This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa File: MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa (raw, json) Hash identifier: r41sfO0em6qrkFr4zaPfNm49MUfMsRWUTWI32MUXIbs= Subject key identifier: 33:11:56:9C:C9:A5:B0:2C:75:4E:69:8A:86:D3:5C:26:7F:07:D4:AE Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019AE6FB207A267AAFFBB4E6069C47262BC5 Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa Signing time: Thu 04 Dec 2025 01:30:08 +0000 ROA not before: Thu 04 Dec 2025 01:30:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.12.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:fb:20:7a:26:7a:af:fb:b4:e6:06:9c:47:26:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Dec 4 01:30:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3311569cc9a5b02c754e698a86d35c267f07d4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b0:24:8f:fb:1a:0e:a2:2e:7d:48:bb:72:6d: 51:3f:e0:fe:93:40:53:9e:bd:82:56:a1:d3:7b:04: 96:6c:69:2e:79:9c:78:e0:c6:07:2b:70:d7:17:6d: 8b:af:79:ae:f9:6b:d2:79:bc:33:36:f3:1c:0f:45: 59:41:c6:fc:14:cd:8b:74:dd:7d:1e:d1:3b:2e:b7: 97:81:c0:70:73:86:6f:b3:51:f5:f4:3a:74:7d:20: b4:73:3c:7a:d2:7a:00:1c:ef:54:f2:2d:9e:15:7a: 13:d8:0c:07:fd:34:b4:9a:7b:4c:d5:4e:2a:65:ef: eb:25:d9:00:5b:a3:fd:6c:c7:3d:33:b3:a8:ef:4b: 81:aa:f7:61:0a:60:b7:ac:c3:dd:0d:6a:be:aa:fc: 49:9a:75:90:cf:68:cb:90:30:fd:50:8e:8a:9f:a6: 51:6f:3a:45:dc:81:01:3f:ab:6c:31:ed:f8:be:c7: 6f:e4:17:8c:1f:c0:4a:e6:56:25:e4:ef:d0:22:90: c4:77:00:a0:de:ca:d9:7a:ef:10:44:79:95:4b:ec: 22:87:02:b3:92:07:fd:02:b0:a7:1e:19:87:5f:fa: 1e:5e:46:0e:be:ba:71:b7:ef:0f:3d:e0:44:43:36: 5b:8a:a0:78:60:af:3c:56:be:d4:5c:54:c8:a7:b1: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:56:9C:C9:A5:B0:2C:75:4E:69:8A:86:D3:5C:26:7F:07:D4:AE X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.185.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:27:da:f4:a0:6b:67:4e:0b:e1:3c:4e:05:da:b1:14:96:11: 6a:54:88:97:b1:fe:4f:23:bb:e7:43:08:d9:38:75:f8:c8:d6: 40:cb:bc:e7:3c:ce:21:f5:85:97:6d:38:6f:84:e4:7b:4d:37: bf:a2:77:1b:b0:ae:6e:19:dd:f1:e8:09:4d:5e:71:7e:60:f1: 72:b1:74:24:bc:af:0d:0d:ca:1f:21:36:89:6a:69:7d:0a:20: ad:ac:2c:29:01:67:16:0c:dc:5c:5f:51:1f:f0:3d:a8:04:98: 6c:cc:c5:71:93:93:0e:eb:7d:1e:51:22:66:71:4b:ee:40:85: 9a:e9:22:78:ea:d3:ad:95:21:82:e8:f2:c9:ae:74:6d:8e:ef: d4:ea:7c:3b:37:b9:e0:f9:81:fb:f3:02:e8:2a:0f:b4:17:7e: 0c:a8:37:ea:6b:6a:e9:b5:cf:96:28:84:c2:02:60:6a:2c:5c: 1c:db:90:11:80:c7:e6:f6:39:86:1b:2e:28:d5:3e:55:ec:41: 02:73:2e:be:95:b7:69:4e:73:64:a4:d1:dd:35:1f:f1:9b:c0: 08:b5:54:dd:ae:fe:fd:3e:76:3d:a3:14:bc:67:78:ba:b1:3f: 79:11:df:ad:4a:e5:51:58:0b:5a:e9:5e:b3:8e:da:e2:e6:61: 42:94:3e:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrm+yB6Jnqv+7TmBpxHJivFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjUxMjA0MDEzMDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzExNTY5Y2M5YTViMDJjNzU0ZTY5OGE4NmQzNWMyNjdmMDdkNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrAkj/saDqIufUi7cm1RP+D+k0BT nr2CVqHTewSWbGkueZx44MYHK3DXF22Lr3mu+WvSebwzNvMcD0VZQcb8FM2LdN19 HtE7LreXgcBwc4Zvs1H19Dp0fSC0czx60noAHO9U8i2eFXoT2AwH/TS0mntM1U4q Ze/rJdkAW6P9bMc9M7Oo70uBqvdhCmC3rMPdDWq+qvxJmnWQz2jLkDD9UI6Kn6ZR bzpF3IEBP6tsMe34vsdv5BeMH8BK5lYl5O/QIpDEdwCg3srZeu8QRHmVS+wihwKz kgf9ArCnHhmHX/oeXkYOvrpxt+8PPeBEQzZbiqB4YK88Vr7UXFTIp7HQowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMRVpzJpbAsdU5piobTXCZ/B9SuMB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvTXhGV25NbWxzQ3gxVG1tS2h0TmNKbjhIMUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQy5MA0G CSqGSIb3DQEBCwUAA4IBAQA+J9r0oGtnTgvhPE4F2rEUlhFqVIiXsf5PI7vnQwjZ OHX4yNZAy7znPM4h9YWXbThvhOR7TTe/oncbsK5uGd3x6AlNXnF+YPFysXQkvK8N DcofITaJaml9CiCtrCwpAWcWDNxcX1Ef8D2oBJhszMVxk5MO630eUSJmcUvuQIWa 6SJ46tOtlSGC6PLJrnRtju/U6nw7N7ng+YH78wLoKg+0F34MqDfqa2rptc+WKITC AmBqLFwc25ARgMfm9jmGGy4o1T5V7EECcy6+lbdpTnNkpNHdNR/xm8AItVTdrv79 PnY9oxS8Z3i6sT95Ed+tSuVRWAta6V6zjtri5mFClD7V -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:03 2025 by rpki-client