This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/MBHNbTw1buefF4EmOXuM-s12q4c.roa File: MBHNbTw1buefF4EmOXuM-s12q4c.roa (raw, json) Hash identifier: D2xM5YdnfPoombb9ZX57rTsg4yu5XQ3Rf9QnEn12f1w= Subject key identifier: 30:11:CD:6D:3C:35:6E:E7:9F:17:81:26:39:7B:8C:FA:CD:76:AB:87 Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Certificate serial: 019A81C27AC6C7581D49562E7921A1A6E4A9 Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/MBHNbTw1buefF4EmOXuM-s12q4c.roa Signing time: Fri 14 Nov 2025 09:46:37 +0000 ROA not before: Fri 14 Nov 2025 09:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 5.39.0.0/17 maxlen: 17 5.135.0.0/16 maxlen: 16 5.196.0.0/16 maxlen: 16 37.59.0.0/16 maxlen: 16 37.187.0.0/16 maxlen: 16 46.105.0.0/16 maxlen: 16 46.105.198.0/24 maxlen: 24 46.105.199.0/24 maxlen: 24 46.105.200.0/24 maxlen: 24 46.105.201.0/24 maxlen: 24 46.105.202.0/24 maxlen: 24 46.105.203.0/24 maxlen: 24 46.105.204.0/24 maxlen: 24 46.105.206.0/24 maxlen: 24 46.105.207.0/24 maxlen: 24 51.38.0.0/16 maxlen: 16 51.68.0.0/16 maxlen: 16 51.75.0.0/16 maxlen: 16 51.77.0.0/16 maxlen: 16 51.83.0.0/16 maxlen: 16 51.89.0.0/16 maxlen: 16 51.91.0.0/16 maxlen: 16 51.178.0.0/16 maxlen: 16 51.195.0.0/16 maxlen: 16 51.210.0.0/16 maxlen: 16 51.254.0.0/15 maxlen: 15 54.36.0.0/16 maxlen: 16 54.37.0.0/16 maxlen: 16 54.38.0.0/16 maxlen: 16 57.128.0.0/17 maxlen: 17 57.128.128.0/18 maxlen: 18 57.128.192.0/18 maxlen: 18 57.129.0.0/17 maxlen: 17 57.129.128.0/17 maxlen: 17 57.130.0.0/16 maxlen: 16 57.131.0.0/17 maxlen: 17 79.137.0.0/17 maxlen: 17 87.98.128.0/17 maxlen: 17 91.121.0.0/16 maxlen: 16 91.134.0.0/16 maxlen: 16 92.222.0.0/16 maxlen: 16 94.23.0.0/16 maxlen: 16 135.125.0.0/17 maxlen: 17 135.125.128.0/17 maxlen: 17 137.74.0.0/16 maxlen: 16 141.94.0.0/16 maxlen: 16 141.95.0.0/17 maxlen: 17 141.95.128.0/17 maxlen: 17 141.227.128.0/20 maxlen: 24 141.227.152.0/21 maxlen: 24 141.227.160.0/19 maxlen: 24 145.239.0.0/16 maxlen: 16 146.59.0.0/16 maxlen: 16 146.59.0.0/17 maxlen: 17 147.135.128.0/17 maxlen: 17 149.202.0.0/16 maxlen: 16 151.80.0.0/16 maxlen: 16 152.228.128.0/17 maxlen: 17 162.19.0.0/17 maxlen: 17 162.19.128.0/17 maxlen: 17 164.132.0.0/16 maxlen: 16 176.31.0.0/16 maxlen: 16 178.32.0.0/15 maxlen: 15 188.165.0.0/16 maxlen: 16 193.70.0.0/17 maxlen: 17 198.244.128.0/17 maxlen: 17 213.32.0.0/17 maxlen: 17 213.186.32.0/19 maxlen: 19 213.251.128.0/18 