This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa File: mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa (raw, json) Hash identifier: 1np7IvcHjiOYMR/ORA7UoY/R2p5vVot2cY5J1yx4uw0= Subject key identifier: 98:C6:8D:AC:64:30:3E:5A:84:B9:F7:1B:39:D2:3F:45:BF:FA:47:04 Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Certificate serial: 019B79EC8D531D06552A63EE7723BD03EB06 Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20892 IP address blocks: 91.194.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8d:53:1d:06:55:2a:63:ee:77:23:bd:03:eb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c68dac64303e5a84b9f71b39d23f45bffa4704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:08:43:83:a0:4d:66:5d:a4:60:0e:a7:17: b8:5c:d9:5f:2a:da:de:a3:b8:3e:a0:fc:32:63:39: 30:51:4f:d0:b5:69:21:d6:32:e6:92:b5:99:f6:6e: 6c:ec:87:6c:63:d7:88:c2:b5:94:54:13:bf:c5:e6: f8:0c:58:fb:62:fb:b4:d4:be:be:5c:81:8e:ec:32: 23:1c:30:fa:e3:ae:72:74:9e:bb:04:eb:a7:b9:d4: e9:43:36:c6:f8:2c:4b:71:27:1b:e9:b5:cf:65:ce: 23:55:6e:55:db:db:79:23:17:d7:a2:3d:a6:f8:31: a0:e6:d0:38:c8:b1:7d:76:4f:d0:a6:80:bd:95:6c: db:6d:d1:c0:86:3b:50:19:91:8f:cf:b5:b9:9b:62: 6d:aa:22:bf:79:7b:95:f9:b2:57:82:33:c5:2b:8f: e2:f3:ee:4b:e3:0d:d8:2d:33:e1:e5:f7:cd:95:ee: 37:d4:04:71:9d:0c:0f:12:a8:02:09:4a:81:ac:0b: ad:cc:4e:3a:2a:95:34:24:e0:71:84:dc:92:05:39: 9f:b4:91:7a:b1:f1:72:c4:62:c4:06:e8:c7:b7:2d: 58:96:23:31:84:4f:fe:ac:6d:33:86:91:e0:da:26: 1f:45:c0:59:f9:90:66:de:ef:a9:ab:db:36:19:30: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:8D:AC:64:30:3E:5A:84:B9:F7:1B:39:D2:3F:45:BF:FA:47:04 X509v3 Authority Key Identifier: keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.242.0/23 Signature Algorithm: sha256WithRSAEncryption 87:ac:b9:c8:fa:3b:e9:58:db:df:c2:9a:6c:c7:59:f5:0e:cd: 07:40:97:97:4a:d1:93:34:dd:cc:72:06:0b:a6:04:c7:0e:34: 94:8e:45:3c:00:4a:b7:49:2c:2d:ce:c8:61:90:90:61:4d:0b: 06:0b:cb:77:e0:63:a3:e6:cf:a5:63:1a:87:d1:8b:e7:4b:b0: d4:b1:e9:c9:8a:56:0a:fd:42:06:d2:02:43:ec:14:9e:b5:f2: e3:d7:57:a9:07:e1:ce:0d:10:37:b0:cd:68:3c:a2:2a:f8:27: 19:64:6d:8a:22:0e:5d:55:00:62:32:e0:70:fd:ae:05:9b:b2: c1:d3:43:09:c5:8b:cf:9e:cd:a3:32:af:85:eb:f5:f2:88:d0: a1:0d:27:2d:7d:e2:f5:59:27:e1:a6:07:f2:bb:32:d3:21:ae: e4:81:39:37:82:ab:de:62:b1:6b:6d:d0:bb:b3:e1:52:db:36: b9:dc:47:55:04:37:95:b5:31:f4:b9:11:d5:32:b4:f6:29:c2: dd:f4:a6:2b:f2:06:cc:23:61:fb:b7:c2:61:39:e4:ae:34:29: 70:b1:72:b5:18:44:be:91:1d:e3:87:a3:1c:e3:94:d7:88:0a: f2:8f:da:c2:bb:43:c3:28:86:2c:e5:83:51:fc:27:66:6e:bd: 9a:31:70:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57I1THQZVKmPudyO9A+sGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk MmI5ZGQwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM2OGRhYzY0MzAzZTVhODRiOWY3MWIzOWQyM2Y0NWJmZmE0NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHUIQ4OgTWZdpGAOpxe4XNlfKtre o7g+oPwyYzkwUU/QtWkh1jLmkrWZ9m5s7IdsY9eIwrWUVBO/xeb4DFj7Yvu01L6+ XIGO7DIjHDD6465ydJ67BOunudTpQzbG+CxLcScb6bXPZc4jVW5V29t5IxfXoj2m +DGg5tA4yLF9dk/QpoC9lWzbbdHAhjtQGZGPz7W5m2JtqiK/eXuV+bJXgjPFK4/i 8+5L4w3YLTPh5ffNle431ARxnQwPEqgCCUqBrAutzE46KpU0JOBxhNySBTmftJF6 sfFyxGLEBujHty1YliMxhE/+rG0zhpHg2iYfRcBZ+ZBm3u+pq9s2GTDcuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjGjaxkMD5ahLn3GznSP0W/+kcEMB8GA1UdIwQY MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt MDU0MjQyN2IwMmI5LzEvbU1hTnJHUXdQbHFFdWZjYk9kSV9SYl82UndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5 LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8LyMA0G CSqGSIb3DQEBCwUAA4IBAQCHrLnI+jvpWNvfwppsx1n1Ds0HQJeXStGTNN3McgYL pgTHDjSUjkU8AEq3SSwtzshhkJBhTQsGC8t34GOj5s+lYxqH0YvnS7DUsenJilYK /UIG0gJD7BSetfLj11epB+HODRA3sM1oPKIq+CcZZG2KIg5dVQBiMuBw/a4Fm7LB 00MJxYvPns2jMq+F6/XyiNChDSctfeL1WSfhpgfyuzLTIa7kgTk3gqveYrFrbdC7 s+FS2za53EdVBDeVtTH0uRHVMrT2KcLd9KYr8gbMI2H7t8JhOeSuNClwsXK1GES+ kR3jh6Mc45TXiAryj9rCu0PDKIYs5YNR/Cdmbr2aMXBE -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:55 2026 by rpki-client