This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa File: MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa (raw, json) Hash identifier: xHNn6q9PYRqeQK2NR9l8QrkTBmZNq1GFHSPhCABTUdQ= Subject key identifier: 30:C4:46:2E:80:02:E1:27:E7:99:B6:F6:A7:2C:B1:54:2D:B5:BC:C2 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B9B95099646A22CB266D6968AC56109C2 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa Signing time: Thu 08 Jan 2026 03:09:54 +0000 ROA not before: Thu 08 Jan 2026 03:09:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53813 IP address blocks: 147.161.192.0/23 maxlen: 24 147.161.194.0/23 maxlen: 24 147.161.196.0/23 maxlen: 24 147.161.198.0/23 maxlen: 24 147.161.200.0/23 maxlen: 24 147.161.204.0/23 maxlen: 24 147.161.208.0/23 maxlen: 24 147.161.210.0/23 maxlen: 24 147.161.212.0/23 maxlen: 24 147.161.214.0/23 maxlen: 24 147.161.216.0/23 maxlen: 24 147.161.218.0/23 maxlen: 24 147.161.220.0/23 maxlen: 24 159.254.98.0/24 maxlen: 24 159.254.103.0/24 maxlen: 24 159.254.204.0/24 maxlen: 24 164.137.56.0/24 maxlen: 24 164.137.57.0/24 maxlen: 24 164.137.58.0/24 maxlen: 24 164.137.59.0/24 maxlen: 24 164.137.60.0/24 maxlen: 24 164.137.69.0/24 maxlen: 24 164.137.109.0/24 maxlen: 24 164.137.159.0/24 maxlen: 24 164.137.160.0/24 maxlen: 24 164.137.161.0/24 maxlen: 24 164.137.162.0/24 maxlen: 24 164.137.163.0/24 maxlen: 24 164.137.164.0/24 maxlen: 24 164.137.165.0/24 maxlen: 24 164.137.166.0/24 maxlen: 24 164.137.167.0/24 maxlen: 24 164.137.168.0/24 maxlen: 24 164.137.169.0/24 maxlen: 24 164.137.170.0/24 maxlen: 24 164.137.171.0/24 maxlen: 24 164.137.172.0/24 maxlen: 24 164.137.173.0/24 maxlen: 24 164.137.174.0/24 maxlen: 24 164.137.175.0/24 maxlen: 24 164.137.176.0/24 maxlen: 24 164.137.177.0/24 maxlen: 24 164.137.178.0/24 maxlen: 24 164.137.179.0/24 maxlen: 24 164.137.180.0/24 maxlen: 24 164.137.181.0/24 maxlen: 24 164.137.182.0/24 maxlen: 24 164.137.183.0/24 maxlen: 24 164.137.184.0/24 maxlen: 24 164.137.185.0/24 maxlen: 24 164.137.186.0/24 maxlen: 24 164.137.187.0/24 maxlen: 24 164.137.188.0/24 maxlen: 24 164.137.189.0/24 maxlen: 24 164.137.190.0/24 maxlen: 24 164.137.191.0/24 maxlen: 24 164.137.192.0/24 maxlen: 24 2a03:eec0:3211::/48 maxlen: 48 2a03:eec0:3223::/48 maxlen: 48 2a03:eec0:3224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9b:95:09:96:46:a2:2c:b2:66:d6:96:8a:c5:61:09:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 8 03:09:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30c4462e8002e127e799b6f6a72cb1542db5bcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:e7:61:ea:cd:32:df:65:02:c3:26:12:ca: c3:7d:c5:3b:8f:d4:a4:a2:97:df:8c:94:4f:a1:3b: e3:3e:d2:93:47:59:81:68:8b:96:7c:36:f1:80:fd: 23:ed:3f:d1:b3:28:cf:fd:39:1b:c1:99:d1:81:8d: 11:50:e4:e3:a4:52:ff:41:69:7b:54:cb:d9:f8:c5: 37:a7:af:ed:d0:92:d1:01:68:d5:3f:9c:8c:47:fb: 41:24:6d:8e:d3:66:70:04:94:76:1d:4b:65:79:74: 61:5d:7b:2a:f8:04:a6:d5:e7:6e:e1:b1:3e:de:62: bc:c4:c2:8e:84:a1:0e:cf:ae:31:34:07:13:8a:8b: 4d:3d:20:0c:2c:48:ad:5f:f8:6e:5c:6c:83:29:76: aa:a8:0b:7d:bf:2b:12:e4:87:19:38:17:52:78:81: 