maxlen: 18 217.182.0.0/16 maxlen: 16 2001:41d0::/32 maxlen: 32 2001:41d0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:c2:7a:c6:c7:58:1d:49:56:2e:79:21:a1:a6:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Validity Not Before: Nov 14 09:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3011cd6d3c356ee79f178126397b8cfacd76ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:40:df:9a:db:33:ea:82:cf:0d:5b:9f:36: f1:54:3b:1e:c4:58:46:bd:58:19:c7:32:fd:05:01: db:f2:b0:d5:d4:3a:73:9d:cb:68:47:64:b2:ac:70: 92:31:ed:8d:61:ef:8f:8e:19:a5:88:f3:f4:2b:5a: 81:94:a9:84:f3:b5:44:87:c3:73:40:02:54:1a:00: 8c:59:4a:ae:bb:d4:d1:ba:1a:9a:5f:cc:c2:65:50: 33:38:5b:1d:31:b2:f6:00:7c:35:29:e0:aa:44:8b: bb:a2:9a:c5:22:3e:f6:8d:89:ec:c0:59:df:fc:db: c2:9e:09:7b:37:90:b2:57:8f:bc:74:7f:e3:bb:72: 46:9d:48:f3:24:65:37:0a:c8:8f:74:af:c4:77:a9: 5c:53:be:f4:d5:a3:12:8e:19:09:7a:72:f8:d0:73: 8d:f1:de:1c:5c:90:82:2a:2a:ef:81:34:23:9e:68: 5d:16:37:8d:e6:4e:a7:c6:dc:16:ec:66:79:e7:7e: 32:13:03:66:ec:49:ca:c7:f8:b0:09:38:ac:5f:7f: 31:1e:f7:ff:32:36:07:97:33:74:6b:5d:5e:0c:61: 84:1b:6e:c6:78:23:08:57:55:29:16:d5:d0:0f:01: 5f:b1:02:fd:75:cb:2d:7c:b1:67:9e:da:95:b6:17: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:CD:6D:3C:35:6E:E7:9F:17:81:26:39:7B:8C:FA:CD:76:AB:87 X509v3 Authority Key Identifier: keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/MBHNbTw1buefF4EmOXuM-s12q4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.0.0/17 5.135.0.0/16 5.196.0.0/16 37.59.0.0/16 37.187.0.0/16 46.105.0.0/16 51.38.0.0/16 51.68.0.0/16 51.75.0.0/16 51.77.0.0/16 51.83.0.0/16 51.89.0.0/16 51.91.0.0/16 51.178.0.0/16 51.195.0.0/16 51.210.0.0/16 51.254.0.0/15 54.36.0.0-54.38.255.255 57.128.0.0-57.131.127.255 79.137.0.0/17 87.98.128.0/17 91.121.0.0/16 91.134.0.0/16 92.222.0.0/16 94.23.0.0/16 135.125.0.0/16 137.74.0.0/16 141.94.0.0/15 141.227.128.0/20 141.227.152.0-141.227.191.255 145.239.0.0/16 146.59.0.0/16 147.135.128.0/17 149.202.0.0/16 151.80.0.0/16 152.228.128.0/17 162.19.0.0/16 164.132.0.0/16 176.31.0.0/16 178.32.0.0/15 188.165.0.0/16 193.70.0.0/17 198.244.128.0/17 213.32.0.0/17 213.186.32.0/19 213.251.128.0/18 217.182.0.0/16 IPv6: 2001:41d0::/32 Signature Algorithm: sha256WithRSAEncryption 87:4e:ee:ca:d2:96:24:40:7c:93:5c:c7:72:85:9a:f5:ad:dc: b9:e0:79:86:23:6c:7b:de:b3:37:7a:5a:ee:e1:d9:cc:8d:a6: 40:a0:41:9a:86:56:2a:84:31:c8:4c:d0:be:fa:bc:03:af:92: 