This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/MND_dKAKKJnBQ5YOgdUUordUHkc.roa File: MND_dKAKKJnBQ5YOgdUUordUHkc.roa (raw, json) Hash identifier: sZmYkAqh1xIbLU4926/2tbMnM7Gkt1Cig6oktdNYObA= Subject key identifier: 30:D0:FF:74:A0:0A:28:99:C1:43:96:0E:81:D5:14:A2:B7:54:1E:47 Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f Certificate serial: 019B7C806178FFABDF34072F6566A2B4741B Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/MND_dKAKKJnBQ5YOgdUUordUHkc.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 46.248.96.0/22 maxlen: 22 46.248.102.0/23 maxlen: 24 46.248.104.0/23 maxlen: 24 46.248.106.0/23 maxlen: 23 46.248.108.0/22 maxlen: 24 46.248.112.0/22 maxlen: 24 46.248.116.0/22 maxlen: 24 46.248.120.0/22 maxlen: 24 46.248.124.0/23 maxlen: 23 46.248.126.0/23 maxlen: 23 82.136.26.0/24 maxlen: 24 82.136.30.0/23 maxlen: 24 82.136.43.0/24 maxlen: 24 82.136.47.0/24 maxlen: 24 82.136.48.0/22 maxlen: 24 82.136.52.0/24 maxlen: 24 82.136.54.0/23 maxlen: 24 82.136.56.0/22 maxlen: 24 85.116.0.0/23 maxlen: 23 85.116.2.0/23 maxlen: 23 85.116.4.0/23 maxlen: 23 85.116.6.0/23 maxlen: 23 85.116.11.0/24 maxlen: 24 85.116.16.0/21 maxlen: 21 85.116.24.0/24 maxlen: 24 85.116.25.0/24 maxlen: 24 85.116.26.0/24 maxlen: 24 85.116.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:61:78:ff:ab:df:34:07:2f:65:66:a2:b4:74:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d0ff74a00a2899c143960e81d514a2b7541e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:b3:8d:db:e5:1c:0d:98:c6:19:9f:c9:5a: dc:5e:69:73:89:e6:d7:58:21:d7:e1:ea:51:54:70: 9c:47:11:b3:10:e8:2c:6d:33:88:d1:4a:f0:17:5c: 55:84:cb:35:52:88:c7:bb:e0:e6:fb:18:32:6e:0e: 1f:7b:88:5b:97:44:74:a1:af:ec:ae:9e:e3:58:1d: cc:ec:a9:1c:93:02:69:ee:49:9b:37:ba:16:40:1a: a0:07:f7:3a:25:ee:d7:3d:f4:86:77:e8:f7:e0:ea: de:54:44:b9:9c:a5:67:78:c9:ba:d9:8d:ad:c8:da: ae:c0:c5:cf:fe:19:87:4d:10:8f:95:1c:4a:98:08: 15:e4:90:2e:dc:21:ff:10:58:e5:6c:27:3b:2a:14: e6:22:2a:3b:dc:41:97:ca:31:aa:e7:ef:24:54:f9: d0:0b:b1:5b:31:b8:ce:15:e4:e0:a4:3e:de:50:f9: b3:6b:7c:28:ce:81:54:16:a2:a7:f6:5d:42:d2:36: 50:1e:db:be:e1:e3:b8:62:96:a8:a0:13:5e:14:25: 20:4b:fe:42:1a:22:75:c9:cf:17:2d:65:fc:32:b4: 1a:83:06:86:1f:1a:e6:9f:6b:2e:23:70:e9:cf:a0: 83:4f:f3:ed:6e:83:00:1b:98:f9:18:a0:fc:68:5f: b0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:FF:74:A0:0A:28:99:C1:43:96:0E:81:D5:14:A2:B7:54:1E:47 X509v3 Authority Key Identifier: keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/MND_dKAKKJnBQ5YOgdUUordUHkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.96.0/22 