This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mVQ9FPpVueUhksm65G9KzIV5UC8.roa File: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (raw, json) Hash identifier: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM= Subject key identifier: 99:54:3D:14:FA:55:B9:E5:21:92:C9:BA:E4:6F:4A:CC:85:79:50:2F Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Certificate serial: 019B7AC800C0E710191555F29840A7175815 Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mVQ9FPpVueUhksm65G9KzIV5UC8.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209924 IP address blocks: 31.222.52.0/23 maxlen: 23 31.222.52.0/24 maxlen: 24 31.222.53.0/24 maxlen: 24 31.222.54.0/24 maxlen: 24 93.191.194.0/24 maxlen: 24 93.191.195.0/24 maxlen: 24 93.191.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:00:c0:e7:10:19:15:55:f2:98:40:a7:17:58:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99543d14fa55b9e52192c9bae46f4acc8579502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:af:ed:f3:e9:35:21:29:4b:a5:aa:d4:21: 6d:75:6e:c1:7d:29:86:9f:08:b2:c6:ec:6d:db:df: 6c:43:10:39:18:34:67:96:7b:ab:bd:e1:9a:bb:03: e6:02:c3:ed:cf:80:20:7b:f1:86:c5:01:e2:27:3d: f5:0a:4b:11:a8:3c:d3:d3:c1:5c:eb:c2:77:7a:07: 2d:5f:ba:67:37:c8:53:71:ba:5d:9a:66:69:87:f0: 59:93:37:67:54:f9:4d:85:06:98:0e:24:25:03:24: 95:32:2f:f8:80:94:bd:d0:d3:74:23:4c:63:e8:68: f1:5b:b0:7b:89:3c:77:f9:62:07:ca:9d:37:a8:cb: 41:5c:ed:75:4b:03:c6:1a:fd:43:b3:9c:10:ff:93: 6c:69:bb:74:1a:33:04:a6:43:4c:2c:5f:8e:8a:46: d2:c9:aa:15:58:f7:97:74:a1:a5:d2:cf:87:f3:9e: 85:43:e7:69:35:6b:98:8c:6a:5e:01:9c:6f:d4:1f: 17:3d:78:a1:a6:b7:ee:32:6d:85:ff:f5:5a:5d:32: 22:48:d1:5d:91:a0:14:91:96:1f:ce:29:f7:f1:1a: c7:7f:f3:f3:66:9b:9f:59:48:a9:e2:05:7d:dc:7f: 89:34:73:79:b1:27:c6:46:e0:71:80:ac:15:19:da: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:54:3D:14:FA:55:B9:E5:21:92:C9:BA:E4:6F:4A:CC:85:79:50:2F X509v3 Authority Key Identifier: keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mVQ9FPpVueUhksm65G9KzIV5UC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.52.0-31.222.54.255 93.191.194.0/23 93.191.197.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:a0:f9:4e:49:53:3a:c8:fa:90:ef:49:0a:ea:03:e7:78:8c: e0:01:b9:b4:47:a4:7d:14:4b:5a:99:09:c0:10:5f:a0:fb:e2: 9c:44:65:62:75:38:ff:08:30:1c:eb:0a:16:d5:7c:ac:a7:3b: 47:ed:b3:d1:2b:09:32:07:15:70:25:5f:ce:8f:a3:48:b4:88: 64:7e:32:2c:78:48:a1:30:32:e8:3a:7c:b0:2f:a1:af:cd:10: 3b:1e:2b:ec:2b:39:ef:16:d3:f1:67:6d:0d:d8:41:b6:57:65: 34:f9:86:ab:a7:b0:93:2e:3d:d1:b2:fa:d3:c7:86:87:93:3b: e6:45:c8:00:c4:a3:e5:96:08:c6:0a:64:03:d7:f0:53:bf:e8: 4f:c4:5c:5d:e0:9b:fc:06:20:fb:19:47:eb:58:97:ee:64:07: 55:60:4b:77:4e:61:79:fd:13:d1:3c:5d:3e:de:4a:c1:43:14: 37:51:62:ec:6b:d6:ec:74:c6:a4:88:9f:33:b3:91:30:51:d8: 18:e2:8f:9b:dc:06:86:b5:8d:53:0a:30:96:e7:c0:4f:98:81: 26:0e:d2:06:fd:0b:b4:48:77:8a:47:17:1a:e0:e7:f7:be:77: 3c:89:c6:b6:08:63:01:d2:d9:61:93:b4:20:8e:d1:61:d4:27: 03:6d:99:f8 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yADA5xAZFVXymECnF1gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4 Y2NkNjcwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTU0M2QxNGZhNTViOWU1MjE5MmM5YmFlNDZmNGFjYzg1Nzk1MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod+v7fPpNSEpS6Wq1CFtdW7BfSmG nwiyxuxt299sQxA5GDRnlnurveGauwPmAsPtz4Age/GGxQHiJz31CksRqDzT08Fc 68J3egctX7pnN8hTcbpdmmZph/BZkzdnVPlNhQaYDiQlAySVMi/4gJS90NN0I0xj 6GjxW7B7iTx3+WIHyp03qMtBXO11SwPGGv1Ds5wQ/5Nsabt0GjMEpkNMLF+OikbS yaoVWPeXdKGl0s+H856FQ+dpNWuYjGpeAZxv1B8XPXihprfuMm2F//VaXTIiSNFd kaAUkZYfzin38RrHf/PzZpufWUip4gV93H+JNHN5sSfGRuBxgKwVGdqMGwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJlUPRT6VbnlIZLJuuRvSsyFeVAvMB8GA1UdIwQY MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt MTA5NTlhYWE4YjNlLzEvbVZROUZQcFZ1ZVVoa3NtNjVHOUt6SVY1VUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAIf3jQD BAAf3jYDBAFdv8IDBABdv8UwDQYJKoZIhvcNAQELBQADggEBAHyg+U5JUzrI+pDv SQrqA+d4jOABubRHpH0US1qZCcAQX6D74pxEZWJ1OP8IMBzrChbVfKynO0fts9Er CTIHFXAlX86Po0i0iGR+Mix4SKEwMug6fLAvoa/NEDseK+wrOe8W0/FnbQ3YQbZX ZTT5hqunsJMuPdGy+tPHhoeTO+ZFyADEo+WWCMYKZAPX8FO/6E/EXF3gm/wGIPsZ R+tYl+5kB1VgS3dOYXn9E9E8XT7eSsFDFDdRYuxr1ux0xqSInzOzkTBR2Bjij5vc Boa1jVMKMJbnwE+YgSYO0gb9C7RId4pHFxrg5/e+dzyJxrYIYwHS2WGTtCCO0WHU JwNtmfg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:33 2026 by rpki-client