This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa File: MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa (raw, json) Hash identifier: JTsGSY9wxU/ufYls0VwQm/PmoFlNeOnfFMb0n8iAQcg= Subject key identifier: 30:D1:3E:64:2C:11:60:F0:F1:D3:04:E4:41:4E:69:A3:02:52:E0:D9 Certificate issuer: /CN=37493000b9a704531da1a1766be538271ee0ccc9 Certificate serial: 019B7E383B95AA3F36F236A26088DEFA508C Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48996 IP address blocks: 37.44.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3b:95:aa:3f:36:f2:36:a2:60:88:de:fa:50:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d13e642c1160f0f1d304e4414e69a30252e0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:0e:f5:c3:34:88:e6:2d:23:5a:96:ab:c0: 52:5e:2f:86:af:5a:c5:58:b7:c0:70:ba:b7:c2:3d: e5:a5:93:bf:fe:65:d2:c6:61:7e:7f:0e:db:ea:f0: 6a:f7:ed:a5:90:3c:00:01:60:4a:d6:c8:cb:a1:c4: af:e1:12:41:bc:7d:4a:51:41:44:46:2f:86:4f:45: 4c:e0:16:b4:96:9a:0d:eb:f9:fb:55:05:4c:4f:b8: 5a:a4:e3:f5:9a:ca:7a:86:ab:4b:c8:17:00:5a:18: f1:19:a9:97:37:4f:4f:fd:1a:21:96:05:70:35:c2: 83:a4:91:c7:60:07:09:67:5c:33:ba:8a:7f:6f:7a: b5:6a:da:87:7a:50:d7:12:43:48:41:a2:04:20:58: af:37:f2:21:b9:95:66:04:da:a8:d6:ca:f7:5e:1a: 65:6c:3c:02:21:cd:25:15:29:cf:83:43:3e:14:70: 11:8b:de:f9:00:b7:34:e1:72:11:48:7b:9a:86:1f: 69:9a:36:82:1f:49:cd:8d:6d:38:17:6c:42:05:9c: e9:35:4b:3c:0c:c8:39:23:51:91:94:b5:d6:45:e5: 15:6a:f9:bb:18:fc:87:a3:dd:97:e0:83:14:8e:5f: e7:5a:fd:63:8c:b1:29:b7:ae:26:37:32:30:a1:16: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:3E:64:2C:11:60:F0:F1:D3:04:E4:41:4E:69:A3:02:52:E0:D9 X509v3 Authority Key Identifier: keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.224.0/22 Signature Algorithm: sha256WithRSAEncryption 94:1a:b6:c1:4d:66:27:94:3a:c4:47:7b:7c:4d:21:19:d3:25: 41:db:95:c0:4b:cd:bd:3b:fc:92:a4:c4:59:b9:fb:b9:39:aa: 59:45:4a:87:7a:05:94:30:2f:7f:24:a6:38:ad:2a:11:96:f7: a7:16:5a:82:7f:df:c2:01:a5:0a:cb:12:53:5d:19:b0:f3:72: ed:a7:a1:76:93:dd:f8:c1:fe:51:d6:c9:2f:d7:7f:71:b0:de: fe:47:e5:a2:79:bf:84:47:ce:5c:9b:47:88:0b:69:98:33:43: 9c:20:4c:17:c6:40:26:c1:7b:3c:9d:97:cc:5c:a6:be:80:cb: f6:34:0e:43:61:0a:d5:37:a9:35:46:67:12:01:88:82:06:ff: fc:05:75:87:8d:f6:30:6a:d9:10:03:99:98:ce:99:c4:4f:f1: 14:e0:c5:40:68:ef:94:6e:d5:2e:0a:b5:9d:b5:90:22:f6:21: ec:d3:8b:df:67:96:d8:d0:68:a4:a6:23:78:d2:77:8d:72:34: 33:50:1e:26:c3:50:51:07:8e:04:0b:85:2b:6e:d9:b7:d2:ca: 9e:a0:f2:87:77:33:44:48:c7:b6:85:39:ca:15:5d:f2:ec:67: 6c:21:83:bb:31:01:e9:1c:c2:a6:71:e5:8c:64:1c:74:ab:69: 57:28:44:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODuVqj828jaiYIje+lCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDkzMDAwYjlhNzA0NTMxZGExYTE3NjZiZTUzODI3MWVl MGNjYzkwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQxM2U2NDJjMTE2MGYwZjFkMzA0ZTQ0MTRlNjlhMzAyNTJlMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRIO9cM0iOYtI1qWq8BSXi+Gr1rF WLfAcLq3wj3lpZO//mXSxmF+fw7b6vBq9+2lkDwAAWBK1sjLocSv4RJBvH1KUUFE Ri+GT0VM4Ba0lpoN6/n7VQVMT7hapOP1msp6hqtLyBcAWhjxGamXN09P/RohlgVw NcKDpJHHYAcJZ1wzuop/b3q1atqHelDXEkNIQaIEIFivN/IhuZVmBNqo1sr3Xhpl bDwCIc0lFSnPg0M+FHARi975ALc04XIRSHuahh9pmjaCH0nNjW04F2xCBZzpNUs8 DMg5I1GRlLXWReUVavm7GPyHo92X4IMUjl/nWv1jjLEpt64mNzIwoRYyuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDRPmQsEWDw8dME5EFOaaMCUuDZMB8GA1UdIwQY MBaAFDdJMAC5pwRTHaGhdmvlOCce4MzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEt ODM3M2E2YTQxMWJmLzEvTU5FLVpDd1JZUER4MHdUa1FVNXBvd0pTNE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEtODM3M2E2YTQxMWJm LzEvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzgMA0G CSqGSIb3DQEBCwUAA4IBAQCUGrbBTWYnlDrER3t8TSEZ0yVB25XAS829O/ySpMRZ ufu5OapZRUqHegWUMC9/JKY4rSoRlvenFlqCf9/CAaUKyxJTXRmw83Ltp6F2k934 wf5R1skv139xsN7+R+Wieb+ER85cm0eIC2mYM0OcIEwXxkAmwXs8nZfMXKa+gMv2 NA5DYQrVN6k1RmcSAYiCBv/8BXWHjfYwatkQA5mYzpnET/EU4MVAaO+UbtUuCrWd tZAi9iHs04vfZ5bY0GikpiN40neNcjQzUB4mw1BRB44EC4Urbtm30sqeoPKHdzNE SMe2hTnKFV3y7GdsIYO7MQHpHMKmceWMZBx0q2lXKEQh -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:33 2026 by rpki-client