This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MNqaeNC_EthtZJ2_jO1s-4ub7Ig.roa File: MNqaeNC_EthtZJ2_jO1s-4ub7Ig.roa (raw, json) Hash identifier: 8+RJP7vdfS7khTo9kcRix+UtSwLI5iwGOoBKtauWy34= Subject key identifier: 30:DA:9A:78:D0:BF:12:D8:6D:64:9D:BF:8C:ED:6C:FB:8B:9B:EC:88 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0CA32293BB46FBDC5959FC14714A Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MNqaeNC_EthtZJ2_jO1s-4ub7Ig.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44476 IP address blocks: 78.142.16.0/24 maxlen: 24 91.148.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0c:a3:22:93:bb:46:fb:dc:59:59:fc:14:71:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30da9a78d0bf12d86d649dbf8ced6cfb8b9bec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:c2:02:df:a9:69:15:f9:93:ed:be:d2:c6: 5e:26:5e:15:8f:57:01:24:a2:38:20:d5:e0:e0:18: 03:d8:66:bc:54:e4:5b:fc:40:d0:99:90:66:9a:41: 1c:31:67:47:db:1d:98:82:e2:e1:27:1c:59:3b:d3: 9a:66:46:68:3e:a4:5d:99:6d:5e:dc:52:27:3e:16: cc:97:c4:77:8c:50:a8:61:4c:fe:1e:d7:96:13:3f: ff:52:04:32:21:63:d9:07:3a:12:7f:ee:74:49:c0: 23:46:b8:fb:83:b5:5d:d7:ac:8e:cd:6a:13:e9:e2: 59:88:ad:c0:2a:db:fa:ac:6b:8d:44:1a:04:71:e3: c2:c7:31:6f:19:f2:40:eb:ed:5c:1d:ef:54:d1:ad: e5:e0:24:37:13:d3:b2:0d:ee:1b:10:78:95:cd:b5: 20:b7:89:e5:75:cf:2d:34:ec:dc:bc:be:79:45:5c: ad:cc:c2:4c:0e:e3:cd:9a:14:6a:bf:7d:4e:81:ec: 2e:31:e0:55:2b:57:56:e4:de:0e:78:7e:4d:e3:ef: 50:ee:93:b4:81:ba:ac:1a:59:a2:6d:43:74:21:82: 71:8f:de:7a:b2:53:83:82:30:a4:dd:ae:fa:98:92: ed:77:85:7b:dd:cc:99:e5:ad:08:72:e4:a4:c9:cd: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:9A:78:D0:BF:12:D8:6D:64:9D:BF:8C:ED:6C:FB:8B:9B:EC:88 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MNqaeNC_EthtZJ2_jO1s-4ub7Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.16.0/24 91.148.184.0/24 Signature Algorithm: sha256WithRSAEncryption ca:c5:16:7c:50:c5:a7:f2:26:9f:a7:53:5b:fe:d2:f8:fa:cd: 4a:84:8b:c1:fe:d7:29:76:e8:ea:5a:4d:6a:8b:ae:4c:44:21: fb:18:f1:09:b6:5f:13:8f:08:3a:58:c7:97:95:86:d2:2f:0b: 5b:0f:23:27:5f:86:c5:07:9f:0a:f5:7a:c2:d4:a2:6d:02:c5: 16:74:b3:ee:24:20:f2:b3:1a:90:68:53:86:4b:bc:f2:d1:9b: f7:76:81:d9:dd:5f:8d:c0:c2:08:85:b8:f1:b5:f1:bf:81:be: 60:12:80:7c:b6:29:91:51:2e:cd:aa:d3:b2:5e:b8:25:49:c1: 8c:83:ad:fa:65:1f:9f:9e:82:68:65:1d:bb:ed:ab:6a:34:ed: 3b:cc:de:42:3c:ba:8a:11:f3:2f:94:cb:77:6b:bf:60:c3:fc: da:d5:cc:2d:c3:f2:62:6f:b2:e5:fd:90:ce:86:29:9e:7a:fd: 85:68:78:cf:50:53:d7:fc:f6:ae:01:5b:6a:df:37:b4:14:35: f7:b3:51:2c:e9:4f:92:79:75:6d:f5:58:40:ec:b5:d7:04:e0: 42:76:b3:ec:1d:a2:a2:e5:3b:0d:e0:5f:7b:7b:e6:3a:a9:69: bb:04:a3:6b:bd:05:3b:d9:2a:2d:82:90:ec:4e:0c:93:f9:b9: c3:aa:fd:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WwyjIpO7RvvcWVn8FHFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGRhOWE3OGQwYmYxMmQ4NmQ2NDlkYmY4Y2VkNmNmYjhiOWJlYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbCAt+paRX5k+2+0sZeJl4Vj1cB JKI4INXg4BgD2Ga8VORb/EDQmZBmmkEcMWdH2x2YguLhJxxZO9OaZkZoPqRdmW1e 3FInPhbMl8R3jFCoYUz+HteWEz//UgQyIWPZBzoSf+50ScAjRrj7g7Vd16yOzWoT 6eJZiK3AKtv6rGuNRBoEcePCxzFvGfJA6+1cHe9U0a3l4CQ3E9OyDe4bEHiVzbUg t4nldc8tNOzcvL55RVytzMJMDuPNmhRqv31OgewuMeBVK1dW5N4OeH5N4+9Q7pO0 gbqsGlmibUN0IYJxj956slODgjCk3a76mJLtd4V73cyZ5a0IcuSkyc1MpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDDamnjQvxLYbWSdv4ztbPuLm+yIMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvTU5xYWVOQ19FdGh0WkoyX2pPMXMtNHViN0lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATo4QAwQA W5S4MA0GCSqGSIb3DQEBCwUAA4IBAQDKxRZ8UMWn8iafp1Nb/tL4+s1KhIvB/tcp dujqWk1qi65MRCH7GPEJtl8Tjwg6WMeXlYbSLwtbDyMnX4bFB58K9XrC1KJtAsUW dLPuJCDysxqQaFOGS7zy0Zv3doHZ3V+NwMIIhbjxtfG/gb5gEoB8timRUS7NqtOy XrglScGMg636ZR+fnoJoZR277atqNO07zN5CPLqKEfMvlMt3a79gw/za1cwtw/Ji b7Ll/ZDOhimeev2FaHjPUFPX/PauAVtq3ze0FDX3s1Es6U+SeXVt9VhA7LXXBOBC drPsHaKi5TsN4F97e+Y6qWm7BKNrvQU72SotgpDsTgyT+bnDqv2g -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:58 2026 by rpki-client