This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MPnt1Ig40nuVBqADsEn8dObr5rE.roa File: MPnt1Ig40nuVBqADsEn8dObr5rE.roa (raw, json) Hash identifier: LN3oJQmX/zwIzND61FwWanHfUPQZt6FmbQdO3LMJ4oI= Subject key identifier: 30:F9:ED:D4:88:38:D2:7B:95:06:A0:03:B0:49:FC:74:E6:EB:E6:B1 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB7F67D110E274D6D1B2054E2B3B75 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MPnt1Ig40nuVBqADsEn8dObr5rE.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30885 IP address blocks: 86.105.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7f:67:d1:10:e2:74:d6:d1:b2:05:4e:2b:3b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30f9edd48838d27b9506a003b049fc74e6ebe6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:4c:29:ee:4d:ab:08:61:d6:2a:69:b9:06: 44:3d:00:77:fd:36:d3:69:2e:84:f0:fb:42:15:17: 18:48:25:5d:7e:4c:15:4a:0a:fb:77:c5:ba:df:db: 50:86:df:52:fa:63:75:7d:fb:f3:c0:61:63:71:1c: 1b:fc:41:88:fc:dc:44:9a:ea:54:19:d0:f3:d5:e9: b2:b2:67:80:b1:25:43:9f:80:e4:ed:a0:be:79:91: 08:fa:d2:6d:c3:34:2b:16:e2:b2:ec:7c:80:4b:5c: b1:52:0d:ed:ff:a0:91:6f:c1:77:53:7b:5a:b4:e6: e6:37:43:be:a9:bd:39:f1:51:84:0a:ae:30:68:95: e0:1e:64:58:93:32:5d:b8:0c:33:a8:82:e8:20:a9: cc:71:41:b8:e9:01:4c:b5:da:8d:0f:b0:fb:5f:18: 93:ff:d9:e9:02:9b:a4:50:3d:b2:41:4a:19:a9:f8: 52:29:56:27:73:50:22:24:7a:a2:b0:db:d3:03:94: 5e:48:85:94:ad:51:e8:5e:7d:3f:a7:92:62:d2:a5: e1:cf:a2:26:2a:f4:7c:5d:e9:62:fa:eb:3a:8a:b8: 1f:40:8f:92:70:f4:bc:0e:46:46:b3:9e:af:04:7a: ff:fe:e7:fb:d3:b6:1c:c4:17:c8:1a:68:97:c6:c7: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F9:ED:D4:88:38:D2:7B:95:06:A0:03:B0:49:FC:74:E6:EB:E6:B1 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MPnt1Ig40nuVBqADsEn8dObr5rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.193.0/24 Signature Algorithm: sha256WithRSAEncryption 34:bc:fb:4f:83:ba:d8:6c:24:df:09:cf:99:e6:1c:9c:0b:bf: fc:e4:b5:3f:b6:10:73:f3:4f:97:63:3e:9a:86:64:29:89:ba: 5e:9b:6f:c5:7f:30:df:65:9b:e1:7b:3f:19:51:c1:20:67:58: a4:b8:70:66:5e:e5:2d:ab:ee:e4:03:64:f3:d8:fe:1b:c6:32: e6:a9:14:18:e1:ad:27:5f:df:b2:58:13:43:56:76:bd:70:c7: db:89:72:e2:9c:ef:cc:17:92:c8:00:1a:9b:ba:c5:e2:bd:8f: 56:f0:03:78:a4:79:03:35:12:de:5c:ce:7a:e0:2f:30:0b:c1: f4:30:e2:e9:5a:98:0d:d9:36:b5:c3:d7:25:1e:8c:c0:48:e6: cd:83:c2:57:65:34:34:b6:bb:e5:32:d6:f6:74:c3:32:2e:28: 9a:ca:ea:ce:35:fd:98:b1:c5:6c:ba:2e:3d:eb:7f:65:25:7f: e1:65:f8:f5:16:5d:93:2f:16:4f:7b:c5:93:07:b0:be:22:64: ef:01:dc:ba:d4:53:7f:3e:19:d9:de:3b:67:9d:c3:c7:19:57: 16:21:62:a7:0a:d1:96:a1:10:e8:c1:a8:49:26:5e:7a:8c:49: aa:71:ed:b2:50:1a:da:ec:16:a1:07:52:5a:05:12:78:96:d1: df:3f:61:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2639n0RDidNbRsgVOKzt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGY5ZWRkNDg4MzhkMjdiOTUwNmEwMDNiMDQ5ZmM3NGU2ZWJlNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04pMKe5Nqwhh1ippuQZEPQB3/TbT aS6E8PtCFRcYSCVdfkwVSgr7d8W639tQht9S+mN1ffvzwGFjcRwb/EGI/NxEmupU GdDz1emysmeAsSVDn4Dk7aC+eZEI+tJtwzQrFuKy7HyAS1yxUg3t/6CRb8F3U3ta tObmN0O+qb058VGECq4waJXgHmRYkzJduAwzqILoIKnMcUG46QFMtdqND7D7XxiT /9npApukUD2yQUoZqfhSKVYnc1AiJHqisNvTA5ReSIWUrVHoXn0/p5Ji0qXhz6Im KvR8Xeli+us6irgfQI+ScPS8DkZGs56vBHr//uf707YcxBfIGmiXxscwfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDD57dSIONJ7lQagA7BJ/HTm6+axMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvTVBudDFJZzQwbnVWQnFBRHNFbjhkT2JyNXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmnBMA0G CSqGSIb3DQEBCwUAA4IBAQA0vPtPg7rYbCTfCc+Z5hycC7/85LU/thBz80+XYz6a hmQpibpem2/FfzDfZZvhez8ZUcEgZ1ikuHBmXuUtq+7kA2Tz2P4bxjLmqRQY4a0n X9+yWBNDVna9cMfbiXLinO/MF5LIABqbusXivY9W8AN4pHkDNRLeXM564C8wC8H0 MOLpWpgN2Ta1w9clHozASObNg8JXZTQ0trvlMtb2dMMyLiiayurONf2YscVsui49 639lJX/hZfj1Fl2TLxZPe8WTB7C+ImTvAdy61FN/PhnZ3jtnncPHGVcWIWKnCtGW oRDowahJJl56jEmqce2yUBra7BahB1JaBRJ4ltHfP2FX -----END CERTIFICATE-----Generated at Wed Jan 21 11:06:53 2026 by rpki-client