This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MnPAUWqJaYH7flnkymPsW7KuAP4.roa File: MnPAUWqJaYH7flnkymPsW7KuAP4.roa (raw, json) Hash identifier: UUUrkezTZNsgpxWm1cFg5VNyQsx7JcYpiJeOlF9prCw= Subject key identifier: 32:73:C0:51:6A:89:69:81:FB:7E:59:E4:CA:63:EC:5B:B2:AE:00:FE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC3DEF7D813E4D92E513A3BBD091F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MnPAUWqJaYH7flnkymPsW7KuAP4.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.248.132.0/24 maxlen: 24 2a0e:97c0:b33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c3:de:f7:d8:13:e4:d9:2e:51:3a:3b:bd:09:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3273c0516a896981fb7e59e4ca63ec5bb2ae00fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:c4:b4:be:75:40:d8:41:05:2a:27:4b:b6: 1d:3f:10:87:7e:39:37:8a:59:48:54:e1:2f:d3:2f: 59:de:f7:22:79:ac:a2:62:37:0e:44:58:14:48:2d: 88:48:6a:dd:30:a7:58:74:02:cc:e7:98:10:af:5b: 59:84:80:f9:78:d3:a2:95:d1:a6:53:3e:39:37:eb: 63:ab:2e:70:b8:19:5f:cb:4f:81:e1:8a:9c:23:12: c9:b0:39:93:6f:d6:42:46:20:2e:27:fa:b0:89:fe: bf:97:b4:c7:f8:37:6b:05:15:4d:a3:d5:63:14:c2: 08:85:ce:44:fc:6b:23:4c:49:ce:92:78:9e:1a:4b: 24:31:d2:02:df:af:8e:d9:d5:2a:da:42:12:1a:12: 2e:5d:d9:71:41:41:4a:f1:1a:70:c3:a4:31:19:18: 91:fb:98:c3:d8:c9:4e:3d:65:6b:49:f3:fd:4c:d7: 18:2d:20:5e:fe:ff:4d:5c:8a:dd:32:82:92:db:33: ea:95:75:e6:6d:ee:5d:77:71:ac:00:38:db:9f:65: 77:20:ce:40:91:e8:2d:ca:19:8d:42:12:e8:fb:f8: f3:20:20:e4:3b:49:a8:fb:3f:33:af:65:a3:09:4e: 9f:67:10:07:16:ad:9b:69:7a:b9:74:1d:4c:be:c1: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:C0:51:6A:89:69:81:FB:7E:59:E4:CA:63:EC:5B:B2:AE:00:FE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MnPAUWqJaYH7flnkymPsW7KuAP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.132.0/24 IPv6: 2a0e:97c0:b33::/48 Signature Algorithm: sha256WithRSAEncryption 9e:12:c7:3a:1b:34:0e:3c:ac:f1:08:03:26:33:9b:da:e7:3c: 02:0e:37:e2:5c:c6:28:18:05:17:03:01:a4:21:69:6f:6c:7a: ee:ff:21:cb:25:be:20:94:4d:18:f3:a8:7a:72:b4:35:19:00: 48:18:af:cb:c4:94:b0:99:ff:68:78:57:ce:8b:e4:74:2a:e0: f2:8a:72:b6:d0:dd:3f:a6:7b:2f:9b:9d:30:21:a6:3b:14:24: 27:5a:fb:c9:59:4c:de:80:a1:c8:29:b4:7b:bc:93:a5:ba:a4: 21:79:3a:b4:61:16:48:82:f8:6c:7d:73:0c:4b:0c:f8:7a:50: d0:a8:49:92:84:ac:16:d5:b1:49:7a:46:9f:b0:fa:40:6d:88: 7a:dc:b2:88:69:fb:86:06:97:89:58:bd:2c:f5:c5:4d:31:ae: d1:b6:93:81:8c:f3:cc:c5:60:e8:78:07:08:6f:96:a2:4a:f9: e9:d7:ff:b7:b1:42:6c:4c:bd:25:0e:87:52:51:91:32:c9:0a: 1f:57:53:35:ad:4b:44:9e:51:86:11:71:81:e5:02:d1:26:52: 97:d3:bd:2e:7d:46:e0:ff:76:2d:53:0b:a0:8c:f3:0c:8e:e4: d3:74:3e:2c:bc:78:eb:23:72:bd:78:fa:70:8c:bb:44:08:53: a8:66:29:6f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XMPe99gT5NkuUTo7vQkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjczYzA1MTZhODk2OTgxZmI3ZTU5ZTRjYTYzZWM1YmIyYWUwMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdjEtL51QNhBBSonS7YdPxCHfjk3 illIVOEv0y9Z3vcieayiYjcORFgUSC2ISGrdMKdYdALM55gQr1tZhID5eNOildGm Uz45N+tjqy5wuBlfy0+B4YqcIxLJsDmTb9ZCRiAuJ/qwif6/l7TH+DdrBRVNo9Vj FMIIhc5E/GsjTEnOknieGkskMdIC36+O2dUq2kISGhIuXdlxQUFK8Rpww6QxGRiR +5jD2MlOPWVrSfP9TNcYLSBe/v9NXIrdMoKS2zPqlXXmbe5dd3GsADjbn2V3IM5A kegtyhmNQhLo+/jzICDkO0mo+z8zr2WjCU6fZxAHFq2baXq5dB1MvsEwOQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDJzwFFqiWmB+35Z5Mpj7FuyrgD+MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTW5QQVVXcUphWUg3Zmxua3ltUHNXN0t1QVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAufiEMA8E AgACMAkDBwAqDpfACzMwDQYJKoZIhvcNAQELBQADggEBAJ4SxzobNA48rPEIAyYz m9rnPAION+JcxigYBRcDAaQhaW9seu7/IcslviCUTRjzqHpytDUZAEgYr8vElLCZ /2h4V86L5HQq4PKKcrbQ3T+mey+bnTAhpjsUJCda+8lZTN6AocgptHu8k6W6pCF5 OrRhFkiC+Gx9cwxLDPh6UNCoSZKErBbVsUl6Rp+w+kBtiHrcsohp+4YGl4lYvSz1 xU0xrtG2k4GM88zFYOh4BwhvlqJK+enX/7exQmxMvSUOh1JRkTLJCh9XUzWtS0Se UYYRcYHlAtEmUpfTvS59RuD/di1TC6CM8wyO5NN0Piy8eOsjcr14+nCMu0QIU6hm KW8= -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:24 2026 by rpki-client