This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Mqf6CjvjiOytmfKew5wMIrFMct0.roa File: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (raw, json) Hash identifier: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw= Subject key identifier: 32:A7:FA:0A:3B:E3:88:EC:AD:99:F2:9E:C3:9C:0C:22:B1:4C:72:DD Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 019B7E3932E40E4395BD349BF40A120A3BAD Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Mqf6CjvjiOytmfKew5wMIrFMct0.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 85.153.12.0/22 maxlen: 22 85.153.24.0/22 maxlen: 22 85.153.35.0/24 maxlen: 24 85.153.36.0/22 maxlen: 22 85.153.40.0/24 maxlen: 24 85.153.41.0/24 maxlen: 24 85.153.42.0/24 maxlen: 24 85.153.48.0/22 maxlen: 22 85.153.52.0/22 maxlen: 22 85.153.59.0/24 maxlen: 24 85.153.60.0/22 maxlen: 22 85.153.66.0/24 maxlen: 24 85.153.67.0/24 maxlen: 24 85.153.72.0/24 maxlen: 24 85.153.73.0/24 maxlen: 24 85.153.88.0/22 maxlen: 22 85.153.96.0/22 maxlen: 22 85.153.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:e4:0e:43:95:bd:34:9b:f4:0a:12:0a:3b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32a7fa0a3be388ecad99f29ec39c0c22b14c72dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:ed:c0:29:64:3d:70:2a:eb:22:6e:c9:88: eb:c4:b3:95:e5:02:99:72:ae:38:1a:d3:a6:5d:de: 88:eb:f8:7f:8f:ca:bd:2b:f4:82:4f:58:04:28:f1: d8:e5:b5:6c:fb:5f:e5:7a:7f:10:a1:e9:05:1b:1c: cc:df:f9:8f:87:58:77:ac:79:a1:b1:37:ba:1a:30: d3:a4:72:9b:1e:fe:92:f6:9e:bf:26:70:fe:4e:65: 10:70:1d:ff:b7:53:52:1f:0e:0e:f4:26:72:5d:f3: ee:d0:df:94:1b:4c:a0:17:87:f4:11:2f:4d:8a:3e: 45:78:e1:54:64:ee:57:01:84:45:ff:47:87:15:39: 2e:56:bd:90:0e:cd:65:e2:24:06:6f:44:39:dd:96: 02:49:a1:89:28:e1:c6:94:cc:55:a0:e6:73:52:43: 50:42:50:ab:47:79:28:36:d2:ad:c8:8d:ef:7b:67: cc:94:05:f2:2a:b9:f7:76:47:cf:a0:bc:7a:8c:5d: 1a:3d:7a:bf:ed:7f:38:c5:b9:33:43:fa:5b:f6:dd: 15:a6:ef:0b:c9:75:5c:85:ea:a9:14:d7:4d:68:5e: 4f:0d:23:da:3f:36:5c:cc:10:16:90:ce:93:8c:54: f0:e3:e5:cc:95:fa:8d:88:6d:bf:53:ff:19:b5:3a: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A7:FA:0A:3B:E3:88:EC:AD:99:F2:9E:C3:9C:0C:22:B1:4C:72:DD X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Mqf6CjvjiOytmfKew5wMIrFMct0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.12.0/22 85.153.24.0/22 85.153.35.0-85.153.42.255 85.153.48.0/21 85.153.59.0-85.153.63.255 85.153.66.0/23 85.153.72.0/23 85.153.88.0/22 85.153.96.0/22 85.153.114.0/24 Signature Algorithm: sha256WithRSAEncryption 31:0f:f3:fa:67:4a:0b:04:df:3d:b2:a8:33:d7:ce:ad:6c:8d: 23:35:87:e8:5d:7a:d5:1d:5d:85:42:95:38:80:f9:8c:b3:55: 73:f5:48:c2:97:86:31:36:ab:d0:3e:26:23:0e:b5:59:2a:bf: 79:1b:30:6d:1f:29:9d:7f:12:3d:6f:70:38:39:81:5e:93:83: 06:71:97:eb:72:f8:02:43:1e:da:d8:47:50:a0:3e:a9:5d:96: 85:7b:bf:19:2f:7b:36:40:29:c3:61:75:3e:c7:7c:74:35:19: 84:2d:2a:41:c4:d4:ed:2c:d6:8b:b1:16:da:49:e2:f8:08:44: 4d:ab:cc:59:97:bb:48:c3:0b:83:eb:49:37:fd:60:28:04:b3: 35:60:99:8e:45:c6:ef:b8:0e:95:77:81:34:f1:f5:19:5f:90: f5:09:65:b7:4b:5b:18:88:67:0c:47:c6:b4:b4:ab:70:e6:2f: b2:f3:b5:b3:4d:94:2f:d2:35:d7:88:95:f1:76:eb:13:54:55: cc:45:56:a7:11:e0:8f:bd:ad:4f:5c:b4:c4:c8:78:97:17:2d: 7e:e7:53:ac:23:a4:17:d0:0b:a7:c1:84:37:b9:ff:b3:9e:1d: da:90:ad:70:17:30:69:ec:1e:ff:ad:a1:b4:5b:d3:f8:40:be: b7:33:b5:b1 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt+OTLkDkOVvTSb9AoSCjutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmE3ZmEwYTNiZTM4OGVjYWQ5OWYyOWVjMzljMGMyMmIxNGM3MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/twClkPXAq6yJuyYjrxLOV5QKZ cq44GtOmXd6I6/h/j8q9K/SCT1gEKPHY5bVs+1/len8QoekFGxzM3/mPh1h3rHmh sTe6GjDTpHKbHv6S9p6/JnD+TmUQcB3/t1NSHw4O9CZyXfPu0N+UG0ygF4f0ES9N ij5FeOFUZO5XAYRF/0eHFTkuVr2QDs1l4iQGb0Q53ZYCSaGJKOHGlMxVoOZzUkNQ QlCrR3koNtKtyI3ve2fMlAXyKrn3dkfPoLx6jF0aPXq/7X84xbkzQ/pb9t0Vpu8L yXVcheqpFNdNaF5PDSPaPzZczBAWkM6TjFTw4+XMlfqNiG2/U/8ZtTrQwwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFDKn+go744jsrZnynsOcDCKxTHLdMB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvTXFmNkNqdmppT3l0bWZLZXc1d01JckZNY3QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCVZkMAwQC VZkYMAwDBABVmSMDBABVmSoDBANVmTAwDAMEAFWZOwMEBlWZAAMEAVWZQgMEAVWZ SAMEAlWZWAMEAlWZYAMEAFWZcjANBgkqhkiG9w0BAQsFAAOCAQEAMQ/z+mdKCwTf PbKoM9fOrWyNIzWH6F161R1dhUKVOID5jLNVc/VIwpeGMTar0D4mIw61WSq/eRsw bR8pnX8SPW9wODmBXpODBnGX63L4AkMe2thHUKA+qV2WhXu/GS97NkApw2F1Psd8 dDUZhC0qQcTU7SzWi7EW2kni+AhETavMWZe7SMMLg+tJN/1gKASzNWCZjkXG77gO lXeBNPH1GV+Q9Qllt0tbGIhnDEfGtLSrcOYvsvO1s02UL9I114iV8XbrE1RVzEVW pxHgj72tT1y0xMh4lxctfudTrCOkF9ALp8GEN7n/s54d2pCtcBcwaewe/62htFvT +EC+tzO1sQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:04 2026 by rpki-client