46.248.102.0-46.248.127.255 82.136.26.0/24 82.136.30.0/23 82.136.43.0/24 82.136.47.0-82.136.52.255 82.136.54.0-82.136.59.255 85.116.0.0/21 85.116.11.0/24 85.116.16.0-85.116.27.255 Signature Algorithm: sha256WithRSAEncryption 5b:38:26:67:13:99:78:da:f7:f6:6d:25:da:f9:3d:ae:02:21: 88:52:d2:9b:49:2a:58:c4:ea:7e:a8:49:d6:ef:60:56:54:20: b0:e8:ba:91:21:a9:ed:7e:ef:e6:88:46:5b:62:5b:a6:01:b1: ba:70:61:3a:66:07:6b:c6:24:5a:56:76:53:34:87:64:1a:fa: 32:b4:78:26:1c:c1:8c:02:77:70:a6:99:0c:7a:15:84:11:8b: 17:da:f2:ad:63:e5:c1:f8:7f:0c:13:82:96:a0:4d:ad:42:ea: b6:69:5e:6a:f7:c8:c6:7a:95:95:43:62:11:7c:dc:31:d0:82: c3:52:2b:d3:e8:13:ab:dc:80:9b:ec:82:13:bf:d7:49:26:f8: 66:6e:c3:1a:0d:a2:fa:91:66:08:4a:a5:13:ab:7f:ea:f4:f0: 78:58:4e:e0:73:9a:d8:e3:68:99:15:f8:0c:f2:da:35:41:e0: 35:9b:02:60:e3:b0:55:37:69:71:7a:88:8d:eb:a2:ea:17:f5: 29:45:00:d3:62:2a:a9:45:4c:f9:eb:4b:2a:d8:a4:20:90:78: 45:d4:9b:10:50:d1:85:b7:5c:ca:cb:d6:77:8c:d6:66:d6:6b: 8d:3a:c0:fc:e7:84:9b:de:53:43:4b:3d:79:1c:c4:31:9c:2c: d9:d0:13:9e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt8gGF4/6vfNAcvZWaitHQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4 NjEyM2YwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQwZmY3NGEwMGEyODk5YzE0Mzk2MGU4MWQ1MTRhMmI3NTQxZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluWzjdvlHA2YxhmfyVrcXmlziebX WCHX4epRVHCcRxGzEOgsbTOI0UrwF1xVhMs1UojHu+Dm+xgybg4fe4hbl0R0oa/s rp7jWB3M7KkckwJp7kmbN7oWQBqgB/c6Je7XPfSGd+j34OreVES5nKVneMm62Y2t yNquwMXP/hmHTRCPlRxKmAgV5JAu3CH/EFjlbCc7KhTmIio73EGXyjGq5+8kVPnQ C7FbMbjOFeTgpD7eUPmza3wozoFUFqKn9l1C0jZQHtu+4eO4YpaooBNeFCUgS/5C GiJ1yc8XLWX8MrQagwaGHxrmn2suI3Dpz6CDT/PtboMAG5j5GKD8aF+wrwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFDDQ/3SgCiiZwUOWDoHVFKK3VB5HMB8GA1UdIwQY MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt NGIxZjYxNjUzZjNkLzEvTU5EX2RLQUtLSm5CUTVZT2dkVVVvcmRVSGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQCLvhgMAwD BAEu+GYDBAcu+AADBABSiBoDBAFSiB4DBABSiCswDAMEAFKILwMEAFKINDAMAwQB Uog2AwQCUog4AwQDVXQAAwQAVXQLMAwDBARVdBADBAJVdBgwDQYJKoZIhvcNAQEL BQADggEBAFs4JmcTmXja9/ZtJdr5Pa4CIYhS0ptJKljE6n6oSdbvYFZUILDoupEh qe1+7+aIRltiW6YBsbpwYTpmB2vGJFpWdlM0h2Qa+jK0eCYcwYwCd3CmmQx6FYQR ixfa8q1j5cH4fwwTgpagTa1C6rZpXmr3yMZ6lZVDYhF83DHQgsNSK9PoE6vcgJvs ghO/10km+GZuwxoNovqRZghKpROrf+r08HhYTuBzmtjjaJkV+Azy2jVB4DWbAmDj sFU3aXF6iI3rouoX9SlFANNiKqlFTPnrSyrYpCCQeEXUmxBQ0YW3XMrL1neM1mbW a406wPznhJveU0NLPXkcxDGcLNnQE54= -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:58 2026 by rpki-client