This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MInmjTvW1jbn8HVs4d7pziBXvog.roa File: MInmjTvW1jbn8HVs4d7pziBXvog.roa (raw, json) Hash identifier: sqeC1+d5oRvHYURRaJApXOy7p3KmwZMMfOX3s+0N5no= Subject key identifier: 30:89:E6:8D:3B:D6:D6:36:E7:F0:75:6C:E1:DE:E9:CE:20:57:BE:88 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA31EA439D8ACB2CBC26DEF8C52655 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MInmjTvW1jbn8HVs4d7pziBXvog.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49154 IP address blocks: 212.188.64.0/22 maxlen: 22 212.188.64.0/23 maxlen: 23 212.188.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:31:ea:43:9d:8a:cb:2c:bc:26:de:f8:c5:26:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3089e68d3bd6d636e7f0756ce1dee9ce2057be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:73:02:04:f5:94:87:25:bd:e7:85:39:82: d3:09:fb:88:0c:bb:dd:e2:96:fa:88:93:05:d9:71: e4:b8:3c:84:72:e8:91:67:8b:2b:4c:84:f2:a7:53: 17:86:36:dc:8d:19:2b:cd:d6:55:2c:a1:1c:dc:3e: a5:6b:5e:cd:aa:6f:2b:b8:74:b8:e5:71:9c:5c:6f: 14:38:c0:13:bd:e2:9a:b6:b5:da:64:ad:d7:40:0f: 7a:3c:ec:49:e9:38:7a:17:e4:e2:28:27:e6:2d:6a: cc:34:6a:3e:0e:bc:d6:ba:92:02:6d:86:43:71:d1: 50:a2:1d:88:c5:6f:5a:86:f2:56:97:c2:38:ac:6b: 1a:79:11:da:86:4e:7a:3d:75:28:0b:d0:d9:2b:93: bc:10:38:27:53:c2:53:7f:4c:d9:88:12:ba:e9:73: aa:b7:21:14:bd:e5:15:01:3f:c9:f3:1b:06:98:83: a7:64:b9:32:9a:85:be:a4:01:2a:94:b2:01:6a:34: 8c:c9:1b:a3:c4:5b:4d:f0:4c:3a:76:e4:d9:f0:dd: f9:aa:25:1e:30:14:6b:b9:ef:d2:26:30:fa:67:72: ba:92:e1:bf:bd:5d:d1:6f:06:df:19:3b:61:10:cf: 7c:0e:61:9c:42:ed:69:6e:b6:23:bb:df:e8:5d:d8: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:E6:8D:3B:D6:D6:36:E7:F0:75:6C:E1:DE:E9:CE:20:57:BE:88 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MInmjTvW1jbn8HVs4d7pziBXvog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.188.64.0/22 Signature Algorithm: sha256WithRSAEncryption 68:05:d7:64:03:e0:85:33:8b:8e:0d:4d:03:9a:0a:71:48:4d: fb:aa:d6:e4:df:c4:f6:e8:ab:d0:47:d0:17:cf:b2:7d:2e:97: 97:36:e0:c2:05:65:67:18:39:86:e9:5c:22:60:40:f9:2a:34: f7:6c:be:84:89:d6:bd:0e:ea:d5:2c:56:ef:cd:df:81:7f:9d: c2:7f:f8:14:b2:6f:32:23:22:55:b9:de:0e:6e:fa:76:8d:33: 83:48:f5:4c:bb:12:75:92:8f:dc:59:22:d4:c7:fc:ac:4e:92: e2:1b:66:ae:b1:f2:5c:2d:d1:12:66:b4:2e:c4:07:5d:ff:4b: 6d:60:45:0b:57:83:5e:dc:74:cc:1a:75:99:1f:1e:05:aa:68: e6:c5:a8:16:9d:fb:33:de:31:52:64:8f:a9:32:42:b2:ef:f1: 1a:8d:ee:7b:aa:47:7f:0f:b7:fa:b6:13:e6:af:bb:70:92:ce: a3:2a:9a:eb:b9:a4:e1:77:b7:be:6f:a5:0b:37:f3:e4:7a:96: 6e:f5:b7:bc:3f:48:69:da:7b:b4:51:bf:cf:ea:ae:6a:cf:c0: 2c:20:d0:0e:0e:a2:fd:74:9c:a7:d7:a7:46:db:76:e4:a7:64: 32:0c:91:e6:7e:0c:6a:fa:79:e4:7a:3d:70:c3:15:cd:6d:df: f1:d5:62:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjHqQ52Kyyy8Jt74xSZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDg5ZTY4ZDNiZDZkNjM2ZTdmMDc1NmNlMWRlZTljZTIwNTdiZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuhzAgT1lIclveeFOYLTCfuIDLvd 4pb6iJMF2XHkuDyEcuiRZ4srTITyp1MXhjbcjRkrzdZVLKEc3D6la17Nqm8ruHS4 5XGcXG8UOMATveKatrXaZK3XQA96POxJ6Th6F+TiKCfmLWrMNGo+DrzWupICbYZD cdFQoh2IxW9ahvJWl8I4rGsaeRHahk56PXUoC9DZK5O8EDgnU8JTf0zZiBK66XOq tyEUveUVAT/J8xsGmIOnZLkymoW+pAEqlLIBajSMyRujxFtN8Ew6duTZ8N35qiUe MBRrue/SJjD6Z3K6kuG/vV3RbwbfGTthEM98DmGcQu1pbrYju9/oXdjaxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDCJ5o071tY25/B1bOHe6c4gV76IMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvTUlubWpUdlcxamJuOEhWczRkN3B6aUJYdm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1LxAMA0G CSqGSIb3DQEBCwUAA4IBAQBoBddkA+CFM4uODU0DmgpxSE37qtbk38T26KvQR9AX z7J9LpeXNuDCBWVnGDmG6VwiYED5KjT3bL6Eida9DurVLFbvzd+Bf53Cf/gUsm8y IyJVud4Obvp2jTODSPVMuxJ1ko/cWSLUx/ysTpLiG2ausfJcLdESZrQuxAdd/0tt YEULV4Ne3HTMGnWZHx4FqmjmxagWnfsz3jFSZI+pMkKy7/Eaje57qkd/D7f6thPm r7twks6jKprruaThd7e+b6ULN/PkepZu9be8P0hp2nu0Ub/P6q5qz8AsINAODqL9 dJyn16dG23bkp2QyDJHmfgxq+nnkej1wwxXNbd/x1WIq -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:24 2026 by rpki-client