This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/MKIn2GKscAnSjEe-pKawSjFxEE4.roa File: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (raw, json) Hash identifier: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU= Subject key identifier: 30:A2:27:D8:62:AC:70:09:D2:8C:47:BE:A4:A6:B0:4A:31:71:10:4E Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Certificate serial: 019B7B35BCB25FECF330C9A04E37337212D6 Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/MKIn2GKscAnSjEe-pKawSjFxEE4.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209243 IP address blocks: 195.144.22.0/24 maxlen: 24 2a09:7cc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bc:b2:5f:ec:f3:30:c9:a0:4e:37:33:72:12:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a227d862ac7009d28c47bea4a6b04a3171104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:f2:2f:b2:f4:5e:b6:c5:6f:6d:c1:20:1a: 90:84:bc:03:ba:94:c2:d9:73:bc:59:ab:04:56:e4: 17:14:29:89:4d:5e:87:0e:b5:0f:2e:89:b8:fa:be: 73:52:45:83:a6:27:1b:d4:4e:29:84:03:7a:29:6d: 45:9e:ff:6b:c2:c5:44:02:8e:2b:b8:22:34:85:5b: cb:be:3a:67:c4:29:40:9e:f4:0c:d3:51:37:e3:2a: bf:e2:0e:a0:a3:73:74:fa:26:b5:d8:f6:be:96:bd: dc:fa:39:1d:31:0c:fc:47:cc:db:6b:fb:2d:f5:ab: 5b:30:69:42:74:c4:17:19:89:fb:6a:bd:79:ae:92: bb:07:9f:e7:f2:8b:df:20:66:10:21:f2:95:73:65: f7:2d:92:92:45:ac:3e:d2:dc:ad:85:13:b2:c1:ba: 75:01:48:3c:93:da:75:7f:6a:9f:84:97:9f:24:aa: 09:1d:dd:86:0d:d1:eb:a3:d4:11:7f:a7:2a:7e:49: 34:62:b6:10:02:12:4b:98:ae:f8:18:b6:4a:25:51: e1:8b:e7:e2:41:f5:8e:3b:17:48:04:62:5c:3a:6f: 6f:e1:1e:8d:49:76:14:f8:2f:a3:8d:91:5b:04:00: d5:9b:52:9f:84:3b:bc:a6:4c:95:87:cb:40:36:6f: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:27:D8:62:AC:70:09:D2:8C:47:BE:A4:A6:B0:4A:31:71:10:4E X509v3 Authority Key Identifier: keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/MKIn2GKscAnSjEe-pKawSjFxEE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.22.0/24 IPv6: 2a09:7cc7::/32 Signature Algorithm: sha256WithRSAEncryption 13:33:3b:12:98:16:fc:8e:f3:ee:57:86:9d:8f:b7:8c:68:5f: 9d:1f:69:00:e2:8b:2f:bc:15:ab:dc:aa:ab:0b:12:67:0d:dd: 8b:ce:2d:f4:61:30:38:0b:cd:ed:e6:4c:40:af:5c:3b:4c:5d: d8:89:9a:69:2a:85:26:96:92:de:16:98:e1:9d:65:47:ba:54: cc:48:e5:47:2d:0d:a3:05:29:10:52:fc:9e:11:d3:d0:0c:ee: e1:21:13:37:9b:d4:0d:03:12:ab:74:38:9d:0b:19:02:dd:23: a5:76:dc:ca:39:10:a8:37:6c:4c:ce:e6:09:90:6a:a0:cd:c6: da:01:e4:82:17:df:9f:cf:22:6b:7f:50:14:5f:fa:c4:47:d8: de:c0:c7:66:cc:fc:01:69:a2:f8:b0:d4:01:98:b3:fd:6a:87: 65:d6:bf:d4:dd:96:31:ad:04:d0:5c:1c:a9:db:cb:d7:9c:c1: 67:79:27:48:08:9d:f6:8e:25:c5:61:02:77:a5:13:8b:1c:3e: 41:31:57:a0:12:50:83:de:c6:15:45:9f:3e:54:9a:44:6d:bf: 05:7c:a3:1d:27:a7:d4:08:ee:9a:12:2d:27:9d:8f:52:15:14: 2b:e4:b2:ca:f6:f8:6d:d6:62:1b:76:00:6a:c4:99:73:86:57: c0:02:27:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NbyyX+zzMMmgTjczchLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1 ODIxMGIwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGEyMjdkODYyYWM3MDA5ZDI4YzQ3YmVhNGE2YjA0YTMxNzExMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UPyL7L0XrbFb23BIBqQhLwDupTC 2XO8WasEVuQXFCmJTV6HDrUPLom4+r5zUkWDpicb1E4phAN6KW1Fnv9rwsVEAo4r uCI0hVvLvjpnxClAnvQM01E34yq/4g6go3N0+ia12Pa+lr3c+jkdMQz8R8zba/st 9atbMGlCdMQXGYn7ar15rpK7B5/n8ovfIGYQIfKVc2X3LZKSRaw+0tythROywbp1 AUg8k9p1f2qfhJefJKoJHd2GDdHro9QRf6cqfkk0YrYQAhJLmK74GLZKJVHhi+fi QfWOOxdIBGJcOm9v4R6NSXYU+C+jjZFbBADVm1KfhDu8pkyVh8tANm+BjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDCiJ9hirHAJ0oxHvqSmsEoxcRBOMB8GA1UdIwQY MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt YThhMGU1NWY1ZTMxLzEvTUtJbjJHS3NjQW5TakVlLXBLYXdTakZ4RUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw5AWMA0E AgACMAcDBQAqCXzHMA0GCSqGSIb3DQEBCwUAA4IBAQATMzsSmBb8jvPuV4adj7eM aF+dH2kA4osvvBWr3KqrCxJnDd2Lzi30YTA4C83t5kxAr1w7TF3YiZppKoUmlpLe FpjhnWVHulTMSOVHLQ2jBSkQUvyeEdPQDO7hIRM3m9QNAxKrdDidCxkC3SOldtzK ORCoN2xMzuYJkGqgzcbaAeSCF9+fzyJrf1AUX/rER9jewMdmzPwBaaL4sNQBmLP9 aodl1r/U3ZYxrQTQXByp28vXnMFneSdICJ32jiXFYQJ3pROLHD5BMVegElCD3sYV RZ8+VJpEbb8FfKMdJ6fUCO6aEi0nnY9SFRQr5LLK9vht1mIbdgBqxJlzhlfAAiex -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:59 2026 by rpki-client