This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/MQ6sWToCB3mumMKgqU-7hS8fOpI.roa File: MQ6sWToCB3mumMKgqU-7hS8fOpI.roa (raw, json) Hash identifier: xhgcVHl7BJsW6MydRWNrXzoXNfS0GYn0WspMbhtJ6Ns= Subject key identifier: 31:0E:AC:59:3A:02:07:79:AE:98:C2:A0:A9:4F:BB:85:2F:1F:3A:92 Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4 Certificate serial: 019B791019436DA5CC35F84DF818605F5801 Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/MQ6sWToCB3mumMKgqU-7hS8fOpI.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43394 IP address blocks: 91.198.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:19:43:6d:a5:cc:35:f8:4d:f8:18:60:5f:58:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=310eac593a020779ae98c2a0a94fbb852f1f3a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:d9:a3:77:6e:60:67:e2:4b:5a:86:3e:25: 4d:3c:1a:d2:bb:1f:83:70:94:9f:9b:c1:de:11:ce: dc:71:e6:c4:f0:cc:3c:3f:eb:a4:02:69:bf:95:fb: cd:bd:76:9d:e6:45:60:35:48:15:b4:ee:21:dd:17: 75:4c:c5:f0:79:ad:fa:11:60:65:13:5c:b8:3e:ab: 69:c3:23:b4:7f:5c:0d:de:46:06:88:af:cd:e8:8d: 2e:3e:60:11:d4:65:b8:04:b3:7c:a2:13:2f:d5:cf: 07:c2:6e:9e:f4:f2:bb:c0:06:b7:93:4e:23:2b:d5: 4b:07:7c:3d:71:e5:fe:8e:e8:e4:24:8c:9b:67:a0: 1d:10:a4:bc:87:0c:c1:85:98:38:28:b6:f4:a7:d6: d1:40:91:7d:40:dd:c0:85:49:82:c5:a5:0d:9d:d2: a1:a9:f3:5c:20:a8:0b:4b:65:ff:4a:15:a9:39:cc: c3:03:52:71:ca:b1:75:5e:e8:eb:e4:cb:98:f2:14: 43:0c:64:fa:05:30:0b:31:9d:ce:2e:09:79:a6:0e: 67:b1:0b:b9:f0:d0:eb:b8:72:8f:11:37:0d:16:be: f4:94:ae:70:05:b7:4a:d5:4b:29:ca:00:09:c0:c1: 77:a8:89:bc:a0:82:61:75:5d:b6:44:62:f9:93:55: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0E:AC:59:3A:02:07:79:AE:98:C2:A0:A9:4F:BB:85:2F:1F:3A:92 X509v3 Authority Key Identifier: keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/MQ6sWToCB3mumMKgqU-7hS8fOpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.214.0/24 Signature Algorithm: sha256WithRSAEncryption 17:2f:e7:91:3d:97:a4:7a:f0:07:f4:54:93:d6:25:bb:bd:13: 35:c5:58:d1:4a:42:40:c0:0c:b3:7d:d0:b2:16:c1:ae:6b:c8: 8d:2d:68:a8:28:22:5c:b4:ed:62:53:30:ba:3d:0e:52:9b:ee: 19:be:ec:22:8c:10:03:69:d6:78:4b:5f:04:2d:05:f9:b9:40: c4:ef:f5:bc:2a:9a:e5:f3:4a:46:7c:11:9a:0d:67:e2:55:4a: c8:30:5a:f5:e6:42:01:36:6e:0c:10:06:88:8e:9f:c6:d9:e2: a7:00:7b:92:e4:1c:62:74:d0:cb:19:0c:a4:70:51:ac:6b:72: f3:29:34:b2:77:9b:d7:82:18:20:41:3a:a1:27:6f:71:78:f5: f4:ef:b5:ac:98:0d:d6:2d:8e:af:64:10:a0:84:4c:18:34:c2: 5c:7a:fa:f1:33:5a:28:c9:19:d1:d3:a2:c0:89:c9:74:c7:56: 21:64:b8:f7:70:bb:f6:e0:bb:87:f0:cd:9e:b3:94:f0:8b:d8: a4:c5:1a:1c:47:08:de:94:78:60:bb:a0:ce:4c:54:70:6f:42: 2d:75:c8:94:f7:87:7a:b2:d1:9f:8e:b2:a8:87:d6:d1:45:1a: bf:f4:5d:d1:51:3d:ab:c9:e5:5f:68:09:58:76:2a:25:7d:a3: 7c:22:2e:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBlDbaXMNfhN+BhgX1gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk NDJlYzQwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBlYWM1OTNhMDIwNzc5YWU5OGMyYTBhOTRmYmI4NTJmMWYzYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVbZo3duYGfiS1qGPiVNPBrSux+D cJSfm8HeEc7ccebE8Mw8P+ukAmm/lfvNvXad5kVgNUgVtO4h3Rd1TMXwea36EWBl E1y4PqtpwyO0f1wN3kYGiK/N6I0uPmAR1GW4BLN8ohMv1c8Hwm6e9PK7wAa3k04j K9VLB3w9ceX+jujkJIybZ6AdEKS8hwzBhZg4KLb0p9bRQJF9QN3AhUmCxaUNndKh qfNcIKgLS2X/ShWpOczDA1JxyrF1Xujr5MuY8hRDDGT6BTALMZ3OLgl5pg5nsQu5 8NDruHKPETcNFr70lK5wBbdK1UspygAJwMF3qIm8oIJhdV22RGL5k1XKlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEOrFk6Agd5rpjCoKlPu4UvHzqSMB8GA1UdIwQY MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct OWE4OTU0NjdkYTg1LzEvTVE2c1dUb0NCM211bU1LZ3FVLTdoUzhmT3BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1 LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8bWMA0G CSqGSIb3DQEBCwUAA4IBAQAXL+eRPZekevAH9FST1iW7vRM1xVjRSkJAwAyzfdCy FsGua8iNLWioKCJctO1iUzC6PQ5Sm+4ZvuwijBADadZ4S18ELQX5uUDE7/W8Kprl 80pGfBGaDWfiVUrIMFr15kIBNm4MEAaIjp/G2eKnAHuS5BxidNDLGQykcFGsa3Lz KTSyd5vXghggQTqhJ29xePX077WsmA3WLY6vZBCghEwYNMJcevrxM1ooyRnR06LA icl0x1YhZLj3cLv24LuH8M2es5Twi9ikxRocRwjelHhgu6DOTFRwb0ItdciU94d6 stGfjrKoh9bRRRq/9F3RUT2ryeVfaAlYdiolfaN8Ii4x -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:17 2026 by rpki-client