc: 5f:a0:2e:17:ff:70:72:09:bc:53:c3:7a:d8:f3:b7: 16:d6:0c:c0:74:d3:aa:a5:02:f0:16:bb:e9:00:b8: b4:32:3a:f1:47:c6:d2:2b:f8:04:59:a5:af:6c:cd: b0:2d:d7:3c:51:91:43:a9:30:5d:6a:35:d5:f1:46: 0e:a3:25:86:4e:ec:e7:65:d8:3b:34:38:8e:c6:c0: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:A3:37:A4:3E:09:78:46:1A:DD:10:3C:18:28:56:3D:B9:E6:54 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MnKjN6Q-CXhGGt0QPBgoVj255lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.246.0/23 Signature Algorithm: sha256WithRSAEncryption 82:a1:68:a9:74:4a:88:80:b6:05:d3:01:c3:20:97:2a:42:e5: 02:94:97:ab:02:88:94:82:05:78:2f:a9:5f:54:5e:b1:f9:9f: 69:41:9c:da:67:51:c7:d2:d6:6b:57:3d:a1:d2:0e:b7:5f:9c: 74:d1:af:5d:7c:18:9f:40:11:ca:e3:c8:70:30:e7:bf:c3:84: 78:48:6b:0d:fb:1a:d4:ff:0e:d6:da:ae:1e:f7:02:fa:4a:a6: ea:13:f7:8e:bb:90:f8:43:13:b1:2f:72:0c:eb:e4:7b:21:7b: 2c:6d:e0:e1:cd:29:63:99:2b:c3:42:74:a9:8d:4e:d9:b6:77: d0:2a:74:2e:ac:8b:67:b3:a3:8c:cc:f6:7c:0d:fc:d1:5d:94: dd:0b:ad:e0:9b:ff:2c:02:9f:f6:07:65:4f:f9:1d:b0:30:1c: 76:42:6f:6c:51:f7:1e:25:70:ed:47:ae:d9:e9:51:c6:f1:75: d3:b1:cf:d8:38:27:f9:93:96:dd:fa:0a:69:b0:37:b8:f9:d8: 04:f7:6e:40:93:d0:6a:f3:11:b5:00:5d:56:8a:22:9d:43:38: de:ec:72:2f:1a:40:4d:af:b1:13:9c:cb:a8:42:7d:cf:6e:04: 46:1a:a8:51:0a:65:74:2b:c8:76:ab:de:a0:44:a5:0c:57:67: 43:6f:10:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsXAhATYDKZk0t0sr+9wypXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMjEzMDkxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjcyYTMzN2E0M2UwOTc4NDYxYWRkMTAzYzE4Mjg1NjNkYjllNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunzVgFbTXKGR8bnwOdBA+yGdGuG1 HfUqoBEclSYr9TW846BFiNljVF19+BrbxeNZY40PKfVEF7oIJVtNhGH+JuU1Aw/6 5SLMSoFJ6/rRfY89yHFNO3nMqsIBSxdElu2pUiqXK08D6V2CRoXQcR4iKDUU0p1i m8QNst9zlVebANheIEs/lGPefHftGjlGN2X955160ztxeftiB3PdKLLY2D2apf4K eDv1eREORTcthGGYItxfoC4X/3ByCbxTw3rY87cW1gzAdNOqpQLwFrvpALi0Mjrx R8bSK/gEWaWvbM2wLdc8UZFDqTBdajXV8UYOoyWGTuznZdg7NDiOxsAqSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJyozekPgl4RhrdEDwYKFY9ueZUMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvTW5Lak42US1DWGhHR3QwUVBCZ29WajI1NWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVj2MA0G CSqGSIb3DQEBCwUAA4IBAQCCoWipdEqIgLYF0wHDIJcqQuUClJerAoiUggV4L6lf VF6x+Z9pQZzaZ1HH0tZrVz2h0g63X5x00a9dfBifQBHK48hwMOe/w4R4SGsN+xrU /w7W2q4e9wL6SqbqE/eOu5D4QxOxL3IM6+R7IXssbeDhzSljmSvDQnSpjU7ZtnfQ KnQurItns6OMzPZ8DfzRXZTdC63gm/8sAp/2B2VP+R2wMBx2Qm9sUfceJXDtR67Z 6VHG8XXTsc/YOCf5k5bd+gppsDe4+dgE925Ak9Bq8xG1AF1WiiKdQzje7HIvGkBN r7ETnMuoQn3PbgRGGqhRCmV0K8h2q96gRKUMV2dDbxBJ -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:50 2025 by rpki-client