This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/MhkIG3M7fwR8fILw15Agvyj3QKI.roa File: MhkIG3M7fwR8fILw15Agvyj3QKI.roa (raw, json) Hash identifier: FFjReexmd0K3X+SEM/x6XzG86nvZA19Vvp973XX9p0Q= Subject key identifier: 32:19:08:1B:73:3B:7F:04:7C:7C:82:F0:D7:90:20:BF:28:F7:40:A2 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019A7E957DB43682B7DB0FA946DDBF2817F1 Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/MhkIG3M7fwR8fILw15Agvyj3QKI.roa Signing time: Thu 13 Nov 2025 18:58:37 +0000 ROA not before: Thu 13 Nov 2025 18:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 217.78.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:95:7d:b4:36:82:b7:db:0f:a9:46:dd:bf:28:17:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Nov 13 18:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3219081b733b7f047c7c82f0d79020bf28f740a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:ea:56:72:9d:44:c1:6d:2d:2d:67:52:a6: f4:f7:a5:a5:b9:47:8d:fe:80:23:65:27:84:c5:ef: f8:24:28:45:9d:58:77:d7:c0:41:89:be:45:d9:cc: 79:af:cc:7c:a1:87:a0:69:20:75:b9:f1:f5:1c:df: ba:4a:a4:5b:7f:9f:a4:c1:43:27:62:a7:42:37:5e: 74:99:69:df:4a:b7:f2:ce:7c:5e:c2:95:14:d9:fc: b1:a0:7e:f0:56:6a:05:84:fe:9b:02:c4:a6:7a:05: b7:6c:c5:be:12:2d:a3:64:57:5d:d6:cb:3f:6a:b1: 86:84:14:b6:c5:5f:27:82:b9:83:62:e9:bc:f2:e7: 18:40:7a:c4:dd:36:cc:3f:8c:6e:1c:4d:86:df:34: d5:eb:bf:1c:1c:2c:2b:cc:4c:1f:3c:d2:ba:1c:2f: 59:82:83:67:c4:e4:c0:6a:cc:45:3e:6f:b2:70:3c: 43:8b:ef:9c:06:7b:66:1e:f0:c2:a1:d9:4b:89:9b: 64:35:e7:88:8d:6c:00:0a:54:74:cf:60:c0:b1:c7: 2b:57:0f:a7:3a:87:a8:4b:71:c8:d4:ee:18:45:02: 57:b3:00:9a:35:a4:8e:04:86:a1:b6:22:d2:76:1f: 9d:ef:ff:79:8b:98:03:40:96:4f:ea:12:98:0a:04: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:08:1B:73:3B:7F:04:7C:7C:82:F0:D7:90:20:BF:28:F7:40:A2 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/MhkIG3M7fwR8fILw15Agvyj3QKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.40.0/21 Signature Algorithm: sha256WithRSAEncryption 08:b7:d5:dc:22:f6:d7:23:f7:14:b8:0b:5a:2c:5f:92:09:93: d3:08:54:1b:aa:89:bf:9f:bb:23:e2:a6:96:2d:89:3e:0d:d6: 49:52:8f:0f:f2:5f:66:47:b4:e5:ed:67:c4:82:c1:0f:ef:94: 58:13:f4:26:9d:34:e0:7e:80:dd:23:25:60:f8:eb:1f:91:c1: 83:58:1f:38:ba:03:12:2a:2a:09:91:1e:12:f4:df:94:13:02: 60:5c:f0:9f:67:77:da:6a:44:5f:70:35:91:4b:c5:87:8c:c5: 6f:45:8b:c1:72:db:87:85:f8:ce:01:26:e5:a1:ad:d4:96:65: bc:52:dd:cf:a8:d7:54:22:98:47:3a:c9:60:b7:06:9a:05:95: b2:fc:e9:72:fa:48:07:d7:28:5b:b8:a7:60:a9:54:e4:c4:53: 35:c9:4b:81:95:8e:e1:1b:bf:c5:a2:4a:7d:e7:c2:13:e1:9c: ad:39:f9:15:17:44:6e:b5:81:e0:7a:b0:b4:8a:66:b4:5d:59: 07:e2:b4:3b:d7:1e:1a:91:f0:05:c9:e6:66:79:37:b7:3a:29: 38:9f:25:35:14:05:45:3f:be:37:ed:e4:5e:2e:62:5b:3d:a3: 7b:fb:f6:c3:9d:52:2a:65:7d:8b:78:00:97:5f:db:76:1e:3e: 5c:2c:4e:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp+lX20NoK32w+pRt2/KBfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjUxMTEzMTg1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjE5MDgxYjczM2I3ZjA0N2M3YzgyZjBkNzkwMjBiZjI4Zjc0MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XzqVnKdRMFtLS1nUqb096WluUeN /oAjZSeExe/4JChFnVh318BBib5F2cx5r8x8oYegaSB1ufH1HN+6SqRbf5+kwUMn YqdCN150mWnfSrfyznxewpUU2fyxoH7wVmoFhP6bAsSmegW3bMW+Ei2jZFdd1ss/ arGGhBS2xV8ngrmDYum88ucYQHrE3TbMP4xuHE2G3zTV678cHCwrzEwfPNK6HC9Z goNnxOTAasxFPm+ycDxDi++cBntmHvDCodlLiZtkNeeIjWwAClR0z2DAsccrVw+n OoeoS3HI1O4YRQJXswCaNaSOBIahtiLSdh+d7/95i5gDQJZP6hKYCgRLgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDIZCBtzO38EfHyC8NeQIL8o90CiMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvTWhrSUczTTdmd1I4ZklMdzE1QWd2eWozUUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2U4oMA0G CSqGSIb3DQEBCwUAA4IBAQAIt9XcIvbXI/cUuAtaLF+SCZPTCFQbqom/n7sj4qaW LYk+DdZJUo8P8l9mR7Tl7WfEgsEP75RYE/QmnTTgfoDdIyVg+OsfkcGDWB84ugMS KioJkR4S9N+UEwJgXPCfZ3faakRfcDWRS8WHjMVvRYvBctuHhfjOASbloa3UlmW8 Ut3PqNdUIphHOslgtwaaBZWy/Oly+kgH1yhbuKdgqVTkxFM1yUuBlY7hG7/Fokp9 58IT4ZytOfkVF0RutYHgerC0ima0XVkH4rQ71x4akfAFyeZmeTe3Oik4nyU1FAVF P7437eReLmJbPaN7+/bDnVIqZX2LeACXX9t2Hj5cLE7e -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client