This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa File: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (raw, json) Hash identifier: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o= Subject key identifier: 31:0F:75:FB:F3:37:1D:D4:CA:9A:D5:33:1B:17:93:B7:F8:71:D1:B6 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA496AA447B7EA09AFBC2A745687BCF Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa Signing time: Fri 02 Jan 2026 12:17:54 +0000 ROA not before: Fri 02 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16251 IP address blocks: 193.11.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:96:aa:44:7b:7e:a0:9a:fb:c2:a7:45:68:7b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=310f75fbf3371dd4ca9ad5331b1793b7f871d1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:34:67:d4:93:38:20:a4:d7:61:fc:5c:5f: 11:32:c4:df:a8:22:42:43:bc:c9:aa:df:d8:ae:03: cc:94:a3:e0:9d:e5:02:37:6b:10:8f:c0:0b:d8:a0: 7b:da:db:36:a6:96:3a:50:32:9f:ef:36:54:a2:da: fc:06:12:79:86:ac:e3:34:24:5c:26:01:33:96:e5: 6b:c3:27:f1:23:55:1d:4d:9d:25:78:e1:ba:b0:fc: ba:bc:c3:d8:b3:12:d2:77:be:b9:18:08:b4:16:c5: 0c:d7:54:1a:6e:28:0b:de:e9:8c:76:0c:9f:c6:30: e9:97:77:11:4b:22:3d:f3:11:0a:4c:2d:a1:02:1d: 89:ad:e0:52:05:4b:25:aa:86:f9:fc:3a:a3:6b:55: 6f:7a:d8:0a:d1:fb:f7:e9:66:50:9d:6a:ef:06:e1: 5d:22:a3:4a:64:0e:04:a7:3d:55:0d:5b:73:72:c8: ef:90:35:b1:83:a7:8e:1a:aa:f1:66:38:9c:c1:f4: f3:23:66:78:46:61:c3:39:72:6b:b5:66:06:00:df: e4:72:21:c2:b6:48:a7:ba:5c:c7:5e:38:7d:04:95: a2:c1:8f:af:9a:97:a0:50:33:b9:63:1f:e5:36:b7: ba:f5:71:16:c6:83:4f:ae:4e:7f:5d:da:7b:ff:a1: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:75:FB:F3:37:1D:D4:CA:9A:D5:33:1B:17:93:B7:F8:71:D1:B6 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.11.48.0/20 Signature Algorithm: sha256WithRSAEncryption 58:30:ed:b6:35:d7:b9:b4:53:92:e9:c5:99:90:38:27:b7:3a: d8:5b:9c:3e:e0:11:a3:ca:f3:4c:13:b4:75:76:44:67:20:14: f5:20:3a:dd:cb:5f:dd:04:7d:9f:9b:80:a0:bc:4c:34:ec:1f: 5f:aa:5b:4c:af:b8:67:89:66:8c:79:16:ea:8b:5a:40:ab:24: c7:fc:61:a0:f6:64:e4:31:b2:37:82:b9:14:42:01:0b:7c:6d: 81:0e:35:8b:35:40:73:1c:c7:2d:12:14:81:1d:f0:d5:e1:aa: 5a:f6:00:8d:eb:3e:e4:80:d9:73:04:4f:8a:03:d9:a9:2c:54: 48:ec:2e:f2:bd:30:df:06:2e:e4:f2:b3:80:c1:dc:76:69:af: c6:7f:b4:71:78:41:7b:fe:9f:e7:fc:98:7e:88:43:ea:6d:5d: 41:4b:28:73:1e:05:4c:9d:ff:26:0f:08:63:2e:60:b0:60:a6: 44:12:59:27:f4:0c:f1:17:57:13:4c:c0:fb:19:45:b3:c9:5c: 37:05:61:83:a0:ff:88:0c:e3:97:65:01:1c:ac:36:a4:1a:12: da:ae:f6:6f:db:d6:08:2e:b4:04:89:c0:95:80:93:45:a8:0f: 8d:f6:77:ca:6a:25:ee:34:87:fa:56:f1:c9:19:08:1b:e2:a7: e5:c0:ce:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pJaqRHt+oJr7wqdFaHvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBmNzVmYmYzMzcxZGQ0Y2E5YWQ1MzMxYjE3OTNiN2Y4NzFkMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5E0Z9STOCCk12H8XF8RMsTfqCJC Q7zJqt/YrgPMlKPgneUCN2sQj8AL2KB72ts2ppY6UDKf7zZUotr8BhJ5hqzjNCRc JgEzluVrwyfxI1UdTZ0leOG6sPy6vMPYsxLSd765GAi0FsUM11QabigL3umMdgyf xjDpl3cRSyI98xEKTC2hAh2JreBSBUslqob5/Dqja1VvetgK0fv36WZQnWrvBuFd IqNKZA4Epz1VDVtzcsjvkDWxg6eOGqrxZjicwfTzI2Z4RmHDOXJrtWYGAN/kciHC tkinulzHXjh9BJWiwY+vmpegUDO5Yx/lNre69XEWxoNPrk5/Xdp7/6EuOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEPdfvzNx3UyprVMxsXk7f4cdG2MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvTVE5MS1fTTNIZFRLbXRVekd4ZVR0X2h4MGJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwQswMA0G CSqGSIb3DQEBCwUAA4IBAQBYMO22Nde5tFOS6cWZkDgntzrYW5w+4BGjyvNME7R1 dkRnIBT1IDrdy1/dBH2fm4CgvEw07B9fqltMr7hniWaMeRbqi1pAqyTH/GGg9mTk MbI3grkUQgELfG2BDjWLNUBzHMctEhSBHfDV4apa9gCN6z7kgNlzBE+KA9mpLFRI 7C7yvTDfBi7k8rOAwdx2aa/Gf7RxeEF7/p/n/Jh+iEPqbV1BSyhzHgVMnf8mDwhj LmCwYKZEElkn9AzxF1cTTMD7GUWzyVw3BWGDoP+IDOOXZQEcrDakGhLarvZv29YI LrQEicCVgJNFqA+N9nfKaiXuNIf6VvHJGQgb4qflwM4u -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:15 2026 by rpki-client