This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MMsJ9PsgK8HLjnW7CUH8zqSiuCg.roa File: MMsJ9PsgK8HLjnW7CUH8zqSiuCg.roa (raw, json) Hash identifier: nXBWn5k0Y/Z0F91TITRDBfbVVCgj1fGrJZ44ZqKzays= Subject key identifier: 30:CB:09:F4:FB:20:2B:C1:CB:8E:75:BB:09:41:FC:CE:A4:A2:B8:28 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F7EC6F200820804E92347AF065FE Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MMsJ9PsgK8HLjnW7CUH8zqSiuCg.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215242 IP address blocks: 2.56.111.0/24 maxlen: 24 45.88.137.0/24 maxlen: 24 45.94.169.0/24 maxlen: 24 45.132.183.0/24 maxlen: 24 45.138.180.0/24 maxlen: 24 45.151.3.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f7:ec:6f:20:08:20:80:4e:92:34:7a:f0:65:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30cb09f4fb202bc1cb8e75bb0941fccea4a2b828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:93:11:d2:58:89:0a:ab:fb:f3:41:d7:98:45: 85:c4:a6:2b:60:c6:45:7c:bb:a6:9c:32:bc:46:cc: cd:f9:e5:73:1e:bf:e5:87:dc:61:51:6f:98:5f:c9: c3:2a:39:2d:d2:71:98:49:27:0f:ab:8f:ee:ea:b1: 67:29:3b:c6:4b:e1:13:b0:92:9a:7d:a1:ef:90:80: 49:d9:b5:e9:e3:7e:d5:58:58:aa:c9:70:ff:01:b4: a5:84:30:a3:3a:0c:d4:46:55:e1:91:86:66:7b:bc: d4:00:4b:51:2e:76:45:ee:61:a2:3b:75:db:fd:4b: de:80:72:bf:2e:13:d1:c6:22:2c:8f:f9:6a:45:eb: e4:39:fc:f5:b5:2b:1a:e9:55:3d:3d:63:b7:c7:33: ce:e0:4c:58:3e:1a:a0:ce:e8:f3:fd:cc:55:5b:4b: a9:b5:60:5b:d2:cb:6b:ba:e4:f1:67:b3:85:83:12: 6b:42:98:96:01:d9:a4:4b:d4:2b:98:6a:ac:7c:ab: 5a:57:52:62:53:cd:17:0c:e3:5c:81:fe:1f:57:3b: 73:9a:95:0c:48:0b:a2:fb:9e:d9:b7:c4:03:be:a1: a0:de:d8:0e:31:a0:dc:96:5b:0d:75:2a:61:0c:cb: 52:de:ba:97:38:ff:35:86:6b:49:c4:be:4d:7a:c3: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CB:09:F4:FB:20:2B:C1:CB:8E:75:BB:09:41:FC:CE:A4:A2:B8:28 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MMsJ9PsgK8HLjnW7CUH8zqSiuCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.111.0/24 45.88.137.0/24 45.94.169.0/24 45.132.183.0/24 45.138.180.0/24 45.151.3.0/24 77.83.37.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:8a:64:7a:87:38:f2:8f:e0:53:4e:47:06:77:0c:13:00:49: 43:2c:2e:01:a9:85:d9:fd:6b:e4:c0:fa:8b:12:21:e9:7f:fb: c9:cd:32:c7:7e:98:41:7a:bb:42:fb:43:22:be:ff:bf:bc:00: 92:4e:32:03:ac:ef:ff:1d:9e:30:28:ac:7d:19:d1:ff:3d:fb: f5:d7:19:4e:62:83:56:c6:66:06:c2:cd:32:11:b5:98:c9:9e: 52:d6:8e:89:dc:f7:f3:07:d9:3b:96:5d:ce:7e:3e:36:2a:fd: 8b:56:ae:0f:f1:9d:83:5d:73:dd:ce:c9:9b:59:5b:a1:ab:8d: 12:26:e8:06:c5:73:77:e4:d6:ee:30:64:d9:1f:f8:22:b6:f1: 61:f6:54:c3:05:c3:5a:59:3b:3e:43:ad:ae:63:0e:f8:75:f0: 68:d7:99:6c:6a:8c:21:fc:a5:56:d4:b5:74:48:e7:50:b1:ae: 25:e5:1f:a5:9c:9e:8d:a0:08:7e:dd:01:df:67:ac:fb:0a:c4: 20:34:38:40:c0:78:3d:e4:a1:a2:04:1f:20:f5:01:b6:df:5c: 93:25:f7:83:55:14:c7:a3:a0:44:52:2a:51:cc:98:7c:be:79: 92:a2:57:4f:eb:68:72:39:0a:56:67:fe:13:75:32:0c:73:0a: 65:6a:97:fc -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/FffsbyAIIIBOkjR68GX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGNiMDlmNGZiMjAyYmMxY2I4ZTc1YmIwOTQxZmNjZWE0YTJiODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65MR0liJCqv780HXmEWFxKYrYMZF fLumnDK8RszN+eVzHr/lh9xhUW+YX8nDKjkt0nGYSScPq4/u6rFnKTvGS+ETsJKa faHvkIBJ2bXp437VWFiqyXD/AbSlhDCjOgzURlXhkYZme7zUAEtRLnZF7mGiO3Xb /UvegHK/LhPRxiIsj/lqRevkOfz1tSsa6VU9PWO3xzPO4ExYPhqgzujz/cxVW0up tWBb0struuTxZ7OFgxJrQpiWAdmkS9QrmGqsfKtaV1JiU80XDONcgf4fVztzmpUM SAui+57Zt8QDvqGg3tgOMaDcllsNdSphDMtS3rqXOP81hmtJxL5NesPZpwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFDDLCfT7ICvBy451uwlB/M6korgoMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvTU1zSjlQc2dLOEhMam5XN0NVSDh6cVNpdUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAAjhvAwQA LViJAwQALV6pAwQALYS3AwQALYq0AwQALZcDAwQATVMlMA0GCSqGSIb3DQEBCwUA A4IBAQAtimR6hzjyj+BTTkcGdwwTAElDLC4BqYXZ/WvkwPqLEiHpf/vJzTLHfphB ertC+0Mivv+/vACSTjIDrO//HZ4wKKx9GdH/Pfv11xlOYoNWxmYGws0yEbWYyZ5S 1o6J3PfzB9k7ll3Ofj42Kv2LVq4P8Z2DXXPdzsmbWVuhq40SJugGxXN35NbuMGTZ H/gitvFh9lTDBcNaWTs+Q62uYw74dfBo15lsaowh/KVW1LV0SOdQsa4l5R+lnJ6N oAh+3QHfZ6z7CsQgNDhAwHg95KGiBB8g9QG231yTJfeDVRTHo6BEUipRzJh8vnmS oldP62hyOQpWZ/4TdTIMcwplapf8 -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:33 2026 by rpki-client