This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MNyAGUr0j3vFxH1gtRQN0ru5Wq4.roa File: MNyAGUr0j3vFxH1gtRQN0ru5Wq4.roa (raw, json) Hash identifier: D8DwVnzNcZuAsdbDPkAXxMd4uvzy/4gUmiuv09ZGI60= Subject key identifier: 30:DC:80:19:4A:F4:8F:7B:C5:C4:7D:60:B5:14:0D:D2:BB:B9:5A:AE Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019AF439A5ABB2B246F4A572E40029C4887B Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MNyAGUr0j3vFxH1gtRQN0ru5Wq4.roa Signing time: Sat 06 Dec 2025 15:13:29 +0000 ROA not before: Sat 06 Dec 2025 15:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.11.191.0/24 maxlen: 24 188.209.137.0/24 maxlen: 24 188.209.139.0/24 maxlen: 24 194.15.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:39:a5:ab:b2:b2:46:f4:a5:72:e4:00:29:c4:88:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 6 15:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30dc80194af48f7bc5c47d60b5140dd2bbb95aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:66:30:8b:88:e0:9a:be:91:b8:29:ff:09: 8d:3c:4c:0a:6f:1f:fb:eb:d0:3f:95:9d:47:d5:75: e1:48:4d:56:77:b4:6f:e0:cd:bc:8a:b4:c8:5f:12: 73:a1:70:44:cd:10:9f:47:c7:81:d8:cf:fd:2f:9e: 55:58:3c:ed:7d:9a:a1:49:46:f3:0c:c7:6a:27:02: c7:f4:a1:36:6b:df:ed:6e:02:35:b0:53:1f:f0:54: ff:96:da:20:1e:e1:62:8f:ca:a4:3d:52:66:08:74: 81:77:ca:0f:81:b9:33:e0:f1:d4:7b:04:4f:96:62: b4:9c:c5:8a:49:b7:45:97:17:33:f9:00:ba:4d:9e: fe:ac:c1:c7:81:8d:4f:02:95:da:4c:ee:ab:b7:15: 17:aa:8e:ac:45:0f:30:e8:21:29:f1:3c:0f:49:23: f2:9b:8c:76:22:d7:07:b2:18:4e:ee:64:4b:01:cf: ee:a9:09:38:72:ff:0b:80:4b:2c:d5:0a:ad:78:bc: 11:b6:f6:f4:fb:e9:db:db:be:3d:47:4a:5e:51:b8: 80:16:e8:cb:f8:08:ae:87:93:1c:1d:52:df:39:98: ff:54:d0:88:19:5e:47:fb:d1:51:15:36:e4:59:66: 51:3b:0b:b2:2c:01:8f:c7:0c:3b:13:32:10:08:d9: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DC:80:19:4A:F4:8F:7B:C5:C4:7D:60:B5:14:0D:D2:BB:B9:5A:AE X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MNyAGUr0j3vFxH1gtRQN0ru5Wq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.191.0/24 188.209.137.0/24 188.209.139.0/24 194.15.96.0/24 Signature Algorithm: sha256WithRSAEncryption 17:b6:22:58:bd:1c:2a:3b:14:8d:2b:62:03:1d:4f:29:90:64: 33:80:47:d8:8f:b6:7b:df:4a:ce:0a:e0:47:24:03:1e:d2:ef: 5e:d7:a9:b5:4e:0a:15:92:93:00:bc:68:f1:9a:de:34:ae:36: 48:4c:1b:75:1d:78:7d:b3:d9:19:17:13:f8:46:62:c2:f2:c8: 21:7a:f8:98:fa:ff:53:ac:4d:04:46:57:e0:6c:6c:1f:6f:c8: 38:42:61:e8:49:b8:c8:f3:37:de:9b:1b:a4:65:bc:4e:2a:df: fb:ec:27:cc:88:c3:4f:be:27:11:4f:2e:81:79:31:0f:52:d5: 79:95:68:21:a5:87:d7:6f:5b:6a:19:c1:34:ea:a1:7d:bc:89: a2:2a:3e:83:bd:35:52:0f:fe:de:13:cf:7f:91:72:16:3c:af: a1:bd:51:b3:cc:f3:00:2d:77:49:c7:93:3d:9c:58:aa:c6:4e: b8:03:33:d1:0f:74:5c:61:2d:0b:ef:27:fd:a4:d7:0f:d1:44: 89:3e:6f:ba:eb:b4:f6:8b:ae:62:73:34:7e:8b:29:e4:e8:57: bb:62:31:bb:a4:30:4f:70:3f:13:5f:dc:73:56:61:ce:a0:ab: 76:1e:f7:de:73:38:4a:52:49:17:d1:9c:80:4d:5f:e5:4f:53: 50:c3:6d:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr0OaWrsrJG9KVy5AApxIh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjA2MTUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGRjODAxOTRhZjQ4ZjdiYzVjNDdkNjBiNTE0MGRkMmJiYjk1YWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEVmMIuI4Jq+kbgp/wmNPEwKbx/7 69A/lZ1H1XXhSE1Wd7Rv4M28irTIXxJzoXBEzRCfR8eB2M/9L55VWDztfZqhSUbz DMdqJwLH9KE2a9/tbgI1sFMf8FT/ltogHuFij8qkPVJmCHSBd8oPgbkz4PHUewRP lmK0nMWKSbdFlxcz+QC6TZ7+rMHHgY1PApXaTO6rtxUXqo6sRQ8w6CEp8TwPSSPy m4x2ItcHshhO7mRLAc/uqQk4cv8LgEss1QqteLwRtvb0++nb2749R0peUbiAFujL +Aiuh5McHVLfOZj/VNCIGV5H+9FRFTbkWWZROwuyLAGPxww7EzIQCNmSpwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDDcgBlK9I97xcR9YLUUDdK7uVquMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvTU55QUdVcjBqM3ZGeEgxZ3RSUU4wcnU1V3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQu/AwQA vNGJAwQAvNGLAwQAwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQAXtiJYvRwqOxSNK2ID HU8pkGQzgEfYj7Z730rOCuBHJAMe0u9e16m1TgoVkpMAvGjxmt40rjZITBt1HXh9 s9kZFxP4RmLC8sgheviY+v9TrE0ERlfgbGwfb8g4QmHoSbjI8zfemxukZbxOKt/7 7CfMiMNPvicRTy6BeTEPUtV5lWghpYfXb1tqGcE06qF9vImiKj6DvTVSD/7eE89/ kXIWPK+hvVGzzPMALXdJx5M9nFiqxk64AzPRD3RcYS0L7yf9pNcP0USJPm+667T2 i65iczR+iynk6Fe7YjG7pDBPcD8TX9xzVmHOoKt2HvfeczhKUkkX0ZyATV/lT1NQ w22r -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:19 2025 by rpki-client