This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MuaQsZpK85YLuwzSbgYhrnef72s.roa File: MuaQsZpK85YLuwzSbgYhrnef72s.roa (raw, json) Hash identifier: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ= Subject key identifier: 32:E6:90:B1:9A:4A:F3:96:0B:BB:0C:D2:6E:06:21:AE:77:9F:EF:6B Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B7FF25EEEB245EFD6FED9B4649CA29B40 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MuaQsZpK85YLuwzSbgYhrnef72s.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 91.102.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5e:ee:b2:45:ef:d6:fe:d9:b4:64:9c:a2:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32e690b19a4af3960bbb0cd26e0621ae779fef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:5c:6c:f4:1f:d5:00:c2:be:ff:50:51:72: c3:3b:6f:45:ad:9b:50:59:dd:7f:70:e8:6f:d3:47: f4:af:75:b9:0f:ed:ad:02:ec:0f:37:7d:ab:4e:ff: d5:23:7c:9d:79:b9:23:44:32:3c:dd:d6:96:a7:1c: 64:71:6c:88:34:f5:5e:f6:76:65:07:f4:4b:b0:af: b0:37:44:f3:b8:ba:2a:bf:5d:d1:e9:ae:b2:42:e3: c7:43:9c:18:ab:fa:a3:77:e0:5a:af:e9:c0:e5:e4: 80:18:51:90:98:e2:ad:fa:52:94:5c:fc:b2:c5:8c: 6f:0d:71:d0:3e:87:35:68:ec:ae:04:7a:5f:ff:c2: a4:f4:4e:ad:23:c0:88:78:00:84:71:cd:a2:6f:c4: 36:ed:f1:c7:aa:8b:b4:ff:f7:31:9a:66:64:e3:66: 70:d6:2a:75:49:f1:23:52:97:e5:01:8e:19:36:82: e1:14:41:2b:20:64:21:21:c5:d2:a6:bf:82:00:91: a9:0d:ae:67:c6:aa:7c:da:95:ac:d6:e6:44:63:dc: e0:3c:93:37:cc:be:35:ce:77:b3:4c:fa:5a:28:fc: 32:83:d4:75:39:72:47:be:0b:26:a4:42:90:db:e1: 36:c0:95:01:26:57:e2:27:58:c2:ab:e8:ca:24:f5: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:90:B1:9A:4A:F3:96:0B:BB:0C:D2:6E:06:21:AE:77:9F:EF:6B X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/MuaQsZpK85YLuwzSbgYhrnef72s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.160.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:6e:84:85:89:9d:3b:68:49:a8:92:56:92:d3:c2:88:75:33: d6:5a:64:41:a9:dd:05:9b:d8:9a:04:74:81:1b:e7:05:77:e4: 54:81:3d:d2:8b:8d:05:1f:6f:96:0e:1f:f0:c5:72:36:3f:0d: 40:34:c9:d0:d5:91:27:25:41:31:ef:47:9c:5c:b6:9b:84:b0: 39:57:f1:17:18:1e:03:86:18:40:31:ca:6c:22:57:08:f3:cf: 42:f7:91:c8:b3:34:c9:0b:47:8b:64:98:70:95:fe:17:a4:55: 9b:40:57:3c:37:d9:ae:b1:ef:8e:a0:b6:44:71:79:55:52:67: 93:20:a1:75:05:c2:9d:a2:79:cd:c7:38:79:3c:55:d5:cb:11: 6b:d5:54:38:f9:8b:f8:63:76:53:05:c9:a1:41:5b:36:07:6e: c6:82:08:ae:7a:1f:ca:d4:23:df:47:cf:be:f3:c5:26:8a:c6: 0a:9f:55:40:23:ac:76:45:46:da:7c:66:32:d6:26:ed:fa:b0: 1d:76:35:7f:34:68:aa:e6:eb:16:bf:c8:7a:d0:45:6c:bc:68: d9:25:8d:6d:9f:74:d6:94:fd:7c:62:9c:30:2d:76:7f:d9:af: 56:6b:1a:0c:65:06:b0:5f:4c:55:08:b8:75:8b:56:66:45:c7: 32:41:3e:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8l7uskXv1v7ZtGScoptAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmU2OTBiMTlhNGFmMzk2MGJiYjBjZDI2ZTA2MjFhZTc3OWZlZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xtcbPQf1QDCvv9QUXLDO29FrZtQ Wd1/cOhv00f0r3W5D+2tAuwPN32rTv/VI3ydebkjRDI83daWpxxkcWyINPVe9nZl B/RLsK+wN0TzuLoqv13R6a6yQuPHQ5wYq/qjd+Bar+nA5eSAGFGQmOKt+lKUXPyy xYxvDXHQPoc1aOyuBHpf/8Kk9E6tI8CIeACEcc2ib8Q27fHHqou0//cxmmZk42Zw 1ip1SfEjUpflAY4ZNoLhFEErIGQhIcXSpr+CAJGpDa5nxqp82pWs1uZEY9zgPJM3 zL41znezTPpaKPwyg9R1OXJHvgsmpEKQ2+E2wJUBJlfiJ1jCq+jKJPVKmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLmkLGaSvOWC7sM0m4GIa53n+9rMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvTXVhUXNacEs4NVlMdXd6U2JnWWhybmVmNzJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW2agMA0G CSqGSIb3DQEBCwUAA4IBAQCMboSFiZ07aEmoklaS08KIdTPWWmRBqd0Fm9iaBHSB G+cFd+RUgT3Si40FH2+WDh/wxXI2Pw1ANMnQ1ZEnJUEx70ecXLabhLA5V/EXGB4D hhhAMcpsIlcI889C95HIszTJC0eLZJhwlf4XpFWbQFc8N9muse+OoLZEcXlVUmeT IKF1BcKdonnNxzh5PFXVyxFr1VQ4+Yv4Y3ZTBcmhQVs2B27Gggiueh/K1CPfR8++ 88UmisYKn1VAI6x2RUbafGYy1ibt+rAddjV/NGiq5usWv8h60EVsvGjZJY1tn3TW lP18YpwwLXZ/2a9WaxoMZQawX0xVCLh1i1ZmRccyQT7k -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:51 2026 by rpki-client