This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa File: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (raw, json) Hash identifier: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw= Subject key identifier: 98:60:10:CC:F8:C1:12:E3:6F:2C:19:38:3D:95:53:C9:D4:34:F0:89 Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Certificate serial: 019B7DC9B9D24F44361B7AA2DA96598D7431 Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa Signing time: Fri 02 Jan 2026 08:18:50 +0000 ROA not before: Fri 02 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48173 IP address blocks: 91.229.178.0/23 maxlen: 24 91.241.72.0/22 maxlen: 24 193.169.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b9:d2:4f:44:36:1b:7a:a2:da:96:59:8d:74:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Validity Not Before: Jan 2 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=986010ccf8c112e36f2c19383d9553c9d434f089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:ab:2a:ce:f3:ae:c5:ff:76:5a:52:37:ab: d6:51:7f:43:04:a1:a9:10:31:2d:eb:42:8e:33:18: 97:a7:eb:2b:f8:40:4a:44:3e:6e:08:b4:d6:42:73: 5b:3a:a2:5c:6a:66:8d:3f:ab:c5:dc:b4:92:a2:20: 2b:be:76:d8:15:5e:0e:08:aa:d4:7d:e2:22:de:df: da:66:4b:aa:44:26:e1:af:12:c3:b5:ed:b9:65:c7: fb:ae:2d:8a:f8:03:8d:ca:96:42:37:41:95:32:ac: 51:b8:33:e0:e1:12:b3:70:e7:58:73:c4:37:5a:54: 2f:c7:ca:fb:33:f0:cd:dc:5a:dd:81:82:1e:09:7f: 22:f8:20:40:c9:71:91:0e:16:69:9d:fa:12:b2:a9: 93:ae:dc:fc:a0:db:0a:d0:ea:f0:54:5b:5f:84:b3: 0f:2f:1a:cd:8d:87:67:aa:d1:a8:b0:2c:9f:e8:63: 24:89:d0:0d:be:82:1a:e7:72:4b:29:21:19:f7:cc: 64:51:7a:53:45:27:8d:22:8b:cf:e0:e4:52:c2:16: fe:9a:59:6d:9e:b4:d9:08:80:32:9b:31:de:97:1a: 20:fe:7d:6b:f9:3b:06:91:9c:c9:b3:f1:fe:7f:74: dc:5d:72:70:e6:1f:5d:a6:34:cc:2f:96:5f:86:38: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:60:10:CC:F8:C1:12:E3:6F:2C:19:38:3D:95:53:C9:D4:34:F0:89 X509v3 Authority Key Identifier: keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.178.0/23 91.241.72.0/22 193.169.180.0/23 Signature Algorithm: sha256WithRSAEncryption 13:6e:54:a1:76:e0:97:9b:60:2b:c7:b6:c2:f8:73:99:22:40: 23:be:db:06:ff:fe:00:e8:f0:9c:e4:61:61:02:30:cf:51:8e: 43:b2:67:2f:4f:36:1e:25:39:20:72:f2:ad:67:6a:40:b3:fb: 94:d0:1c:00:2f:ea:f8:94:4a:33:49:73:c3:13:3e:13:e1:6d: 0b:0d:75:92:d2:dc:d9:6a:93:aa:5d:35:2d:ff:58:dc:c8:6b: d4:05:2a:58:51:48:a9:00:ff:e8:71:d5:a0:74:6a:d5:ae:0f: c3:46:1c:67:ac:5a:f7:6c:32:ac:55:5c:5d:27:cf:e5:ec:22: 0d:94:4d:51:a0:41:ae:d7:fd:0c:a8:b5:0d:36:85:d6:2b:65: 21:e2:cd:1f:b2:85:7b:e0:8b:d7:f7:e7:c2:38:aa:0b:b0:19: 9b:7b:d2:e9:b9:a3:89:8c:66:c6:99:00:10:66:88:be:a5:3e: e0:57:e9:68:d0:cd:fe:3b:c3:bf:4b:37:0f:a0:a7:0d:26:80: 36:36:38:3b:fe:fa:01:17:3a:1e:6f:7c:30:d1:46:87:e4:c4: 3d:4c:50:d4:3d:5b:c4:82:bb:fd:42:bf:5f:e4:1b:41:e1:30: 61:7e:8b:11:1e:a0:e9:23:0b:db:08:5c:c1:b0:d9:57:1a:2c: 1a:4d:a6:20 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ybnST0Q2G3qi2pZZjXQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw MzMyMzkwHhcNMjYwMTAyMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODYwMTBjY2Y4YzExMmUzNmYyYzE5MzgzZDk1NTNjOWQ0MzRmMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jCrKs7zrsX/dlpSN6vWUX9DBKGp EDEt60KOMxiXp+sr+EBKRD5uCLTWQnNbOqJcamaNP6vF3LSSoiArvnbYFV4OCKrU feIi3t/aZkuqRCbhrxLDte25Zcf7ri2K+AONypZCN0GVMqxRuDPg4RKzcOdYc8Q3 WlQvx8r7M/DN3FrdgYIeCX8i+CBAyXGRDhZpnfoSsqmTrtz8oNsK0OrwVFtfhLMP LxrNjYdnqtGosCyf6GMkidANvoIa53JLKSEZ98xkUXpTRSeNIovP4ORSwhb+mllt nrTZCIAymzHelxog/n1r+TsGkZzJs/H+f3TcXXJw5h9dpjTML5Zfhjj22QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJhgEMz4wRLjbywZOD2VU8nUNPCJMB8GA1UdIwQY MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt ZTY5YmUzOTViMGY3LzEvbUdBUXpQakJFdU52TEJrNFBaVlR5ZFEwOElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3 LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+WyAwQC W/FIAwQBwam0MA0GCSqGSIb3DQEBCwUAA4IBAQATblShduCXm2Arx7bC+HOZIkAj vtsG//4A6PCc5GFhAjDPUY5DsmcvTzYeJTkgcvKtZ2pAs/uU0BwAL+r4lEozSXPD Ez4T4W0LDXWS0tzZapOqXTUt/1jcyGvUBSpYUUipAP/ocdWgdGrVrg/DRhxnrFr3 bDKsVVxdJ8/l7CINlE1RoEGu1/0MqLUNNoXWK2Uh4s0fsoV74IvX9+fCOKoLsBmb e9LpuaOJjGbGmQAQZoi+pT7gV+lo0M3+O8O/SzcPoKcNJoA2Njg7/voBFzoeb3ww 0UaH5MQ9TFDUPVvEgrv9Qr9f5BtB4TBhfosRHqDpIwvbCFzBsNlXGiwaTaYg -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:08 2026 by rpki-client