1f:9e:bd:8f:9c:fc:56:80:db:0a:40:f4:a5:8c:23:27:26:95: 08:3f:d9:a3:ae:04:d0:c3:c4:e9:dd:39:09:f3:cf:b5:45:ea: 4d:7c:f0:06:05:58:fd:b5:28:b3:3d:b0:18:b4:c7:c4:39:4a: 3a:e0:5a:7e:ac:fd:cc:10:76:e7:62:40:a4:27:b1:13:ab:1f: 9e:e6:ac:35:32:34:59:54:38:a4:43:45:84:20:a3:2a:0b:b5: 64:c0:6e:08:15:7f:26:fc:5e:27:9d:03:49:a7:78:b5:75:5a: 7e:f1:81:0f:7b:f8:0f:f5:a8:2f:91:cf:3a:9d:71:07:e4:23: e0:62:c8:4a:fb:f3:3a:c1:87:91:8f:34:41:6e:47:88:2f:65: bc:2c:b2:03:2c:ad:ee:ed:2e:88:40:41:e7:51:6d:9e:4b:a0: cc:e1:b7:59:2a:d6:d0:9f:9d:96:ff:88:72:98:d7:b9:7b:1b: 3c:10:99:8d:bf:f4:e7:25:d6:5a:a1:d9:1a:b2:93:0e:79:e2: 43:13:6c:15 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISAZqBwnrGx1gdSVYueSGhpuSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm OWQxNTUwHhcNMjUxMTE0MDk0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDExY2Q2ZDNjMzU2ZWU3OWYxNzgxMjYzOTdiOGNmYWNkNzZhYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB9A35rbM+qCzw1bnzbxVDsexFhG vVgZxzL9BQHb8rDV1DpznctoR2SyrHCSMe2NYe+PjhmliPP0K1qBlKmE87VEh8Nz QAJUGgCMWUquu9TRuhqaX8zCZVAzOFsdMbL2AHw1KeCqRIu7oprFIj72jYnswFnf /NvCngl7N5CyV4+8dH/ju3JGnUjzJGU3CsiPdK/Ed6lcU7701aMSjhkJenL40HON 8d4cXJCCKirvgTQjnmhdFjeN5k6nxtwW7GZ5534yEwNm7EnKx/iwCTisX38xHvf/ MjYHlzN0a11eDGGEG27GeCMIV1UpFtXQDwFfsQL9dcstfLFnntqVthcXVQIDAQAB o4IDKjCCAyYwHQYDVR0OBBYEFDARzW08NW7nnxeBJjl7jPrNdquHMB8GA1UdIwQY MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt NDdkOThlNTg1NDVhLzEvTUJITmJUdzFidWVmRjRFbU9YdU0tczEycTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTCCARYEAgABMIIB DgMEBwUnAAMDAAWHAwMABcQDAwAlOwMDACW7AwMALmkDAwAzJgMDADNEAwMAM0sD AwAzTQMDADNTAwMAM1kDAwAzWwMDADOyAwMAM8MDAwAz0gMDATP+MAoDAwI2JAMD ADYmMAsDAwc5gAMEBzmDAAMEB0+JAAMEB1digAMDAFt5AwMAW4YDAwBc3gMDAF4X AwMAh30DAwCJSgMDAY1eAwQEjeOAMAwDBAON45gDBAaN44ADAwCR7wMDAJI7AwQH k4eAAwMAlcoDAwCXUAMEB5jkgAMDAKITAwMApIQDAwCwHwMDAbIgAwMAvKUDBAfB RgADBAfG9IADBAfVIAADBAXVuiADBAbV+4ADAwDZtjANBAIAAjAHAwUAIAFB0DAN BgkqhkiG9w0BAQsFAAOCAQEAh07uytKWJEB8k1zHcoWa9a3cueB5hiNse96zN3pa 7uHZzI2mQKBBmoZWKoQxyEzQvvq8A6+SH569j5z8VoDbCkD0pYwjJyaVCD/Zo64E 0MPE6d05CfPPtUXqTXzwBgVY/bUosz2wGLTHxDlKOuBafqz9zBB252JApCexE6sf nuasNTI0WVQ4pENFhCCjKgu1ZMBuCBV/JvxeJ50DSad4tXVafvGBD3v4D/WoL5HP Op1xB+Qj4GLISvvzOsGHkY80QW5HiC9lvCyyAyyt7u0uiEBB51FtnkugzOG3WSrW 0J+dlv+IcpjXuXsbPBCZjb/05yXWWqHZGrKTDnniQxNsFQ== -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:26 2025 by rpki-client