This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/McQ1AOjlDwgZAqlNis7OMo30suU.roa File: McQ1AOjlDwgZAqlNis7OMo30suU.roa (raw, json) Hash identifier: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE= Subject key identifier: 31:C4:35:00:E8:E5:0F:08:19:02:A9:4D:8A:CE:CE:32:8D:F4:B2:E5 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F83956D9CEBCD0AF3C4CDDBA28F8E8A Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/McQ1AOjlDwgZAqlNis7OMo30suU.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42962 IP address blocks: 5.181.224.0/24 maxlen: 24 194.61.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:95:6d:9c:eb:cd:0a:f3:c4:cd:db:a2:8f:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31c43500e8e50f081902a94d8acece328df4b2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:a9:93:f0:cd:f7:52:f4:2f:c2:c2:c4:9a: 74:8a:6c:ab:93:13:07:ed:32:17:ff:28:cb:65:f9: cb:cb:a0:9b:37:35:b4:00:7c:c9:6f:ae:35:65:3e: 4e:e1:c2:e8:65:ef:df:74:d7:ee:8b:12:69:1b:47: 2e:50:38:09:ba:07:c0:f3:09:9f:5f:75:56:bb:02: c4:f1:f6:8a:f3:37:6e:dd:18:c5:91:42:21:81:7d: 72:82:db:1e:71:77:40:4d:b1:89:64:71:08:17:d9: 2d:13:f9:c5:3f:df:0d:8a:89:91:49:a1:e4:fb:35: 91:41:ca:74:b6:f2:c2:bf:f5:1f:49:d0:d8:a4:72: a1:ea:35:f2:45:f0:af:8e:7f:4a:d2:a9:24:f7:8e: b6:1f:5e:93:6f:53:ec:1c:71:04:25:49:34:6e:d4: 2b:da:47:d4:45:eb:a1:f0:85:31:05:31:fa:46:3c: 52:b3:e2:54:fe:db:26:1d:51:93:ec:94:cc:f0:fc: 6c:8d:7e:81:e3:60:e6:28:f1:4a:5d:a8:87:6a:83: 15:86:89:a9:45:9a:6d:57:9b:4e:38:c3:be:7a:a8: 97:be:16:d7:78:d8:c4:80:26:82:55:27:97:af:b0: 28:ab:1e:c5:ea:f5:80:3f:a6:61:43:6e:59:e4:e9: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:35:00:E8:E5:0F:08:19:02:A9:4D:8A:CE:CE:32:8D:F4:B2:E5 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/McQ1AOjlDwgZAqlNis7OMo30suU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.224.0/24 194.61.237.0/24 Signature Algorithm: sha256WithRSAEncryption ac:14:38:ed:17:32:ae:52:75:26:49:37:4b:42:b2:8c:0b:e8: 1d:7e:a4:5f:90:54:c4:be:ff:70:f7:60:0c:d7:09:52:4a:c4: fc:42:be:02:c1:fd:82:d4:5a:23:d8:ac:48:00:16:b3:a7:0d: a1:a1:5d:d9:80:74:b5:67:f9:ee:2f:a8:ef:c9:eb:02:21:72: 6d:1b:d9:d6:f1:f1:a4:97:8b:1a:1d:d6:2c:db:0c:08:e1:7f: 2b:f0:a6:4b:93:1c:68:be:32:ab:15:fa:33:a9:3a:77:de:7d: 03:47:c9:01:f3:20:34:7c:c8:e2:72:c9:86:d1:72:aa:b6:71: 1a:6d:61:e8:da:d0:fa:15:70:c7:dc:05:8a:9f:73:80:5b:7d: 39:4c:96:10:f4:c4:15:22:3d:00:55:9e:2a:9b:9c:bc:d3:6f: b7:0a:69:c8:2d:6e:de:65:9f:ab:fa:82:c6:18:e0:9d:88:47: c7:8e:2f:8c:c7:eb:06:60:55:38:42:27:99:42:d3:91:e7:d0: 08:65:7b:1f:03:91:55:05:4f:37:83:7e:2d:b9:b5:aa:76:3e: 0e:53:21:d2:8f:23:12:ef:75:bc:d9:00:97:80:97:03:9e:6f: c5:be:72:29:c3:71:81:01:7e:85:77:c0:b2:a0:d3:0a:83:84: e6:d7:af:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g5VtnOvNCvPEzduij46KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWM0MzUwMGU4ZTUwZjA4MTkwMmE5NGQ4YWNlY2UzMjhkZjRiMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Opk/DN91L0L8LCxJp0imyrkxMH 7TIX/yjLZfnLy6CbNzW0AHzJb641ZT5O4cLoZe/fdNfuixJpG0cuUDgJugfA8wmf X3VWuwLE8faK8zdu3RjFkUIhgX1ygtsecXdATbGJZHEIF9ktE/nFP98NiomRSaHk +zWRQcp0tvLCv/UfSdDYpHKh6jXyRfCvjn9K0qkk9462H16Tb1PsHHEEJUk0btQr 2kfUReuh8IUxBTH6RjxSs+JU/tsmHVGT7JTM8PxsjX6B42DmKPFKXaiHaoMVhomp RZptV5tOOMO+eqiXvhbXeNjEgCaCVSeXr7Aoqx7F6vWAP6ZhQ25Z5OmhLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDHENQDo5Q8IGQKpTYrOzjKN9LLlMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvTWNRMUFPamxEd2daQXFsTmlzN09NbzMwc3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbXgAwQA wj3tMA0GCSqGSIb3DQEBCwUAA4IBAQCsFDjtFzKuUnUmSTdLQrKMC+gdfqRfkFTE vv9w92AM1wlSSsT8Qr4Cwf2C1Foj2KxIABazpw2hoV3ZgHS1Z/nuL6jvyesCIXJt G9nW8fGkl4saHdYs2wwI4X8r8KZLkxxovjKrFfozqTp33n0DR8kB8yA0fMjicsmG 0XKqtnEabWHo2tD6FXDH3AWKn3OAW305TJYQ9MQVIj0AVZ4qm5y802+3CmnILW7e ZZ+r+oLGGOCdiEfHji+Mx+sGYFU4QieZQtOR59AIZXsfA5FVBU83g34tubWqdj4O UyHSjyMS73W82QCXgJcDnm/FvnIpw3GBAX6Fd8CyoNMKg4Tm16+M -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:34 2026 by rpki-client