This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MkZY5uqmWMg0Hs6kY1pkemQrdrI.roa File: MkZY5uqmWMg0Hs6kY1pkemQrdrI.roa (raw, json) Hash identifier: wcwdXfEUVLFRdnGAuLNkNAb+EPIUVdtDGNB8Mae8h0E= Subject key identifier: 32:46:58:E6:EA:A6:58:C8:34:1E:CE:A4:63:5A:64:7A:64:2B:76:B2 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AA26194C209EE2BE1EEE3D290B2E7DA17 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MkZY5uqmWMg0Hs6kY1pkemQrdrI.roa Signing time: Thu 20 Nov 2025 17:48:15 +0000 ROA not before: Thu 20 Nov 2025 17:48:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 2a05:9080:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:61:94:c2:09:ee:2b:e1:ee:e3:d2:90:b2:e7:da:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 20 17:48:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=324658e6eaa658c8341ecea4635a647a642b76b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:84:31:eb:da:b3:18:f9:ef:99:de:a5:27: b0:bd:44:06:75:b7:e0:ca:c5:8a:af:62:e4:75:2d: ce:66:7d:e7:72:4e:7c:db:9a:07:28:1e:7a:5e:74: 0c:c4:31:04:f2:44:84:77:2b:85:04:54:d1:ac:c1: 30:e3:81:5b:dc:06:72:5e:da:6d:fe:d1:52:91:dc: 31:2f:ec:48:d3:44:77:e5:77:09:78:8a:f5:cf:11: 5e:32:f1:29:be:5d:6d:a0:d0:0f:f8:70:47:03:21: 01:e3:01:e5:4d:9e:0c:f5:a0:1a:e1:28:c8:ad:cb: 94:ad:4d:d3:02:53:ff:9e:17:cf:ed:7d:fd:e7:db: 94:d9:74:55:7d:d6:ae:95:cc:69:94:f7:0f:5b:f4: 87:46:5b:5f:71:9d:28:71:5f:7c:d3:ce:3f:62:50: f9:8e:69:50:4c:1d:e1:63:1f:ab:a1:2a:d1:fe:af: 74:6e:7d:9f:de:29:db:94:12:6f:a6:19:be:b0:9b: a6:a1:8b:a6:09:35:fe:7f:97:02:8f:ad:1e:9e:52: b1:33:c4:32:ce:5e:b1:70:c0:e0:f3:da:77:0e:fc: 89:41:fc:0d:71:8f:87:eb:0a:8e:7e:56:e4:df:37: 3b:84:9a:4c:35:0d:20:43:77:6e:a0:c3:05:e6:2d: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:46:58:E6:EA:A6:58:C8:34:1E:CE:A4:63:5A:64:7A:64:2B:76:B2 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MkZY5uqmWMg0Hs6kY1pkemQrdrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::-2a05:9080:16:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption cc:49:48:6c:65:b0:ca:90:7f:25:45:b2:4f:f3:ff:30:38:ac: 14:09:ee:28:89:83:aa:dc:d6:c4:d8:14:88:1d:87:e9:59:9e: 3d:de:54:44:6d:39:bd:4a:05:60:16:6a:09:95:21:ba:bf:1d: 6b:31:69:27:30:bc:fa:1c:f7:e2:95:54:89:f6:74:9f:20:50: 47:e0:dc:ab:94:52:d7:a7:38:16:77:cf:cb:bd:7e:a1:20:32: 7c:41:67:2b:57:96:0f:ba:a0:12:43:8c:f7:4a:bb:28:a6:18: f6:6a:a0:9f:49:b7:b9:9a:e8:c9:a6:f4:84:39:d3:3f:53:86: fc:09:e8:62:94:2d:52:6e:d8:1e:2d:02:36:f6:ee:c9:ac:29: 94:13:ff:39:de:e0:75:a9:ed:3f:12:d0:5e:5e:f4:da:f8:6c: 47:18:36:72:38:d6:7c:a9:fc:77:b1:76:38:47:18:ca:d4:f6: 53:a2:26:5d:a7:3c:69:99:35:ea:8a:cb:f2:f0:4a:53:cf:48: 86:c8:33:8b:56:a6:a4:4e:31:b9:48:ef:5c:dc:cd:53:a7:3f: 76:16:80:1a:e3:49:46:52:5f:90:fe:09:81:56:cc:a5:77:6c: 20:72:65:95:86:54:aa:8e:d0:f5:88:c9:36:40:aa:ef:b4:3a: 3f:07:5b:04 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZqiYZTCCe4r4e7j0pCy59oXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMTIwMTc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjQ2NThlNmVhYTY1OGM4MzQxZWNlYTQ2MzVhNjQ3YTY0MmI3NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwuEMevasxj575nepSewvUQGdbfg ysWKr2LkdS3OZn3nck5825oHKB56XnQMxDEE8kSEdyuFBFTRrMEw44Fb3AZyXtpt /tFSkdwxL+xI00R35XcJeIr1zxFeMvEpvl1toNAP+HBHAyEB4wHlTZ4M9aAa4SjI rcuUrU3TAlP/nhfP7X3959uU2XRVfdaulcxplPcPW/SHRltfcZ0ocV98084/YlD5 jmlQTB3hYx+roSrR/q90bn2f3inblBJvphm+sJumoYumCTX+f5cCj60enlKxM8Qy zl6xcMDg89p3DvyJQfwNcY+H6wqOflbk3zc7hJpMNQ0gQ3duoMMF5i2UlwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFDJGWObqpljINB7OpGNaZHpkK3ayMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvTWtaWTV1cW1XTWcwSHM2a1kxcGtlbVFyZHJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQALZ+UMCME AgACMB0DBwAqBZCAAAEwEgMHACoFkIAAFQMHACoFkIAAFjANBgkqhkiG9w0BAQsF AAOCAQEAzElIbGWwypB/JUWyT/P/MDisFAnuKImDqtzWxNgUiB2H6VmePd5URG05 vUoFYBZqCZUhur8dazFpJzC8+hz34pVUifZ0nyBQR+Dcq5RS16c4FnfPy71+oSAy fEFnK1eWD7qgEkOM90q7KKYY9mqgn0m3uZroyab0hDnTP1OG/AnoYpQtUm7YHi0C NvbuyawplBP/Od7gdantPxLQXl702vhsRxg2cjjWfKn8d7F2OEcYytT2U6ImXac8 aZk16orL8vBKU89Ihsgzi1ampE4xuUjvXNzNU6c/dhaAGuNJRlJfkP4JgVbMpXds IHJllYZUqo7Q9YjJNkCq77Q6PwdbBA== -----END CERTIFICATE-----Generated at Sun Nov 23 10:34:29 2025 by rpki-client