This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/MN0FobgarBhpw32QkaiUeOLIfT8.roa File: MN0FobgarBhpw32QkaiUeOLIfT8.roa (raw, json) Hash identifier: sYBcnYZm0d6n3fTXqtD2MHlZuTyo5Oki3xfMexfQHb8= Subject key identifier: 30:DD:05:A1:B8:1A:AC:18:69:C3:7D:90:91:A8:94:78:E2:C8:7D:3F Certificate issuer: /CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Certificate serial: 019B7C806A40EF2D72776A7DF0A1CD613D63 Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/MN0FobgarBhpw32QkaiUeOLIfT8.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48155 IP address blocks: 91.210.88.0/22 maxlen: 22 2001:67c:220c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6a:40:ef:2d:72:77:6a:7d:f0:a1:cd:61:3d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30dd05a1b81aac1869c37d9091a89478e2c87d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:5e:8f:59:e9:9e:83:92:a5:06:ab:cf:60: 66:3f:e4:c8:08:7f:0a:b0:e0:64:e4:0f:9e:2a:c5: 8c:88:a5:0d:ec:27:2c:91:c8:ee:e4:34:a9:d1:25: bd:d6:44:f9:05:b7:1e:88:cc:7c:79:ba:a1:c6:a1: f8:cb:53:6b:98:d9:5e:02:75:25:59:d3:f2:30:07: 8e:ad:21:fc:d1:46:bf:15:2e:66:87:a2:35:d5:8c: 65:53:aa:0f:66:62:23:76:59:a5:a6:14:29:09:c8: d4:8b:9c:b7:37:25:3b:96:ba:10:b0:30:74:79:e1: 4c:55:51:54:43:48:d6:7f:39:c7:d9:76:d6:c0:8d: a2:cc:57:2e:a4:f3:6f:77:e2:23:9f:04:a5:b8:8d: 2d:0e:b7:66:fd:e0:90:db:49:2c:b9:d5:c7:4e:7f: 4e:bb:0d:80:ab:b2:c5:32:3c:36:a1:d8:0b:13:ab: 7a:88:ab:a3:f7:a0:3a:ea:3b:70:7f:b9:6d:e9:68: 60:81:6e:fe:f6:f9:b1:16:b5:75:a9:f9:dd:45:12: de:b8:25:3f:96:cc:3a:22:ab:14:c0:8d:67:4a:72: 52:4d:e0:0b:b6:c1:e4:2b:82:50:07:2d:dd:ee:8d: ba:e3:3e:10:ee:fd:cd:b8:e6:b3:11:7e:f4:4d:0b: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:05:A1:B8:1A:AC:18:69:C3:7D:90:91:A8:94:78:E2:C8:7D:3F X509v3 Authority Key Identifier: keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/MN0FobgarBhpw32QkaiUeOLIfT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.88.0/22 IPv6: 2001:67c:220c::/48 Signature Algorithm: sha256WithRSAEncryption 48:84:78:37:aa:3f:ec:c7:f2:55:48:c4:aa:81:02:f6:87:6f: 97:d1:ca:63:de:21:f9:cc:dd:00:81:a9:f2:9f:e7:61:25:df: f6:45:26:e3:7c:73:4a:8f:dc:e9:af:fb:66:d6:de:f7:b1:25: 45:02:e9:14:e6:c6:ce:a5:31:3e:ad:8f:e4:e5:8f:50:4d:dd: da:6e:ce:d7:fb:5f:67:69:67:0b:76:e1:f2:aa:de:33:fd:2e: a9:e8:a2:3e:61:a8:38:41:27:40:16:46:34:5c:d5:52:c7:fd: 59:dc:d0:08:82:e9:be:9d:a7:6d:6e:c2:df:de:43:03:01:c1: 05:7c:90:0c:97:66:3b:df:c4:9e:35:cd:d1:7c:44:bd:86:1f: ca:a8:b9:a8:7c:f7:f6:c9:a9:f4:fb:47:9b:3c:fd:88:a3:5a: 96:94:43:2d:6e:3b:e4:5d:f1:4d:68:53:52:e8:3d:0a:8f:e3: ea:29:47:bb:c0:53:ff:91:1c:1f:6d:b9:f8:81:86:8d:e1:d0: e9:99:ba:e1:db:19:bc:b0:54:70:08:b0:8f:4c:42:53:d6:81: aa:8f:d3:8e:e2:93:a7:c3:d0:c4:f3:63:2f:04:b2:27:a2:17: 5a:e8:21:d5:76:79:91:e1:8a:5a:77:48:65:2e:ab:8a:db:59: b1:fd:bc:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gGpA7y1yd2p98KHNYT1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJiMGMzNzcwNGJmZDU1ODg0OWM2NTQ5YWY5NzM0ZTdk MTRiZTUwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGRkMDVhMWI4MWFhYzE4NjljMzdkOTA5MWE4OTQ3OGUyYzg3ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFej1npnoOSpQarz2BmP+TICH8K sOBk5A+eKsWMiKUN7Ccskcju5DSp0SW91kT5BbceiMx8ebqhxqH4y1NrmNleAnUl WdPyMAeOrSH80Ua/FS5mh6I11YxlU6oPZmIjdlmlphQpCcjUi5y3NyU7lroQsDB0 eeFMVVFUQ0jWfznH2XbWwI2izFcupPNvd+IjnwSluI0tDrdm/eCQ20ksudXHTn9O uw2Aq7LFMjw2odgLE6t6iKuj96A66jtwf7lt6WhggW7+9vmxFrV1qfndRRLeuCU/ lsw6IqsUwI1nSnJSTeALtsHkK4JQBy3d7o264z4Q7v3NuOazEX70TQuadQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDDdBaG4GqwYacN9kJGolHjiyH0/MB8GA1UdIwQY MBaAFEW7sMN3BL/VWIScZUmvlzTn0UvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUt OTNhMzY2NWM0YjY4LzEvTU4wRm9iZ2FyQmhwdzMyUWthaVVlT0xJZlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUtOTNhMzY2NWM0YjY4 LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW9JYMA8E AgACMAkDBwAgAQZ8IgwwDQYJKoZIhvcNAQELBQADggEBAEiEeDeqP+zH8lVIxKqB AvaHb5fRymPeIfnM3QCBqfKf52El3/ZFJuN8c0qP3Omv+2bW3vexJUUC6RTmxs6l MT6tj+Tlj1BN3dpuztf7X2dpZwt24fKq3jP9Lqnooj5hqDhBJ0AWRjRc1VLH/Vnc 0AiC6b6dp21uwt/eQwMBwQV8kAyXZjvfxJ41zdF8RL2GH8qouah89/bJqfT7R5s8 /YijWpaUQy1uO+Rd8U1oU1LoPQqP4+opR7vAU/+RHB9tufiBho3h0OmZuuHbGbyw VHAIsI9MQlPWgaqP047ik6fD0MTzYy8EsieiF1roIdV2eZHhilp3SGUuq4rbWbH9 vN4= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:17 2026 by rpki-client