This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa File: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (raw, json) Hash identifier: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo= Subject key identifier: 9A:76:E9:08:C8:55:41:11:41:23:72:12:61:0A:34:38:0B:BA:E1:19 Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Certificate serial: 019B79ED269BBCC2C2CD5947E9B4B08E4340 Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.48.0.0/16 maxlen: 16 192.124.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:9b:bc:c2:c2:cd:59:47:e9:b4:b0:8e:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a76e908c855411141237212610a34380bbae119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:92:7a:7b:70:58:fb:e0:05:63:45:49:29: 86:fc:50:51:76:1e:ea:57:c1:03:7b:ca:76:36:dc: 98:69:d9:40:17:03:71:ba:ef:ae:48:23:d1:30:0e: 34:4c:1e:4a:45:dd:11:f9:e7:73:37:66:60:94:ac: d3:1d:47:69:f4:47:19:4c:2c:74:08:f0:c3:ec:2d: e2:74:9f:f6:69:52:b5:08:95:57:36:17:54:0d:c1: c2:a6:53:28:bd:fb:38:d1:79:df:53:0d:48:2d:17: e9:eb:6f:4c:bf:e4:7f:da:85:30:85:8b:fa:d2:69: 1d:78:f2:07:47:26:6f:c7:14:99:cd:8f:c7:7f:b5: 49:1f:e5:36:76:fe:ca:cf:08:28:9c:60:49:73:93: cd:61:92:16:c6:69:21:82:8c:46:cf:8f:a5:30:34: c7:ba:2b:d5:6e:90:6c:0e:12:66:01:a0:f3:07:73: 40:d5:b5:2d:01:f9:0d:ab:ce:7a:7e:73:e9:1b:b3: 0a:52:b3:06:a0:0d:58:85:e1:7a:da:e5:7a:07:00: a3:d7:73:1b:4c:a8:0a:c9:05:c5:b1:8c:91:96:d5: ac:68:d3:7f:4f:d3:19:a3:bd:6a:98:cd:b8:3d:27: 84:d7:c1:28:ab:1c:f1:bd:9f:db:2c:a5:02:98:bb: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:E9:08:C8:55:41:11:41:23:72:12:61:0A:34:38:0B:BA:E1:19 X509v3 Authority Key Identifier: keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.48.0.0/16 192.124.243.0/24 Signature Algorithm: sha256WithRSAEncryption 74:cc:8f:67:76:cc:f8:08:06:41:e4:66:85:41:af:27:00:d2: 76:ef:8f:78:85:56:51:ff:5e:85:c0:da:21:c1:08:f4:85:e6: b4:c0:ca:27:49:73:68:c8:99:62:1e:e2:e6:24:76:ef:53:55: da:af:c1:c9:2b:e0:dd:53:ab:97:53:a2:83:37:f5:bc:67:cf: 64:9b:de:d9:5e:2e:46:e4:d0:3d:28:da:24:6d:6c:be:51:0f: c6:a2:37:a2:3e:69:98:35:38:ab:f0:16:d2:3a:59:9f:7a:75: 10:6c:78:bf:07:5e:48:31:1a:d3:87:9a:b6:e9:5d:a6:bb:a9: 33:f9:14:cc:9b:02:05:df:d4:82:93:a0:91:9a:3e:9a:e5:be: 38:1d:2f:4b:1c:a1:9d:65:0e:9e:48:66:d0:ac:2b:dc:b0:0f: 48:0b:9b:52:59:72:70:d0:1c:2e:51:49:94:1f:95:e8:dc:49: eb:f8:2c:12:da:40:10:d4:d3:d2:3d:e1:93:0d:71:b5:07:5d: 3d:f5:83:c9:a2:92:31:8a:a1:b2:39:41:68:10:7b:c2:d0:c2: 70:2d:97:7b:27:15:8e:aa:a1:24:d0:0c:e0:c9:f1:09:0c:b1: 57:9d:10:ad:f8:03:99:6e:bd:c0:b2:8e:3d:2b:fd:c0:05:11: 82:51:27:88 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt57SabvMLCzVlH6bSwjkNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5 MTBmMTMwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTc2ZTkwOGM4NTU0MTExNDEyMzcyMTI2MTBhMzQzODBiYmFlMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsWSentwWPvgBWNFSSmG/FBRdh7q V8EDe8p2NtyYadlAFwNxuu+uSCPRMA40TB5KRd0R+edzN2ZglKzTHUdp9EcZTCx0 CPDD7C3idJ/2aVK1CJVXNhdUDcHCplMovfs40XnfUw1ILRfp629Mv+R/2oUwhYv6 0mkdePIHRyZvxxSZzY/Hf7VJH+U2dv7KzwgonGBJc5PNYZIWxmkhgoxGz4+lMDTH uivVbpBsDhJmAaDzB3NA1bUtAfkNq856fnPpG7MKUrMGoA1YheF62uV6BwCj13Mb TKgKyQXFsYyRltWsaNN/T9MZo71qmM24PSeE18EoqxzxvZ/bLKUCmLu7twIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJp26QjIVUERQSNyEmEKNDgLuuEZMB8GA1UdIwQY MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt YzY4MmI1YmUwZTUzLzEvbW5icENNaFZRUkZCSTNJU1lRbzBPQXU2NFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAjTADBADA fPMwDQYJKoZIhvcNAQELBQADggEBAHTMj2d2zPgIBkHkZoVBrycA0nbvj3iFVlH/ XoXA2iHBCPSF5rTAyidJc2jImWIe4uYkdu9TVdqvwckr4N1Tq5dTooM39bxnz2Sb 3tleLkbk0D0o2iRtbL5RD8aiN6I+aZg1OKvwFtI6WZ96dRBseL8HXkgxGtOHmrbp Xaa7qTP5FMybAgXf1IKToJGaPprlvjgdL0scoZ1lDp5IZtCsK9ywD0gLm1JZcnDQ HC5RSZQflejcSev4LBLaQBDU09I94ZMNcbUHXT31g8mikjGKobI5QWgQe8LQwnAt l3snFY6qoSTQDODJ8QkMsVedEK34A5luvcCyjj0r/cAFEYJRJ4g= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client