0e:1f:39:17:d4:fb:84:ef:16:84:8e:28:42:5c:c6: dc:e8:f9:76:98:63:6d:9e:d0:0b:03:fe:e7:3b:70: 51:a2:f5:31:78:62:be:21:94:1e:04:58:62:2d:89: 10:39:5d:75:da:2d:ea:bb:2f:64:56:85:b8:09:ac: 2d:0d:1d:8d:47:6f:4b:f0:6c:92:5f:bc:45:fc:a1: 41:eb:24:36:f5:87:52:bb:0b:4e:db:2d:fa:d6:87: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:46:2E:80:02:E1:27:E7:99:B6:F6:A7:2C:B1:54:2D:B5:BC:C2 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.192.0-147.161.201.255 147.161.204.0/23 147.161.208.0-147.161.221.255 159.254.98.0/24 159.254.103.0/24 159.254.204.0/24 164.137.56.0-164.137.60.255 164.137.69.0/24 164.137.109.0/24 164.137.159.0-164.137.192.255 IPv6: 2a03:eec0:3211::/48 2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 55:4e:fc:ad:7a:4d:27:d6:c1:4f:d4:71:75:59:10:98:a3:a9: ce:df:dc:ca:82:81:2b:df:83:c1:41:08:f0:2e:51:4c:0a:12: 8b:a0:ce:59:cf:e3:ed:b2:4e:1e:b8:1d:10:a4:9d:e4:68:b0: 3c:50:95:60:07:ff:57:21:72:69:14:37:72:7c:34:28:48:0e: 36:95:ed:98:85:d0:e3:78:b1:2f:5d:26:49:f1:6e:a8:9d:2b: 79:98:4c:89:00:d9:49:5f:8f:81:24:e1:4e:d8:74:63:80:48: 06:6b:05:03:50:7e:43:44:e7:6a:ae:fb:68:87:d7:ab:0b:cb: ae:86:ea:44:bb:61:ce:31:22:66:80:3a:75:3a:3d:f5:60:e6: 19:36:e3:6b:e4:03:21:be:5c:9a:51:6a:c5:d5:39:75:97:39: 6d:71:73:64:63:0e:bd:97:89:88:48:b8:d8:e3:ae:0d:51:26: a3:3d:88:4a:d4:34:d7:73:1c:a1:98:8f:97:13:b3:7b:6d:f4: 81:6b:e8:37:38:4a:e9:31:a4:54:c7:d1:5b:ad:d6:2e:fb:2a: 50:01:a0:70:5c:79:9d:7e:80:7b:99:ab:0e:69:1b:78:71:f2: 4e:c4:96:55:53:de:9d:72:e7:f2:a1:10:8e:23:85:95:50:4c: 1b:2f:b7:d2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZublQmWRqIssmbWlorFYQnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTA4MDMwOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGM0NDYyZTgwMDJlMTI3ZTc5OWI2ZjZhNzJjYjE1NDJkYjViY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEnnYerNMt9lAsMmEsrDfcU7j9Sk opffjJRPoTvjPtKTR1mBaIuWfDbxgP0j7T/RsyjP/TkbwZnRgY0RUOTjpFL/QWl7 VMvZ+MU3p6/t0JLRAWjVP5yMR/tBJG2O02ZwBJR2HUtleXRhXXsq+ASm1edu4bE+ 3mK8xMKOhKEOz64xNAcTiotNPSAMLEitX/huXGyDKXaqqAt9vysS5IcZOBdSeIEO HzkX1PuE7xaEjihCXMbc6Pl2mGNtntALA/7nO3BRovUxeGK+IZQeBFhiLYkQOV11 2i3quy9kVoW4CawtDR2NR29L8GySX7xF/KFB6yQ29YdSuwtO2y361odRzwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFDDERi6AAuEn55m29qcssVQttbzCMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvTU1SR0xvQUM0U2ZubWJiMnB5eXhWQzIxdk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTBiBAIAATBcMAwDBAaT ocADBAGTocgDBAGTocwwDAMEBJOh0AMEAZOh3AMEAJ/+YgMEAJ/+ZwMEAJ/+zDAM AwQDpIk4AwQApIk8AwQApIlFAwQApIltMAwDBACkiZ8DBACkicAwIwQCAAIwHQMH ACoD7sAyETASAwcAKgPuwDIjAwcAKgPuwDIkMA0GCSqGSIb3DQEBCwUAA4IBAQBV Tvytek0n1sFP1HF1WRCYo6nO39zKgoEr34PBQQjwLlFMChKLoM5Zz+Ptsk4euB0Q pJ3kaLA8UJVgB/9XIXJpFDdyfDQoSA42le2YhdDjeLEvXSZJ8W6onSt5mEyJANlJ X4+BJOFO2HRjgEgGawUDUH5DROdqrvtoh9erC8uuhupEu2HOMSJmgDp1Oj31YOYZ NuNr5AMhvlyaUWrF1Tl1lzltcXNkYw69l4mISLjY464NUSajPYhK1DTXcxyhmI+X E7N7bfSBa+g3OErpMaRUx9FbrdYu+ypQAaBwXHmdfoB7masOaRt4cfJOxJZVU96d cufyoRCOI4WVUEwbL7fS -----END CERTIFICATE-----Generated at Sun Jan 25 14:58:30 2026 by rpki-client