This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/MnYY-Ftfzolwr8e6LxWc7bisHtU.roa File: MnYY-Ftfzolwr8e6LxWc7bisHtU.roa (raw, json) Hash identifier: zl2cWXTK7oGfiqUfR6zbQjVBrUy/mOT4mFf5K0bogqY= Subject key identifier: 32:76:18:F8:5B:5F:CE:89:70:AF:C7:BA:2F:15:9C:ED:B8:AC:1E:D5 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807DE06E63CFB8ED19AB7898E9FF15 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/MnYY-Ftfzolwr8e6LxWc7bisHtU.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49538 IP address blocks: 213.192.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7d:e0:6e:63:cf:b8:ed:19:ab:78:98:e9:ff:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=327618f85b5fce8970afc7ba2f159cedb8ac1ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:eb:66:fb:2e:db:15:6b:b0:76:f3:e1:5f: bc:97:7a:cf:e9:4c:44:89:49:a3:a1:2e:b2:6e:9b: 91:2b:fc:42:b1:f6:31:b2:0c:b2:db:fd:99:38:da: 0d:5d:7a:85:28:c4:ee:25:d5:e7:94:02:96:f4:13: 92:ba:65:bb:a8:04:58:cc:a5:88:c0:6e:f2:20:f7: 50:cd:30:de:f3:65:dc:27:a2:d3:43:ab:6a:45:85: ac:7f:e9:67:46:3c:5a:65:ee:9c:25:db:7c:48:5a: c4:32:95:2f:ed:d1:b4:2f:e0:d2:5a:26:4f:bc:01: 89:8c:8c:c7:a6:15:18:ff:6a:96:14:51:5f:68:20: 9f:33:bd:05:f9:63:56:1d:ef:44:55:b8:df:c5:2a: 57:f2:7a:5f:17:f6:84:53:5b:58:6b:62:d9:cb:a9: f4:75:55:00:90:29:e8:c7:36:e8:d7:ab:74:d3:a8: 09:46:5f:33:5b:dc:26:8c:eb:4f:a7:53:8d:a6:72: 31:ee:34:30:83:96:1d:3e:b3:0f:c0:74:2d:9a:97: 1a:44:f6:ee:62:a8:66:83:03:b0:01:59:9f:55:8a: 20:c3:d1:70:d1:25:8a:80:00:18:b4:fb:e6:af:bd: 27:ff:9f:d3:a0:9d:ad:3a:c2:f2:eb:fa:75:3f:a2: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:18:F8:5B:5F:CE:89:70:AF:C7:BA:2F:15:9C:ED:B8:AC:1E:D5 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/MnYY-Ftfzolwr8e6LxWc7bisHtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.236.0/23 Signature Algorithm: sha256WithRSAEncryption 43:c6:8e:e9:1a:dc:4e:9f:08:a5:aa:9b:32:77:f9:87:d8:f4: 6d:00:17:9b:01:41:ac:82:e8:93:04:17:b4:86:3a:03:2a:ae: 06:b8:d8:6e:b4:3b:e4:94:a6:21:1d:43:bf:68:9f:76:fd:23: c6:f8:69:bd:e4:31:34:ad:99:36:04:49:e5:9c:7b:fd:14:62: 94:39:dd:2d:22:f2:8f:fc:2f:0e:94:78:3d:b0:4f:90:04:8a: c2:0e:a3:25:b7:76:ce:98:c9:2e:1d:54:3e:7c:10:86:01:78: bb:77:d1:06:4a:d1:2b:96:2c:f3:87:15:43:88:d4:53:21:2e: e7:e3:b6:0f:37:e0:63:a7:01:72:a5:2b:e0:c5:a7:ed:7b:a6: ca:7e:b3:ff:a6:fe:c1:48:14:59:e2:fd:f2:dc:eb:d3:24:4d: fe:58:f5:1a:b9:99:9c:bb:7d:f7:b6:9a:9b:41:fa:a0:a5:57: 76:a1:a8:4b:c9:58:9b:da:db:04:9d:2f:c6:91:1c:49:db:41: 77:3b:7f:a3:e3:dd:9f:e1:a1:8e:03:18:04:92:db:fe:44:3b: af:b8:9e:72:e4:ae:4c:99:f5:67:ac:f7:ee:9a:35:ec:ae:86: 8a:e1:35:16:f5:93:c4:90:10:4d:ce:3c:e5:48:22:b0:ed:66: 6b:ca:0a:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH3gbmPPuO0Zq3iY6f8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjc2MThmODViNWZjZTg5NzBhZmM3YmEyZjE1OWNlZGI4YWMxZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j/rZvsu2xVrsHbz4V+8l3rP6UxE iUmjoS6ybpuRK/xCsfYxsgyy2/2ZONoNXXqFKMTuJdXnlAKW9BOSumW7qARYzKWI wG7yIPdQzTDe82XcJ6LTQ6tqRYWsf+lnRjxaZe6cJdt8SFrEMpUv7dG0L+DSWiZP vAGJjIzHphUY/2qWFFFfaCCfM70F+WNWHe9EVbjfxSpX8npfF/aEU1tYa2LZy6n0 dVUAkCnoxzbo16t006gJRl8zW9wmjOtPp1ONpnIx7jQwg5YdPrMPwHQtmpcaRPbu YqhmgwOwAVmfVYogw9Fw0SWKgAAYtPvmr70n/5/ToJ2tOsLy6/p1P6JdLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJ2GPhbX86JcK/Hui8VnO24rB7VMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvTW5ZWS1GdGZ6b2x3cjhlNkx4V2M3YmlzSHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1cDsMA0G CSqGSIb3DQEBCwUAA4IBAQBDxo7pGtxOnwilqpsyd/mH2PRtABebAUGsguiTBBe0 hjoDKq4GuNhutDvklKYhHUO/aJ92/SPG+Gm95DE0rZk2BEnlnHv9FGKUOd0tIvKP /C8OlHg9sE+QBIrCDqMlt3bOmMkuHVQ+fBCGAXi7d9EGStErlizzhxVDiNRTIS7n 47YPN+BjpwFypSvgxafte6bKfrP/pv7BSBRZ4v3y3OvTJE3+WPUauZmcu333tpqb QfqgpVd2oahLyVib2tsEnS/GkRxJ20F3O3+j492f4aGOAxgEktv+RDuvuJ5y5K5M mfVnrPfumjXsroaK4TUW9ZPEkBBNzjzlSCKw7WZrygqQ -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:35 2026 by rpki-client