This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MnDSS9RzqfRLUOztMc088Qj2tec.roa File: MnDSS9RzqfRLUOztMc088Qj2tec.roa (raw, json) Hash identifier: 12P6aNOzHV1BlCTklqy88k9SBPsXXY3O99fGRYatyGI= Subject key identifier: 32:70:D2:4B:D4:73:A9:F4:4B:50:EC:ED:31:CD:3C:F1:08:F6:B5:E7 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B3B82D9330547F14267A02083FC04D66B Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MnDSS9RzqfRLUOztMc088Qj2tec.roa Signing time: Sat 20 Dec 2025 11:26:29 +0000 ROA not before: Sat 20 Dec 2025 11:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:82:d9:33:05:47:f1:42:67:a0:20:83:fc:04:d6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 20 11:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3270d24bd473a9f44b50eced31cd3cf108f6b5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:c5:48:b2:aa:29:f8:71:0c:f2:a5:03:a7: 08:ac:3d:2a:f1:2f:d4:8a:de:6a:5e:c6:08:64:c5: 96:8b:d6:c5:46:d9:30:ba:73:95:e8:65:3c:1c:10: 36:dd:df:3b:c8:1d:21:b0:68:04:7c:07:87:6a:35: d1:c3:c2:08:94:61:6f:ab:b9:ef:a7:f3:a8:d2:72: d3:4e:85:72:a3:b2:74:d2:98:88:c6:30:26:4e:3e: 87:a7:2b:89:ea:16:4d:83:f9:bd:8b:6d:ee:73:a0: 64:ad:73:e9:9a:2b:e1:25:0c:97:59:b8:6e:ff:c1: f0:15:81:d4:0f:8f:d1:6c:51:04:16:d3:fa:98:d6: fe:73:14:d8:57:0d:f0:9c:4d:bb:70:38:ba:f4:e8: b4:1b:8c:fe:f8:39:12:ea:cc:1d:86:19:f6:1d:b8: 5a:f2:df:d6:4c:c5:41:46:15:49:62:2b:84:db:6a: 3a:97:af:80:a2:0b:07:95:03:71:5f:9c:14:58:e5: 9f:03:01:38:3f:45:c2:4d:07:13:98:8b:4a:d6:26: e6:8d:42:42:b7:f1:fa:c0:1f:e7:62:cc:63:2e:bf: a1:43:12:8a:c0:9d:70:d9:9c:94:2f:7c:cc:ba:e4: 77:a1:5e:81:c2:2f:7a:32:3d:9d:d6:4b:f9:bd:b1: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:D2:4B:D4:73:A9:F4:4B:50:EC:ED:31:CD:3C:F1:08:F6:B5:E7 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MnDSS9RzqfRLUOztMc088Qj2tec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::/48 Signature Algorithm: sha256WithRSAEncryption 84:ac:2a:c4:15:3d:f6:a4:d1:f4:59:92:8b:81:05:73:dd:db: 3e:8a:ab:51:f3:69:9d:8c:ba:8d:ef:1e:22:4d:87:55:5c:d0: 61:5a:a4:ef:80:99:81:7e:65:75:c3:8e:21:50:46:eb:aa:d6: 02:42:2c:b9:5b:f8:66:e1:da:63:81:74:09:e5:a8:80:d1:59: 9a:81:88:d8:87:c3:9d:d8:9c:33:c5:f9:12:05:d8:68:6a:bb: 90:e8:4e:b3:c3:d2:b8:51:ad:54:23:10:66:4c:3e:27:1c:3c: f0:af:55:c7:ae:48:c0:b7:1c:19:13:78:ff:28:a4:75:b4:df: 2a:ac:e0:57:a2:08:58:61:ef:e0:de:b5:47:bc:25:ad:fb:78: 70:1e:d9:aa:3e:d9:bd:ba:1c:c5:66:a8:8e:fa:71:17:bd:7a: 12:f4:15:d6:45:f0:51:14:21:5f:89:88:f0:c6:fc:99:d1:cf: fb:77:78:b3:81:af:88:d8:0b:db:de:95:2e:db:07:ef:b6:80: 8e:b7:b7:96:bc:90:e4:b6:b5:0c:78:f5:21:b4:de:8e:7a:21: 1d:61:ed:8b:aa:90:10:52:4e:35:5f:ca:c4:66:8a:83:d9:bb: e5:f4:2e:b6:ab:0e:19:18:91:1f:09:bd:8c:75:80:37:44:fe: 3d:e9:68:74 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZs7gtkzBUfxQmegIIP8BNZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjIwMTEyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjcwZDI0YmQ0NzNhOWY0NGI1MGVjZWQzMWNkM2NmMTA4ZjZiNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuETFSLKqKfhxDPKlA6cIrD0q8S/U it5qXsYIZMWWi9bFRtkwunOV6GU8HBA23d87yB0hsGgEfAeHajXRw8IIlGFvq7nv p/Oo0nLTToVyo7J00piIxjAmTj6HpyuJ6hZNg/m9i23uc6BkrXPpmivhJQyXWbhu /8HwFYHUD4/RbFEEFtP6mNb+cxTYVw3wnE27cDi69Oi0G4z++DkS6swdhhn2Hbha 8t/WTMVBRhVJYiuE22o6l6+AogsHlQNxX5wUWOWfAwE4P0XCTQcTmItK1ibmjUJC t/H6wB/nYsxjLr+hQxKKwJ1w2ZyUL3zMuuR3oV6Bwi96Mj2d1kv5vbFNIwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDJw0kvUc6n0S1Ds7THNPPEI9rXnMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvTW5EU1M5UnpxZlJMVU96dE1jMDg4UWoydGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQALZ+UMBgE AgACMBIDBwAqBZCAAAEDBwAqBZCAABUwDQYJKoZIhvcNAQELBQADggEBAISsKsQV Pfak0fRZkouBBXPd2z6Kq1HzaZ2Muo3vHiJNh1Vc0GFapO+AmYF+ZXXDjiFQRuuq 1gJCLLlb+Gbh2mOBdAnlqIDRWZqBiNiHw53YnDPF+RIF2Ghqu5DoTrPD0rhRrVQj EGZMPiccPPCvVceuSMC3HBkTeP8opHW03yqs4FeiCFhh7+DetUe8Ja37eHAe2ao+ 2b26HMVmqI76cRe9ehL0FdZF8FEUIV+JiPDG/JnRz/t3eLOBr4jYC9velS7bB++2 gI63t5a8kOS2tQx49SG03o56IR1h7YuqkBBSTjVfysRmioPZu+X0LrarDhkYkR8J vYx1gDdE/j3paHQ= -----END CERTIFICATE-----Generated at Sat Dec 27 05:36:36 2025 by rpki-client