This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/MnwpNz-Dh6lm-Xbg3kKk3fsjeMs.roa File: MnwpNz-Dh6lm-Xbg3kKk3fsjeMs.roa (raw, json) Hash identifier: jMyeTm8cmG3Xq6zBn4eUGRTC+iA8/4V3Gp1rtaPNcZE= Subject key identifier: 32:7C:29:37:3F:83:87:A9:66:F9:76:E0:DE:42:A4:DD:FB:23:78:CB Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Certificate serial: 019B319384B121B2733703F89DE792545DDE Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/MnwpNz-Dh6lm-Xbg3kKk3fsjeMs.roa Signing time: Thu 18 Dec 2025 13:08:29 +0000 ROA not before: Thu 18 Dec 2025 13:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15967 IP address blocks: 45.141.32.0/22 maxlen: 22 45.141.32.0/24 maxlen: 24 45.141.33.0/24 maxlen: 24 45.141.34.0/24 maxlen: 24 45.141.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:93:84:b1:21:b2:73:37:03:f8:9d:e7:92:54:5d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Validity Not Before: Dec 18 13:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=327c29373f8387a966f976e0de42a4ddfb2378cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:fe:35:6d:a8:8f:0d:00:25:3f:18:e0:06: 37:87:02:dc:ce:0d:d2:0a:51:be:f7:ef:15:f9:4f: ba:dd:9b:86:53:aa:b7:8e:91:08:20:c0:9f:06:0b: 51:9d:e6:0b:98:0a:1e:3d:10:2f:4a:ce:d2:2c:c6: 8a:db:40:47:9d:73:af:05:9b:57:c3:85:79:bb:c1: 4e:74:0d:c7:4c:6c:26:5e:b0:b3:98:a4:59:80:b4: 4d:ab:82:57:66:0b:3f:f6:a7:30:60:b0:f5:d5:7a: 05:20:09:c4:49:be:d3:ef:1e:03:42:70:23:4e:43: 46:e4:5d:2a:27:a0:0a:f5:bd:50:1b:37:62:e6:4d: 27:30:cc:01:cf:aa:d6:48:32:ac:42:6d:15:2b:63: 3b:25:e4:0b:da:ab:2b:8a:91:27:5b:0e:2c:a2:72: b2:87:74:ee:4a:5d:2b:99:8e:90:b1:72:7d:4c:25: f5:51:ad:db:d6:04:06:92:4c:43:04:5e:ee:f5:f7: 22:a9:97:d8:6d:b7:27:b2:0c:d9:96:8e:24:d1:49: 4a:f6:e1:9f:0e:43:92:f6:f5:71:54:ce:c5:91:0b: a8:a4:70:88:39:ef:7e:a3:1c:d0:f1:20:b3:59:25: d1:97:65:52:12:f4:7c:db:b0:08:3c:f9:e5:bb:94: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:29:37:3F:83:87:A9:66:F9:76:E0:DE:42:A4:DD:FB:23:78:CB X509v3 Authority Key Identifier: keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/MnwpNz-Dh6lm-Xbg3kKk3fsjeMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.32.0/22 Signature Algorithm: sha256WithRSAEncryption 68:b6:26:d5:6e:aa:a7:f3:3e:8d:ba:28:0d:44:81:ad:ca:19: 70:50:79:d3:0b:a8:0a:d3:e8:d1:5e:e5:68:05:ba:fa:10:6f: 89:c6:3b:c9:43:f5:8d:f1:78:b7:ec:02:97:5c:94:77:e5:e4: f5:f0:c9:0b:d8:ba:f2:c6:7e:9c:30:67:9b:69:ad:69:e6:61: 59:70:10:58:77:d7:2c:8f:f5:6b:f4:ae:03:6e:21:33:02:4e: 4c:3a:53:af:82:41:08:67:da:8c:ea:17:c4:bf:1c:f8:78:0e: d3:06:28:46:d0:f1:91:d0:b0:47:ff:cf:a6:88:58:68:2d:5e: ab:71:ee:1e:fa:9d:c4:c6:93:cc:80:1f:4c:57:ba:81:46:79: 92:ce:9b:5c:19:81:46:4a:ed:8c:33:6a:e1:29:ed:08:83:21: e4:60:d3:cd:19:15:21:7d:0e:c2:0f:ee:3d:35:a1:3e:1d:30: 03:9b:d5:11:68:1a:cc:29:dc:e5:d1:d9:23:7e:62:8d:e8:cf: 44:91:2f:5d:21:64:5a:5b:d6:38:9b:1c:90:89:e9:5b:c4:bb: 98:e2:ab:d4:1e:37:ee:12:9d:65:9a:a9:d9:e8:5d:42:0f:9a: f4:3c:0d:c5:67:57:08:d7:97:82:1e:32:ce:d8:b6:1d:c8:95: 55:30:4b:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxk4SxIbJzNwP4neeSVF3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjdiMDAxOWUxOWYxMTJmNGQyYmNmZDZlYTEyZDkwODFm YzU4N2UwHhcNMjUxMjE4MTMwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjdjMjkzNzNmODM4N2E5NjZmOTc2ZTBkZTQyYTRkZGZiMjM3OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3r+NW2ojw0AJT8Y4AY3hwLczg3S ClG+9+8V+U+63ZuGU6q3jpEIIMCfBgtRneYLmAoePRAvSs7SLMaK20BHnXOvBZtX w4V5u8FOdA3HTGwmXrCzmKRZgLRNq4JXZgs/9qcwYLD11XoFIAnESb7T7x4DQnAj TkNG5F0qJ6AK9b1QGzdi5k0nMMwBz6rWSDKsQm0VK2M7JeQL2qsripEnWw4sonKy h3TuSl0rmY6QsXJ9TCX1Ua3b1gQGkkxDBF7u9fciqZfYbbcnsgzZlo4k0UlK9uGf DkOS9vVxVM7FkQuopHCIOe9+oxzQ8SCzWSXRl2VSEvR827AIPPnlu5SD6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJ8KTc/g4epZvl24N5CpN37I3jLMB8GA1UdIwQY MBaAFN23sAGeGfES9NK8/W6hLZCB/Fh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEt YTg2ZGY5ODNhNzRjLzEvTW53cE56LURoNmxtLVhiZzNrS2szZnNqZU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEtYTg2ZGY5ODNhNzRj LzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY0gMA0G CSqGSIb3DQEBCwUAA4IBAQBotibVbqqn8z6NuigNRIGtyhlwUHnTC6gK0+jRXuVo Bbr6EG+JxjvJQ/WN8Xi37AKXXJR35eT18MkL2Lryxn6cMGebaa1p5mFZcBBYd9cs j/Vr9K4DbiEzAk5MOlOvgkEIZ9qM6hfEvxz4eA7TBihG0PGR0LBH/8+miFhoLV6r ce4e+p3ExpPMgB9MV7qBRnmSzptcGYFGSu2MM2rhKe0IgyHkYNPNGRUhfQ7CD+49 NaE+HTADm9URaBrMKdzl0dkjfmKN6M9EkS9dIWRaW9Y4mxyQielbxLuY4qvUHjfu Ep1lmqnZ6F1CD5r0PA3FZ1cI15eCHjLO2LYdyJVVMEsH -----END CERTIFICATE-----Generated at Fri Dec 19 06:32:54 2025 by rpki-client