This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/M58qgi6VUeCk-By8lfph0n_DDmE.roa File: M58qgi6VUeCk-By8lfph0n_DDmE.roa (raw, json) Hash identifier: EY44xP7Z9BkJPTOaksViRj5GMqLeOgcwu8qx3t9cuLg= Subject key identifier: 33:9F:2A:82:2E:95:51:E0:A4:F8:1C:BC:95:FA:61:D2:7F:C3:0E:61 Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Certificate serial: 019B76EACD9EC110241243B50B7DC5DE3377 Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/M58qgi6VUeCk-By8lfph0n_DDmE.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58188 IP address blocks: 91.193.244.0/22 maxlen: 22 91.193.244.0/24 maxlen: 24 91.193.245.0/24 maxlen: 24 91.193.246.0/24 maxlen: 24 91.193.247.0/24 maxlen: 24 193.27.42.0/24 maxlen: 24 2a0e:9ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cd:9e:c1:10:24:12:43:b5:0b:7d:c5:de:33:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339f2a822e9551e0a4f81cbc95fa61d27fc30e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:05:6a:a4:a6:00:35:c8:7e:19:2e:ec:0f: e1:ef:9a:ce:62:64:83:71:8f:0b:c6:e0:53:fd:fe: bf:9c:1f:68:ea:67:ce:0d:e1:d7:a6:17:60:f5:86: 12:ab:c1:b2:13:4f:a1:b9:66:84:2c:43:fa:db:c5: 8a:42:2f:62:a7:32:53:cd:8e:9f:97:89:0f:eb:dd: 24:62:62:e5:19:0d:5d:a6:0a:bd:d8:e2:ef:66:ec: c1:69:37:58:3f:67:60:9e:88:ff:ed:4f:3c:2b:97: 27:2e:32:68:5c:99:ab:db:23:dc:77:ef:67:ae:a8: 6b:c8:4d:1a:96:db:48:0b:98:d7:d9:04:cb:44:85: a7:d5:42:ad:88:58:01:cc:08:ab:1e:11:ad:58:7c: 4f:b1:bb:a9:56:33:ae:a6:a7:f8:56:8f:17:2a:be: 8f:48:b1:57:e5:bf:be:3f:e5:e3:c1:8d:03:d2:3d: 30:85:fa:bc:b5:92:a8:b1:bb:8f:71:cf:10:bc:ad: a0:2e:ea:6b:e9:dc:f6:b6:1f:8c:03:d1:58:60:3c: cf:17:97:b9:d6:b3:b6:bf:23:91:9f:0e:da:b1:20: 11:d9:0f:f0:9e:44:9b:f7:90:13:32:cf:e7:1e:f2: e7:eb:80:b2:48:db:de:f2:98:7a:4a:c0:e5:ef:8b: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:2A:82:2E:95:51:E0:A4:F8:1C:BC:95:FA:61:D2:7F:C3:0E:61 X509v3 Authority Key Identifier: keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/M58qgi6VUeCk-By8lfph0n_DDmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.244.0/22 193.27.42.0/24 IPv6: 2a0e:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption bf:1d:f3:48:92:2b:11:83:9f:08:c0:82:2d:54:2a:38:40:6e: 04:c1:7e:ca:21:4b:d7:4f:de:81:ae:1b:47:44:aa:0d:f7:a9: a4:68:7e:a2:cf:c1:aa:1d:00:a3:2d:9e:c7:48:0a:00:1a:7d: ff:6b:b4:f1:cb:c3:f8:38:42:5b:af:e8:81:47:8d:40:d1:71: ea:e1:f0:e7:fa:7a:51:7f:aa:fd:27:31:21:97:37:03:d6:5a: 60:65:8b:25:23:57:cb:6c:78:b7:ab:e5:58:04:26:0c:cd:07: 97:f0:30:ba:32:79:87:f8:5d:e5:98:54:08:f3:d2:1c:5d:d1: 53:da:9c:c4:17:6c:f8:e8:3b:f8:f8:08:bb:b1:e5:46:9f:22: 5f:7e:66:3b:89:05:68:23:50:52:54:4a:ef:50:38:5d:4e:f9: c6:a4:de:29:76:97:5c:66:89:51:e9:3b:24:fd:6e:1f:80:4e: c5:cb:6a:12:5b:88:3d:b8:fe:49:2a:4d:d1:61:d0:3d:5e:22: 32:dd:e7:39:6d:06:b7:5c:2b:9c:4e:99:79:17:69:e7:ad:62: f7:a7:b3:1b:15:bd:e5:1d:26:54:66:e1:90:80:89:1b:98:95: c8:8e:7e:3c:da:da:69:8a:83:ae:b9:3b:40:f6:ec:3a:a6:bb: 5f:1c:2b:66 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26s2ewRAkEkO1C33F3jN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy ZTdiMTQwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzlmMmE4MjJlOTU1MWUwYTRmODFjYmM5NWZhNjFkMjdmYzMwZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZYFaqSmADXIfhku7A/h75rOYmSD cY8LxuBT/f6/nB9o6mfODeHXphdg9YYSq8GyE0+huWaELEP628WKQi9ipzJTzY6f l4kP690kYmLlGQ1dpgq92OLvZuzBaTdYP2dgnoj/7U88K5cnLjJoXJmr2yPcd+9n rqhryE0alttIC5jX2QTLRIWn1UKtiFgBzAirHhGtWHxPsbupVjOupqf4Vo8XKr6P SLFX5b++P+XjwY0D0j0whfq8tZKosbuPcc8QvK2gLupr6dz2th+MA9FYYDzPF5e5 1rO2vyORnw7asSAR2Q/wnkSb95ATMs/nHvLn64CySNve8ph6SsDl74vDqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDOfKoIulVHgpPgcvJX6YdJ/ww5hMB8GA1UdIwQY MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt ZTBhMjNkYTVlNjI4LzEvTTU4cWdpNlZVZUNrLUJ5OGxmcGgwbl9ERG1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4 LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8H0AwQA wRsqMA0EAgACMAcDBQAqDprAMA0GCSqGSIb3DQEBCwUAA4IBAQC/HfNIkisRg58I wIItVCo4QG4EwX7KIUvXT96BrhtHRKoN96mkaH6iz8GqHQCjLZ7HSAoAGn3/a7Tx y8P4OEJbr+iBR41A0XHq4fDn+npRf6r9JzEhlzcD1lpgZYslI1fLbHi3q+VYBCYM zQeX8DC6MnmH+F3lmFQI89IcXdFT2pzEF2z46Dv4+Ai7seVGnyJffmY7iQVoI1BS VErvUDhdTvnGpN4pdpdcZolR6Tsk/W4fgE7Fy2oSW4g9uP5JKk3RYdA9XiIy3ec5 bQa3XCucTpl5F2nnrWL3p7MbFb3lHSZUZuGQgIkbmJXIjn482tppioOuuTtA9uw6 prtfHCtm -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:42 2026 by rpki-client