This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa File: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (raw, json) Hash identifier: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw= Subject key identifier: 9A:A9:DF:41:90:69:F2:1E:D6:BC:E0:1D:73:EF:20:A9:D1:D8:AA:DC Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Certificate serial: 019B7B3640D6C5F2AC5EDB7C07F0300B3877 Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58265 IP address blocks: 185.200.224.0/22 maxlen: 24 193.138.156.0/22 maxlen: 24 193.169.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:40:d6:c5:f2:ac:5e:db:7c:07:f0:30:0b:38:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aa9df419069f21ed6bce01d73ef20a9d1d8aadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:28:88:f7:13:a6:74:eb:b4:18:87:1b:f2: 58:29:f3:32:5a:79:e6:ce:d3:dc:2c:06:3e:95:54: fe:ad:f9:17:60:54:7e:99:af:12:38:47:d1:a0:60: c3:e2:06:79:ac:d5:bf:6b:3a:cd:32:d9:d2:0e:9b: e7:b4:8d:6b:cb:4c:b1:1c:44:be:75:07:89:92:15: 39:59:aa:fc:9a:ac:21:e3:cd:8f:82:d6:78:b8:ce: bf:73:49:91:6e:a6:8a:6b:28:3f:18:87:f9:49:9c: e2:6e:16:3f:90:38:e3:3e:96:2f:a5:3d:4f:2a:6d: 8e:17:a2:20:30:92:eb:69:4e:91:14:d4:88:50:26: 99:c2:e4:27:0b:9b:8c:00:dd:eb:ce:65:96:85:2a: 6e:cb:3e:23:76:61:e6:80:fc:ee:74:bc:df:a3:16: 1a:c2:41:85:8a:df:26:00:2b:67:80:52:56:30:39: 60:74:82:98:f6:75:ad:0c:76:74:7c:f9:36:5c:4b: 0e:06:fe:12:61:7d:2f:23:ab:dd:bc:ac:1a:a7:f5: 89:f0:e1:e3:f8:43:c7:83:4d:2d:6a:a3:2e:04:be: da:cc:d0:88:2f:8e:e2:6c:b4:f7:60:77:3f:ee:f4: ea:37:ad:53:96:b1:2b:1a:83:8d:e2:16:0b:c3:7a: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A9:DF:41:90:69:F2:1E:D6:BC:E0:1D:73:EF:20:A9:D1:D8:AA:DC X509v3 Authority Key Identifier: keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.224.0/22 193.138.156.0/22 193.169.184.0/23 Signature Algorithm: sha256WithRSAEncryption b6:8b:a2:05:fe:fd:b1:a8:d6:76:78:8c:20:f7:3a:cf:cb:58: c2:0d:e9:e4:d0:4d:2a:8a:70:e7:db:27:ae:33:20:11:fb:15: be:a0:a2:88:d0:97:0b:8a:b0:26:98:8c:db:40:33:28:49:eb: 0d:b2:d0:dc:29:8c:39:5b:da:46:5b:ed:76:c9:79:12:69:3a: e9:16:75:66:38:dd:7c:10:19:ad:eb:c4:d6:e2:0d:0c:f0:61: 5a:0e:49:aa:e7:e2:49:0b:6a:b9:83:6a:1b:0a:1a:df:a3:35: 43:cc:f6:b7:9f:c2:91:59:d0:1c:4d:7b:d7:1c:9f:33:f3:fa: 16:9a:a8:b6:6e:06:26:4f:2f:2e:4b:38:ba:f1:ce:95:9d:3b: 1b:3c:59:d9:52:0c:91:36:20:b3:ec:85:b3:c0:89:7c:ec:73: d0:d6:d3:4c:10:29:45:19:5a:2d:61:b0:f4:db:cf:7d:3c:ad: 57:db:42:cf:b0:1f:3d:36:dc:32:d7:90:5d:e3:c4:eb:20:ee: ff:2f:d0:c2:8d:23:00:ea:eb:f0:5e:00:ab:d4:60:38:28:f0: 6a:0d:a9:cf:c7:47:99:79:08:6b:35:e2:db:c0:fd:be:41:01: b2:cd:a5:ec:7f:cb:23:dc:e3:fe:2d:e7:d4:f6:21:08:85:88: 14:81:fe:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NkDWxfKsXtt8B/AwCzh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh MWE1OWQwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWE5ZGY0MTkwNjlmMjFlZDZiY2UwMWQ3M2VmMjBhOWQxZDhhYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkUoiPcTpnTrtBiHG/JYKfMyWnnm ztPcLAY+lVT+rfkXYFR+ma8SOEfRoGDD4gZ5rNW/azrNMtnSDpvntI1ry0yxHES+ dQeJkhU5War8mqwh482PgtZ4uM6/c0mRbqaKayg/GIf5SZzibhY/kDjjPpYvpT1P Km2OF6IgMJLraU6RFNSIUCaZwuQnC5uMAN3rzmWWhSpuyz4jdmHmgPzudLzfoxYa wkGFit8mACtngFJWMDlgdIKY9nWtDHZ0fPk2XEsOBv4SYX0vI6vdvKwap/WJ8OHj +EPHg00taqMuBL7azNCIL47ibLT3YHc/7vTqN61TlrErGoON4hYLw3onWwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJqp30GQafIe1rzgHXPvIKnR2KrcMB8GA1UdIwQY MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt ZjhjOWUwOTYyMzU0LzEvbXFuZlFaQnA4aDdXdk9BZGMtOGdxZEhZcXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0 LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCucjgAwQC wYqcAwQBwam4MA0GCSqGSIb3DQEBCwUAA4IBAQC2i6IF/v2xqNZ2eIwg9zrPy1jC Denk0E0qinDn2yeuMyAR+xW+oKKI0JcLirAmmIzbQDMoSesNstDcKYw5W9pGW+12 yXkSaTrpFnVmON18EBmt68TW4g0M8GFaDkmq5+JJC2q5g2obChrfozVDzPa3n8KR WdAcTXvXHJ8z8/oWmqi2bgYmTy8uSzi68c6VnTsbPFnZUgyRNiCz7IWzwIl87HPQ 1tNMEClFGVotYbD02899PK1X20LPsB89Ntwy15Bd48TrIO7/L9DCjSMA6uvwXgCr 1GA4KPBqDanPx0eZeQhrNeLbwP2+QQGyzaXsf8sj3OP+LefU9iEIhYgUgf4N -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:26 2026 by rpki-client