This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/m-qku06qLY3rNaPKQ1zTMaIhHCk.roa File: m-qku06qLY3rNaPKQ1zTMaIhHCk.roa (raw, json) Hash identifier: P9Yy6mUhYd/ctFDm/ApbuzO2/tM/hkjnZVv/yiJ9K9k= Subject key identifier: 9B:EA:A4:BB:4E:AA:2D:8D:EB:35:A3:CA:43:5C:D3:31:A2:21:1C:29 Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49 Certificate serial: 019B77C686A6860D3AD2D3A8450BF543E41A Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/m-qku06qLY3rNaPKQ1zTMaIhHCk.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42307 IP address blocks: 91.192.28.0/22 maxlen: 22 194.55.248.0/22 maxlen: 22 2001:67c:274::/48 maxlen: 48 2a0c:ccc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:a6:86:0d:3a:d2:d3:a8:45:0b:f5:43:e4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9beaa4bb4eaa2d8deb35a3ca435cd331a2211c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:8f:1b:21:40:e7:02:5b:90:13:60:d0:84: cb:23:ae:ef:fc:54:a6:fb:6f:fd:d0:5b:59:56:9b: 09:33:d4:8c:b2:20:79:1d:ce:b2:e7:78:8d:ad:d6: 4e:81:23:c1:49:b8:be:89:cd:46:b3:0a:1d:c7:84: e2:c0:91:17:13:43:54:2e:84:1a:4b:f4:26:b8:52: a4:e5:a0:24:4d:a9:61:f9:29:e9:55:30:81:4a:dd: 5f:f2:7d:6d:8e:b7:f9:9b:5a:51:91:2d:08:29:06: b7:34:5d:66:38:d3:79:ea:52:33:41:64:ac:ec:84: 16:44:b1:77:8c:4e:62:43:f8:c1:08:28:28:c3:13: 86:ca:52:80:86:8a:78:77:f4:28:c7:d0:30:7c:02: 49:14:9f:ab:7f:7b:d6:09:6f:06:17:2a:45:c1:60: 28:04:b3:4f:23:b0:43:80:e2:38:c9:23:42:5f:7f: 80:e2:1f:93:56:11:c8:fc:cd:82:08:27:68:a3:44: 51:a2:1c:c2:52:b3:2a:73:be:d0:bc:0a:05:2d:01: bc:64:aa:68:1c:f4:a2:ba:7b:cd:14:6d:e8:30:84: 9e:d4:64:d1:e2:12:e9:ed:29:cc:d0:ca:92:e2:64: 4b:99:79:38:5f:61:6f:71:af:5f:9e:ad:71:37:55: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EA:A4:BB:4E:AA:2D:8D:EB:35:A3:CA:43:5C:D3:31:A2:21:1C:29 X509v3 Authority Key Identifier: keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/m-qku06qLY3rNaPKQ1zTMaIhHCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.28.0/22 194.55.248.0/22 IPv6: 2001:67c:274::/48 2a0c:ccc0::/29 Signature Algorithm: sha256WithRSAEncryption 5e:56:e1:57:8b:1c:d6:ec:c3:d5:37:42:d8:88:1e:af:ac:7c: c1:1c:fa:13:c8:2a:1f:a9:da:a7:07:f7:57:63:15:d6:4c:3b: 6f:d0:d0:51:6f:8a:71:53:7d:cc:9f:ee:ec:fc:3a:bc:16:94: c4:79:38:66:8b:eb:15:fe:c5:28:b3:b3:38:99:1c:16:fb:ed: 96:f2:1b:33:37:03:d2:68:37:cb:f0:e1:ae:0b:7e:3b:af:57: d4:1d:0e:1f:08:c3:0d:a1:4c:74:24:1f:29:c6:9a:d3:eb:5d: 2b:b0:de:55:2c:ef:4d:bf:40:90:15:3a:86:78:14:8f:7d:92: 88:61:72:c6:70:7a:35:4a:36:3d:b9:b7:d7:3e:2b:f0:70:db: e1:01:c9:e4:88:4f:08:de:26:6b:85:bf:4e:f7:45:9d:76:64: 69:3c:a1:b7:95:e7:cc:24:96:00:c9:c0:73:80:89:4a:fb:6a: d5:2f:14:58:ce:3d:63:a1:81:53:be:cf:7c:48:b9:c2:cb:93: ca:9c:b3:ea:3b:0b:89:76:fc:6c:89:63:37:13:36:3f:51:47: 4e:b2:90:8f:73:3d:c6:e1:88:35:e3:fa:0f:f0:45:7c:94:ae: b2:e4:ef:77:51:bf:06:8f:9b:7d:33:e2:c2:d7:45:01:a3:05: e9:02:d9:39 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xoamhg060tOoRQv1Q+QaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTU1ZTZjMTRiOTRkNzU2ZDkzYTgzYTUwMmM3ZjE1Nzdm OWFmNDkwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmVhYTRiYjRlYWEyZDhkZWIzNWEzY2E0MzVjZDMzMWEyMjExYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVWPGyFA5wJbkBNg0ITLI67v/FSm +2/90FtZVpsJM9SMsiB5Hc6y53iNrdZOgSPBSbi+ic1Gswodx4TiwJEXE0NULoQa S/QmuFKk5aAkTalh+SnpVTCBSt1f8n1tjrf5m1pRkS0IKQa3NF1mONN56lIzQWSs 7IQWRLF3jE5iQ/jBCCgowxOGylKAhop4d/Qox9AwfAJJFJ+rf3vWCW8GFypFwWAo BLNPI7BDgOI4ySNCX3+A4h+TVhHI/M2CCCdoo0RRohzCUrMqc77QvAoFLQG8ZKpo HPSiunvNFG3oMISe1GTR4hLp7SnM0MqS4mRLmXk4X2Fvca9fnq1xN1Vn8QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJvqpLtOqi2N6zWjykNc0zGiIRwpMB8GA1UdIwQY MBaAFG1VXmwUuU11bZOoOlAsfxV3+a9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAt OTdlYWY5YWE3ODZmLzEvbS1xa3UwNnFMWTNyTmFQS1ExelRNYUloSENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAtOTdlYWY5YWE3ODZm LzEvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCW8AcAwQC wjf4MBYEAgACMBADBwAgAQZ8AnQDBQMqDMzAMA0GCSqGSIb3DQEBCwUAA4IBAQBe VuFXixzW7MPVN0LYiB6vrHzBHPoTyCofqdqnB/dXYxXWTDtv0NBRb4pxU33Mn+7s /Dq8FpTEeThmi+sV/sUos7M4mRwW++2W8hszNwPSaDfL8OGuC347r1fUHQ4fCMMN oUx0JB8pxprT610rsN5VLO9Nv0CQFTqGeBSPfZKIYXLGcHo1SjY9ubfXPivwcNvh AcnkiE8I3iZrhb9O90WddmRpPKG3lefMJJYAycBzgIlK+2rVLxRYzj1joYFTvs98 SLnCy5PKnLPqOwuJdvxsiWM3EzY/UUdOspCPcz3G4Yg14/oP8EV8lK6y5O93Ub8G j5t9M+LC10UBowXpAtk5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:23 2026 by rpki-client