This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/mDqresBCjx5tB2O9064HotHQuTM.roa File: mDqresBCjx5tB2O9064HotHQuTM.roa (raw, json) Hash identifier: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM= Subject key identifier: 98:3A:AB:7A:C0:42:8F:1E:6D:07:63:BD:D3:AE:07:A2:D1:D0:B9:33 Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Certificate serial: 019B797DDC1E29353846F5CE2A23E25C9E28 Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/mDqresBCjx5tB2O9064HotHQuTM.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210190 IP address blocks: 194.36.44.0/24 maxlen: 24 2a0d:8240::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:dc:1e:29:35:38:46:f5:ce:2a:23:e2:5c:9e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=983aab7ac0428f1e6d0763bdd3ae07a2d1d0b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:ed:7e:4c:66:0c:3c:69:2a:cb:78:cd:6b: f3:23:10:bf:d7:82:cf:40:57:91:21:4f:2e:70:0d: a3:6f:39:12:72:ed:49:41:65:d6:ae:41:1a:4c:b1: 99:a5:96:50:61:bd:98:cd:cf:ac:94:1c:7a:8e:04: 53:5c:b7:7c:12:2f:cb:35:b1:74:3a:bf:3f:1e:75: fd:2b:c0:6d:40:9a:3c:61:65:4e:79:72:aa:c0:14: dc:13:e3:9e:dc:dc:af:7f:ae:00:7d:88:ba:1a:b0: 07:a0:0d:66:6b:8a:5e:e0:bc:00:20:cf:0c:cc:4f: bf:d1:76:6d:25:43:a2:22:86:e7:ad:e1:37:fb:02: 82:36:d4:da:23:c4:51:52:73:e2:40:e2:66:16:bf: 37:a8:5d:79:1e:25:0b:2a:71:a9:43:7d:43:1d:f1: 68:a4:07:27:2b:ee:1c:32:1a:4f:f6:7c:6b:a5:72: 84:f2:0b:78:44:c1:29:7c:3b:be:5d:fb:dc:32:c8: 79:95:43:53:26:f7:4e:49:e4:05:39:50:74:8f:13: 9d:d2:e5:a8:ab:0b:6f:70:83:bb:85:4f:ba:a0:a5: db:8d:80:19:c7:5f:af:84:b4:b4:c0:f1:f4:3d:76: 98:fd:56:51:04:8d:36:4f:64:0e:b2:db:db:55:81: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:AB:7A:C0:42:8F:1E:6D:07:63:BD:D3:AE:07:A2:D1:D0:B9:33 X509v3 Authority Key Identifier: keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/mDqresBCjx5tB2O9064HotHQuTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.44.0/24 IPv6: 2a0d:8240::/29 Signature Algorithm: sha256WithRSAEncryption 14:20:7d:87:53:5e:8e:e1:36:01:6b:e5:2e:3e:31:f1:7b:0b: eb:06:00:e9:f1:f0:82:20:bb:c8:66:40:e4:08:a1:31:30:54: 7f:f9:e0:85:7f:64:40:4a:b2:0c:fa:1f:00:f6:09:c8:12:29: fa:95:3f:97:c9:56:09:8f:fa:4f:dd:5b:7c:ec:90:7f:3f:60: ce:c8:c7:13:bc:2a:55:2c:61:23:7e:3d:27:e5:7a:f0:3e:c7: 57:dc:c1:52:ed:15:92:5e:88:d0:d7:80:45:b5:42:cc:c6:e6: 17:d3:80:b1:b8:8a:18:e1:d2:22:54:fe:77:74:21:d4:44:1c: db:5f:2c:30:a3:af:ce:08:64:c6:77:de:93:0a:8c:81:31:37: f9:68:a6:54:6c:c6:b3:db:2d:d0:f7:15:ec:56:a6:f3:2f:d2: 0c:20:93:7d:f5:ce:25:35:cb:01:a5:4a:27:04:e2:7c:d5:76: 3f:55:88:03:f1:b6:4a:d9:d0:6e:ce:46:fa:d3:69:b1:37:45: 08:0d:36:1c:8c:6c:2a:99:04:cb:bd:18:c6:90:ca:c1:4a:cb: db:fb:74:7e:5f:20:26:54:06:e3:dd:e7:dd:c2:f8:90:4b:6e: 08:9e:8b:5d:b0:0f:b0:0f:d4:d3:6f:1e:58:ab:28:8f:39:d3: ca:1a:d8:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fdweKTU4RvXOKiPiXJ4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjU5ZjQxNzc5ZTZmMjQzNWY1OWYxYTE3MWMwODBhNWE3 YTQ0ZDIwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODNhYWI3YWMwNDI4ZjFlNmQwNzYzYmRkM2FlMDdhMmQxZDBiOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlrtfkxmDDxpKst4zWvzIxC/14LP QFeRIU8ucA2jbzkScu1JQWXWrkEaTLGZpZZQYb2Yzc+slBx6jgRTXLd8Ei/LNbF0 Or8/HnX9K8BtQJo8YWVOeXKqwBTcE+Oe3Nyvf64AfYi6GrAHoA1ma4pe4LwAIM8M zE+/0XZtJUOiIobnreE3+wKCNtTaI8RRUnPiQOJmFr83qF15HiULKnGpQ31DHfFo pAcnK+4cMhpP9nxrpXKE8gt4RMEpfDu+XfvcMsh5lUNTJvdOSeQFOVB0jxOd0uWo qwtvcIO7hU+6oKXbjYAZx1+vhLS0wPH0PXaY/VZRBI02T2QOstvbVYE+MQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJg6q3rAQo8ebQdjvdOuB6LR0LkzMB8GA1UdIwQY MBaAFMm1n0F3nm8kNfWfGhccCApaekTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTct NzIzNjdjYmIxOWVmLzEvbURxcmVzQkNqeDV0QjJPOTA2NEhvdEhRdVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTctNzIzNjdjYmIxOWVm LzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwiQsMA0E AgACMAcDBQMqDYJAMA0GCSqGSIb3DQEBCwUAA4IBAQAUIH2HU16O4TYBa+UuPjHx ewvrBgDp8fCCILvIZkDkCKExMFR/+eCFf2RASrIM+h8A9gnIEin6lT+XyVYJj/pP 3Vt87JB/P2DOyMcTvCpVLGEjfj0n5XrwPsdX3MFS7RWSXojQ14BFtULMxuYX04Cx uIoY4dIiVP53dCHURBzbXywwo6/OCGTGd96TCoyBMTf5aKZUbMaz2y3Q9xXsVqbz L9IMIJN99c4lNcsBpUonBOJ81XY/VYgD8bZK2dBuzkb602mxN0UIDTYcjGwqmQTL vRjGkMrBSsvb+3R+XyAmVAbj3efdwviQS24InotdsA+wD9TTbx5YqyiPOdPKGtiJ -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:37 2026 by rpki-client