This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/mdvmy6IQAdVPllVNujJTmgLBeMk.roa File: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (raw, json) Hash identifier: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY= Subject key identifier: 99:DB:E6:CB:A2:10:01:D5:4F:96:55:4D:BA:32:53:9A:02:C1:78:C9 Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8 Certificate serial: 019B7758D6AA9CA5383894386FCEB501067C Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/mdvmy6IQAdVPllVNujJTmgLBeMk.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.198.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d6:aa:9c:a5:38:38:94:38:6f:ce:b5:01:06:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99dbe6cba21001d54f96554dba32539a02c178c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:1f:49:9e:0b:b0:0a:94:99:6a:f2:e0:ab: e5:41:e3:01:f3:e5:fd:28:ef:a0:c1:a1:23:75:6a: 0f:39:ee:ae:d0:f0:a6:5f:5e:a7:07:b3:6d:cf:92: fd:83:fa:43:8e:50:d4:ef:14:61:7c:82:8b:ca:51: d5:46:9d:ba:ad:73:3e:a2:7e:04:fb:9e:45:25:e7: e5:d6:c0:3a:9b:35:21:b2:e3:69:50:b7:0a:58:93: a2:36:37:5b:8d:2e:30:7e:ca:9e:6f:b5:33:a3:59: cc:66:51:b3:55:bc:aa:8e:94:7e:94:e5:2f:17:de: 52:4f:ae:37:89:ce:b4:71:ee:33:37:a4:3e:c3:e9: c8:d6:28:56:fa:91:f7:3f:0c:4b:ad:5a:d5:79:eb: f5:56:59:27:37:a3:a3:2e:e1:4c:1b:4a:cc:db:3b: 86:20:28:1e:b4:29:99:d0:b7:3d:4b:a9:18:69:98: 72:2d:b0:7d:a5:5b:aa:f0:e6:ae:82:e9:d4:40:a4: 7c:ec:94:4d:0a:76:80:02:9f:d1:11:a0:21:2e:f7: ff:33:8a:7b:9d:1b:1f:39:f8:f3:32:e0:59:bb:2c: 52:64:6a:d4:ca:6e:9b:f2:fa:7c:00:35:73:c5:7a: 51:32:6f:26:32:9a:99:ea:82:78:95:e9:8a:73:08: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:E6:CB:A2:10:01:D5:4F:96:55:4D:BA:32:53:9A:02:C1:78:C9 X509v3 Authority Key Identifier: keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/mdvmy6IQAdVPllVNujJTmgLBeMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.107.0/24 Signature Algorithm: sha256WithRSAEncryption 65:3a:f8:81:a7:2a:a6:0c:08:f7:79:ef:40:c5:b9:e7:b6:c7: ce:9c:dc:1d:b0:12:4c:80:f6:65:e6:0b:67:d2:dd:32:c5:ea: 6a:32:1b:71:bf:08:a3:e9:2c:4c:43:63:d5:05:0b:53:7e:9c: 96:8d:74:df:45:93:aa:f8:4b:b8:55:84:40:58:a7:e2:26:be: 85:e4:5f:2f:e9:44:0f:af:3e:74:3b:20:6b:1e:73:68:02:f9: 2b:ff:68:8c:52:90:a1:ef:04:f9:32:bc:6d:4d:19:b6:67:d7: 51:df:a4:fe:cc:68:04:62:70:13:5a:6d:d6:4b:15:61:3c:06: 44:e6:c4:31:3f:f4:a6:a8:20:99:e4:3d:fc:d8:fe:8a:3e:10: b8:b7:4e:ce:86:70:22:f2:7d:14:6a:02:dc:8f:ae:27:6f:3d: 27:6d:c1:b5:7a:cd:23:50:45:ee:aa:5c:62:34:b1:72:d1:7b: 63:ca:6b:4f:7f:6a:56:24:fa:d3:e1:0a:90:ac:f6:b4:e9:87: 9f:0a:9e:3e:e6:0a:ac:ef:ea:76:1f:a6:50:d0:dd:3b:36:67: 47:66:0a:44:98:32:1c:01:98:31:43:fe:2e:82:92:c5:e4:57: 5a:8e:2c:bd:0b:3c:de:24:13:2f:8a:c1:5a:4e:61:a4:4c:27: 41:e9:dc:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNaqnKU4OJQ4b861AQZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk ODg0ZDgwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRiZTZjYmEyMTAwMWQ1NGY5NjU1NGRiYTMyNTM5YTAyYzE3OGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndQfSZ4LsAqUmWry4KvlQeMB8+X9 KO+gwaEjdWoPOe6u0PCmX16nB7Ntz5L9g/pDjlDU7xRhfIKLylHVRp26rXM+on4E +55FJefl1sA6mzUhsuNpULcKWJOiNjdbjS4wfsqeb7Uzo1nMZlGzVbyqjpR+lOUv F95ST643ic60ce4zN6Q+w+nI1ihW+pH3PwxLrVrVeev1VlknN6OjLuFMG0rM2zuG ICgetCmZ0Lc9S6kYaZhyLbB9pVuq8OaugunUQKR87JRNCnaAAp/REaAhLvf/M4p7 nRsfOfjzMuBZuyxSZGrUym6b8vp8ADVzxXpRMm8mMpqZ6oJ4lemKcwiMBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnb5suiEAHVT5ZVTboyU5oCwXjJMB8GA1UdIwQY MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt M2M3NmRkNDkxMDA2LzEvbWR2bXk2SVFBZFZQbGxWTnVqSlRtZ0xCZU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2 LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZrMA0G CSqGSIb3DQEBCwUAA4IBAQBlOviBpyqmDAj3ee9AxbnntsfOnNwdsBJMgPZl5gtn 0t0yxepqMhtxvwij6SxMQ2PVBQtTfpyWjXTfRZOq+Eu4VYRAWKfiJr6F5F8v6UQP rz50OyBrHnNoAvkr/2iMUpCh7wT5MrxtTRm2Z9dR36T+zGgEYnATWm3WSxVhPAZE 5sQxP/SmqCCZ5D382P6KPhC4t07OhnAi8n0UagLcj64nbz0nbcG1es0jUEXuqlxi NLFy0XtjymtPf2pWJPrT4QqQrPa06YefCp4+5gqs7+p2H6ZQ0N07NmdHZgpEmDIc AZgxQ/4ugpLF5Fdajiy9CzzeJBMvisFaTmGkTCdB6dw/ -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:05 2026 by rpki-client