This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MNKEeRezng_8QTmq4YL4taxomtw.roa File: MNKEeRezng_8QTmq4YL4taxomtw.roa (raw, json) Hash identifier: 5bNxkSV5NuMCGAxHqkk6a1uStmjIi3vs4rOLnNPZWw8= Subject key identifier: 30:D2:84:79:17:B3:9E:0F:FC:41:39:AA:E1:82:F8:B5:AC:68:9A:DC Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFD56BBEC47CBD876E0A36D4B785F Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MNKEeRezng_8QTmq4YL4taxomtw.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33895 IP address blocks: 217.153.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:56:bb:ec:47:cb:d8:76:e0:a3:6d:4b:78:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d2847917b39e0ffc4139aae182f8b5ac689adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:0d:39:31:ae:9d:f8:f5:61:37:fa:ab:ad: 43:ce:5a:78:c9:17:19:26:ea:d5:44:d3:0a:20:50: 66:d1:7c:d7:a9:ba:ac:f7:ed:fe:27:03:cc:8a:d0: 98:02:c3:61:e6:83:ad:00:22:2c:c3:2f:c8:6f:7c: 9f:3a:10:ad:ce:b5:de:de:8f:9f:79:16:fc:90:f1: 93:08:5a:00:15:de:61:f9:a0:4f:c2:f2:3b:b6:f6: fe:8a:7f:fb:71:03:04:e8:aa:57:1f:07:3c:e2:2b: f1:09:34:1c:1a:df:94:42:0d:d1:25:aa:7c:89:2b: 42:c7:78:e0:f4:50:aa:8b:bb:35:13:5c:4d:a8:94: c3:c2:53:c1:f5:9b:9b:2e:e1:aa:93:2c:d8:6d:91: cd:cb:85:0b:3d:6e:20:cf:85:0f:5a:33:75:73:5a: 9a:d0:89:4d:ce:64:52:46:ca:a0:0b:6a:59:89:fb: 41:fa:15:9e:8f:2d:14:ce:f9:f9:ad:15:e2:db:e6: 1f:36:ba:b4:ec:57:a2:72:61:77:fd:29:19:d6:53: a0:4f:67:fe:40:5d:19:fe:b4:1d:d6:b1:d1:e8:d3: 1f:b8:44:bb:74:52:ae:bb:f3:1f:de:2b:08:f9:1c: ae:4d:11:b6:cd:8f:53:db:ae:a5:53:42:13:6b:56: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D2:84:79:17:B3:9E:0F:FC:41:39:AA:E1:82:F8:B5:AC:68:9A:DC X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MNKEeRezng_8QTmq4YL4taxomtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.153.122.0/24 Signature Algorithm: sha256WithRSAEncryption 63:93:9f:6e:6c:70:4d:ba:ec:d4:cf:fa:3f:ef:ac:5b:b6:14: b2:cf:40:9c:27:65:76:89:23:4a:31:8c:8b:7d:d5:80:0f:e7: 6a:17:5e:72:e4:cc:ba:ee:0f:e4:0c:9b:6b:82:ac:80:1f:dc: b0:84:1a:c3:07:f6:1d:fd:79:dd:0a:46:49:f9:db:b6:96:9f: 95:3c:04:0f:95:a3:08:7d:71:5d:0d:8a:21:b6:a0:0b:12:08: 93:14:e9:97:bb:60:f3:cc:2a:eb:c5:20:2c:bd:29:96:51:f4: 89:fb:6f:0e:ce:34:7e:43:4e:a5:2a:c6:09:65:6d:a1:65:9c: 0a:50:28:cc:d4:b0:99:f9:3b:d4:1b:c4:d5:0c:dc:69:47:96: df:5f:9c:cd:9c:a6:53:b5:76:c3:f5:9d:8a:c6:b8:6c:f5:a3: 5e:34:7e:80:df:bf:08:b0:a7:90:b9:73:7e:63:72:72:b3:3e: 61:96:34:23:eb:7e:7c:f3:d2:63:4e:17:2b:8d:d2:66:0b:90: c0:cd:27:5e:55:93:da:46:36:43:4c:13:d8:2d:88:78:9b:6d: 35:46:f5:f2:21:b3:35:14:49:35:c3:7e:ab:f9:3a:a4:a3:e7: 1a:28:2d:4e:bc:46:c3:f7:c7:7d:f9:b9:80:f2:d9:9b:06:56: 1f:19:94:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP1Wu+xHy9h24KNtS3hfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQyODQ3OTE3YjM5ZTBmZmM0MTM5YWFlMTgyZjhiNWFjNjg5YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacNOTGunfj1YTf6q61Dzlp4yRcZ JurVRNMKIFBm0XzXqbqs9+3+JwPMitCYAsNh5oOtACIswy/Ib3yfOhCtzrXe3o+f eRb8kPGTCFoAFd5h+aBPwvI7tvb+in/7cQME6KpXHwc84ivxCTQcGt+UQg3RJap8 iStCx3jg9FCqi7s1E1xNqJTDwlPB9ZubLuGqkyzYbZHNy4ULPW4gz4UPWjN1c1qa 0IlNzmRSRsqgC2pZiftB+hWejy0Uzvn5rRXi2+YfNrq07FeicmF3/SkZ1lOgT2f+ QF0Z/rQd1rHR6NMfuES7dFKuu/Mf3isI+RyuTRG2zY9T266lU0ITa1YAxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDShHkXs54P/EE5quGC+LWsaJrcMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvTU5LRWVSZXpuZ184UVRtcTRZTDR0YXhvbXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Zl6MA0G CSqGSIb3DQEBCwUAA4IBAQBjk59ubHBNuuzUz/o/76xbthSyz0CcJ2V2iSNKMYyL fdWAD+dqF15y5My67g/kDJtrgqyAH9ywhBrDB/Yd/XndCkZJ+du2lp+VPAQPlaMI fXFdDYohtqALEgiTFOmXu2DzzCrrxSAsvSmWUfSJ+28OzjR+Q06lKsYJZW2hZZwK UCjM1LCZ+TvUG8TVDNxpR5bfX5zNnKZTtXbD9Z2Kxrhs9aNeNH6A378IsKeQuXN+ Y3Jysz5hljQj635889JjThcrjdJmC5DAzSdeVZPaRjZDTBPYLYh4m201RvXyIbM1 FEk1w36r+Tqko+caKC1OvEbD98d9+bmA8tmbBlYfGZQj -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:46 2026 by rpki-client