This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Mq1u4qOomlUhefV0SWNzTRUmwps.roa File: Mq1u4qOomlUhefV0SWNzTRUmwps.roa (raw, json) Hash identifier: +L1VEPPNNBt0OXhwf9f0heC994bRdJErni2gxksz1MM= Subject key identifier: 32:AD:6E:E2:A3:A8:9A:55:21:79:F5:74:49:63:73:4D:15:26:C2:9B Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B7B35F1108E4B518DDCE7866A9200E92C Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Mq1u4qOomlUhefV0SWNzTRUmwps.roa Signing time: Thu 01 Jan 2026 20:18:11 +0000 ROA not before: Thu 01 Jan 2026 20:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214941 IP address blocks: 45.10.151.0/24 maxlen: 24 45.143.98.0/24 maxlen: 24 185.148.240.0/24 maxlen: 24 185.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f1:10:8e:4b:51:8d:dc:e7:86:6a:92:00:e9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32ad6ee2a3a89a552179f5744963734d1526c29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:06:63:8f:6c:26:f5:c4:8b:1a:d8:3e:07: bd:75:59:b3:0e:1a:1c:78:e6:fa:c1:5c:c6:25:e3: 0d:c7:ff:4d:93:e9:fe:f2:66:fd:44:4d:70:29:c9: 81:24:3f:42:70:67:82:38:ce:af:90:13:27:12:63: 13:e1:d3:1d:16:07:a0:a3:8d:74:84:1b:47:7a:2f: 3a:81:08:8a:22:81:c6:2f:db:81:51:26:d2:b1:83: 0d:77:09:1f:f5:09:ff:af:64:b4:ef:c8:4b:63:4a: de:b1:fd:17:32:27:aa:1a:7a:d3:01:4c:85:0e:23: 20:ef:2b:5d:00:e2:eb:6e:cb:9e:3e:25:e4:de:88: df:a0:34:72:a4:de:6d:73:ce:52:4f:2a:e3:f5:aa: 22:37:8c:41:88:76:02:dc:4e:23:2d:b7:93:8b:e1: 38:33:17:19:55:27:d7:5c:91:d7:98:3b:c1:1b:1d: 7e:a1:48:ea:9c:ec:6d:40:b0:77:42:4a:a5:23:f0: 7a:45:b4:22:1b:bf:60:fd:7e:5f:0d:ad:a3:f7:cb: c1:e0:12:85:36:0b:02:b2:9d:05:63:f1:d6:3d:72: 47:cb:d8:d0:ee:37:8a:89:62:06:c4:bb:be:73:64: e0:98:c8:f3:93:e5:9e:60:12:f8:96:e3:4d:d4:af: c3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AD:6E:E2:A3:A8:9A:55:21:79:F5:74:49:63:73:4D:15:26:C2:9B X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Mq1u4qOomlUhefV0SWNzTRUmwps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.151.0/24 45.143.98.0/24 185.148.240.0/24 185.174.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:5b:51:8e:46:48:76:03:67:d4:cf:87:3a:35:7d:24:cd:43: 23:cc:a6:2c:cd:73:78:36:11:16:e5:f0:ac:74:77:18:6d:3e: aa:46:be:b6:28:59:83:e7:a5:88:55:a1:86:1a:41:ac:47:6b: 29:f8:d0:56:8d:d4:1a:bc:76:f9:09:27:6c:78:0d:e6:ee:b1: 57:df:37:f1:1d:2d:09:52:df:04:f8:d3:57:d8:47:1e:59:92: ae:a7:56:de:d4:93:17:7a:b3:08:69:7c:12:0f:57:a8:fa:0f: 5c:eb:94:05:d6:ef:d6:21:f0:01:32:22:ab:2b:cb:b5:6e:c5: b0:2f:cd:ee:a7:1e:25:79:11:62:25:0f:2b:b8:b2:64:ed:51: a2:5b:eb:45:3a:20:fc:4a:14:45:0f:07:72:9c:48:14:db:62: 38:e7:0c:44:d9:53:8f:cc:e3:ce:84:21:0e:b6:d4:7d:12:90: a5:06:e9:bd:e2:98:d8:97:b1:1f:17:b0:0a:09:8a:25:5b:cb: 47:41:07:79:00:3d:d8:ff:6c:2a:c6:e9:aa:48:ff:ee:48:57: 8b:e0:69:ce:bb:78:6b:68:0e:70:87:94:78:b0:30:83:52:56: c8:4a:93:d3:24:bc:a1:57:92:5e:7b:1d:2a:df:51:12:80:39: 17:aa:01:22 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NfEQjktRjdznhmqSAOksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFkNmVlMmEzYTg5YTU1MjE3OWY1NzQ0OTYzNzM0ZDE1MjZjMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtucGY49sJvXEixrYPge9dVmzDhoc eOb6wVzGJeMNx/9Nk+n+8mb9RE1wKcmBJD9CcGeCOM6vkBMnEmMT4dMdFgego410 hBtHei86gQiKIoHGL9uBUSbSsYMNdwkf9Qn/r2S078hLY0resf0XMieqGnrTAUyF DiMg7ytdAOLrbsuePiXk3ojfoDRypN5tc85STyrj9aoiN4xBiHYC3E4jLbeTi+E4 MxcZVSfXXJHXmDvBGx1+oUjqnOxtQLB3QkqlI/B6RbQiG79g/X5fDa2j98vB4BKF NgsCsp0FY/HWPXJHy9jQ7jeKiWIGxLu+c2TgmMjzk+WeYBL4luNN1K/DZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDKtbuKjqJpVIXn1dEljc00VJsKbMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvTXExdTRxT29tbFVoZWZWMFNXTnpUUlVtd3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQqXAwQA LY9iAwQAuZTwAwQAua4UMA0GCSqGSIb3DQEBCwUAA4IBAQBNW1GORkh2A2fUz4c6 NX0kzUMjzKYszXN4NhEW5fCsdHcYbT6qRr62KFmD56WIVaGGGkGsR2sp+NBWjdQa vHb5CSdseA3m7rFX3zfxHS0JUt8E+NNX2EceWZKup1be1JMXerMIaXwSD1eo+g9c 65QF1u/WIfABMiKrK8u1bsWwL83upx4leRFiJQ8ruLJk7VGiW+tFOiD8ShRFDwdy nEgU22I45wxE2VOPzOPOhCEOttR9EpClBum94pjYl7EfF7AKCYolW8tHQQd5AD3Y /2wqxumqSP/uSFeL4GnOu3hraA5wh5R4sDCDUlbISpPTJLyhV5Jeex0q31ESgDkX qgEi -----END CERTIFICATE-----Generated at Wed Jan 21 13:49:40 2026 by rpki-client