This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa File: MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa (raw, json) Hash identifier: slGMf+J7S5c/IJOgK2UJxKCeMt7lJeZUFKkTZVXCTAw= Subject key identifier: 32:AC:27:33:12:77:49:7E:83:EE:2B:DB:E4:DA:53:93:B2:68:01:53 Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493 Certificate serial: 019B7DCB550816CEED33D025F7C9310CFFFB Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197844 IP address blocks: 91.227.196.0/23 maxlen: 23 194.35.236.0/23 maxlen: 23 194.35.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:55:08:16:ce:ed:33:d0:25:f7:c9:31:0c:ff:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32ac27331277497e83ee2bdbe4da5393b2680153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:6d:59:28:70:55:c3:a9:56:cb:d2:f6:ab: 98:6c:74:ae:62:d6:77:1e:54:b7:4f:07:7e:05:19: 51:8e:40:55:5d:70:1a:6d:27:fe:8c:93:c8:47:c8: 60:fa:c9:b8:c8:e2:6a:0c:e8:a2:e6:6f:78:6e:fc: d2:79:18:8d:0e:84:34:ca:8b:66:15:48:da:a3:77: 14:d4:7d:c2:f1:3b:66:62:6a:9a:21:ab:6b:11:ea: 3c:04:14:78:09:9e:4e:04:b3:02:0b:9a:e1:30:55: 1f:e9:2f:e3:6a:65:c2:80:a0:73:2b:1d:3d:61:31: 6b:e8:a7:84:95:c6:ad:b0:54:8b:6c:3b:06:f5:bf: 78:a2:ff:11:7a:97:ed:27:b9:e3:89:aa:fb:46:4e: ce:2b:29:92:fd:1b:fa:61:25:5b:2a:f0:d0:52:6a: cf:c8:ac:73:2f:c3:24:d4:fe:ba:7b:a4:e3:21:73: e6:7b:cc:92:9c:52:88:05:c4:d7:a3:af:ac:ee:c7: 52:c5:6e:1c:88:61:c1:ab:25:f1:8f:a7:83:71:a4: 09:f3:ac:7c:d0:a0:88:c8:77:4d:a6:b4:64:8a:5a: d5:42:cf:6c:ca:23:2c:90:08:02:b2:00:18:4f:4b: 97:5e:5b:cd:b5:ad:cc:1a:ac:11:72:53:97:f8:2e: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:27:33:12:77:49:7E:83:EE:2B:DB:E4:DA:53:93:B2:68:01:53 X509v3 Authority Key Identifier: keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.196.0/23 194.35.236.0/22 Signature Algorithm: sha256WithRSAEncryption d5:59:ee:f3:02:39:13:72:16:bd:4c:00:d2:d5:86:96:08:36: 94:ac:c1:10:48:46:a0:22:b1:c2:a5:7b:c5:50:69:c4:5b:1c: 52:58:2e:5b:0f:36:1c:da:52:d0:0d:f3:5b:2d:d8:da:bf:c0: ae:10:9a:58:ab:9d:37:db:dd:98:ea:40:08:c8:5e:6c:f2:90: 33:4c:d6:e9:f2:27:03:be:a0:59:34:bc:14:6d:f2:67:66:6d: 11:4b:00:13:f6:68:92:96:a6:c8:33:6d:22:49:2a:43:be:3d: 55:a4:ab:de:62:00:a5:fe:93:1b:82:bd:16:2a:bf:29:ad:38: 0a:33:eb:94:14:0e:9f:5b:d1:d7:dc:1a:d0:fc:a3:00:75:dc: c0:06:24:5c:b1:fa:69:e2:cc:dc:30:81:2d:d5:69:7f:3e:50: 5c:c5:c7:12:24:55:bf:50:df:df:c2:f3:40:46:75:1d:fd:08: d9:1c:06:7d:5e:75:94:94:5f:81:30:1c:77:17:5f:71:54:93: 97:a3:d0:2e:50:f0:63:a0:c9:f5:a7:d7:43:e2:a9:ae:df:d0: 8a:dd:42:d2:c4:d5:29:f2:f3:ea:89:08:bf:a7:66:0c:ec:30: e1:92:c5:73:53:37:db:a5:9d:9d:c2:de:cd:1d:24:c5:02:68: 18:cd:f2:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1UIFs7tM9Al98kxDP/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzUyMTE5YjRiYTQ3MDhmMTE5ZTRkMWZiNDc1MmJjODgx YWY0OTMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFjMjczMzEyNzc0OTdlODNlZTJiZGJlNGRhNTM5M2IyNjgwMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhtWShwVcOpVsvS9quYbHSuYtZ3 HlS3Twd+BRlRjkBVXXAabSf+jJPIR8hg+sm4yOJqDOii5m94bvzSeRiNDoQ0yotm FUjao3cU1H3C8TtmYmqaIatrEeo8BBR4CZ5OBLMCC5rhMFUf6S/jamXCgKBzKx09 YTFr6KeElcatsFSLbDsG9b94ov8RepftJ7njiar7Rk7OKymS/Rv6YSVbKvDQUmrP yKxzL8Mk1P66e6TjIXPme8ySnFKIBcTXo6+s7sdSxW4ciGHBqyXxj6eDcaQJ86x8 0KCIyHdNprRkilrVQs9syiMskAgCsgAYT0uXXlvNta3MGqwRclOX+C5W7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDKsJzMSd0l+g+4r2+TaU5OyaAFTMB8GA1UdIwQY MBaAFAU1IRm0ukcI8Rnk0ftHUryIGvSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAt NzY4MDNkODJjZThlLzEvTXF3bk14SjNTWDZEN2l2YjVOcFRrN0pvQVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAtNzY4MDNkODJjZThl LzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+PEAwQC wiPsMA0GCSqGSIb3DQEBCwUAA4IBAQDVWe7zAjkTcha9TADS1YaWCDaUrMEQSEag IrHCpXvFUGnEWxxSWC5bDzYc2lLQDfNbLdjav8CuEJpYq503292Y6kAIyF5s8pAz TNbp8icDvqBZNLwUbfJnZm0RSwAT9miSlqbIM20iSSpDvj1VpKveYgCl/pMbgr0W Kr8prTgKM+uUFA6fW9HX3BrQ/KMAddzABiRcsfpp4szcMIEt1Wl/PlBcxccSJFW/ UN/fwvNARnUd/QjZHAZ9XnWUlF+BMBx3F19xVJOXo9AuUPBjoMn1p9dD4qmu39CK 3ULSxNUp8vPqiQi/p2YM7DDhksVzUzfbpZ2dwt7NHSTFAmgYzfIW -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:42 2026 by rpki-client