This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MKTkB6VbjoxRrrL0v3r-B-OpIfY.roa File: MKTkB6VbjoxRrrL0v3r-B-OpIfY.roa (raw, json) Hash identifier: SaBPAt5dcfX7o6K+35v0JrEV7RBJI0h0jnYv4H+uZLw= Subject key identifier: 30:A4:E4:07:A5:5B:8E:8C:51:AE:B2:F4:BF:7A:FE:07:E3:A9:21:F6 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED58CDD48A83CC4A27E116E65B411 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MKTkB6VbjoxRrrL0v3r-B-OpIfY.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202593 IP address blocks: 151.251.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d5:8c:dd:48:a8:3c:c4:a2:7e:11:6e:65:b4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a4e407a55b8e8c51aeb2f4bf7afe07e3a921f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:8a:77:5d:71:59:3c:7f:f5:4b:b5:fe:12: 50:84:9a:e0:5f:ae:75:fc:19:2a:e2:a0:93:c6:f0: 34:d5:92:50:64:c4:fb:04:fa:19:19:2b:c2:05:f1: c6:c2:d6:00:43:a4:c2:4a:05:4c:fe:6b:87:23:da: 46:f0:03:11:da:0f:f0:80:1b:6f:aa:42:0f:27:e1: 29:39:c5:4a:e7:4f:9c:6c:6c:de:ba:f2:23:1d:98: 15:ab:48:10:5b:90:0e:bb:02:05:2c:f2:2a:94:54: 5c:d1:e6:25:7e:ee:19:fa:9d:de:ef:1c:e7:7c:4c: 10:e0:15:8e:b5:15:0e:00:20:49:db:c7:47:d5:da: 9c:b4:d5:29:bd:a3:2e:1e:75:46:db:4d:b4:08:38: 49:95:41:ca:58:72:e4:ad:ab:50:70:8b:9d:cc:78: e8:c1:f8:33:d0:15:48:f2:8a:7f:4a:b2:8f:57:d7: c4:7c:67:3d:bf:68:fd:fc:75:24:e1:42:f5:cb:1a: ba:79:44:dc:c5:72:a4:f4:a9:1c:de:65:eb:7b:70: c4:63:db:f5:c8:ef:c8:f5:49:f8:75:b7:04:1a:b8: 88:4c:db:31:c7:79:8b:dd:b4:09:7d:26:90:1e:45: cb:a0:3a:8f:e5:95:f2:90:40:8c:a3:d1:a7:34:57: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A4:E4:07:A5:5B:8E:8C:51:AE:B2:F4:BF:7A:FE:07:E3:A9:21:F6 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MKTkB6VbjoxRrrL0v3r-B-OpIfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.251.119.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:3e:7d:ce:c1:a3:01:28:68:72:48:0a:37:e7:4c:d0:7f:4f: 76:5a:05:6b:e7:d5:df:76:55:ff:29:03:99:2a:ad:c2:52:9e: ab:6d:94:14:81:9a:61:22:59:f2:1e:9e:72:26:08:49:0d:11: d9:93:4e:cf:ed:d2:b5:5e:22:10:72:6a:7c:54:f8:17:1f:f9: 26:91:7e:8a:94:23:8a:a8:82:e7:9e:18:b6:7d:fc:26:d8:f2: 84:45:37:87:7a:4f:41:69:f0:be:bd:29:34:ba:03:c7:1e:c7: 32:b9:ee:99:e8:97:6e:74:ad:73:bd:09:85:a0:4c:a5:c5:7c: 54:5f:8c:5e:48:20:0f:cc:25:cb:00:24:f3:e4:02:48:2d:9e: ea:a8:a4:fd:cd:c2:44:36:18:11:a7:a1:33:b2:dc:b5:4e:e4: 27:52:2d:2b:ab:e6:10:66:4e:57:c0:69:65:62:72:e0:6f:3d: 52:06:31:5b:63:be:51:8d:12:8a:83:d5:93:15:c2:10:25:fa: 7f:26:d8:83:77:e8:95:04:db:61:12:5b:5e:6f:58:b9:cf:d0: 7f:6d:62:63:7a:06:04:b6:2e:44:c0:a0:1c:eb:80:9f:db:36: 31:0a:4e:db:1d:f5:11:a6:9c:2c:86:84:cb:f0:e1:94:23:ae: bc:e1:20:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftWM3UioPMSifhFuZbQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGE0ZTQwN2E1NWI4ZThjNTFhZWIyZjRiZjdhZmUwN2UzYTkyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u2Kd11xWTx/9Uu1/hJQhJrgX651 /Bkq4qCTxvA01ZJQZMT7BPoZGSvCBfHGwtYAQ6TCSgVM/muHI9pG8AMR2g/wgBtv qkIPJ+EpOcVK50+cbGzeuvIjHZgVq0gQW5AOuwIFLPIqlFRc0eYlfu4Z+p3e7xzn fEwQ4BWOtRUOACBJ28dH1dqctNUpvaMuHnVG2020CDhJlUHKWHLkratQcIudzHjo wfgz0BVI8op/SrKPV9fEfGc9v2j9/HUk4UL1yxq6eUTcxXKk9Kkc3mXre3DEY9v1 yO/I9Un4dbcEGriITNsxx3mL3bQJfSaQHkXLoDqP5ZXykECMo9GnNFccIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCk5AelW46MUa6y9L96/gfjqSH2MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvTUtUa0I2VmJqb3hScnJMMHYzci1CLU9wSWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/t3MA0G CSqGSIb3DQEBCwUAA4IBAQBuPn3OwaMBKGhySAo350zQf092WgVr59XfdlX/KQOZ Kq3CUp6rbZQUgZphIlnyHp5yJghJDRHZk07P7dK1XiIQcmp8VPgXH/kmkX6KlCOK qILnnhi2ffwm2PKERTeHek9BafC+vSk0ugPHHscyue6Z6JdudK1zvQmFoEylxXxU X4xeSCAPzCXLACTz5AJILZ7qqKT9zcJENhgRp6Ezsty1TuQnUi0rq+YQZk5XwGll YnLgbz1SBjFbY75RjRKKg9WTFcIQJfp/JtiDd+iVBNthElteb1i5z9B/bWJjegYE ti5EwKAc64Cf2zYxCk7bHfURppwshoTL8OGUI6684SDX -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:04 2026 by rpki-client