This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/mND-0a4yL-tXy2VnOslNtViZ0Fc.roa File: mND-0a4yL-tXy2VnOslNtViZ0Fc.roa (raw, json) Hash identifier: frqpwZCsuVguOXwWS0XNoRbXaDgKyEQgFFhJPereFqE= Subject key identifier: 98:D0:FE:D1:AE:32:2F:EB:57:CB:65:67:3A:C9:4D:B5:58:99:D0:57 Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575 Certificate serial: 019B7B3619880B3ABAD4057D8093B3D3EACD Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/mND-0a4yL-tXy2VnOslNtViZ0Fc.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47919 IP address blocks: 91.208.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:19:88:0b:3a:ba:d4:05:7d:80:93:b3:d3:ea:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d0fed1ae322feb57cb65673ac94db55899d057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:0f:5d:99:89:53:b9:66:b1:c9:56:e5:93: 13:ff:75:fb:05:aa:03:a3:91:5d:60:37:c3:38:94: 43:b4:e5:95:fa:f5:dd:60:6e:7f:d3:30:1d:2f:f5: fe:e2:3f:8a:52:a0:6a:ca:d3:86:92:48:0f:7c:26: 85:be:e5:4a:ad:4f:94:9c:1c:2a:bb:1a:f2:fd:9a: fa:ad:ad:43:2a:b5:76:d7:a8:42:23:f9:ae:d4:fe: 5a:79:0b:c0:ee:2f:38:b1:19:6f:b3:ab:4a:49:b1: e2:3b:e2:d2:f3:bd:c5:51:fe:3b:04:30:b7:9e:b6: aa:e5:7a:84:8e:e4:bb:3c:ae:43:b9:6d:77:ab:0a: 47:53:cf:36:70:83:89:23:92:d9:ea:7e:16:93:85: 08:21:2f:47:21:f2:27:89:1e:8d:ca:7a:98:00:71: 7b:98:6f:a1:c0:f4:cc:1f:6c:e3:43:cf:f9:ce:31: 18:38:e7:80:15:7b:72:7b:8a:91:5e:79:24:27:35: 95:38:f4:61:07:65:3b:cb:f4:22:cd:7e:0e:d6:2c: e3:53:48:dd:47:43:b5:9a:19:b6:a5:f3:01:44:8e: 2b:9e:66:1b:c6:e6:01:3a:c1:7a:f1:e7:bf:8a:2a: 16:56:b7:1b:b7:1c:91:b5:4f:21:74:e8:21:0d:e0: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D0:FE:D1:AE:32:2F:EB:57:CB:65:67:3A:C9:4D:B5:58:99:D0:57 X509v3 Authority Key Identifier: keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/mND-0a4yL-tXy2VnOslNtViZ0Fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.198.0/24 Signature Algorithm: sha256WithRSAEncryption 75:8f:8f:80:64:2e:87:ef:fb:ae:2f:0f:f5:c4:e3:7e:72:3e: f1:61:2d:9f:eb:e4:d1:44:a8:8f:2a:c3:de:97:aa:50:9d:75: d9:b3:af:c8:14:38:78:90:c3:0a:65:48:11:71:f0:85:f5:d3: 12:f9:43:1b:d6:f3:bc:2a:8f:25:8c:78:1b:9c:95:67:ac:4e: af:0e:46:73:b0:c3:bd:cc:d7:8d:27:86:35:e2:5f:40:c0:25: 9c:09:d1:7f:37:4c:79:01:57:d3:d3:04:46:27:15:5b:c4:41: 97:db:1d:47:6e:e4:1d:bb:7a:06:ad:a6:e5:13:97:5f:72:0f: a6:da:f7:af:03:45:a1:d2:28:c8:cf:f5:5c:71:aa:43:ff:70: ab:06:e3:8e:85:17:04:25:88:95:e0:d8:5a:a8:bd:7a:51:05: 6e:41:84:1b:33:b1:05:55:b6:fa:e8:77:b7:eb:89:a7:0b:e8: 12:e8:af:2d:e3:d0:42:67:dc:2f:e3:f3:7b:b6:ff:ae:70:e6: 9c:3c:e6:ed:a2:d9:ba:be:4a:83:ce:3b:c2:97:47:f6:17:70: 5f:2f:24:b6:c4:6a:a9:a1:f3:8e:b3:86:fa:06:45:bd:01:46: ed:fe:fe:2a:18:91:aa:75:c3:2e:b2:7e:07:75:07:07:d9:4e: 7c:58:d7:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhmICzq61AV9gJOz0+rNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNTJjN2Q1ZWQ4YzVhMmJjMmFkMDMwNjVkNDFjM2U0YjNh YzE1NzUwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQwZmVkMWFlMzIyZmViNTdjYjY1NjczYWM5NGRiNTU4OTlkMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX8PXZmJU7lmsclW5ZMT/3X7BaoD o5FdYDfDOJRDtOWV+vXdYG5/0zAdL/X+4j+KUqBqytOGkkgPfCaFvuVKrU+UnBwq uxry/Zr6ra1DKrV216hCI/mu1P5aeQvA7i84sRlvs6tKSbHiO+LS873FUf47BDC3 nraq5XqEjuS7PK5DuW13qwpHU882cIOJI5LZ6n4Wk4UIIS9HIfIniR6NynqYAHF7 mG+hwPTMH2zjQ8/5zjEYOOeAFXtye4qRXnkkJzWVOPRhB2U7y/QizX4O1izjU0jd R0O1mhm2pfMBRI4rnmYbxuYBOsF68ee/iioWVrcbtxyRtU8hdOghDeCxrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjQ/tGuMi/rV8tlZzrJTbVYmdBXMB8GA1UdIwQY MBaAFHJSx9XtjForwq0DBl1Bw+SzrBV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2xMSDFlMk1XaXZDclFNR1hVSEQ1TE9zRlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYjlkODktZWQ4Mi00NDAxLTgxZDkt NjdkMWIyYTYxYmIwLzEvbU5ELTBhNHlMLXRYeTJWbk9zbE50VmlaMEZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYjlkODktZWQ4Mi00NDAxLTgxZDktNjdkMWIyYTYxYmIw LzEvY2xMSDFlMk1XaXZDclFNR1hVSEQ1TE9zRlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DGMA0G CSqGSIb3DQEBCwUAA4IBAQB1j4+AZC6H7/uuLw/1xON+cj7xYS2f6+TRRKiPKsPe l6pQnXXZs6/IFDh4kMMKZUgRcfCF9dMS+UMb1vO8Ko8ljHgbnJVnrE6vDkZzsMO9 zNeNJ4Y14l9AwCWcCdF/N0x5AVfT0wRGJxVbxEGX2x1HbuQdu3oGrablE5dfcg+m 2vevA0Wh0ijIz/VccapD/3CrBuOOhRcEJYiV4NhaqL16UQVuQYQbM7EFVbb66He3 64mnC+gS6K8t49BCZ9wv4/N7tv+ucOacPObtotm6vkqDzjvCl0f2F3BfLyS2xGqp ofOOs4b6BkW9AUbt/v4qGJGqdcMusn4HdQcH2U58WNdg -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:42 2026 by rpki-client