This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mkGWndEJefQjspKtT-1NylPmeMg.roa File: mkGWndEJefQjspKtT-1NylPmeMg.roa (raw, json) Hash identifier: v9sQ3RnBXqAupFqsVoGVHhmQhcX/pQrMsr24iOFHj/I= Subject key identifier: 9A:41:96:9D:D1:09:79:F4:23:B2:92:AD:4F:ED:4D:CA:53:E6:78:C8 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019BD4B522528DB83AC4DB4728158FB3A60D Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mkGWndEJefQjspKtT-1NylPmeMg.roa Signing time: Mon 19 Jan 2026 05:23:19 +0000 ROA not before: Mon 19 Jan 2026 05:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 95.155.129.0/24 maxlen: 24 95.155.133.0/24 maxlen: 24 95.155.146.0/24 maxlen: 24 95.155.147.0/24 maxlen: 24 152.89.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:b5:22:52:8d:b8:3a:c4:db:47:28:15:8f:b3:a6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 19 05:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a41969dd10979f423b292ad4fed4dca53e678c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:0e:33:51:58:71:dc:82:0d:3b:0a:c3:e5: b8:09:c8:60:5f:83:ad:68:33:fd:96:61:fb:d9:fb: 29:9c:88:d0:c2:dc:57:c3:19:0f:27:10:e0:61:76: f2:4b:11:57:7a:c5:85:b0:69:c3:ac:d7:e6:07:20: f2:86:45:bb:da:77:bc:cd:74:49:d3:4f:16:a3:3e: 44:3a:4c:f0:01:18:0d:c4:51:32:55:37:2a:6f:48: 76:5e:53:8f:6d:22:21:48:da:90:14:19:05:98:40: 43:49:06:c5:6c:85:60:6d:ff:29:76:a1:54:52:6f: 47:40:d3:ce:dc:ac:fb:8c:5b:86:b4:da:c0:09:6f: 15:12:16:87:2a:b2:53:f4:09:1c:22:1a:72:87:a1: b0:1a:d8:b8:22:25:e0:7e:3d:b2:8e:43:6c:a1:22: 17:3f:ed:75:1f:8b:92:6e:55:db:4f:2a:c7:b6:17: 9b:52:76:8c:29:88:b0:ea:92:e6:e4:e9:71:bd:bc: b2:46:d6:9d:1c:e5:a7:ec:92:1d:42:06:25:91:85: 30:c7:21:fc:96:0a:cb:41:e3:fa:1d:4f:92:39:bf: 6e:1c:50:d7:74:b6:55:7b:33:10:70:ca:aa:f0:bf: 4f:8a:fe:dd:ba:10:dd:a5:78:d6:95:a0:df:6f:17: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:41:96:9D:D1:09:79:F4:23:B2:92:AD:4F:ED:4D:CA:53:E6:78:C8 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mkGWndEJefQjspKtT-1NylPmeMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.129.0/24 95.155.133.0/24 95.155.146.0/23 152.89.84.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:38:70:21:69:33:c3:7c:1b:f1:06:63:63:f5:cf:76:a3:d4: e6:f5:25:e3:60:67:95:a3:b5:7b:74:2f:f6:76:ab:ac:1a:23: 7a:d0:a0:8f:66:56:95:41:5a:26:cf:87:b5:7f:45:e1:e6:e7: 79:76:e9:2b:55:7f:fa:e5:03:a2:e4:91:c7:15:70:c4:3c:0a: 46:1c:21:bc:93:22:2a:a8:f8:61:5f:a3:a3:2d:a9:ee:3c:71: 9c:55:a0:0e:5b:67:15:41:ed:9c:91:ce:5e:4f:ef:d5:cf:1a: 19:01:48:b0:ed:6d:d5:f7:ef:e5:47:12:cb:02:be:0a:2a:82: 61:23:94:fd:3d:35:94:70:04:af:9f:92:cc:17:c2:60:48:9b: 52:4d:cf:0c:27:41:d6:fe:12:a4:62:29:88:73:e8:ef:00:d4: 5c:bf:94:f8:46:53:42:a0:71:64:03:4b:31:90:bc:94:00:a9: fd:d6:fb:e7:ac:cd:19:d3:e2:8b:d2:33:6e:85:c6:d2:a6:86: dc:d9:fa:cc:27:9f:2c:37:c0:6a:60:3e:c9:be:a5:3b:bb:70: 4c:70:9c:98:44:ad:95:50:81:a4:e8:c6:de:be:1f:f9:90:00: 3f:97:ca:e0:bf:25:b7:a6:3b:2d:2a:2e:da:02:9b:0f:44:f9: de:dd:49:3d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvUtSJSjbg6xNtHKBWPs6YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTE5MDUyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQxOTY5ZGQxMDk3OWY0MjNiMjkyYWQ0ZmVkNGRjYTUzZTY3OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrMOM1FYcdyCDTsKw+W4CchgX4Ot aDP9lmH72fspnIjQwtxXwxkPJxDgYXbySxFXesWFsGnDrNfmByDyhkW72ne8zXRJ 008Woz5EOkzwARgNxFEyVTcqb0h2XlOPbSIhSNqQFBkFmEBDSQbFbIVgbf8pdqFU Um9HQNPO3Kz7jFuGtNrACW8VEhaHKrJT9AkcIhpyh6GwGti4IiXgfj2yjkNsoSIX P+11H4uSblXbTyrHthebUnaMKYiw6pLm5OlxvbyyRtadHOWn7JIdQgYlkYUwxyH8 lgrLQeP6HU+SOb9uHFDXdLZVezMQcMqq8L9Piv7duhDdpXjWlaDfbxcDXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJpBlp3RCXn0I7KSrU/tTcpT5njIMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvbWtHV25kRUplZlFqc3BLdFQtMU55bFBtZU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX5uBAwQA X5uFAwQBX5uSAwQAmFlUMA0GCSqGSIb3DQEBCwUAA4IBAQAcOHAhaTPDfBvxBmNj 9c92o9Tm9SXjYGeVo7V7dC/2dqusGiN60KCPZlaVQVomz4e1f0Xh5ud5dukrVX/6 5QOi5JHHFXDEPApGHCG8kyIqqPhhX6OjLanuPHGcVaAOW2cVQe2ckc5eT+/VzxoZ AUiw7W3V9+/lRxLLAr4KKoJhI5T9PTWUcASvn5LMF8JgSJtSTc8MJ0HW/hKkYimI c+jvANRcv5T4RlNCoHFkA0sxkLyUAKn91vvnrM0Z0+KL0jNuhcbSpobc2frMJ58s N8BqYD7JvqU7u3BMcJyYRK2VUIGk6Mbevh/5kAA/l8rgvyW3pjstKi7aApsPRPne 3Uk9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:07 2026 by rpki-client