This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/mqCiksvtv7NEcDhF_Ulx4UnWl9s.roa File: mqCiksvtv7NEcDhF_Ulx4UnWl9s.roa (raw, json) Hash identifier: EqUlRGoT47VGpqC0rJ9BPLdc8PyfYMLLVcRJlo1cGOM= Subject key identifier: 9A:A0:A2:92:CB:ED:BF:B3:44:70:38:45:FD:49:71:E1:49:D6:97:DB Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717 Certificate serial: 019B76EB749169F7E0217AD1E5AE84E6C53A Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/mqCiksvtv7NEcDhF_Ulx4UnWl9s.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202894 IP address blocks: 185.149.248.0/24 maxlen: 24 185.149.249.0/24 maxlen: 24 185.149.250.0/24 maxlen: 24 185.149.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:74:91:69:f7:e0:21:7a:d1:e5:ae:84:e6:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aa0a292cbedbfb344703845fd4971e149d697db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:04:99:2c:e8:bf:e2:d7:75:2e:1a:e5:e2: 09:b8:34:53:9e:7f:9c:a1:c8:d6:28:04:d1:22:0b: 9e:c4:49:a8:90:5a:06:13:3d:2b:4a:91:c4:ca:3f: 7c:71:6a:f4:62:3a:31:7e:90:f8:ab:1a:65:de:47: bb:39:2d:6d:83:34:1a:06:99:17:81:72:1d:a5:f9: 95:14:4a:c8:75:3d:f3:0b:48:21:ba:d9:69:a2:7b: 33:77:58:f9:87:c2:c6:6f:74:7d:3d:27:b2:74:0e: 2f:ac:f9:2b:75:5d:48:99:27:d7:f9:1c:b2:24:58: 82:67:af:de:09:f3:32:a0:99:4f:6a:04:72:04:65: 0a:00:0f:0f:de:f0:eb:e9:5c:01:6f:83:1e:c2:97: cd:c1:fa:c6:13:2b:e6:ef:fc:1d:b9:ee:49:16:a0: 79:73:ef:02:76:ab:07:a2:34:d1:47:01:4b:8e:fa: 74:e1:f3:19:2b:80:db:d5:cd:8a:fa:9d:4b:60:56: 23:34:04:af:28:47:74:54:f1:62:8e:53:78:94:86: 92:92:9a:7f:58:84:28:f2:4f:f5:ba:71:ea:7f:45: d8:3b:c1:58:91:7f:aa:5b:cb:05:a2:a9:4b:0f:cb: 5a:55:56:be:95:eb:16:93:c5:8d:7f:4a:e8:eb:1b: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:A2:92:CB:ED:BF:B3:44:70:38:45:FD:49:71:E1:49:D6:97:DB X509v3 Authority Key Identifier: keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/mqCiksvtv7NEcDhF_Ulx4UnWl9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.248.0/22 Signature Algorithm: sha256WithRSAEncryption 82:d3:30:42:e5:e3:da:da:1e:16:1f:0c:06:b1:74:58:9d:7f: 67:62:f5:b5:33:48:28:f8:0c:0c:78:05:5c:1c:7d:38:fb:fa: 5d:55:2a:a9:a8:a5:c6:db:99:9b:de:0b:5b:92:f6:fa:1f:ae: 2c:d7:08:eb:6d:d8:35:da:f6:38:66:22:a4:35:d9:a5:1f:bc: 92:ca:dc:01:8e:14:e3:0e:ed:cf:a0:ee:39:cd:de:58:a3:91: e3:53:ee:3e:d6:91:4c:75:6a:90:15:40:60:d1:ff:1a:f1:ec: 46:a2:2c:9e:67:69:ee:00:4f:ed:ff:7f:c2:12:de:b9:e2:b7: 3b:4a:80:c8:c9:7b:5b:a2:0f:a8:5a:8c:4c:35:71:09:be:43: f0:1d:72:9e:b6:3b:92:3b:5c:e8:88:bf:98:a3:75:84:43:da: db:3b:e1:29:7e:b5:24:0b:14:56:3d:00:2a:45:0d:15:07:a8: 1f:96:7b:13:6e:8b:ec:b8:57:62:a5:34:09:5a:a4:92:de:fd: a2:d3:59:53:d0:c3:89:da:0d:c5:68:db:ca:60:2c:b3:95:fd: fc:75:59:ea:30:cd:09:bf:3e:fc:7e:a9:b0:35:d2:1f:ec:ca: b5:9d:3f:92:58:c6:c2:83:55:9e:38:5d:37:54:38:8b:11:4c: b0:49:28:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263SRaffgIXrR5a6E5sU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTFkM2RkYzZhZGQ0ODNiNzYxYWMwNDc2MjY5NTMzZmU3 ZWE3MTcwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWEwYTI5MmNiZWRiZmIzNDQ3MDM4NDVmZDQ5NzFlMTQ5ZDY5N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFsEmSzov+LXdS4a5eIJuDRTnn+c ocjWKATRIguexEmokFoGEz0rSpHEyj98cWr0YjoxfpD4qxpl3ke7OS1tgzQaBpkX gXIdpfmVFErIdT3zC0ghutlponszd1j5h8LGb3R9PSeydA4vrPkrdV1ImSfX+Ryy JFiCZ6/eCfMyoJlPagRyBGUKAA8P3vDr6VwBb4MewpfNwfrGEyvm7/wdue5JFqB5 c+8CdqsHojTRRwFLjvp04fMZK4Db1c2K+p1LYFYjNASvKEd0VPFijlN4lIaSkpp/ WIQo8k/1unHqf0XYO8FYkX+qW8sFoqlLD8taVVa+lesWk8WNf0ro6xtktwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqgopLL7b+zRHA4Rf1JceFJ1pfbMB8GA1UdIwQY MBaAFBZR093GrdSDt2GsBHYmlTP+fqcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUt MjA1NGY2ZTYxOTIyLzEvbXFDaWtzdnR2N05FY0RoRl9VbHg0VW5XbDlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUtMjA1NGY2ZTYxOTIy LzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZX4MA0G CSqGSIb3DQEBCwUAA4IBAQCC0zBC5ePa2h4WHwwGsXRYnX9nYvW1M0go+AwMeAVc HH04+/pdVSqpqKXG25mb3gtbkvb6H64s1wjrbdg12vY4ZiKkNdmlH7ySytwBjhTj Du3PoO45zd5Yo5HjU+4+1pFMdWqQFUBg0f8a8exGoiyeZ2nuAE/t/3/CEt654rc7 SoDIyXtbog+oWoxMNXEJvkPwHXKetjuSO1zoiL+Yo3WEQ9rbO+EpfrUkCxRWPQAq RQ0VB6gflnsTbovsuFdipTQJWqSS3v2i01lT0MOJ2g3FaNvKYCyzlf38dVnqMM0J vz78fqmwNdIf7Mq1nT+SWMbCg1WeOF03VDiLEUywSSjr -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:17 2026 by rpki-client