This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/MKJ3r_4TKeocUaOcCqRhoBecjmM.roa File: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (raw, json) Hash identifier: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o= Subject key identifier: 30:A2:77:AF:FE:13:29:EA:1C:51:A3:9C:0A:A4:61:A0:17:9C:8E:63 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B2E2A13BDAF2C330175D909DE51A9 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/MKJ3r_4TKeocUaOcCqRhoBecjmM.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 45.135.9.0/24 maxlen: 24 45.135.11.0/24 maxlen: 24 45.136.217.0/24 maxlen: 24 45.136.219.0/24 maxlen: 24 45.138.77.0/24 maxlen: 24 45.138.79.0/24 maxlen: 24 45.139.33.0/24 maxlen: 24 45.139.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2e:2a:13:bd:af:2c:33:01:75:d9:09:de:51:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a277affe1329ea1c51a39c0aa461a0179c8e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:0f:21:ad:22:29:14:7a:9a:89:62:af:f3: f0:c9:5f:5d:65:5b:91:d5:3f:c5:da:f0:64:5a:aa: 4c:a3:3f:f8:1d:c1:f2:3c:8b:60:44:6e:6c:91:ae: e6:33:76:64:0f:22:45:4d:56:0f:0c:42:56:fc:3c: 92:77:19:e3:7f:b5:4b:5b:45:a2:0c:db:ee:e3:ab: 17:2e:53:81:73:2d:e1:09:5c:35:c1:fb:22:04:68: 36:aa:de:c6:bf:ca:63:ec:7a:a6:43:44:48:83:b1: dc:4c:d0:54:94:19:5e:3b:d6:5d:a7:c9:e4:22:6e: fd:f2:23:22:f4:b9:52:77:6e:19:e3:16:5c:63:ea: 50:40:fa:d2:82:10:f3:4f:25:a3:9b:cf:88:1d:2b: 68:68:31:7a:4d:5e:2a:a0:fc:a9:9a:a1:e2:53:86: 06:35:6d:6d:cc:35:41:96:e9:bc:13:79:74:27:39: 52:de:d4:63:af:6e:a7:7b:70:56:49:4d:5a:9c:9a: e4:8a:9e:f2:70:7e:3f:2d:d2:5f:dd:30:ec:13:d6: 99:4e:47:d0:8d:b9:13:ea:da:86:8c:51:52:21:25: 68:41:d8:7c:c9:ea:32:f7:2a:12:57:f5:25:e6:3c: db:7e:a2:6c:66:a2:50:f6:e6:2c:c4:2e:8d:4e:2e: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:77:AF:FE:13:29:EA:1C:51:A3:9C:0A:A4:61:A0:17:9C:8E:63 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/MKJ3r_4TKeocUaOcCqRhoBecjmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.9.0/24 45.135.11.0/24 45.136.217.0/24 45.136.219.0/24 45.138.77.0/24 45.138.79.0/24 45.139.33.0/24 45.139.35.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b9:76:6e:d4:c9:51:a8:05:73:b5:30:95:89:b0:5c:89:eb: 50:5f:ee:f3:19:03:d2:a4:9e:ed:94:49:46:ae:01:8c:7f:a9: 67:0d:49:4d:3a:c8:06:ca:b0:e9:fc:97:41:4f:88:12:90:48: 9a:01:b4:af:67:4d:05:ae:52:0f:17:a5:78:bc:96:06:c5:9f: b4:12:89:aa:d9:02:94:64:8f:9c:ed:bc:b8:9f:83:f0:4c:fe: ce:5d:cf:ba:ab:7e:9c:f9:9a:85:87:d4:29:10:0c:cf:7c:48: d6:6b:eb:b1:93:f0:dd:86:d7:a0:8d:9e:ff:6f:e7:5f:f0:f3: ed:fb:93:01:f8:25:2f:b0:d6:2a:34:81:4d:f9:54:85:30:33: 2b:92:68:4b:32:04:10:18:6d:b5:6b:19:3b:3c:03:93:07:74: c7:01:49:72:c6:2a:74:52:d4:8c:9e:3f:8f:4c:8c:2c:b5:b7: a0:26:bd:69:ae:d6:50:01:04:49:ad:6c:bc:51:a5:92:40:3f: b8:ee:3c:5d:13:89:06:9f:05:cd:f9:4c:91:a8:24:1c:6f:25: 07:dc:ad:51:ae:e3:33:62:f4:b3:92:81:56:fa:fb:6e:e7:ed: 2b:22:cb:2b:1b:5c:57:14:ed:47:a1:79:0c:f4:78:68:fb:ee: b8:20:70:1d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6Wy4qE72vLDMBddkJ3lGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGEyNzdhZmZlMTMyOWVhMWM1MWEzOWMwYWE0NjFhMDE3OWM4ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJwPIa0iKRR6molir/PwyV9dZVuR 1T/F2vBkWqpMoz/4HcHyPItgRG5ska7mM3ZkDyJFTVYPDEJW/DySdxnjf7VLW0Wi DNvu46sXLlOBcy3hCVw1wfsiBGg2qt7Gv8pj7HqmQ0RIg7HcTNBUlBleO9Zdp8nk Im798iMi9LlSd24Z4xZcY+pQQPrSghDzTyWjm8+IHStoaDF6TV4qoPypmqHiU4YG NW1tzDVBlum8E3l0JzlS3tRjr26ne3BWSU1anJrkip7ycH4/LdJf3TDsE9aZTkfQ jbkT6tqGjFFSISVoQdh8yeoy9yoSV/Ul5jzbfqJsZqJQ9uYsxC6NTi7ClwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDCid6/+EynqHFGjnAqkYaAXnI5jMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvTUtKM3JfNFRLZW9jVWFPY0NxUmhvQmVjam1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALYcJAwQA LYcLAwQALYjZAwQALYjbAwQALYpNAwQALYpPAwQALYshAwQALYsjMA0GCSqGSIb3 DQEBCwUAA4IBAQAUuXZu1MlRqAVztTCVibBcietQX+7zGQPSpJ7tlElGrgGMf6ln DUlNOsgGyrDp/JdBT4gSkEiaAbSvZ00FrlIPF6V4vJYGxZ+0Eomq2QKUZI+c7by4 n4PwTP7OXc+6q36c+ZqFh9QpEAzPfEjWa+uxk/DdhtegjZ7/b+df8PPt+5MB+CUv sNYqNIFN+VSFMDMrkmhLMgQQGG21axk7PAOTB3THAUlyxip0UtSMnj+PTIwstbeg Jr1prtZQAQRJrWy8UaWSQD+47jxdE4kGnwXN+UyRqCQcbyUH3K1RruMzYvSzkoFW +vtu5+0rIssrG1xXFO1HoXkM9Hho++64IHAd -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client