This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Mk4jN06mQ4fVbma_igKuXpQG3ps.roa File: Mk4jN06mQ4fVbma_igKuXpQG3ps.roa (raw, json) Hash identifier: 1RFESF+6Wti5ZNCZfHX28B3nSvTgVPMqHfySrz2lqWE= Subject key identifier: 32:4E:23:37:4E:A6:43:87:D5:6E:66:BF:8A:02:AE:5E:94:06:DE:9B Certificate issuer: /CN=3a1eebbd18dfaa8055e13551ba0241655daaa352 Certificate serial: 019ACA3564C6318C8BDB35165B62F526C7D2 Authority key identifier: 3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Mk4jN06mQ4fVbma_igKuXpQG3ps.roa Signing time: Fri 28 Nov 2025 11:24:48 +0000 ROA not before: Fri 28 Nov 2025 11:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49431 IP address blocks: 91.212.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:35:64:c6:31:8c:8b:db:35:16:5b:62:f5:26:c7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1eebbd18dfaa8055e13551ba0241655daaa352 Validity Not Before: Nov 28 11:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=324e23374ea64387d56e66bf8a02ae5e9406de9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:b0:2c:2c:f4:15:61:5e:f2:0e:fe:73:05: cd:33:4c:d5:e8:3c:76:e0:b5:bc:19:5f:37:87:31: 35:73:7f:1e:4d:04:2a:b2:05:07:74:56:ce:d0:ee: 63:a4:08:11:33:f9:63:56:76:33:35:c1:5b:5e:3d: 6b:cd:0e:59:e1:8c:c5:90:f4:cd:23:ea:d8:a2:8f: c7:4b:be:3d:24:5a:c4:5a:8c:e3:11:8b:76:56:05: 1f:91:ca:42:2d:0d:03:19:e3:de:17:b3:94:dd:db: fb:44:f8:12:f7:35:82:73:82:81:14:20:7a:9f:d3: 1e:c9:be:fc:4d:aa:00:b9:d7:96:73:2f:1f:b8:5b: 8a:de:22:5c:0b:d3:05:b0:63:14:df:54:0a:83:07: 5d:91:40:b8:74:32:b1:2c:a3:02:93:a7:9d:c3:df: 9b:8d:ca:2c:33:10:e0:b6:50:e8:2f:78:50:8d:c0: 57:8a:b2:da:2d:76:1d:81:f1:68:41:47:9e:8e:93: 83:c3:08:f2:c8:c0:7f:69:96:5b:2d:7a:4a:67:14: 1b:98:8f:5d:ed:88:30:9d:ac:b9:c8:79:ee:7f:22: 78:59:83:a2:58:42:4a:36:81:d6:52:c0:1e:c8:8f: 6e:50:c1:aa:58:2c:6e:b8:7e:b7:c3:c1:16:bb:d4: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:23:37:4E:A6:43:87:D5:6E:66:BF:8A:02:AE:5E:94:06:DE:9B X509v3 Authority Key Identifier: keyid:3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Mk4jN06mQ4fVbma_igKuXpQG3ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.249.0/24 Signature Algorithm: sha256WithRSAEncryption 22:4f:f7:0e:7d:c9:86:72:9f:65:ce:b9:72:cf:83:7e:1e:98: f1:a0:27:1d:94:86:c0:b4:e0:a5:c1:b4:d7:d7:a5:08:ba:5f: db:98:fa:e3:59:18:f5:86:7a:d7:4f:c2:79:ff:79:48:24:1d: de:c7:b8:19:94:e3:cb:ff:69:1d:0d:b8:04:0e:2d:ab:b7:79: 94:c5:5d:d1:16:5a:bc:d3:ed:79:8f:5a:a4:cc:76:bb:60:89: 84:55:19:aa:c5:68:aa:ce:45:5f:56:be:94:7b:35:42:e0:00: 93:fd:e8:80:1d:a7:e2:3c:77:7d:d3:e1:69:65:a8:89:0d:f3: fa:76:8f:d2:31:58:bf:1b:8f:29:8a:68:d6:0e:e4:2a:58:bf: 8a:3f:43:4b:45:e6:b7:2b:67:8b:11:98:1e:99:15:ee:69:53: bc:4e:3e:00:30:48:42:9c:58:74:13:59:28:f4:a3:96:bf:b4: 5b:32:bb:a8:ea:a8:b7:f1:cb:18:18:0f:6a:27:0f:9d:10:de: 6a:30:b8:4e:51:41:7c:89:fd:93:29:e2:3f:09:72:2b:a3:63: 26:72:19:f5:dc:d1:fe:01:c1:9e:e1:3f:e4:64:0e:0f:31:b4: fd:11:41:fb:ff:27:32:dd:e2:6a:bb:5b:79:03:e6:1c:c3:25: 02:70:58:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrKNWTGMYyL2zUWW2L1JsfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMWVlYmJkMThkZmFhODA1NWUxMzU1MWJhMDI0MTY1NWRh YWEzNTIwHhcNMjUxMTI4MTEyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRlMjMzNzRlYTY0Mzg3ZDU2ZTY2YmY4YTAyYWU1ZTk0MDZkZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WwLCz0FWFe8g7+cwXNM0zV6Dx2 4LW8GV83hzE1c38eTQQqsgUHdFbO0O5jpAgRM/ljVnYzNcFbXj1rzQ5Z4YzFkPTN I+rYoo/HS749JFrEWozjEYt2VgUfkcpCLQ0DGePeF7OU3dv7RPgS9zWCc4KBFCB6 n9Meyb78TaoAudeWcy8fuFuK3iJcC9MFsGMU31QKgwddkUC4dDKxLKMCk6edw9+b jcosMxDgtlDoL3hQjcBXirLaLXYdgfFoQUeejpODwwjyyMB/aZZbLXpKZxQbmI9d 7Ygwnay5yHnufyJ4WYOiWEJKNoHWUsAeyI9uUMGqWCxuuH63w8EWu9TewwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJOIzdOpkOH1W5mv4oCrl6UBt6bMB8GA1UdIwQY MBaAFDoe670Y36qAVeE1UboCQWVdqqNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2g3cnZSamZxb0JWNFRWUnVnSkJaVjJxbzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OTllYWYtMWNmMC00ZjQ4LTg3OTEt ZDFlNGE1Mzc2NTEwLzEvTWs0ak4wNm1RNGZWYm1hX2lnS3VYcFFHM3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OTllYWYtMWNmMC00ZjQ4LTg3OTEtZDFlNGE1Mzc2NTEw LzEvT2g3cnZSamZxb0JWNFRWUnVnSkJaVjJxbzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9T5MA0G CSqGSIb3DQEBCwUAA4IBAQAiT/cOfcmGcp9lzrlyz4N+HpjxoCcdlIbAtOClwbTX 16UIul/bmPrjWRj1hnrXT8J5/3lIJB3ex7gZlOPL/2kdDbgEDi2rt3mUxV3RFlq8 0+15j1qkzHa7YImEVRmqxWiqzkVfVr6UezVC4ACT/eiAHafiPHd90+FpZaiJDfP6 do/SMVi/G48pimjWDuQqWL+KP0NLRea3K2eLEZgemRXuaVO8Tj4AMEhCnFh0E1ko 9KOWv7RbMruo6qi38csYGA9qJw+dEN5qMLhOUUF8if2TKeI/CXIro2Mmchn13NH+ AcGe4T/kZA4PMbT9EUH7/ycy3eJqu1t5A+YcwyUCcFjg -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:39 2025 by rpki-client