This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/MSqEPR2WUFiEn7JZKsTMqQZriJY.roa File: MSqEPR2WUFiEn7JZKsTMqQZriJY.roa (raw, json) Hash identifier: 22IegogJDKezdMxL+XtqfpKwUXeeYwZNEyeiXkXVatY= Subject key identifier: 31:2A:84:3D:1D:96:50:58:84:9F:B2:59:2A:C4:CC:A9:06:6B:88:96 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019BE151750DB3D6F1CDA86CC0416C60672B Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/MSqEPR2WUFiEn7JZKsTMqQZriJY.roa Signing time: Wed 21 Jan 2026 16:09:30 +0000 ROA not before: Wed 21 Jan 2026 16:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 212.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:51:75:0d:b3:d6:f1:cd:a8:6c:c0:41:6c:60:67:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 21 16:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=312a843d1d965058849fb2592ac4cca9066b8896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:e4:bd:d3:a0:af:c5:6f:6d:74:b6:fd:e3: a5:b0:8b:bb:7e:42:7d:4f:73:f7:ee:bf:2e:c8:fc: 7f:1c:a8:8a:d6:07:6b:01:eb:88:70:cb:6e:f7:25: 19:1b:00:a8:98:0c:0f:a7:d4:3b:e1:ae:64:de:f1: 20:2c:44:88:d1:2c:eb:39:95:d7:d0:ec:05:9c:3c: a1:26:b1:a2:39:09:ed:b8:69:46:7d:5c:81:12:bf: 80:0a:17:7a:13:79:19:c5:78:1c:b4:11:05:b8:5d: 98:99:c5:09:a7:ca:85:70:91:d2:9b:ab:8e:ae:bc: b6:97:2e:fb:73:94:4e:17:9f:df:f8:4f:dd:a4:a4: 4a:b8:ee:48:4c:b6:23:cd:60:5c:31:37:0a:94:53: 52:99:de:59:07:b1:66:58:18:6b:e6:82:e6:8f:4f: e3:c5:2f:a9:70:65:e4:a7:b6:53:b7:59:59:0b:c3: 0a:5e:5f:b5:cd:fe:dd:52:1c:4a:57:ed:e8:1f:14: af:cb:e7:87:a0:d4:a9:17:df:be:2e:6e:04:ea:3b: 29:c4:cb:4d:93:11:77:87:16:64:28:ce:9c:a2:c0: e9:e0:81:19:ad:b4:d8:57:75:6a:30:47:9d:b9:48: 7c:4f:d1:de:ea:be:c7:44:3f:8c:0b:db:a8:26:2d: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2A:84:3D:1D:96:50:58:84:9F:B2:59:2A:C4:CC:A9:06:6B:88:96 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/MSqEPR2WUFiEn7JZKsTMqQZriJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption 00:08:65:9e:90:ef:4d:51:3a:11:df:5e:78:fc:5d:26:e6:78: 40:b4:ab:e1:c5:2e:42:56:6e:1b:95:6a:c2:c5:47:d8:da:5f: ab:05:43:f5:5b:22:1e:c0:9c:48:96:80:bc:ba:c3:70:53:cf: 84:e0:7d:e2:18:ae:69:c7:cd:5b:c5:70:7b:1e:08:3f:5a:9b: 5b:4c:79:7a:77:90:a1:c4:3c:fd:c2:fe:2d:95:63:54:9f:cc: 56:0a:1d:5f:89:a1:36:52:00:5f:3a:00:a2:fe:05:0a:c5:59: 95:cb:1f:d6:ee:77:a3:17:09:5b:5b:d4:70:09:7a:7d:b3:a4: 54:be:1f:ba:cf:92:b2:d5:09:bb:2c:99:61:47:a6:40:03:93: 9b:b7:a2:db:d3:5d:85:d3:b7:da:11:2c:c5:a7:11:7b:5c:8e: 0c:8f:a1:e5:01:ee:b6:8f:f8:93:0a:6f:f8:e7:64:3a:46:d4: 70:62:51:dd:0f:a5:03:77:f2:d6:c7:cc:88:79:2e:5b:a7:9c: 45:b4:c4:4c:65:fe:17:fe:13:06:ce:fc:7d:23:ee:61:d7:79: 66:aa:94:df:19:9b:bb:a8:73:8e:bd:d9:5f:7c:90:ee:76:d3: 82:d5:5f:8c:0e:74:65:00:9b:7b:74:be:99:da:48:ef:4b:4b: 87:5c:02:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhUXUNs9bxzahswEFsYGcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTIxMTYwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTJhODQzZDFkOTY1MDU4ODQ5ZmIyNTkyYWM0Y2NhOTA2NmI4ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHkvdOgr8VvbXS2/eOlsIu7fkJ9 T3P37r8uyPx/HKiK1gdrAeuIcMtu9yUZGwComAwPp9Q74a5k3vEgLESI0SzrOZXX 0OwFnDyhJrGiOQntuGlGfVyBEr+AChd6E3kZxXgctBEFuF2YmcUJp8qFcJHSm6uO rry2ly77c5ROF5/f+E/dpKRKuO5ITLYjzWBcMTcKlFNSmd5ZB7FmWBhr5oLmj0/j xS+pcGXkp7ZTt1lZC8MKXl+1zf7dUhxKV+3oHxSvy+eHoNSpF9++Lm4E6jspxMtN kxF3hxZkKM6cosDp4IEZrbTYV3VqMEeduUh8T9He6r7HRD+MC9uoJi1v2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEqhD0dllBYhJ+yWSrEzKkGa4iWMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvTVNxRVBSMldVRmlFbjdKWktzVE1xUVpyaUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI3MA0G CSqGSIb3DQEBCwUAA4IBAQAACGWekO9NUToR3154/F0m5nhAtKvhxS5CVm4blWrC xUfY2l+rBUP1WyIewJxIloC8usNwU8+E4H3iGK5px81bxXB7Hgg/WptbTHl6d5Ch xDz9wv4tlWNUn8xWCh1fiaE2UgBfOgCi/gUKxVmVyx/W7nejFwlbW9RwCXp9s6RU vh+6z5Ky1Qm7LJlhR6ZAA5Obt6Lb012F07faESzFpxF7XI4Mj6HlAe62j/iTCm/4 52Q6RtRwYlHdD6UDd/LWx8yIeS5bp5xFtMRMZf4X/hMGzvx9I+5h13lmqpTfGZu7 qHOOvdlffJDudtOC1V+MDnRlAJt7dL6Z2kjvS0uHXAKu -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:37 2026 by rpki-client