This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/mQQJegnq95EZE2V56v2zWL1gvbQ.roa File: mQQJegnq95EZE2V56v2zWL1gvbQ.roa (raw, json) Hash identifier: q/7V6DJvjSprwlUJnZGo0QNXx9JjaUcQEYt4M4pXjvE= Subject key identifier: 99:04:09:7A:09:EA:F7:91:19:13:65:79:EA:FD:B3:58:BD:60:BD:B4 Certificate issuer: /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea Certificate serial: 019B7CEE4E2D5F3F20D01B23DBB0318A0C1C Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/mQQJegnq95EZE2V56v2zWL1gvbQ.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213139 IP address blocks: 91.218.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4e:2d:5f:3f:20:d0:1b:23:db:b0:31:8a:0c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9904097a09eaf79119136579eafdb358bd60bdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:c4:67:80:0b:fd:72:ab:55:41:6c:7e:76: eb:19:66:c1:69:d3:de:a5:fa:f8:13:bd:6e:fe:fa: 79:1a:db:af:20:7d:e0:52:c4:93:cb:62:56:06:74: cc:b4:ba:7d:17:f3:86:e1:86:ad:0e:fa:17:5e:c5: 42:03:91:aa:7b:21:2e:34:30:84:6f:a6:b4:6b:19: a6:1f:8e:64:da:8a:ae:7d:55:28:bb:79:89:9f:b8: 74:86:2f:98:44:e3:3e:b1:ff:2b:96:57:da:3b:2c: 73:cb:56:48:44:d6:56:8e:f1:65:d4:1c:0a:37:b7: ac:f3:e8:2b:27:21:8b:c3:ec:61:9c:64:22:a4:36: 87:31:fd:5a:6c:27:bf:da:1b:c0:51:d3:c1:85:b7: c3:c8:4d:f6:e1:68:15:35:63:b9:2d:e6:98:ab:b3: 52:8f:bf:07:7c:95:67:a1:81:89:42:97:da:c7:c6: 9b:7c:6c:5d:7b:e5:c6:0d:c7:45:fc:41:4f:98:0d: 16:97:e0:29:eb:fe:16:ba:f5:63:65:86:f5:64:68: a7:cf:18:c8:fe:6a:1b:2b:d4:d3:ce:8e:ee:20:0f: 09:da:fe:62:f0:c1:b7:bf:72:b7:c9:ff:65:82:11: 81:15:29:dd:f8:8b:6c:95:7f:19:3a:96:27:32:80: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:09:7A:09:EA:F7:91:19:13:65:79:EA:FD:B3:58:BD:60:BD:B4 X509v3 Authority Key Identifier: keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/mQQJegnq95EZE2V56v2zWL1gvbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.56.0/24 Signature Algorithm: sha256WithRSAEncryption 86:13:77:33:68:4b:9d:4a:96:73:61:20:29:c7:17:dc:32:fd: 8a:c7:05:ce:39:3b:d5:96:66:b9:53:0c:6e:38:80:1c:99:d4: 94:3d:e4:42:0d:b4:32:15:7d:73:c2:f3:97:71:71:40:d9:17: ac:cc:c7:ee:b2:49:36:4d:a1:43:33:7f:21:b4:e2:34:b4:88: 15:c8:42:47:34:78:82:51:35:92:75:f3:89:53:bf:d3:8f:a8: 59:19:41:ef:de:1d:d3:9c:17:be:d6:9b:1f:5a:13:8e:44:34: af:ae:17:5b:f4:55:60:b8:0f:61:70:ec:4e:e8:67:5c:4c:f2: 40:e9:03:84:62:07:5f:2a:52:44:b9:73:ff:e8:a0:09:22:87: 4d:e6:a6:8f:aa:37:ae:77:ea:55:1e:bf:a6:da:88:66:68:a4: b7:07:a5:ce:6c:0c:4a:49:88:ea:a0:4a:a2:11:2b:6c:c4:39: d9:0e:7f:fc:c3:90:e5:13:40:e7:ba:c2:14:fd:7f:80:e5:9e: 05:5d:d4:88:21:13:5f:5b:53:4e:3b:1e:8a:d0:c7:62:0e:33: 41:27:2b:9f:ad:8c:17:f3:6e:17:cd:6f:c7:b8:e1:13:54:10: 44:c4:17:85:f3:9b:bf:e2:7b:e9:32:76:a9:c8:62:42:65:d9: 9a:e6:3f:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87k4tXz8g0Bsj27AxigwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmEwNzliN2YwMjE2YTZmNjY3M2M5NzFjMmFmYWRkNWFl OTQyZWEwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTA0MDk3YTA5ZWFmNzkxMTkxMzY1NzllYWZkYjM1OGJkNjBiZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwLEZ4AL/XKrVUFsfnbrGWbBadPe pfr4E71u/vp5GtuvIH3gUsSTy2JWBnTMtLp9F/OG4YatDvoXXsVCA5GqeyEuNDCE b6a0axmmH45k2oqufVUou3mJn7h0hi+YROM+sf8rllfaOyxzy1ZIRNZWjvFl1BwK N7es8+grJyGLw+xhnGQipDaHMf1abCe/2hvAUdPBhbfDyE324WgVNWO5LeaYq7NS j78HfJVnoYGJQpfax8abfGxde+XGDcdF/EFPmA0Wl+Ap6/4WuvVjZYb1ZGinzxjI /mobK9TTzo7uIA8J2v5i8MG3v3K3yf9lghGBFSnd+ItslX8ZOpYnMoDsTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkECXoJ6veRGRNleer9s1i9YL20MB8GA1UdIwQY MBaAFEm6B5t/Aham9mc8lxwq+t1a6ULqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYt M2UzY2Q5NWE1YzJlLzEvbVFRSmVnbnE5NUVaRTJWNTZ2MnpXTDFndmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYtM2UzY2Q5NWE1YzJl LzEvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9o4MA0G CSqGSIb3DQEBCwUAA4IBAQCGE3czaEudSpZzYSApxxfcMv2KxwXOOTvVlma5Uwxu OIAcmdSUPeRCDbQyFX1zwvOXcXFA2ReszMfuskk2TaFDM38htOI0tIgVyEJHNHiC UTWSdfOJU7/Tj6hZGUHv3h3TnBe+1psfWhOORDSvrhdb9FVguA9hcOxO6GdcTPJA 6QOEYgdfKlJEuXP/6KAJIodN5qaPqjeud+pVHr+m2ohmaKS3B6XObAxKSYjqoEqi EStsxDnZDn/8w5DlE0DnusIU/X+A5Z4FXdSIIRNfW1NOOx6K0MdiDjNBJyufrYwX 824XzW/HuOETVBBExBeF85u/4nvpMnapyGJCZdma5j8S -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:54 2026 by rpki-client