This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MNqklcC3mDcAx_nY7EwvhOa8X9U.roa File: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (raw, json) Hash identifier: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020= Subject key identifier: 30:DA:A4:95:C0:B7:98:37:00:C7:F9:D8:EC:4C:2F:84:E6:BC:5F:D5 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31AA5DD86B22F5EE740673F99F4B1 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MNqklcC3mDcAx_nY7EwvhOa8X9U.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 212.113.100.0/24 maxlen: 24 212.113.101.0/24 maxlen: 24 212.113.102.0/24 maxlen: 24 212.113.103.0/24 maxlen: 24 212.113.106.0/24 maxlen: 24 212.113.116.0/24 maxlen: 24 212.113.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:a5:dd:86:b2:2f:5e:e7:40:67:3f:99:f4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30daa495c0b7983700c7f9d8ec4c2f84e6bc5fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:29:26:b4:de:d6:ce:79:e2:79:46:1a:c0: 50:50:1f:29:d2:1c:43:38:9a:c1:e4:0a:63:90:b4: 53:2c:b4:13:e2:81:5e:91:b7:fd:c2:45:c8:6c:b4: b0:94:fe:c1:f1:63:97:d6:19:13:49:21:d7:3c:9d: df:9a:f9:93:62:77:c0:16:04:fb:8d:79:22:5a:9b: 2a:d9:82:58:c0:da:65:0d:da:9b:05:59:ec:0b:b8: be:e0:ef:3c:6a:76:82:87:aa:2b:3b:55:57:82:e4: 0b:6c:ef:1b:87:34:42:e5:d4:bb:88:53:0e:c1:f4: 5c:46:eb:83:17:f4:c1:6b:f6:5f:86:3f:3a:6d:5f: 30:2c:f8:86:6e:65:36:ae:1e:f2:e8:61:23:2a:75: 9c:70:5a:9e:15:89:b9:52:15:e8:27:77:ac:cb:c1: 29:a1:4f:ca:dd:e4:d7:f8:e9:9f:80:a9:de:b6:06: bc:d1:91:83:46:fa:28:68:15:06:41:e1:ae:cf:3a: da:02:fa:ee:26:98:1a:a3:18:f6:ca:0c:da:63:ff: 8e:ad:b9:1e:40:97:06:20:4d:3a:06:4b:6d:1b:5f: ad:f4:23:72:30:43:f6:5b:0b:d8:b7:d4:ce:12:ad: 4e:0e:29:18:03:dc:fb:5a:74:77:44:a7:9c:55:3b: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:A4:95:C0:B7:98:37:00:C7:F9:D8:EC:4C:2F:84:E6:BC:5F:D5 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MNqklcC3mDcAx_nY7EwvhOa8X9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.100.0/22 212.113.106.0/24 212.113.116.0/24 212.113.119.0/24 Signature Algorithm: sha256WithRSAEncryption 87:2d:9b:33:0e:34:34:29:3a:89:fb:09:bc:22:bc:c1:fe:ab: e6:93:8c:03:41:a9:78:f8:23:fa:47:21:20:3a:76:4d:58:68: f3:d1:a0:bb:33:bc:d6:46:16:70:c0:a6:ba:01:58:5b:c1:ea: 5e:41:7a:19:05:e3:e1:17:90:cc:de:65:ad:82:51:cf:93:7f: 1e:fb:85:46:da:0c:84:eb:3c:a2:70:4d:5d:f9:fa:4d:8e:06: 8d:4e:2f:d3:f2:a5:49:d0:91:12:4e:e9:f2:3c:8f:f3:7b:01: 40:11:52:27:2d:30:03:2a:f7:72:cd:2a:db:46:7e:b9:06:02: e5:fd:36:1c:8a:be:b3:ab:00:6d:27:3d:80:c3:4c:59:82:3f: 3f:31:84:a9:3a:fa:5d:e6:af:88:9c:3c:8c:65:00:13:1e:45: 06:9c:09:ac:c0:00:26:e8:b0:bc:81:4e:53:bf:ef:a9:f2:96: 79:83:fd:fd:88:bd:d0:49:1b:9b:bb:67:2b:0a:fa:3e:26:98: 0c:52:42:87:ba:d9:2c:ce:93:83:2b:ca:af:b7:ea:99:4b:a1: 25:12:5d:ff:ba:15:ef:db:ff:02:b1:63:43:28:d2:ab:14:9a: d4:67:ec:54:97:38:a3:2c:7c:dc:39:02:be:15:60:8c:32:33: 9f:7e:62:8e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4oxql3YayL17nQGc/mfSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGRhYTQ5NWMwYjc5ODM3MDBjN2Y5ZDhlYzRjMmY4NGU2YmM1ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBcpJrTe1s554nlGGsBQUB8p0hxD OJrB5ApjkLRTLLQT4oFekbf9wkXIbLSwlP7B8WOX1hkTSSHXPJ3fmvmTYnfAFgT7 jXkiWpsq2YJYwNplDdqbBVnsC7i+4O88anaCh6orO1VXguQLbO8bhzRC5dS7iFMO wfRcRuuDF/TBa/Zfhj86bV8wLPiGbmU2rh7y6GEjKnWccFqeFYm5UhXoJ3esy8Ep oU/K3eTX+OmfgKnetga80ZGDRvooaBUGQeGuzzraAvruJpgaoxj2ygzaY/+Orbke QJcGIE06BkttG1+t9CNyMEP2WwvYt9TOEq1ODikYA9z7WnR3RKecVTstVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDDapJXAt5g3AMf52OxML4TmvF/VMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvTU5xa2xjQzNtRGNBeF9uWTdFd3ZoT2E4WDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC1HFkAwQA 1HFqAwQA1HF0AwQA1HF3MA0GCSqGSIb3DQEBCwUAA4IBAQCHLZszDjQ0KTqJ+wm8 IrzB/qvmk4wDQal4+CP6RyEgOnZNWGjz0aC7M7zWRhZwwKa6AVhbwepeQXoZBePh F5DM3mWtglHPk38e+4VG2gyE6zyicE1d+fpNjgaNTi/T8qVJ0JESTunyPI/zewFA EVInLTADKvdyzSrbRn65BgLl/TYcir6zqwBtJz2Aw0xZgj8/MYSpOvpd5q+InDyM ZQATHkUGnAmswAAm6LC8gU5Tv++p8pZ5g/39iL3QSRubu2crCvo+JpgMUkKHutks zpODK8qvt+qZS6ElEl3/uhXv2/8CsWNDKNKrFJrUZ+xUlzijLHzcOQK+FWCMMjOf fmKO -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:46 2026 by rpki-client