This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mMQnXwU8QnFFFemf3ySTpVCT31E.roa File: mMQnXwU8QnFFFemf3ySTpVCT31E.roa (raw, json) Hash identifier: dL7Z0xmZhhtakXueuZx0EmAcfrZVyRmBKqMW89d+bzk= Subject key identifier: 98:C4:27:5F:05:3C:42:71:45:15:E9:9F:DF:24:93:A5:50:93:DF:51 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BA4D68613A8FC8647F573AB2640A Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mMQnXwU8QnFFFemf3ySTpVCT31E.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49811 IP address blocks: 31.148.16.0/22 maxlen: 24 31.148.244.0/24 maxlen: 24 92.38.44.0/23 maxlen: 24 93.170.48.0/23 maxlen: 24 93.171.236.0/23 maxlen: 24 95.47.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ba:4d:68:61:3a:8f:c8:64:7f:57:3a:b2:64:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c4275f053c42714515e99fdf2493a55093df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:3f:4b:56:76:94:da:a5:2f:a0:f1:39:d5: 31:ff:36:d4:ba:76:66:99:2c:2d:c8:8e:d3:81:5e: 57:56:1c:16:77:a3:22:df:66:d9:96:ff:bf:71:83: 47:9a:43:d4:28:ce:ba:fb:bb:ff:57:74:d9:a3:4a: 08:43:eb:4e:4d:15:fd:2d:2b:0d:bd:05:3c:da:18: c5:be:5c:97:ab:e4:7a:b4:e6:d8:1d:43:f6:10:37: 74:40:6b:8a:d8:e2:eb:56:79:1b:d4:15:ec:09:51: 3b:90:3e:2d:aa:ec:72:54:4b:a4:5d:35:d9:94:95: 7a:53:39:91:30:43:3e:f2:7c:3b:72:01:69:cb:2f: a7:3e:ad:14:48:c8:34:1e:67:b7:bc:50:c9:20:2e: 7f:c4:7f:73:b4:f7:29:94:55:aa:fc:fb:b1:ab:1b: 4e:88:1b:62:a2:fe:47:0d:6a:8c:e8:31:71:39:69: 05:79:3b:1e:09:3b:1b:7d:45:8f:e1:ee:34:a8:3d: 6f:ae:ea:2a:7f:5b:92:5b:a3:ca:c3:7f:25:0b:7d: cb:9b:ab:78:6f:cb:3f:f3:14:4e:f9:f7:89:05:97: a7:c1:00:98:60:a9:5f:c4:f1:92:b0:1f:dc:1a:54: 27:1b:0f:a9:81:71:e0:94:d2:6a:97:87:48:cf:91: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C4:27:5F:05:3C:42:71:45:15:E9:9F:DF:24:93:A5:50:93:DF:51 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mMQnXwU8QnFFFemf3ySTpVCT31E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.16.0/22 31.148.244.0/24 92.38.44.0/23 93.170.48.0/23 93.171.236.0/23 95.47.254.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:0d:93:42:61:bc:ed:46:aa:1e:fa:94:60:ed:cd:85:62:67: 88:e4:db:a7:6b:b5:74:24:86:5e:c8:d1:5d:71:46:55:d9:df: 72:35:9c:a9:19:d1:11:8e:44:64:37:89:6e:cc:56:dd:30:0c: f3:d9:77:fc:b3:2a:b1:8e:0c:1f:6b:2a:e6:5c:1d:45:37:f8: c4:fb:fc:4e:05:41:28:a7:d0:35:fe:36:ce:18:bb:da:71:8a: ea:84:94:d0:b4:40:09:6b:c7:49:6a:bf:61:77:21:95:b8:40: e3:60:69:f8:bf:6c:c0:6d:da:7b:f1:6d:5a:39:1c:d8:39:18: 29:26:7e:e6:91:5c:d1:2c:33:21:2e:7f:59:0c:a4:cf:bd:23: a7:ae:c3:a4:c7:6a:dd:30:0f:2a:bb:3d:24:7d:81:65:3f:3a: 41:db:c1:fa:c0:f1:02:58:f1:5e:e2:81:42:62:b3:1c:7a:dc: 5f:1e:84:61:e3:32:6c:fa:44:f2:27:b1:f2:77:93:8e:40:f2: 39:50:7d:02:f5:26:78:92:b0:4b:9b:42:6b:0e:95:3c:8f:a5: 59:67:db:cd:fb:95:7c:b3:c8:02:f5:7a:52:34:c5:1a:83:27: 42:4d:c9:3d:8e:14:19:2f:71:9d:4e:a4:24:79:48:28:4a:67: 2c:b3:ea:22 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hLpNaGE6j8hkf1c6smQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM0Mjc1ZjA1M2M0MjcxNDUxNWU5OWZkZjI0OTNhNTUwOTNkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAc/S1Z2lNqlL6DxOdUx/zbUunZm mSwtyI7TgV5XVhwWd6Mi32bZlv+/cYNHmkPUKM66+7v/V3TZo0oIQ+tOTRX9LSsN vQU82hjFvlyXq+R6tObYHUP2EDd0QGuK2OLrVnkb1BXsCVE7kD4tquxyVEukXTXZ lJV6UzmRMEM+8nw7cgFpyy+nPq0USMg0Hme3vFDJIC5/xH9ztPcplFWq/PuxqxtO iBtiov5HDWqM6DFxOWkFeTseCTsbfUWP4e40qD1vruoqf1uSW6PKw38lC33Lm6t4 b8s/8xRO+feJBZenwQCYYKlfxPGSsB/cGlQnGw+pgXHglNJql4dIz5GG5QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJjEJ18FPEJxRRXpn98kk6VQk99RMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvbU1Rblh3VThRbkZGRmVtZjN5U1RwVkNUMzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCH5QQAwQA H5T0AwQBXCYsAwQBXaowAwQBXavsAwQBXy/+MA0GCSqGSIb3DQEBCwUAA4IBAQAe DZNCYbztRqoe+pRg7c2FYmeI5Nuna7V0JIZeyNFdcUZV2d9yNZypGdERjkRkN4lu zFbdMAzz2Xf8syqxjgwfayrmXB1FN/jE+/xOBUEop9A1/jbOGLvacYrqhJTQtEAJ a8dJar9hdyGVuEDjYGn4v2zAbdp78W1aORzYORgpJn7mkVzRLDMhLn9ZDKTPvSOn rsOkx2rdMA8quz0kfYFlPzpB28H6wPECWPFe4oFCYrMcetxfHoRh4zJs+kTyJ7Hy d5OOQPI5UH0C9SZ4krBLm0JrDpU8j6VZZ9vN+5V8s8gC9XpSNMUagydCTck9jhQZ L3GdTqQkeUgoSmcss+oi -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:22 2026 by rpki-client