This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/MK0PJN0MMreFyMgjGNJVCcP1kio.roa File: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (raw, json) Hash identifier: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A= Subject key identifier: 30:AD:0F:24:DD:0C:32:B7:85:C8:C8:23:18:D2:55:09:C3:F5:92:2A Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB451FE2C33CDA236FBE0B07BAEFD6 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/MK0PJN0MMreFyMgjGNJVCcP1kio.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 45.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:45:1f:e2:c3:3c:da:23:6f:be:0b:07:ba:ef:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30ad0f24dd0c32b785c8c82318d25509c3f5922a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:eb:b4:4c:58:e2:8f:3c:61:68:b6:90:31: ea:eb:f7:81:48:be:0e:4c:e2:8e:85:a9:dd:03:af: b9:1c:96:bb:fd:25:26:cf:79:63:ab:41:3c:16:28: 27:a9:a3:8b:e6:96:c7:93:92:90:e4:4c:e0:20:7e: ad:c2:68:33:59:1d:94:2c:43:63:d8:3b:03:4f:0b: 09:e1:cb:a3:22:40:d1:13:e5:32:c1:82:ee:9d:2a: 24:10:f9:16:35:9e:88:e0:2f:00:77:59:d2:6f:78: c4:33:d0:2e:33:ae:7e:63:03:27:69:82:74:39:6c: 21:cc:27:9c:11:aa:f2:25:09:64:06:3d:c5:e9:b3: e8:61:69:8b:90:f2:6f:e3:8c:4f:4f:80:6e:6d:a9: 87:f7:ab:2c:c3:e4:18:41:97:f4:07:45:66:e9:40: 84:38:84:71:8a:b1:d5:10:76:eb:1d:40:72:d1:df: 2a:88:cb:96:7a:05:75:4f:6e:3b:87:e1:ca:0f:de: 17:6b:2c:3f:58:c3:10:5c:7c:86:7e:74:dc:09:d7: cb:a1:e1:73:ae:86:fb:42:a8:34:8c:17:c8:db:5d: e5:e0:44:40:a1:d2:ec:25:27:bb:fd:67:e7:a7:21: d4:bc:24:fd:32:6b:ff:a4:ee:a5:2c:05:61:71:88: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:0F:24:DD:0C:32:B7:85:C8:C8:23:18:D2:55:09:C3:F5:92:2A X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/MK0PJN0MMreFyMgjGNJVCcP1kio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:39:2d:34:90:5c:f8:66:a4:33:79:99:69:f8:59:fb:91:fa: 5c:d8:6c:ea:ed:85:dc:c2:61:37:b7:58:15:0d:fb:ac:e3:87: b9:82:24:6d:4d:89:2a:ff:6d:12:98:8a:3f:fa:1a:8a:fa:ce: d5:ff:86:f2:10:6b:91:8e:26:10:5e:ff:d1:21:0a:3f:f0:8b: d3:b3:72:bb:50:6e:98:ad:b9:f4:ff:d6:b5:26:fc:0e:5d:06: 1b:4e:97:f1:92:f6:76:90:3f:d3:a1:8d:f7:0f:b9:2e:2c:30: 6c:41:71:02:10:c6:49:dc:e9:b9:ba:e5:bc:be:6c:1d:48:cb: e7:e0:6b:39:aa:16:60:7d:97:ca:93:68:d1:cd:91:f0:ba:c2: 20:a9:2e:ae:99:83:af:d4:16:53:4d:7a:70:65:20:76:71:f0: 3f:58:c8:f2:36:24:cb:49:e2:73:4e:6e:b0:e2:4c:4d:2b:e9: 6d:59:98:7a:ff:b9:34:80:da:cc:49:13:57:6b:07:30:05:8c: 98:fa:23:c4:bb:20:37:54:66:61:67:47:91:25:48:4c:0e:87: ff:9c:6d:dd:11:9a:7a:c1:9b:48:0e:16:62:22:51:37:a0:18: 64:cc:9e:26:b2:60:60:68:74:f5:45:bf:7b:2e:d9:8d:48:e4: 52:0b:e1:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260Uf4sM82iNvvgsHuu/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGFkMGYyNGRkMGMzMmI3ODVjOGM4MjMxOGQyNTUwOWMzZjU5MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZDrtExY4o88YWi2kDHq6/eBSL4O TOKOhandA6+5HJa7/SUmz3ljq0E8FignqaOL5pbHk5KQ5EzgIH6twmgzWR2ULENj 2DsDTwsJ4cujIkDRE+UywYLunSokEPkWNZ6I4C8Ad1nSb3jEM9AuM65+YwMnaYJ0 OWwhzCecEaryJQlkBj3F6bPoYWmLkPJv44xPT4BubamH96ssw+QYQZf0B0Vm6UCE OIRxirHVEHbrHUBy0d8qiMuWegV1T247h+HKD94Xayw/WMMQXHyGfnTcCdfLoeFz rob7Qqg0jBfI213l4ERAodLsJSe7/WfnpyHUvCT9Mmv/pO6lLAVhcYjl9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCtDyTdDDK3hcjIIxjSVQnD9ZIqMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvTUswUEpOME1NcmVGeU1nakdOSlZDY1Axa2lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8fMA0G CSqGSIb3DQEBCwUAA4IBAQAsOS00kFz4ZqQzeZlp+Fn7kfpc2Gzq7YXcwmE3t1gV Dfus44e5giRtTYkq/20SmIo/+hqK+s7V/4byEGuRjiYQXv/RIQo/8IvTs3K7UG6Y rbn0/9a1JvwOXQYbTpfxkvZ2kD/ToY33D7kuLDBsQXECEMZJ3Om5uuW8vmwdSMvn 4Gs5qhZgfZfKk2jRzZHwusIgqS6umYOv1BZTTXpwZSB2cfA/WMjyNiTLSeJzTm6w 4kxNK+ltWZh6/7k0gNrMSRNXawcwBYyY+iPEuyA3VGZhZ0eRJUhMDof/nG3dEZp6 wZtIDhZiIlE3oBhkzJ4msmBgaHT1Rb97LtmNSORSC+FV -----END CERTIFICATE-----Generated at Wed Jan 28 23:53:14 2026 by rpki-client